last executing test programs: 17.897027932s ago: executing program 1 (id=1175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) 14.771876674s ago: executing program 1 (id=1179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 14.477988201s ago: executing program 2 (id=1182): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, @time_exceeded={0x80, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0xd694, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000002c0)={0x2600000000000000, 0x2000, 0x4, 0x0, 0xff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x84084) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x4028, 0x3, 0x0, 0xfffffffffffffffe) 13.745372685s ago: executing program 1 (id=1183): mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 13.497298187s ago: executing program 2 (id=1184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0x43, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200400314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 13.310387821s ago: executing program 2 (id=1185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000440)) 11.111146743s ago: executing program 0 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) 9.449176227s ago: executing program 0 (id=1189): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x98980, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@empty, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x21, 0x2, 0x0, 0x0, "432dfbf1808748b9a7c60b13ebbd35b531c8eaca3b5c0b707fad3ede52ba31895fc4acc5a4e83631b08255664c4a39ac634da0e719bbfdfd10d836b81d1625db"}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0183) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000100)={[0xff]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2040) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 9.416340961s ago: executing program 2 (id=1190): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9.415464101s ago: executing program 3 (id=1191): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 8.397271212s ago: executing program 3 (id=1192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 6.315275189s ago: executing program 0 (id=1193): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='jbd2_lock_buffer_stall\x00', r0, 0x0, 0x9}, 0x18) 6.290487902s ago: executing program 2 (id=1194): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 6.165363898s ago: executing program 3 (id=1195): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$inet6(0xa, 0x80002, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) 4.968264672s ago: executing program 1 (id=1196): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendto$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0x0, 0x20323159, 0x500, 0x2d0, 0x1, @stepwise={{0xb, 0x72}, {0x8, 0x9}, {0x10, 0x2}}}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000005140)={0xa, @capture={0x1000, 0x1, {0x10001, 0x2}, 0x2000, 0x8}}) 4.844475688s ago: executing program 3 (id=1197): r0 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) 4.545625036s ago: executing program 0 (id=1198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000440)) 4.544983616s ago: executing program 3 (id=1199): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000000a8000fc0000000304000000140003006c6f000000000000000000000000000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020000100000000000000000002200000000000000000000005"], 0x5c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000300)={0x7fff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) recvmsg(0xffffffffffffffff, 0x0, 0x10160) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = msgget$private(0x0, 0x1f3) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000380)={0x1}, 0x8, 0x800) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x30}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0xb, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) 3.775510125s ago: executing program 1 (id=1200): syz_open_dev$usbfs(0x0, 0x75, 0x109301) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701040000000000000000000000000900010073"], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x5014) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="2c67726f75705f69643da2a8aa5e4dcd08342840e744482b3118cf124cd87bc15656c8b60c28e28e4cdae730a5849de3ccb3b009fd12f66c645f33003627af815d2eba0312c568a253b77c86f7e9e84dec9ab9cdb7cbf6946d70684b030e8eff503b89ea3728c13bb9bae43dcbfee2f91df7760c7f7ae59dc305485af92bf7ed33466d27404dd94917118ba1871eaa72c1b1090eb47194b477500456a45ff34cb55b1cf13f0166c12160bfa7c07b15", @ANYRESDEC=0x0]) acct(&(0x7f00000000c0)='./file0/file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x101, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000002780)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 1.423436457s ago: executing program 1 (id=1201): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x0, 0x0}) 1.422700797s ago: executing program 3 (id=1202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 1.029283718s ago: executing program 0 (id=1203): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) 926.700901ms ago: executing program 2 (id=1204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 0s ago: executing program 0 (id=1205): mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f000001b000)={0x0}, &(0x7f000001b040)=0xc) timer_create(0x0, &(0x7f000001b080)={0x0, 0x29, 0x4, @tid=r4}, &(0x7f000001b0c0)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}}) kernel console output (not intermixed with test programs): id bInterval 0, changing to 10 [ 122.628850][ T5860] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.099376][ T6107] warning: `syz.1.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.727975][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.803956][ T5860] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 124.815361][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.837682][ T5860] usb 1-1: config 0 descriptor?? [ 125.062455][ T5860] usb 1-1: can't set config #0, error -71 [ 125.070014][ T5860] usb 1-1: USB disconnect, device number 2 [ 125.447921][ T6121] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 125.464394][ T1002] Bluetooth: hci4: Frame reassembly failed (-84) [ 125.544173][ T6121] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.525553][ T5785] Bluetooth: hci4: command 0xfc11 tx timeout [ 127.532798][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 131.128731][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 131.245641][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.253399][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.439303][ T6158] overlay: filesystem on ./bus is read-only [ 133.157429][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.167063][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.685019][ T6190] hfs: can't find a HFS filesystem on dev nullb0 [ 135.765287][ T5774] Bluetooth: hci2: command tx timeout [ 135.945250][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.135269][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 136.163964][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 136.188905][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.226235][ T23] usb 3-1: config 0 descriptor?? [ 136.335364][ T6197] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 136.439245][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 136.477587][ T6197] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.507761][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.519257][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 136.530646][ T23] usb 3-1: media controller created [ 136.563616][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.982076][ T23] DVB: Unable to find symbol dib7000p_attach() [ 137.001058][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 137.206810][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 137.216276][ T23] Registered IR keymap rc-empty [ 137.221548][ T23] dvb-usb: could not initialize remote control. [ 137.239629][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 137.286966][ T23] usb 3-1: USB disconnect, device number 4 [ 137.372669][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 138.505584][ T6218] tmpfs: Bad value for 'huge' [ 138.724555][ T6223] (null): rxe_set_mtu: Set mtu to 1024 [ 138.890676][ T6223] infiniband syz1: set active [ 138.895827][ T6223] infiniband syz1: added syz_tun [ 138.943972][ T6223] RDS/IB: syz1: added [ 138.948863][ T6223] smc: adding ib device syz1 with port count 1 [ 138.955293][ T6223] smc: ib device syz1 port 1 has pnetid [ 142.034955][ T6246] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 142.064822][ T6246] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 142.120946][ T6246] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 145.866743][ T6265] wireguard0: entered allmulticast mode [ 150.699953][ T5785] Bluetooth: hci2: command tx timeout [ 150.717018][ T6292] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 150.724481][ T6292] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 150.827015][ T6296] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 150.912430][ T28] audit: type=1800 audit(1768444652.380:2): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="file1" dev="overlay" ino=168 res=0 errno=0 [ 151.137798][ T6296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.297002][ T6296] syz.2.117 (6296) used greatest stack depth: 20712 bytes left [ 152.227504][ T6308] syz.3.120 uses obsolete (PF_INET,SOCK_PACKET) [ 155.484388][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 155.575731][ T787] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 156.168824][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.206550][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.250822][ T787] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 156.291288][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.334216][ T787] usb 2-1: config 0 descriptor?? [ 156.366982][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 156.394677][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 156.447514][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 156.481615][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 156.504525][ T787] usb 2-1: media controller created [ 156.530108][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.594100][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 156.610363][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 156.633587][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 156.690349][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 156.715310][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.756428][ T787] usb 2-1: USB disconnect, device number 2 [ 156.825335][ T5154] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 156.846226][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.037514][ T5154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.052504][ T5154] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.061799][ T5154] usb 4-1: config 1 has no interface number 1 [ 157.082754][ T5154] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 157.104260][ T5154] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.160429][ T5154] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.191552][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.236305][ T5154] usb 4-1: Product: syz [ 157.240661][ T5154] usb 4-1: Manufacturer: syz [ 157.254894][ T5154] usb 4-1: SerialNumber: syz [ 158.279194][ T5154] usb 4-1: USB disconnect, device number 2 [ 158.614286][ T6350] fuse: Bad value for 'fd' [ 160.054820][ T6354] delete_channel: no stack [ 160.143723][ T6370] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 161.410206][ T6381] fuse: Invalid rootmode [ 163.774085][ T6404] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 163.787258][ T6404] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 163.799778][ T6404] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 163.918862][ T6406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.152545][ T6410] fuse: Invalid rootmode [ 165.147750][ T6422] (null): rxe_set_mtu: Set mtu to 256 [ 165.158054][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 165.190592][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 165.207493][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 165.534334][ T6422] infiniband syz2: set active [ 165.539165][ T6422] infiniband syz2: added vxcan1 [ 165.545245][ T6422] syz2: rxe_create_cq: returned err = -12 [ 165.551263][ T6422] infiniband syz2: Couldn't create ib_mad CQ [ 165.557552][ T6422] infiniband syz2: Couldn't open port 1 [ 165.569120][ T5773] vxcan1 speed is unknown, defaulting to 1000 [ 165.590738][ T6422] RDS/IB: syz2: added [ 165.594864][ T6422] smc: adding ib device syz2 with port count 1 [ 165.601219][ T6422] smc: ib device syz2 port 1 has pnetid [ 165.612425][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 165.627928][ T5773] vxcan1 speed is unknown, defaulting to 1000 [ 165.853347][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 166.032479][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 166.204901][ T6422] vxcan1 speed is unknown, defaulting to 1000 [ 168.317055][ T6435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.159'. [ 168.981251][ T6439] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 169.027953][ T6444] fuse: Invalid rootmode [ 171.491705][ T6452] vxcan1 speed is unknown, defaulting to 1000 [ 174.755363][ T967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.945410][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 174.958250][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.985380][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.015489][ T967] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.035261][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.059135][ T967] usb 4-1: config 0 descriptor?? [ 175.315843][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.355741][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.878491][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.171'. [ 176.609545][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.619820][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.774262][ T6478] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 176.789227][ T6478] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 176.809959][ T6478] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 179.417972][ T6485] sched: RT throttling activated [ 179.716486][ T967] usbhid 4-1:0.0: can't add hid device: -71 [ 179.724782][ T967] usbhid: probe of 4-1:0.0 failed with error -71 [ 179.756644][ T967] usb 4-1: USB disconnect, device number 3 [ 180.452373][ T6500] mmap: syz.0.180 (6500) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.406165][ T6523] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 185.527162][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 186.085340][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.239877][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 186.286239][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 186.313956][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.335224][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.355211][ T787] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 186.378214][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.438917][ T787] usb 3-1: config 0 descriptor?? [ 186.899584][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.034867][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.836893][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.849709][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.714666][ T787] usbhid 3-1:0.0: can't add hid device: -71 [ 189.721126][ T787] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.864994][ T787] usb 3-1: USB disconnect, device number 5 [ 192.025772][ T6558] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 192.076125][ T28] audit: type=1326 audit(1768444693.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.208459][ T28] audit: type=1326 audit(1768444693.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.295529][ T28] audit: type=1326 audit(1768444693.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.355268][ T28] audit: type=1326 audit(1768444693.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.515706][ T28] audit: type=1326 audit(1768444693.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.545479][ T28] audit: type=1326 audit(1768444693.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 192.583287][ T28] audit: type=1326 audit(1768444693.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 193.067276][ T6570] hfs: can't find a HFS filesystem on dev nullb0 [ 193.784679][ T28] audit: type=1326 audit(1768444693.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 193.848101][ T28] audit: type=1326 audit(1768444693.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 193.935290][ T28] audit: type=1326 audit(1768444693.630:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 194.569622][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.577025][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.411912][ T6609] kvm: vcpu 0: requested 422 ns lapic timer period limited to 200000 ns [ 199.431248][ T6609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 201.887662][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 201.887680][ T28] audit: type=1326 audit(1768444703.350:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 201.971609][ T6634] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 201.994996][ T28] audit: type=1326 audit(1768444703.350:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.110190][ T28] audit: type=1326 audit(1768444703.350:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.215336][ T28] audit: type=1326 audit(1768444703.350:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.434809][ T28] audit: type=1326 audit(1768444703.350:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.494610][ T28] audit: type=1326 audit(1768444703.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.554690][ T28] audit: type=1326 audit(1768444703.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.622883][ T28] audit: type=1326 audit(1768444703.350:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.686009][ T28] audit: type=1326 audit(1768444703.390:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 202.784193][ T28] audit: type=1326 audit(1768444703.390:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50c18f749 code=0x7ffc0000 [ 205.628554][ T6655] hfs: can't find a HFS filesystem on dev nullb0 [ 210.911111][ T6677] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 211.995554][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.001777][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 214.418202][ T6706] hfs: can't find a HFS filesystem on dev nullb0 [ 217.565568][ T6725] (null): rxe_set_mtu: Set mtu to 256 [ 217.576252][ T6725] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 218.465263][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.655176][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 218.663807][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 218.679766][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.738870][ T23] usb 4-1: config 0 descriptor?? [ 218.999522][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 219.064421][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.106305][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 219.151195][ T23] usb 4-1: media controller created [ 219.245726][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.438194][ T23] DVB: Unable to find symbol dib7000p_attach() [ 219.444456][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 219.545595][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 219.552570][ T23] Registered IR keymap rc-empty [ 219.569853][ T23] dvb-usb: could not initialize remote control. [ 219.580486][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 219.628921][ T23] usb 4-1: USB disconnect, device number 4 [ 219.697646][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 220.428586][ T6745] hfs: can't find a HFS filesystem on dev nullb0 [ 221.009166][ T6756] netlink: 156 bytes leftover after parsing attributes in process `syz.3.249'. [ 221.123354][ T6756] netlink: 64 bytes leftover after parsing attributes in process `syz.3.249'. [ 222.590681][ T6768] (null): rxe_set_mtu: Set mtu to 256 [ 222.600907][ T6768] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 223.232678][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.425192][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 223.434395][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.455647][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.653506][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.665890][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.678841][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.713515][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.434973][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.443305][ T23] usb 3-1: Manufacturer: syz [ 224.463973][ T23] usb 3-1: config 0 descriptor?? [ 224.798463][ T6780] hfs: can't find a HFS filesystem on dev nullb0 [ 225.485361][ T23] rc_core: IR keymap rc-hauppauge not found [ 225.491469][ T23] Registered IR keymap rc-empty [ 225.516010][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.578922][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.648307][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.681405][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 225.715326][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.729567][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.785346][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.837061][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.885034][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.944627][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.955780][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 225.973758][ T787] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 226.024570][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.026879][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.076159][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.095818][ T787] usb 2-1: config 0 descriptor?? [ 226.126906][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.175376][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.201859][ T6792] overlayfs: failed to verify upper (57/file1, ino=330, err=-116) [ 226.226033][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.237234][ T6792] overlayfs: failed to verify index dir 'upper' xattr [ 226.254550][ T6792] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 226.281950][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.303935][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.340146][ T787] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 226.344275][ T23] usb 3-1: USB disconnect, device number 6 [ 226.443353][ T787] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 226.475475][ T787] dib0700: firmware download failed at 7 with -22 [ 226.500098][ T787] usb 2-1: USB disconnect, device number 3 [ 227.422857][ T6821] (null): rxe_set_mtu: Set mtu to 256 [ 227.431995][ T6821] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 233.289487][ T6852] block device autoloading is deprecated and will be removed. [ 233.416194][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.615186][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 233.905662][ T787] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 233.945405][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.155453][ T787] usb 2-1: config 0 descriptor?? [ 234.363414][ T6861] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 234.405739][ T6856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.266'. [ 234.423668][ T787] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 234.608510][ T787] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 234.667210][ T787] dib0700: firmware download failed at 7 with -22 [ 234.703202][ T787] usb 2-1: USB disconnect, device number 4 [ 239.878873][ T6887] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 241.259466][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 241.304365][ T6899] hfs: can't find a HFS filesystem on dev nullb0 [ 241.427043][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.535391][ T787] usb 2-1: device descriptor read/64, error -71 [ 241.676296][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 241.758662][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 241.884395][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.908082][ T9] usb 1-1: config 0 descriptor?? [ 241.930431][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.095417][ T787] usb 2-1: device descriptor read/64, error -71 [ 242.142810][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 242.164528][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 242.185233][ T9] dib0700: firmware download failed at 7 with -22 [ 242.214851][ T9] usb 1-1: USB disconnect, device number 3 [ 242.236207][ T787] usb usb2-port1: attempt power cycle [ 242.645237][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.737166][ T787] usb 2-1: device descriptor read/8, error -71 [ 243.015381][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.755413][ T787] usb 2-1: device descriptor read/8, error -71 [ 244.875433][ T787] usb usb2-port1: unable to enumerate USB device [ 245.021298][ T6913] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 246.889831][ T6935] kvm: kvm [6934]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 246.988884][ T6941] netlink: 348 bytes leftover after parsing attributes in process `syz.2.291'. [ 247.003284][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 249.692001][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.301'. [ 250.505751][ T6956] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 250.616679][ T5773] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 250.843312][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.927495][ T5773] usb 3-1: not running at top speed; connect to a high speed hub [ 251.075107][ T5773] usb 3-1: config 8 has an invalid interface number: 52 but max is 0 [ 251.203073][ T5773] usb 3-1: config 8 has no interface number 0 [ 251.318920][ T5773] usb 3-1: config 8 interface 52 has no altsetting 0 [ 251.439373][ T5773] usb 3-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=79.78 [ 252.600730][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.678855][ T6969] hfs: can't find a HFS filesystem on dev nullb0 [ 252.706790][ T5773] usb 3-1: Product: syz [ 252.711031][ T5773] usb 3-1: Manufacturer: syz [ 252.727927][ T5773] usb 3-1: SerialNumber: syz [ 252.984395][ T5773] HFC-S_USB: probe of 3-1:8.52 failed with error -5 [ 253.000423][ T5773] usb 3-1: USB disconnect, device number 7 [ 253.925599][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 254.126023][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 254.152689][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 254.166932][ T5809] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.181587][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.190213][ T5809] usb 4-1: Product: syz [ 254.194420][ T5809] usb 4-1: Manufacturer: syz [ 254.204484][ T5809] usb 4-1: SerialNumber: syz [ 254.223744][ T5809] usb 4-1: config 0 descriptor?? [ 254.440998][ T5809] usb 4-1: USB disconnect, device number 5 [ 254.513112][ T6983] netlink: 'syz.2.313': attribute type 10 has an invalid length. [ 254.980896][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.310'. [ 255.075537][ T5809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.295224][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 255.388285][ T5809] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 255.508649][ T5809] usb 3-1: config 0 has no interface number 0 [ 255.528659][ T5809] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.585143][ T5809] usb 3-1: config 0 interface 85 has no altsetting 0 [ 255.624762][ T5809] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 255.668243][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.725955][ T5809] usb 3-1: Product: syz [ 255.739030][ T5809] usb 3-1: Manufacturer: syz [ 255.743715][ T5809] usb 3-1: SerialNumber: syz [ 255.778233][ T5809] usb 3-1: config 0 descriptor?? [ 256.002424][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.009713][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282943][ T7006] input: syz0 as /devices/virtual/input/input16 [ 256.421524][ T5809] appletouch 3-1:0.85: Geyser mode initialized. [ 256.449734][ T5809] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input15 [ 256.641758][ T5809] usb 3-1: USB disconnect, device number 8 [ 256.773466][ T5809] appletouch 3-1:0.85: input: appletouch disconnected [ 256.987443][ T7012] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 257.432636][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.324'. [ 258.913970][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 258.923023][ T7036] netlink: 72 bytes leftover after parsing attributes in process `syz.3.329'. [ 258.933499][ T7036] netlink: 88 bytes leftover after parsing attributes in process `syz.3.329'. [ 261.215196][ T5809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 261.415350][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 261.439497][ T5809] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 261.481271][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.586124][ T5809] usb 3-1: Product: syz [ 261.686653][ T5809] usb 3-1: Manufacturer: syz [ 261.748625][ T5809] usb 3-1: SerialNumber: syz [ 261.829959][ T7042] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 261.840095][ T5809] usb 3-1: config 0 descriptor?? [ 261.847903][ T5809] usb 3-1: can't set config #0, error -71 [ 261.862741][ T5809] usb 3-1: USB disconnect, device number 9 [ 262.578842][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.336'. [ 266.765988][ T7072] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 267.066173][ T7084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.347'. [ 267.816030][ T7083] random: crng reseeded on system resumption [ 269.826751][ T7094] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 270.203830][ T7098] IPVS: stopping backup sync thread 7094 ... [ 271.616132][ T7112] fuse: Unknown parameter '00000000000000000003' [ 277.505787][ T7138] Cannot find del_set index 0 as target [ 278.088596][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'. [ 280.612228][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 280.612245][ T28] audit: type=1800 audit(1768444782.080:69): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.369" name="file0" dev="overlay" ino=556 res=0 errno=0 [ 282.985389][ T5773] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 283.203887][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 283.235230][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.263081][ T5773] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.272793][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.377406][ T5773] usb 4-1: config 0 descriptor?? [ 283.400373][ T5773] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 285.787429][ T7191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.375'. [ 286.004655][ T27] usb 4-1: USB disconnect, device number 6 [ 286.237012][ T7176] hfs: can't find a HFS filesystem on dev nullb0 [ 288.045210][ T967] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 288.485118][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 288.492608][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.505318][ T967] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 288.545113][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.563520][ T967] usb 3-1: config 0 descriptor?? [ 289.861051][ T967] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 290.027970][ T967] usb 3-1: USB disconnect, device number 10 [ 291.895150][ T5809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 292.128388][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 292.152926][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.184257][ T5809] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.229497][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.253236][ T5809] usb 1-1: config 0 descriptor?? [ 292.282725][ T5809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 293.895283][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.085266][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 294.095497][ T9] usb 2-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 294.109681][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.125865][ T9] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 294.158235][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.172450][ T9] usb 2-1: config 0 descriptor?? [ 294.596601][ T9] usb 1-1: USB disconnect, device number 4 [ 296.626100][ T7273] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 296.637900][ T27] usb 2-1: USB disconnect, device number 9 [ 300.307561][ T7299] overlayfs: workdir and upperdir must be separate subtrees [ 300.470603][ T7301] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 300.827867][ T5773] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 300.944560][ T5773] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.069474][ T7313] (null): rxe_set_mtu: Set mtu to 256 [ 301.076314][ T7313] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 302.063041][ T7322] binder: BINDER_SET_CONTEXT_MGR already set [ 302.070135][ T7322] binder: 7321:7322 ioctl 4018620d 2000000002c0 returned -16 [ 302.678187][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 302.687407][ T7329] netlink: 108 bytes leftover after parsing attributes in process `syz.1.427'. [ 302.887694][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 302.903189][ T7329] netlink: 108 bytes leftover after parsing attributes in process `syz.1.427'. [ 302.913028][ T7329] netlink: 84 bytes leftover after parsing attributes in process `syz.1.427'. [ 305.628570][ T28] audit: type=1326 audit(1768444807.100:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 305.706689][ T7353] (null): rxe_set_mtu: Set mtu to 256 [ 305.712459][ T7353] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 306.434905][ T28] audit: type=1326 audit(1768444807.900:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 306.465197][ T28] audit: type=1326 audit(1768444807.900:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 306.541016][ T28] audit: type=1326 audit(1768444807.900:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 306.597256][ T28] audit: type=1326 audit(1768444807.900:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 306.827431][ T28] audit: type=1326 audit(1768444807.900:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 307.603461][ T28] audit: type=1326 audit(1768444807.900:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697e78f749 code=0x7ffc0000 [ 309.115596][ T7367] binder: BINDER_SET_CONTEXT_MGR already set [ 309.121656][ T7367] binder: 7366:7367 ioctl 4018620d 2000000002c0 returned -16 [ 313.409727][ T7394] (null): rxe_set_mtu: Set mtu to 256 [ 313.415551][ T7394] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 314.264303][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 314.273570][ T7391] netlink: 108 bytes leftover after parsing attributes in process `syz.3.443'. [ 314.314611][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 314.353531][ T7391] netlink: 108 bytes leftover after parsing attributes in process `syz.3.443'. [ 314.364699][ T7391] netlink: 84 bytes leftover after parsing attributes in process `syz.3.443'. [ 317.525924][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.532267][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.052832][ T7424] binder: BINDER_SET_CONTEXT_MGR already set [ 319.136742][ T7424] binder: 7422:7424 ioctl 4018620d 2000000002c0 returned -16 [ 319.278299][ T7428] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 323.582295][ T5774] Bluetooth: hci2: command tx timeout [ 323.639639][ T967] IPVS: starting estimator thread 0... [ 323.906048][ T7450] IPVS: using max 25 ests per chain, 60000 per kthread [ 326.917796][ T7468] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 327.191315][ T7470] IPVS: stopping backup sync thread 7468 ... [ 328.097388][ T7467] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 330.650784][ T7494] syz2: rxe_newlink: already configured on vxcan1 [ 333.945795][ T7509] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 339.244730][ T7525] (null): rxe_set_mtu: Set mtu to 256 [ 339.253965][ T7525] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 342.523929][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 342.728730][ T7545] capability: warning: `syz.2.479' uses deprecated v2 capabilities in a way that may be insecure [ 344.438126][ T7545] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 344.471725][ T7551] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 353.418661][ T7612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.436903][ T7612] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 353.473052][ T7612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.488860][ T7612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 353.523774][ T7612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 353.544893][ T7612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.563754][ T7612] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 353.590110][ T7612] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 353.987253][ T7624] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 356.219145][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 356.226161][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 356.227337][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.305352][ T6838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.557988][ T6838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.577307][ T6838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.601936][ T6838] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 356.621664][ T6838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.641815][ T6838] usb 4-1: SerialNumber: syz [ 356.750989][ T7649] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 356.897639][ T6838] usb 4-1: 0:2 : does not exist [ 356.903086][ T6838] usb 4-1: unit 6 not found! [ 356.923473][ T6838] usb 4-1: unit 255 not found! [ 358.034858][ T6838] usb 4-1: USB disconnect, device number 7 [ 358.146198][ T7503] udevd[7503]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.235197][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 358.241299][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 358.315221][ T5785] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.433095][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 360.448095][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 360.454218][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 361.133693][ T7680] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 362.380957][ T5774] Bluetooth: hci3: unexpected event for opcode 0x080c [ 362.475566][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.504951][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.796924][ T7712] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 367.515314][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.135122][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 369.335113][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 369.354903][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 369.369105][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.377898][ T9] usb 4-1: Product: syz [ 369.382635][ T9] usb 4-1: Manufacturer: syz [ 369.393130][ T9] usb 4-1: SerialNumber: syz [ 369.404441][ T9] usb 4-1: config 0 descriptor?? [ 370.922892][ T9] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 370.946911][ T9] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 371.010551][ T7745] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 371.028376][ T9] peak_usb: probe of 4-1:0.0 failed with error -71 [ 371.040765][ T9] usb 4-1: USB disconnect, device number 8 [ 371.457001][ T7747] vxcan1 speed is unknown, defaulting to 1000 [ 371.555236][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 371.796653][ T27] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 371.815685][ T27] usb 2-1: config 0 has no interface number 0 [ 371.865439][ T27] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 371.883806][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.905394][ T27] usb 2-1: Product: syz [ 371.909735][ T27] usb 2-1: Manufacturer: syz [ 371.914451][ T27] usb 2-1: SerialNumber: syz [ 371.971561][ T27] usb 2-1: config 0 descriptor?? [ 372.087896][ T27] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 372.151544][ T27] ems_usb: probe of 2-1:0.204 failed with error -22 [ 372.784459][ T27] usb 2-1: USB disconnect, device number 10 [ 372.985443][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 374.540302][ T7777] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 374.575878][ T7780] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 374.662587][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 374.706190][ T6838] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 374.719525][ T6838] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.969526][ T7784] fido_id[7784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 377.541773][ T7807] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 377.787929][ T6838] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 379.197800][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.204341][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.229360][ T6838] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.410591][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 379.790297][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 379.800086][ T7823] netlink: 108 bytes leftover after parsing attributes in process `syz.2.569'. [ 379.819714][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 379.834784][ T7823] netlink: 108 bytes leftover after parsing attributes in process `syz.2.569'. [ 379.853348][ T7823] netlink: 84 bytes leftover after parsing attributes in process `syz.2.569'. [ 383.058445][ T7838] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 387.144634][ T7873] binder: 7871:7873 ioctl 4018620d 0 returned -22 [ 387.329306][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.669385][ T7882] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 388.958404][ T7891] sp0: Synchronizing with TNC [ 393.139812][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 393.319823][ T7918] binder: 7917:7918 ioctl 4018620d 0 returned -22 [ 393.346106][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 393.352282][ T7920] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 393.355816][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 393.373147][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.384243][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.399756][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.410262][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.423907][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.433420][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.834906][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.861805][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.881258][ T27] usb 1-1: usb_control_msg returned -32 [ 393.889840][ T27] usbtmc 1-1:16.0: can't read capabilities [ 393.976601][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 393.986010][ T7926] netlink: 108 bytes leftover after parsing attributes in process `syz.2.601'. [ 393.999278][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 394.011314][ T7926] netlink: 108 bytes leftover after parsing attributes in process `syz.2.601'. [ 394.020507][ T7926] netlink: 84 bytes leftover after parsing attributes in process `syz.2.601'. [ 394.654461][ T7928] dlm: non-version read from control device 122 [ 395.808476][ T27] usb 1-1: USB disconnect, device number 5 [ 396.795994][ T7948] hfs: can't find a HFS filesystem on dev nullb0 [ 399.852003][ T7962] binder: 7959:7962 ioctl 4018620d 0 returned -22 [ 401.109902][ T7971] sp0: Synchronizing with TNC [ 403.286962][ T7987] netlink: 'syz.1.609': attribute type 10 has an invalid length. [ 404.465049][ T8003] binder: BINDER_SET_CONTEXT_MGR already set [ 404.471218][ T8003] binder: 7998:8003 ioctl 4018620d 2000000002c0 returned -16 [ 405.034528][ T8007] binder: BINDER_SET_CONTEXT_MGR already set [ 405.041276][ T8007] binder: 8001:8007 ioctl 4018620d 2000000000c0 returned -16 [ 405.099277][ T8007] binder: BINDER_SET_CONTEXT_MGR already set [ 405.110064][ T8007] binder: 8001:8007 ioctl 4018620d 200000000040 returned -16 [ 405.362553][ T8007] ntfs3: nullb0: Primary boot signature is not NTFS. [ 405.405567][ T8007] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 407.699859][ T8030] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 408.753277][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 408.762506][ T8041] netlink: 108 bytes leftover after parsing attributes in process `syz.3.636'. [ 408.774837][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 408.785533][ T8041] netlink: 108 bytes leftover after parsing attributes in process `syz.3.636'. [ 408.794880][ T8041] netlink: 84 bytes leftover after parsing attributes in process `syz.3.636'. [ 409.522180][ T8048] binder: BINDER_SET_CONTEXT_MGR already set [ 409.528444][ T8048] binder: 8047:8048 ioctl 4018620d 2000000002c0 returned -16 [ 411.152449][ T8060] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 411.350718][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 412.446749][ T8070] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 413.858039][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 413.867240][ T8083] netlink: 108 bytes leftover after parsing attributes in process `syz.0.647'. [ 413.880974][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 413.891729][ T8083] netlink: 108 bytes leftover after parsing attributes in process `syz.0.647'. [ 413.901806][ T8083] netlink: 84 bytes leftover after parsing attributes in process `syz.0.647'. [ 414.349120][ T8087] binder: BINDER_SET_CONTEXT_MGR already set [ 414.370156][ T8087] binder: 8085:8087 ioctl 4018620d 2000000002c0 returned -16 [ 414.755579][ T8095] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2980425711 (190747245504 ns) > initial count (134483933120 ns). Using initial count to start timer. [ 415.626268][ T8105] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 415.707959][ T8107] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 415.740522][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'. [ 416.993366][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 417.003491][ T8122] netlink: 108 bytes leftover after parsing attributes in process `syz.3.659'. [ 417.012866][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 417.021999][ T8122] netlink: 108 bytes leftover after parsing attributes in process `syz.3.659'. [ 417.498005][ T8126] hfs: can't find a HFS filesystem on dev nullb0 [ 420.084373][ T8141] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 421.878546][ T8161] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 421.933485][ T5774] Bluetooth: hci2: unexpected subevent 0x0c length: 248 > 5 [ 422.188290][ T8165] hfs: can't find a HFS filesystem on dev nullb0 [ 426.076604][ T5809] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 426.685162][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 426.696341][ T5809] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 427.088813][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.109447][ T5809] usb 3-1: config 0 descriptor?? [ 427.368317][ T8194] binder: 8193:8194 ioctl c0306201 0 returned -14 [ 427.417424][ T5809] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 427.509529][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.527477][ T5809] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 427.534680][ T5809] usb 3-1: media controller created [ 427.567110][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.619863][ T5809] az6027: usb out operation failed. (-71) [ 427.642282][ T5809] az6027: usb out operation failed. (-71) [ 427.658698][ T5809] stb0899_attach: Driver disabled by Kconfig [ 427.674757][ T5809] az6027: no front-end attached [ 427.674757][ T5809] [ 427.687276][ T5809] az6027: usb out operation failed. (-71) [ 427.694597][ T5809] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 427.706631][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 427.756504][ T5809] dvb-usb: schedule remote query interval to 400 msecs. [ 427.778219][ T5809] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 427.813521][ T5809] usb 3-1: USB disconnect, device number 11 [ 428.056118][ T8199] hfs: can't find a HFS filesystem on dev nullb0 [ 429.123006][ T5809] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 433.777433][ T8231] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 433.800708][ T8229] IPVS: stopping backup sync thread 8231 ... [ 433.908045][ T8232] __nla_validate_parse: 1 callbacks suppressed [ 433.908089][ T8232] netlink: 80 bytes leftover after parsing attributes in process `syz.3.683'. [ 435.213237][ T8238] hfs: can't find a HFS filesystem on dev nullb0 [ 437.992065][ T8257] binder: BINDER_SET_CONTEXT_MGR already set [ 438.005485][ T8257] binder: 8255:8257 ioctl 4018620d 2000000000c0 returned -16 [ 438.546246][ T8257] binder: BINDER_SET_CONTEXT_MGR already set [ 438.565193][ T8257] binder: 8255:8257 ioctl 4018620d 200000000040 returned -16 [ 438.600797][ T8257] ntfs3: nullb0: Primary boot signature is not NTFS. [ 438.616698][ T8257] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 439.518664][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.696'. [ 439.528931][ T8267] netlink: 108 bytes leftover after parsing attributes in process `syz.1.696'. [ 439.541328][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.696'. [ 439.551841][ T8267] netlink: 108 bytes leftover after parsing attributes in process `syz.1.696'. [ 439.561086][ T8267] netlink: 84 bytes leftover after parsing attributes in process `syz.1.696'. [ 440.322072][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.329341][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.339942][ T8262] vxcan1 speed is unknown, defaulting to 1000 [ 442.812754][ T8286] hfs: can't find a HFS filesystem on dev nullb0 [ 445.681843][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'. [ 445.691157][ T8303] netlink: 108 bytes leftover after parsing attributes in process `syz.1.709'. [ 445.703912][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'. [ 445.714728][ T8303] netlink: 108 bytes leftover after parsing attributes in process `syz.1.709'. [ 445.724038][ T8303] netlink: 84 bytes leftover after parsing attributes in process `syz.1.709'. [ 446.439772][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 448.475234][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 448.475643][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 450.951870][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'. [ 450.961245][ T8347] netlink: 108 bytes leftover after parsing attributes in process `syz.3.719'. [ 450.974098][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'. [ 450.984697][ T8347] netlink: 108 bytes leftover after parsing attributes in process `syz.3.719'. [ 450.995087][ T8347] netlink: 84 bytes leftover after parsing attributes in process `syz.3.719'. [ 453.195262][ T28] audit: type=1800 audit(1768444954.630:77): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.722" name="/newroot/181/bus" dev="tmpfs" ino=976 res=0 errno=0 [ 453.652762][ T8364] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 453.900116][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 459.978213][ T8419] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 460.236243][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 462.642559][ T8439] input: syz0 as /devices/virtual/input/input18 [ 468.312736][ T8466] hfs: can't find a HFS filesystem on dev nullb0 [ 468.647570][ T8472] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 468.805546][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'. [ 469.013535][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 469.023146][ T8475] netlink: 108 bytes leftover after parsing attributes in process `syz.0.756'. [ 469.035062][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 469.045661][ T8475] netlink: 108 bytes leftover after parsing attributes in process `syz.0.756'. [ 469.054832][ T8475] netlink: 84 bytes leftover after parsing attributes in process `syz.0.756'. [ 470.305403][ T5809] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.565323][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 470.607330][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.644025][ T5809] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 470.688858][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.732423][ T5809] usb 3-1: config 0 descriptor?? [ 470.852937][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 470.886806][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 471.947217][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 471.976742][ T5809] usbhid: probe of 3-1:0.0 failed with error -71 [ 472.014300][ T5809] usb 3-1: USB disconnect, device number 12 [ 472.080717][ T8499] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 472.523954][ T8506] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 472.623304][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'. [ 472.994915][ T8512] hfs: can't find a HFS filesystem on dev nullb0 [ 473.919891][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.767'. [ 473.929640][ T8517] netlink: 108 bytes leftover after parsing attributes in process `syz.3.767'. [ 473.942306][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.767'. [ 473.953070][ T8517] netlink: 108 bytes leftover after parsing attributes in process `syz.3.767'. [ 473.962255][ T8517] netlink: 84 bytes leftover after parsing attributes in process `syz.3.767'. [ 474.819826][ T5973] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 474.904200][ T5973] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.575219][ T8531] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 476.885282][ T8440] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 477.085147][ T8440] usb 2-1: Using ep0 maxpacket: 16 [ 477.098599][ T8440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.115591][ T8440] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 477.134944][ T8440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.180618][ T8440] usb 2-1: config 0 descriptor?? [ 477.245182][ T5809] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 477.499032][ T5809] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 477.526863][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.580702][ T5809] usb 1-1: config 0 descriptor?? [ 477.619935][ T5809] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 477.728452][ T8545] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 477.809433][ T8440] usbhid 2-1:0.0: can't add hid device: -71 [ 477.824016][ T8440] usbhid: probe of 2-1:0.0 failed with error -71 [ 477.866307][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 477.885397][ T8440] usb 2-1: USB disconnect, device number 11 [ 478.299796][ T5809] gp8psk: usb in 146 operation failed. [ 478.310624][ T5809] gp8psk: failed to get FW version [ 478.332978][ T5809] gp8psk: usb in 149 operation failed. [ 478.354739][ T5809] gp8psk: failed to get FPGA version [ 478.371107][ T5809] gp8psk: usb in 138 operation failed. [ 478.387882][ T5809] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 478.418946][ T5809] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 478.456488][ T5809] usb 1-1: USB disconnect, device number 6 [ 479.104848][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 479.114228][ T8557] netlink: 108 bytes leftover after parsing attributes in process `syz.1.777'. [ 479.126663][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 479.137171][ T8557] netlink: 108 bytes leftover after parsing attributes in process `syz.1.777'. [ 479.146359][ T8557] netlink: 84 bytes leftover after parsing attributes in process `syz.1.777'. [ 482.710419][ T5809] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.758476][ T5809] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.897125][ T8581] (null): rxe_set_mtu: Set mtu to 256 [ 482.902826][ T8581] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 484.449627][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 484.458823][ T8590] netlink: 108 bytes leftover after parsing attributes in process `syz.3.788'. [ 484.471271][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 484.482470][ T8590] netlink: 108 bytes leftover after parsing attributes in process `syz.3.788'. [ 484.491798][ T8590] netlink: 84 bytes leftover after parsing attributes in process `syz.3.788'. [ 485.998744][ T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 486.225079][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 486.246504][ T967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 486.277214][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.314851][ T967] usb 3-1: config 0 descriptor?? [ 486.645255][ T967] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 486.771230][ T967] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 486.866307][ T967] dib0700: firmware download failed at 7 with -22 [ 487.215219][ T8440] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 487.442129][ T8440] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.488466][ T8440] usb 1-1: config 0 has no interface number 0 [ 487.535405][ T5773] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 487.571477][ T8440] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 487.630984][ T8440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.679129][ T8440] usb 1-1: Product: syz [ 487.705386][ T8440] usb 1-1: Manufacturer: syz [ 487.732264][ T8440] usb 1-1: SerialNumber: syz [ 487.794498][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.855492][ T5773] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 487.882550][ T8440] usb 1-1: config 0 descriptor?? [ 487.972377][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.987780][ T5773] usb 2-1: config 0 descriptor?? [ 488.012682][ T5773] pwc: Askey VC010 type 2 USB webcam detected. [ 488.171303][ T8440] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 488.193288][ T8440] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 488.208272][ T8440] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 488.220818][ T8440] usb 1-1: media controller created [ 488.252846][ T8440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.435235][ T5773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 488.442980][ T5773] pwc: recv_control_msg error -32 req 02 val 2700 [ 488.453550][ T5773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 488.461250][ T5773] pwc: recv_control_msg error -32 req 04 val 1000 [ 488.469613][ T5773] pwc: recv_control_msg error -32 req 04 val 1300 [ 488.476530][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 488.482988][ T5773] pwc: recv_control_msg error -32 req 04 val 1400 [ 488.492340][ T5773] pwc: recv_control_msg error -32 req 02 val 2000 [ 488.667094][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 488.687174][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.701975][ T5773] pwc: recv_control_msg error -32 req 04 val 1500 [ 488.704076][ T27] usb 4-1: config 0 has no interface number 0 [ 488.718144][ T5773] pwc: recv_control_msg error -71 req 02 val 2500 [ 488.729084][ T5773] pwc: recv_control_msg error -71 req 02 val 2400 [ 488.729756][ T5809] usb 3-1: USB disconnect, device number 13 [ 488.745276][ T5773] pwc: recv_control_msg error -71 req 02 val 2600 [ 488.765145][ T27] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 488.767653][ T5773] pwc: recv_control_msg error -71 req 02 val 2900 [ 488.774270][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.774296][ T27] usb 4-1: Product: syz [ 488.774312][ T27] usb 4-1: Manufacturer: syz [ 488.774326][ T27] usb 4-1: SerialNumber: syz [ 488.816744][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 488.832903][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 488.850743][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 488.863148][ T27] usb 4-1: config 0 descriptor?? [ 488.887717][ T5773] pwc: Registered as video103. [ 488.905709][ T27] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 488.914914][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 488.921374][ T27] usb 4-1: selecting invalid altsetting 1 [ 488.948626][ T5773] usb 2-1: USB disconnect, device number 12 [ 488.950267][ T8616] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 488.981787][ T27] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 489.039357][ T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 489.065373][ T27] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 489.073735][ T27] usb 4-1: media controller created [ 490.067945][ T8440] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 490.084594][ T8601] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 490.304187][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.977706][ T8626] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 491.000642][ T8440] usb 1-1: USB disconnect, device number 7 [ 491.022625][ T27] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 491.042470][ T27] zl10353_read_register: readreg error (reg=127, ret==-71) [ 491.068139][ T27] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 491.125915][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 491.343089][ T8615] IPVS: stopping backup sync thread 8616 ... [ 491.373845][ T27] usb 4-1: USB disconnect, device number 9 [ 491.920190][ T8637] unsupported nlmsg_type 40 [ 493.445413][ T8440] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 493.494035][ T8657] binder: 8653:8657 ioctl 4018620d 0 returned -22 [ 493.512116][ T8656] binder: 8653:8656 ioctl c0306201 2000000003c0 returned -22 [ 493.665232][ T8440] usb 3-1: Using ep0 maxpacket: 32 [ 493.675303][ T8440] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 493.735705][ T8440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.068307][ T8662] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 494.103649][ T8440] usb 3-1: config 0 descriptor?? [ 494.495386][ T8440] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 494.519926][ T8440] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 494.545500][ T8440] dib0700: firmware download failed at 7 with -22 [ 494.902078][ T8660] IPVS: stopping backup sync thread 8662 ... [ 495.425977][ T8667] hfs: can't find a HFS filesystem on dev nullb0 [ 496.580111][ T8440] usb 3-1: USB disconnect, device number 14 [ 497.097071][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 498.410525][ T8690] binder: 8689:8690 ioctl 4018620d 0 returned -22 [ 499.571588][ T8440] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 499.678793][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 499.798613][ T8440] usb 3-1: Using ep0 maxpacket: 32 [ 499.845629][ T8440] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.875386][ T967] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 499.883715][ T8440] usb 3-1: config 0 has no interface number 0 [ 500.031653][ T8440] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 500.081821][ T8440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.115500][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 500.133953][ T967] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 500.145645][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.145666][ T8440] usb 3-1: Product: syz [ 500.168916][ T967] usb 4-1: config 0 descriptor?? [ 500.253450][ T8440] usb 3-1: Manufacturer: syz [ 500.294364][ T8440] usb 3-1: SerialNumber: syz [ 500.369174][ T8440] usb 3-1: config 0 descriptor?? [ 500.392915][ T8440] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 500.418170][ T8440] usb 3-1: selecting invalid altsetting 1 [ 500.424069][ T8440] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 500.465806][ T967] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 500.481431][ T8440] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.499448][ T967] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 500.515543][ T8440] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 500.522574][ T967] dib0700: firmware download failed at 7 with -22 [ 500.705361][ T8440] usb 3-1: media controller created [ 500.925427][ T8440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.498640][ T8440] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 502.502356][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.507916][ T8440] zl10353_read_register: readreg error (reg=127, ret==-110) [ 502.523385][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.182564][ T9] usb 4-1: USB disconnect, device number 10 [ 503.309944][ T5860] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 503.357266][ T5860] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 503.588847][ T8440] usb 3-1: USB disconnect, device number 15 [ 506.618511][ T8752] binder: 8751:8752 ioctl c0306201 0 returned -14 [ 507.114711][ T8440] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 508.040453][ T8440] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 508.055191][ T8440] usb 2-1: config 0 has no interface number 0 [ 508.080751][ T8440] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 508.106445][ T8440] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 508.125289][ T8440] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 508.144799][ T8440] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 508.153424][ T8440] usb 2-1: Product: syz [ 508.163139][ T8440] usb 2-1: SerialNumber: syz [ 508.171921][ T8440] usb 2-1: config 0 descriptor?? [ 508.185925][ T8753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.203040][ T8440] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 508.255191][ T6838] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 508.429327][ T8440] usb 2-1: USB disconnect, device number 13 [ 508.465048][ T6838] usb 1-1: Using ep0 maxpacket: 32 [ 508.486870][ T6838] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.506122][ T6838] usb 1-1: config 0 has no interface number 0 [ 508.521741][ T6838] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 508.538722][ T6838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.552310][ T6838] usb 1-1: Product: syz [ 508.562571][ T6838] usb 1-1: Manufacturer: syz [ 508.577978][ T6838] usb 1-1: SerialNumber: syz [ 508.603644][ T6838] usb 1-1: config 0 descriptor?? [ 508.618032][ T6838] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 508.640621][ T6838] usb 1-1: selecting invalid altsetting 1 [ 508.655800][ T6838] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 508.679154][ T6838] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.703491][ T6838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 508.730584][ T6838] usb 1-1: media controller created [ 508.783204][ T6838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.780099][ T8440] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 510.792102][ T6838] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 510.811541][ T6838] zl10353_read_register: readreg error (reg=127, ret==-71) [ 510.824092][ T8440] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.833438][ T6838] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 510.970359][ T6838] usb 1-1: USB disconnect, device number 8 [ 514.775467][ T8801] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 515.079163][ T8802] IPVS: stopping backup sync thread 8801 ... [ 516.585250][ T5809] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 516.907403][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 517.453785][ T5809] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.472611][ T5809] usb 3-1: config 0 has no interface number 0 [ 517.501765][ T5809] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 517.515578][ T8819] binder: BINDER_SET_CONTEXT_MGR already set [ 517.526706][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.530278][ T8819] binder: 8818:8819 ioctl 4018620d 2000000002c0 returned -16 [ 517.555107][ T5809] usb 3-1: Product: syz [ 517.567914][ T8821] binder: 8818:8821 ioctl c0306201 0 returned -14 [ 517.569941][ T5809] usb 3-1: Manufacturer: syz [ 517.593708][ T5809] usb 3-1: SerialNumber: syz [ 517.625575][ T5809] usb 3-1: config 0 descriptor?? [ 517.826994][ T5809] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 517.850046][ T5809] usb 3-1: selecting invalid altsetting 1 [ 519.445094][ T5809] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 519.464564][ T5809] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.855478][ T5809] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 519.863850][ T5809] usb 3-1: media controller created [ 519.961063][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.099978][ T8831] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 521.613948][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 521.685545][ T5809] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 521.692643][ T5809] zl10353_read_register: readreg error (reg=127, ret==-71) [ 521.718280][ T5809] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 521.946745][ T5809] usb 3-1: USB disconnect, device number 16 [ 522.191950][ T8838] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 522.498160][ T8839] IPVS: stopping backup sync thread 8838 ... [ 523.124018][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 523.190181][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 524.375427][ T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 524.585500][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 524.660515][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.711871][ T27] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 524.725260][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.734432][ T27] usb 2-1: Product: syz [ 524.743645][ T27] usb 2-1: Manufacturer: syz [ 524.753038][ T27] usb 2-1: SerialNumber: syz [ 525.250249][ T27] usb 2-1: USB disconnect, device number 14 [ 525.775177][ T5860] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 527.862738][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 528.372203][ T5860] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.425235][ T5860] usb 4-1: config 0 has no interface number 0 [ 528.440058][ T5860] usb 4-1: string descriptor 0 read error: -71 [ 528.464139][ T5860] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 528.483376][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.502445][ T5860] usb 4-1: config 0 descriptor?? [ 528.508885][ T5860] usb 4-1: can't set config #0, error -71 [ 528.671086][ T5860] usb 4-1: USB disconnect, device number 11 [ 530.258052][ T27] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 530.315951][ T27] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 530.603293][ T5973] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 530.641854][ T5973] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 531.572221][ T5973] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 531.775070][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 531.784129][ T5973] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.801842][ T5973] usb 2-1: config 0 has no interface number 0 [ 531.824091][ T5973] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 531.835922][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.847080][ T5973] usb 2-1: Product: syz [ 531.851684][ T5973] usb 2-1: Manufacturer: syz [ 531.857297][ T5973] usb 2-1: SerialNumber: syz [ 531.897456][ T5973] usb 2-1: config 0 descriptor?? [ 531.918379][ T5973] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 531.929120][ T5973] usb 2-1: selecting invalid altsetting 1 [ 531.935917][ T5973] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 531.978259][ T5973] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 532.004832][ T5973] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 532.014289][ T5973] usb 2-1: media controller created [ 532.092673][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.686228][ T5973] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 533.693313][ T5973] zl10353_read_register: readreg error (reg=127, ret==-71) [ 533.745734][ T5973] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 533.907372][ T5973] usb 2-1: USB disconnect, device number 15 [ 540.015176][ T8867] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 540.234170][ T8867] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 540.265375][ T8867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.282090][ T8867] usb 4-1: config 0 descriptor?? [ 540.318448][ T8867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 542.162963][ T8867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 542.173868][ T8867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 543.300457][ T27] usb 4-1: USB disconnect, device number 12 [ 549.806007][ T8983] hfs: can't find a HFS filesystem on dev nullb0 [ 550.925368][ T5773] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 551.135200][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 551.147259][ T5773] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 551.165189][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.186143][ T5773] usb 3-1: config 0 descriptor?? [ 551.405645][ T5773] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 551.427748][ T5773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.448611][ T5773] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 551.465075][ T5773] usb 3-1: media controller created [ 551.536817][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.681509][ T5773] DVB: Unable to find symbol dib7000p_attach() [ 551.721654][ T5773] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 552.155916][ T5773] rc_core: IR keymap rc-dib0700-rc5 not found [ 552.166374][ T5773] Registered IR keymap rc-empty [ 552.243036][ T5773] dvb-usb: could not initialize remote control. [ 552.374431][ T5773] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 552.756949][ T5773] usb 3-1: USB disconnect, device number 17 [ 552.934491][ T5773] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 553.613954][ T9018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.910'. [ 554.529499][ T9020] vivid-001: disconnect [ 555.478990][ T9011] vivid-001: reconnect [ 558.636315][ T5973] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 558.857395][ T5973] usb 3-1: device descriptor read/all, error -71 [ 561.825705][ T9050] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 561.875081][ T5773] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 561.909915][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.917'. [ 562.065054][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 562.081749][ T5773] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 562.091805][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.122163][ T5773] usb 4-1: config 0 descriptor?? [ 562.655975][ T5773] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 562.677197][ T5773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.688258][ T5773] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 562.695679][ T5773] usb 4-1: media controller created [ 562.812573][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.922'. [ 563.328030][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334411][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.379542][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.265471][ T5773] DVB: Unable to find symbol dib7000p_attach() [ 565.294137][ T5773] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 566.705667][ T5773] rc_core: IR keymap rc-dib0700-rc5 not found [ 566.721414][ T5773] Registered IR keymap rc-empty [ 566.739630][ T5773] dvb-usb: could not initialize remote control. [ 566.785057][ T5773] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 566.828501][ T5773] usb 4-1: USB disconnect, device number 13 [ 567.982620][ T5773] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 570.231449][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.933'. [ 572.165157][ T5973] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 572.395244][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 572.456223][ T5973] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 572.515142][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.616653][ T5973] usb 4-1: config 0 descriptor?? [ 572.829658][ T5973] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 572.874404][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.897691][ T5973] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 572.915999][ T5973] usb 4-1: media controller created [ 572.969248][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.184731][ T5973] DVB: Unable to find symbol dib7000p_attach() [ 573.212797][ T5973] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 573.437551][ T5973] rc_core: IR keymap rc-dib0700-rc5 not found [ 573.458447][ T5973] Registered IR keymap rc-empty [ 573.472947][ T5973] dvb-usb: could not initialize remote control. [ 573.483804][ T5973] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 573.498326][ T5973] usb 4-1: USB disconnect, device number 14 [ 573.618857][ T5973] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 578.915096][ T967] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 579.125477][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 579.167592][ T967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 579.311629][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.482145][ T967] usb 3-1: config 0 descriptor?? [ 579.769319][ T967] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 579.817173][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.878970][ T967] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 579.918481][ T967] usb 3-1: media controller created [ 580.051737][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.298692][ T967] DVB: Unable to find symbol dib7000p_attach() [ 580.312077][ T967] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 580.457898][ T9180] netlink: 56 bytes leftover after parsing attributes in process `syz.0.957'. [ 580.545254][ T967] rc_core: IR keymap rc-dib0700-rc5 not found [ 580.582785][ T967] Registered IR keymap rc-empty [ 580.641935][ T967] dvb-usb: could not initialize remote control. [ 580.678638][ T967] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 581.175448][ T9184] fuse: Bad value for 'fd' [ 581.182043][ T5973] usb 3-1: USB disconnect, device number 20 [ 581.446297][ T5973] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 587.805146][ T5860] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 587.989606][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.031548][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.055217][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.077883][ T9220] fuse: Bad value for 'fd' [ 588.102721][ T5860] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.132828][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.216290][ T5860] usb 2-1: config 0 descriptor?? [ 590.269452][ T5860] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 592.102950][ T5860] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 592.188635][ T5860] usb 2-1: USB disconnect, device number 16 [ 592.291284][ T9236] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 592.390409][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 592.437370][ T9233] fido_id[9233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 593.266111][ T9245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.974'. [ 593.330388][ T9246] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 593.552650][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 595.203264][ T9262] fuse: Bad value for 'fd' [ 595.465020][ T5773] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 599.078018][ T9268] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.979'. [ 599.379236][ T5773] usb 4-1: device not accepting address 15, error -71 [ 599.415247][ T5973] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 599.595107][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 600.327010][ T5973] usb 3-1: device descriptor read/all, error -71 [ 601.591735][ T9292] binder: BINDER_SET_CONTEXT_MGR already set [ 601.619438][ T9292] binder: 9291:9292 ioctl 4018620d 200000000100 returned -16 [ 601.674046][ T9295] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 601.695482][ T9292] binder: BINDER_SET_CONTEXT_MGR already set [ 601.705308][ T9292] binder: 9291:9292 ioctl 4018620d 2000000002c0 returned -16 [ 601.761432][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 602.260912][ T9306] netlink: 56 bytes leftover after parsing attributes in process `syz.3.989'. [ 604.355114][ T967] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 604.555049][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 604.820150][ T967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 605.150839][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.206326][ T967] usb 3-1: config 0 descriptor?? [ 605.623806][ T967] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 605.634227][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 605.655785][ T967] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 605.663749][ T967] usb 3-1: media controller created [ 605.724013][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.724264][ T9333] netlink: 56 bytes leftover after parsing attributes in process `syz.1.999'. [ 606.515109][ T967] DVB: Unable to find symbol dib7000p_attach() [ 606.523243][ T967] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 606.736236][ T9346] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 606.840643][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'. [ 606.875153][ T967] rc_core: IR keymap rc-dib0700-rc5 not found [ 606.881298][ T967] Registered IR keymap rc-empty [ 606.895000][ T967] dvb-usb: could not initialize remote control. [ 606.901317][ T967] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 606.926254][ T967] usb 3-1: USB disconnect, device number 23 [ 607.224658][ T9355] binder: BINDER_SET_CONTEXT_MGR already set [ 607.818021][ T9355] binder: 9351:9355 ioctl 4018620d 200000000100 returned -16 [ 607.854613][ T967] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 608.096575][ T9355] binder: BINDER_SET_CONTEXT_MGR already set [ 608.161516][ T9355] binder: 9351:9355 ioctl 4018620d 2000000002c0 returned -16 [ 611.045011][ T5809] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 611.235021][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 611.257995][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 611.297872][ T5809] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 611.353386][ T5809] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 611.380879][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 611.404278][ T5809] usb 3-1: Product: syz [ 611.422177][ T5809] usb 3-1: Manufacturer: syz [ 611.439694][ T5809] usb 3-1: SerialNumber: syz [ 611.462222][ T5809] usb 3-1: config 0 descriptor?? [ 611.468401][ T9381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.585112][ T967] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 611.785212][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 611.809613][ T967] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 611.829412][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.847755][ T967] usb 2-1: config 0 descriptor?? [ 612.017630][ T9393] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1011'. [ 612.515103][ T967] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 612.569004][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 612.587980][ T967] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 612.596719][ T967] usb 2-1: media controller created [ 612.664476][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.889274][ T967] DVB: Unable to find symbol dib7000p_attach() [ 612.914150][ T967] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 613.136971][ T967] rc_core: IR keymap rc-dib0700-rc5 not found [ 613.152999][ T967] Registered IR keymap rc-empty [ 613.169501][ T9402] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 613.181011][ T967] dvb-usb: could not initialize remote control. [ 613.202697][ T967] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 613.273788][ T967] usb 2-1: USB disconnect, device number 17 [ 613.297468][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 613.419582][ T967] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 613.809780][ T967] usb 3-1: USB disconnect, device number 24 [ 616.462407][ T9425] binder: BINDER_SET_CONTEXT_MGR already set [ 616.469801][ T9425] binder: 9423:9425 ioctl 4018620d 200000000100 returned -16 [ 616.486343][ T9425] binder: BINDER_SET_CONTEXT_MGR already set [ 616.494085][ T9425] binder: 9423:9425 ioctl 4018620d 2000000002c0 returned -16 [ 616.552617][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 616.959977][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 616.995198][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 617.189010][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 617.196500][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 617.208123][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 617.220996][ T27] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 617.230377][ T27] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 617.238690][ T27] usb 1-1: Product: syz [ 617.242972][ T27] usb 1-1: Manufacturer: syz [ 617.247669][ T27] usb 1-1: SerialNumber: syz [ 617.332723][ T27] usb 1-1: config 0 descriptor?? [ 617.351332][ T9434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 617.625028][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 617.637929][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 617.661385][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.709785][ T9] usb 2-1: config 0 descriptor?? [ 618.475172][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 618.514117][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.538993][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 618.560103][ T9] usb 2-1: media controller created [ 618.619182][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.783329][ T9448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.833143][ T9] DVB: Unable to find symbol dib7000p_attach() [ 618.853237][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 619.085375][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 619.102760][ T9] Registered IR keymap rc-empty [ 619.127346][ T9] dvb-usb: could not initialize remote control. [ 619.160942][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 619.207622][ T9] usb 2-1: USB disconnect, device number 18 [ 619.347468][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 619.786055][ T27] usb 1-1: USB disconnect, device number 9 [ 620.698883][ T9465] binder: BINDER_SET_CONTEXT_MGR already set [ 620.715404][ T9465] binder: 9463:9465 ioctl 4018620d 200000000100 returned -16 [ 620.800450][ T9467] binder: BINDER_SET_CONTEXT_MGR already set [ 620.828208][ T9467] binder: 9463:9467 ioctl 4018620d 2000000002c0 returned -16 [ 622.425780][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 622.615291][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 622.632909][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 622.654272][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.682656][ T9] usb 3-1: config 0 descriptor?? [ 622.902538][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 622.923432][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.957447][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 622.975657][ T9] usb 3-1: media controller created [ 623.022284][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.323123][ T9] DVB: Unable to find symbol dib7000p_attach() [ 623.333232][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 624.188910][ T9512] binder: BINDER_SET_CONTEXT_MGR already set [ 624.209305][ T9512] binder: 9511:9512 ioctl 4018620d 200000000100 returned -16 [ 624.241155][ T9512] binder: BINDER_SET_CONTEXT_MGR already set [ 624.257571][ T9512] binder: 9511:9512 ioctl 4018620d 2000000002c0 returned -16 [ 624.315983][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 624.334365][ T9] Registered IR keymap rc-empty [ 624.349205][ T9] dvb-usb: could not initialize remote control. [ 624.371742][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 624.420844][ T9] usb 3-1: USB disconnect, device number 25 [ 624.519446][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 624.642596][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.649534][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.134188][ T9518] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 625.175516][ T9518] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 626.106581][ T9531] fuse: Bad value for 'fd' [ 626.172556][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1055'. [ 626.937260][ T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 627.455174][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 627.481792][ T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 627.505037][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.533733][ T9550] binder: BINDER_SET_CONTEXT_MGR already set [ 627.549502][ T27] usb 2-1: config 0 descriptor?? [ 627.555084][ T9550] binder: 9549:9550 ioctl 4018620d 200000000100 returned -16 [ 627.566134][ T9550] binder: BINDER_SET_CONTEXT_MGR already set [ 627.572172][ T9550] binder: 9549:9550 ioctl 4018620d 2000000002c0 returned -16 [ 627.640484][ T9552] binder: 9549:9552 ioctl c0306201 0 returned -14 [ 627.768821][ T27] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 627.806887][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.827612][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 627.851042][ T27] usb 2-1: media controller created [ 627.912394][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.123797][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1062'. [ 628.338558][ T27] DVB: Unable to find symbol dib7000p_attach() [ 628.426457][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 628.865011][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 628.871216][ T27] Registered IR keymap rc-empty [ 628.905199][ T27] dvb-usb: could not initialize remote control. [ 628.911522][ T27] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 628.955447][ T27] usb 2-1: USB disconnect, device number 19 [ 629.036776][ T27] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 629.084039][ T9567] fuse: Bad value for 'fd' [ 629.275186][ T5809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 629.465045][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 629.472172][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.483252][ T5809] usb 4-1: config 0 has no interfaces? [ 629.497026][ T5809] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 629.506470][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.514518][ T5809] usb 4-1: Product: syz [ 629.518839][ T5809] usb 4-1: Manufacturer: syz [ 629.523466][ T5809] usb 4-1: SerialNumber: syz [ 629.530940][ T5809] usb 4-1: config 0 descriptor?? [ 629.855678][ T9565] Bluetooth: MGMT ver 1.22 [ 629.905419][ T5809] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 629.981506][ T8867] usb 4-1: USB disconnect, device number 17 [ 630.115176][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 630.131589][ T5809] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 630.208458][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.220181][ T5809] usb 1-1: config 0 descriptor?? [ 630.330585][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 630.451235][ T5809] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 630.492813][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.505882][ T5809] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 630.513175][ T5809] usb 1-1: media controller created [ 630.542709][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.682646][ T5809] DVB: Unable to find symbol dib7000p_attach() [ 630.700766][ T5809] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 630.825049][ T5809] rc_core: IR keymap rc-dib0700-rc5 not found [ 630.854203][ T5809] Registered IR keymap rc-empty [ 630.890916][ T9586] (null): rxe_set_mtu: Set mtu to 256 [ 630.900194][ T9586] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 631.083304][ T5809] dvb-usb: could not initialize remote control. [ 631.252425][ T5809] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 631.389236][ T5809] usb 1-1: USB disconnect, device number 10 [ 631.552716][ T5809] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 631.646534][ T9591] binder: BINDER_SET_CONTEXT_MGR already set [ 631.652704][ T9591] binder: 9590:9591 ioctl 4018620d 200000000100 returned -16 [ 631.665777][ T9591] binder: BINDER_SET_CONTEXT_MGR already set [ 631.671834][ T9591] binder: 9590:9591 ioctl 4018620d 2000000002c0 returned -16 [ 631.733086][ T9592] binder: 9590:9592 ioctl c0306201 0 returned -14 [ 632.108581][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1072'. [ 634.980110][ T5809] IPVS: starting estimator thread 0... [ 635.095115][ T9623] IPVS: using max 18 ests per chain, 43200 per kthread [ 636.840163][ T9624] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 637.167705][ T9633] (null): rxe_set_mtu: Set mtu to 256 [ 637.176951][ T9633] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 639.114145][ T9639] binder: BINDER_SET_CONTEXT_MGR already set [ 639.165152][ T9639] binder: 9638:9639 ioctl 4018620d 200000000100 returned -16 [ 639.215645][ T9640] binder: BINDER_SET_CONTEXT_MGR already set [ 639.221711][ T9640] binder: 9638:9640 ioctl 4018620d 2000000002c0 returned -16 [ 639.285377][ T9639] binder: 9638:9639 ioctl c0306201 0 returned -14 [ 639.879088][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1085'. [ 640.948712][ T8867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 641.396440][ T9672] (null): rxe_set_mtu: Set mtu to 256 [ 641.402240][ T9672] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 641.526349][ T8867] usb 4-1: Using ep0 maxpacket: 32 [ 641.669618][ T8867] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 641.678893][ T8867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.706162][ T8867] usb 4-1: config 0 descriptor?? [ 641.795268][ T9677] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 641.980427][ T8867] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 642.030903][ T9679] binder: BINDER_SET_CONTEXT_MGR already set [ 642.053396][ T8867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.075208][ T9679] binder: 9678:9679 ioctl 4018620d 200000000100 returned -16 [ 642.101045][ T9680] IPVS: stopping backup sync thread 9677 ... [ 642.122945][ T8867] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 642.139064][ T9679] binder: BINDER_SET_CONTEXT_MGR already set [ 642.153866][ T8867] usb 4-1: media controller created [ 642.161982][ T9679] binder: 9678:9679 ioctl 4018620d 2000000002c0 returned -16 [ 642.251162][ T8867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.401120][ T8867] DVB: Unable to find symbol dib7000p_attach() [ 642.414766][ T8867] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 642.505157][ T8867] rc_core: IR keymap rc-dib0700-rc5 not found [ 642.516639][ T8867] Registered IR keymap rc-empty [ 642.523711][ T8867] dvb-usb: could not initialize remote control. [ 642.533208][ T8867] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 642.558830][ T8867] usb 4-1: USB disconnect, device number 18 [ 642.733622][ T8867] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 643.726543][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 643.845948][ T9689] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 644.065862][ T9698] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1099'. [ 645.369793][ T9706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1100'. [ 647.440790][ T9721] binder: BINDER_SET_CONTEXT_MGR already set [ 647.465146][ T9721] binder: 9720:9721 ioctl 4018620d 200000000100 returned -16 [ 647.492095][ T9721] binder: BINDER_SET_CONTEXT_MGR already set [ 647.506306][ T9721] binder: 9720:9721 ioctl 4018620d 2000000002c0 returned -16 [ 648.064984][ T5773] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 648.275032][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 648.303110][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 648.308029][ T5773] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 648.330166][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.441446][ T5773] usb 4-1: config 0 descriptor?? [ 648.925112][ T5773] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 648.941091][ T5773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.955823][ T5773] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 648.985074][ T5773] usb 4-1: media controller created [ 649.180602][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.067769][ T5773] DVB: Unable to find symbol dib7000p_attach() [ 650.074060][ T5773] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 650.446720][ T9748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1110'. [ 651.664151][ T5773] rc_core: IR keymap rc-dib0700-rc5 not found [ 651.670588][ T5773] Registered IR keymap rc-empty [ 651.797744][ T5773] dvb-usb: could not initialize remote control. [ 651.804604][ T5773] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 651.832644][ T5773] usb 4-1: USB disconnect, device number 19 [ 652.012927][ T9757] comedi comedi1: aio_iiro_16: a I/O base address must be specified [ 652.038263][ T5773] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 652.855132][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 652.861204][ T9762] binder: 9761:9762 ioctl 4018620d 200000000100 returned -16 [ 653.049135][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 653.375177][ T9762] binder: 9761:9762 ioctl 4018620d 2000000002c0 returned -16 [ 654.787491][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'. [ 655.710750][ T9790] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 655.808813][ T9791] syz2: rxe_newlink: already configured on vxcan1 [ 659.195542][ T9814] binder: BINDER_SET_CONTEXT_MGR already set [ 659.201605][ T9814] binder: 9813:9814 ioctl 4018620d 200000000100 returned -16 [ 659.257181][ T9814] binder: BINDER_SET_CONTEXT_MGR already set [ 659.274982][ T9814] binder: 9813:9814 ioctl 4018620d 2000000002c0 returned -16 [ 661.859767][ T9832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1131'. [ 662.191884][ T9834] overlayfs: unescaped trailing colons in lowerdir mount option. [ 662.514472][ T9835] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 662.540093][ T9835] netlink: 'syz.0.1133': attribute type 20 has an invalid length. [ 663.205163][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1135'. [ 663.659974][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 664.166465][ T9851] binder: BINDER_SET_CONTEXT_MGR already set [ 664.172674][ T9851] binder: 9850:9851 ioctl 4018620d 200000000100 returned -16 [ 664.194744][ T9851] binder: BINDER_SET_CONTEXT_MGR already set [ 664.226931][ T9851] binder: 9850:9851 ioctl 4018620d 2000000002c0 returned -16 [ 665.265035][ T8867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 665.451639][ T5809] IPVS: starting estimator thread 0... [ 665.515252][ T8867] usb 4-1: Using ep0 maxpacket: 32 [ 665.530269][ T8867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.565205][ T9864] IPVS: using max 26 ests per chain, 62400 per kthread [ 665.577637][ T8867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.616196][ T8867] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.647367][ T8867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.832530][ T8867] usb 4-1: config 0 descriptor?? [ 665.845291][ T8867] hub 4-1:0.0: USB hub found [ 665.926051][ T9873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1143'. [ 666.636678][ T8867] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 666.745077][ T967] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 667.174708][ T8867] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 667.775006][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 667.790832][ T967] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.811261][ T967] usb 3-1: config 0 has no interface number 0 [ 667.827669][ T8867] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 667.844192][ T967] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 667.867474][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.891853][ T967] usb 3-1: Product: syz [ 667.900211][ T9879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1146'. [ 667.929234][ T8867] usb 4-1: USB disconnect, device number 20 [ 667.931581][ T967] usb 3-1: Manufacturer: syz [ 667.939969][ T967] usb 3-1: SerialNumber: syz [ 668.116644][ T967] usb 3-1: config 0 descriptor?? [ 668.133706][ T967] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 668.142883][ T967] usb 3-1: selecting invalid altsetting 1 [ 668.148968][ T967] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 668.163753][ T967] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 668.178520][ T967] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 668.375462][ T967] usb 3-1: media controller created [ 669.285948][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.790113][ T9880] fido_id[9880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 669.919155][ T967] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 669.955502][ T967] zl10353_read_register: readreg error (reg=127, ret==-71) [ 670.003428][ T967] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 670.247198][ T967] usb 3-1: USB disconnect, device number 26 [ 672.701663][ T9898] binder: BINDER_SET_CONTEXT_MGR already set [ 672.716808][ T9898] binder: 9897:9898 ioctl 4018620d 200000000100 returned -16 [ 672.749366][ T9898] binder: BINDER_SET_CONTEXT_MGR already set [ 672.764957][ T9898] binder: 9897:9898 ioctl 4018620d 2000000002c0 returned -16 [ 672.833016][ T9901] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 673.115312][ T9905] IPVS: stopping backup sync thread 9901 ... [ 673.863132][ T9910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1153'. [ 674.258139][ T9919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1156'. [ 674.915005][ T787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 675.141828][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 675.309016][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.318062][ T787] usb 3-1: config 0 has no interface number 0 [ 675.337942][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 675.353986][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.606590][ T787] usb 3-1: Product: syz [ 675.615563][ T787] usb 3-1: Manufacturer: syz [ 675.634050][ T787] usb 3-1: SerialNumber: syz [ 675.666339][ T787] usb 3-1: config 0 descriptor?? [ 675.706080][ T787] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 675.716420][ T787] usb 3-1: selecting invalid altsetting 1 [ 675.722206][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 675.733789][ T787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 675.747002][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 675.775109][ T787] usb 3-1: media controller created [ 675.848858][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.242128][ T787] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 677.300085][ T787] zl10353_read_register: readreg error (reg=127, ret==-71) [ 677.309490][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 677.434440][ T787] usb 3-1: USB disconnect, device number 27 [ 679.586780][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 679.609683][ T9955] binder: 9954:9955 ioctl 4018620d 200000000100 returned -16 [ 679.645344][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 679.655300][ T9955] binder: 9954:9955 ioctl 4018620d 2000000002c0 returned -16 [ 679.854331][ T9962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'. [ 679.913109][ T9964] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1169'. [ 681.052887][ T9973] overlayfs: unescaped trailing colons in lowerdir mount option. [ 682.486755][ T9971] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 682.497221][ T9971] netlink: 'syz.3.1170': attribute type 20 has an invalid length. [ 684.675025][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 684.874975][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 684.897466][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.915221][ T9] usb 1-1: config 0 has no interface number 0 [ 684.935671][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 684.951436][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.172172][ T9] usb 1-1: Product: syz [ 685.177137][ T9] usb 1-1: Manufacturer: syz [ 685.182168][ T9] usb 1-1: SerialNumber: syz [ 685.189849][ T9] usb 1-1: config 0 descriptor?? [ 685.223192][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 685.242914][ T9] usb 1-1: selecting invalid altsetting 1 [ 685.946798][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 685.958412][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 685.969111][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 685.978643][ T9] usb 1-1: media controller created [ 686.752955][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.759644][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.779603][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 687.715967][ T28] audit: type=1326 audit(1768445189.190:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 687.783317][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 687.790523][ T28] audit: type=1326 audit(1768445189.190:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 687.812727][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.826638][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 687.835830][T10003] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1176'. [ 687.846380][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 687.855616][T10003] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1176'. [ 687.864691][T10003] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1176'. [ 687.875515][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 687.903462][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 687.936041][ T28] audit: type=1326 audit(1768445189.220:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 687.999697][ T28] audit: type=1326 audit(1768445189.220:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.065786][ T9] usb 1-1: USB disconnect, device number 11 [ 688.094946][ T28] audit: type=1326 audit(1768445189.220:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.235674][ T28] audit: type=1326 audit(1768445189.220:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.294817][ T28] audit: type=1326 audit(1768445189.220:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.363737][ T28] audit: type=1326 audit(1768445189.220:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.419182][T10008] binder: BINDER_SET_CONTEXT_MGR already set [ 688.425425][T10008] binder: 10005:10008 ioctl 4018620d 200000000100 returned -16 [ 688.440220][ T28] audit: type=1326 audit(1768445189.220:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 688.462336][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.472372][T10008] binder: BINDER_SET_CONTEXT_MGR already set [ 688.489320][T10008] binder: 10005:10008 ioctl 4018620d 2000000002c0 returned -16 [ 688.514989][ T28] audit: type=1326 audit(1768445189.220:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bc38f749 code=0x7ffc0000 [ 689.565692][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 689.574722][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 690.818501][T10021] vxcan1 speed is unknown, defaulting to 1000 [ 691.576390][T10036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1187'. [ 693.955322][ T787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 694.245460][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 694.281545][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 694.299189][ T787] usb 1-1: config 0 has no interface number 0 [ 694.314564][ T787] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 694.337574][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.345812][ T787] usb 1-1: Product: syz [ 694.353879][ T787] usb 1-1: Manufacturer: syz [ 694.364777][ T787] usb 1-1: SerialNumber: syz [ 694.384132][ T787] usb 1-1: config 0 descriptor?? [ 694.403724][ T787] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 694.425691][ T787] usb 1-1: selecting invalid altsetting 1 [ 694.435464][ T787] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 694.454828][ T787] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 694.480261][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 694.495195][ T787] usb 1-1: media controller created [ 694.599178][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.936298][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 695.946324][ T787] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 695.955019][ T787] zl10353_read_register: readreg error (reg=127, ret==-32) [ 695.974184][T10061] binder: BINDER_SET_CONTEXT_MGR already set [ 695.976155][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 696.002585][T10061] binder: 10060:10061 ioctl 4018620d 200000000100 returned -16 [ 696.064690][T10061] binder: BINDER_SET_CONTEXT_MGR already set [ 696.090131][T10061] binder: 10060:10061 ioctl 4018620d 2000000002c0 returned -16 [ 696.162588][ T787] usb 1-1: USB disconnect, device number 12 [ 697.253662][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 697.262903][T10071] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1194'. [ 697.272879][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 697.282075][T10071] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1194'. [ 697.291224][T10071] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1194'. [ 698.809913][T10084] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1199'. [ 700.358723][T10091] fuse: Unknown parameter '0xffffffffffffffffø' [ 702.024981][ T27] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 702.472453][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 702.540357][ T27] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 702.668631][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.858426][ T27] usb 4-1: config 0 descriptor?? [ 703.159922][ T27] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 703.185360][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.187179][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 703.218953][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 703.248931][ T27] usb 4-1: media controller created [ 703.336794][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.352111][T10096] ------------[ cut here ]------------ [ 703.358247][T10096] usb 4-1: BOGUS control dir, pipe 80001580 doesn't match bRequestType c0 [ 703.389933][T10096] WARNING: CPU: 0 PID: 10096 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10a1/0x17d0 [ 703.400193][T10096] Modules linked in: [ 703.404401][T10096] CPU: 0 PID: 10096 Comm: syz.3.1202 Not tainted syzkaller #0 [ 703.412381][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.422873][T10096] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 703.428742][T10096] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 703.448543][T10096] RSP: 0018:ffffc90003727870 EFLAGS: 00010246 [ 703.454675][T10096] RAX: c1ecaa124199b200 RBX: ffff88802f066800 RCX: 0000000000080000 [ 703.462784][T10096] RDX: ffffc9000d32a000 RSI: 0000000000004c02 RDI: 0000000000004c03 [ 703.470876][T10096] RBP: 1ffff11005c72aff R08: ffffc90003727467 R09: 1ffff920006e4e8c [ 703.478959][T10096] R10: dffffc0000000000 R11: fffff520006e4e8d R12: dffffc0000000000 [ 703.487072][T10096] R13: ffff88802e3957f8 R14: 0000000080001580 R15: ffff88801d3a75c8 [ 703.495234][T10096] FS: 00007ff50d0bf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 703.504228][T10096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.511156][T10096] CR2: 00007f44263b7f18 CR3: 00000000769ca000 CR4: 00000000003506f0 [ 703.519603][T10096] Call Trace: [ 703.523022][T10096] [ 703.526110][T10096] usb_start_wait_urb+0x115/0x4b0 [ 703.531210][T10096] ? usb_api_blocking_completion+0xb0/0xb0 [ 703.537204][T10096] usb_control_msg+0x233/0x3e0 [ 703.542048][T10096] dib0700_i2c_xfer+0xb92/0xf60 [ 703.547044][T10096] ? rt_mutex_slowlock+0x31f/0x5e0 [ 703.552230][T10096] ? dib0700_set_gpio+0x1f0/0x1f0 [ 703.557404][T10096] __i2c_transfer+0x868/0x2080 [ 703.562259][T10096] ? i2c_cmd+0x110/0x110 [ 703.566643][T10096] ? i2c_transfer+0x11b/0x390 [ 703.571386][T10096] i2c_transfer+0x250/0x390 [ 703.576029][T10096] ? __i2c_transfer+0x2080/0x2080 [ 703.581131][T10096] ? __might_fault+0xc6/0x120 [ 703.585990][T10096] ? __might_fault+0xaa/0x120 [ 703.590739][T10096] ? _copy_from_user+0xa5/0xe0 [ 703.595662][T10096] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 703.600667][T10096] i2cdev_ioctl+0x646/0x7e0 [ 703.605258][T10096] ? i2cdev_write+0x120/0x120 [ 703.610016][T10096] ? bpf_lsm_file_ioctl+0x9/0x10 [ 703.615292][T10096] ? security_file_ioctl+0x80/0xa0 [ 703.620485][T10096] ? i2cdev_write+0x120/0x120 [ 703.625505][T10096] __se_sys_ioctl+0xfd/0x170 [ 703.630166][T10096] do_syscall_64+0x55/0xb0 [ 703.634634][T10096] ? clear_bhb_loop+0x40/0x90 [ 703.639431][T10096] ? clear_bhb_loop+0x40/0x90 [ 703.644164][T10096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.650178][T10096] RIP: 0033:0x7ff50c18f749 [ 703.654659][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.674400][T10096] RSP: 002b:00007ff50d0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.682938][T10096] RAX: ffffffffffffffda RBX: 00007ff50c3e5fa0 RCX: 00007ff50c18f749 [ 703.691006][T10096] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 703.699100][T10096] RBP: 00007ff50c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.707188][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.715268][T10096] R13: 00007ff50c3e6038 R14: 00007ff50c3e5fa0 R15: 00007ffee17be748 [ 703.723618][T10096] [ 703.726957][T10096] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 703.734276][T10096] CPU: 0 PID: 10096 Comm: syz.3.1202 Not tainted syzkaller #0 [ 703.741780][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.751905][T10096] Call Trace: [ 703.755225][T10096] [ 703.758199][T10096] dump_stack_lvl+0x16c/0x230 [ 703.762934][T10096] ? show_regs_print_info+0x20/0x20 [ 703.768184][T10096] ? load_image+0x3b0/0x3b0 [ 703.772753][T10096] panic+0x2c0/0x710 [ 703.776709][T10096] ? bpf_jit_dump+0xd0/0xd0 [ 703.781280][T10096] __warn+0x2e0/0x470 [ 703.785326][T10096] ? usb_submit_urb+0x10a1/0x17d0 [ 703.790397][T10096] ? usb_submit_urb+0x10a1/0x17d0 [ 703.795455][T10096] report_bug+0x2be/0x4f0 [ 703.799811][T10096] ? usb_submit_urb+0x10a1/0x17d0 [ 703.804869][T10096] ? usb_submit_urb+0x10a1/0x17d0 [ 703.809926][T10096] ? usb_submit_urb+0x10a3/0x17d0 [ 703.814980][T10096] handle_bug+0xcf/0x120 [ 703.819250][T10096] exc_invalid_op+0x1a/0x50 [ 703.823789][T10096] asm_exc_invalid_op+0x1a/0x20 [ 703.828665][T10096] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 703.834339][T10096] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 703.853986][T10096] RSP: 0018:ffffc90003727870 EFLAGS: 00010246 [ 703.860098][T10096] RAX: c1ecaa124199b200 RBX: ffff88802f066800 RCX: 0000000000080000 [ 703.868091][T10096] RDX: ffffc9000d32a000 RSI: 0000000000004c02 RDI: 0000000000004c03 [ 703.876080][T10096] RBP: 1ffff11005c72aff R08: ffffc90003727467 R09: 1ffff920006e4e8c [ 703.884079][T10096] R10: dffffc0000000000 R11: fffff520006e4e8d R12: dffffc0000000000 [ 703.892077][T10096] R13: ffff88802e3957f8 R14: 0000000080001580 R15: ffff88801d3a75c8 [ 703.900105][T10096] usb_start_wait_urb+0x115/0x4b0 [ 703.905173][T10096] ? usb_api_blocking_completion+0xb0/0xb0 [ 703.911026][T10096] usb_control_msg+0x233/0x3e0 [ 703.915827][T10096] dib0700_i2c_xfer+0xb92/0xf60 [ 703.920729][T10096] ? rt_mutex_slowlock+0x31f/0x5e0 [ 703.925888][T10096] ? dib0700_set_gpio+0x1f0/0x1f0 [ 703.930956][T10096] __i2c_transfer+0x868/0x2080 [ 703.935781][T10096] ? i2c_cmd+0x110/0x110 [ 703.940074][T10096] ? i2c_transfer+0x11b/0x390 [ 703.944789][T10096] i2c_transfer+0x250/0x390 [ 703.949331][T10096] ? __i2c_transfer+0x2080/0x2080 [ 703.954477][T10096] ? __might_fault+0xc6/0x120 [ 703.959184][T10096] ? __might_fault+0xaa/0x120 [ 703.964150][T10096] ? _copy_from_user+0xa5/0xe0 [ 703.969666][T10096] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 703.974660][T10096] i2cdev_ioctl+0x646/0x7e0 [ 703.979194][T10096] ? i2cdev_write+0x120/0x120 [ 703.983904][T10096] ? bpf_lsm_file_ioctl+0x9/0x10 [ 703.988861][T10096] ? security_file_ioctl+0x80/0xa0 [ 703.994004][T10096] ? i2cdev_write+0x120/0x120 [ 703.998710][T10096] __se_sys_ioctl+0xfd/0x170 [ 704.003347][T10096] do_syscall_64+0x55/0xb0 [ 704.007790][T10096] ? clear_bhb_loop+0x40/0x90 [ 704.012496][T10096] ? clear_bhb_loop+0x40/0x90 [ 704.017200][T10096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.023122][T10096] RIP: 0033:0x7ff50c18f749 [ 704.027565][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.047200][T10096] RSP: 002b:00007ff50d0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.055638][T10096] RAX: ffffffffffffffda RBX: 00007ff50c3e5fa0 RCX: 00007ff50c18f749 [ 704.063630][T10096] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 704.071622][T10096] RBP: 00007ff50c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.079613][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.087602][T10096] R13: 00007ff50c3e6038 R14: 00007ff50c3e5fa0 R15: 00007ffee17be748 [ 704.095629][T10096] [ 704.099246][T10096] Kernel Offset: disabled [ 704.103670][T10096] Rebooting in 86400 seconds..