last executing test programs: 7.632264877s ago: executing program 1 (id=3577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x2, 0xc}, &(0x7f0000000340)='R\x10swse\x00\xdd\xff\xff\xff\xff\xff}\xf50x0}) sendto$packet(r0, &(0x7f00000003c0)="3d85f0c54ea4b2b787bc8c2bf4fc81c5f127391bb514ca18de185066116ebdc51aef84a89800b08d05a36b5321496b8493f9d616ec96f56cb91603bccf795a13adebd3d5acffa38170a5966b2e", 0x4d, 0x8000, &(0x7f00000000c0)={0x11, 0xf, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8401, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000001180)) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)=""/87, 0x57}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f00000011c0)=""/4080, 0xff0}], 0x7, &(0x7f00000009c0)=""/135, 0x87}, 0x1}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/180, 0xb4}], 0x3, &(0x7f0000000d00)=""/16, 0x10}, 0x6f}, {{&(0x7f0000000d40)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/38, 0x26}, {&(0x7f0000000e80)=""/47, 0x2f}], 0x3, &(0x7f0000000f00)=""/108, 0x6c}, 0x8}], 0x3, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 3.890811833s ago: executing program 1 (id=3594): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000040)="85", 0x1}], 0x1) 3.444012139s ago: executing program 0 (id=3598): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be004411"], 0xfdef) 3.161113439s ago: executing program 0 (id=3601): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:', @ANYRES8=r0], 0x13) 3.056611555s ago: executing program 0 (id=3604): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) gettid() open(0x0, 0xb171ee3cf630acd0, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x40080) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.99584366s ago: executing program 3 (id=3605): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b405e300000000007110100000000000b600000000000000950000000000000084603657624e9437850a1a39dddd562134bee8a93d693fe6fa29ab271fb528375fd9a24e3cf120a6a7edb342c175a6a281701a592c095306674b88627605094c5b017da11cb0c53b5d8993c93e39f7ff84466d6b85c36f65bbff1dc50aba462333a50dfdff3117333ecae469d5a7a9b4b40fdcadf2f84b4b6d0720583ba0784b8557052121023ac5069e4b5a2ff7d4b30f2ff9c47b30e41693a80de9bff417155d233b46"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x7, 0x1, 0x6, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0xe}, 0x94) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) 2.933665365s ago: executing program 3 (id=3606): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e26, 0x1, @mcast1, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.854066578s ago: executing program 3 (id=3607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.77505457s ago: executing program 4 (id=3608): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 2.756276619s ago: executing program 2 (id=3609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x180, 0x0, 0x0, 0x200000, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.672073224s ago: executing program 4 (id=3610): r0 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffffdfff, 0x101000) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x4, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10008803}, 0x0) 2.476411941s ago: executing program 2 (id=3611): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be004411"], 0xfdef) 2.399963204s ago: executing program 4 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) 2.151273202s ago: executing program 1 (id=3613): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) lseek(0xffffffffffffffff, 0x4, 0x2) 2.151014853s ago: executing program 4 (id=3614): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000fef95a17ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xe0) 2.13627761s ago: executing program 2 (id=3615): bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 2.094714699s ago: executing program 0 (id=3616): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x6}}, 0x9, 0xf, 0x5, 0x2, 0x4c, 0x11}, &(0x7f0000000580)=0x9c) 1.583592211s ago: executing program 4 (id=3617): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e26, 0x1, @mcast1, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.534249128s ago: executing program 0 (id=3618): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.353801244s ago: executing program 4 (id=3619): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x1a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) 1.335891588s ago: executing program 2 (id=3620): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 992.84819ms ago: executing program 2 (id=3621): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x2fd3c7b5bb9b32c8, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, 0x0, 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3) write$UHID_INPUT(r8, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 991.0397ms ago: executing program 1 (id=3622): r0 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffffdfff, 0x101000) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x4, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d0000", 0x3b}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10008803}, 0x0) 886.556932ms ago: executing program 1 (id=3623): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000040)="85", 0x1}], 0x1) 435.972907ms ago: executing program 3 (id=3624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcd}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0xa) 200.197724ms ago: executing program 3 (id=3625): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be004411"], 0xfdef) 96.532737ms ago: executing program 2 (id=3626): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1e000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 0s ago: executing program 3 (id=3627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r8, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000600"], 0x28}}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, 0x0, 0x80) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r12 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) kernel console output (not intermixed with test programs): arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 484.550323][ T979] usb 2-1: can't read configurations, error -22 [ 484.648618][ T979] usb usb2-port1: attempt power cycle [ 484.754139][ T5149] Bluetooth: hci5: command tx timeout [ 484.952027][T13463] binder: 13457:13463 ioctl 4018620d 0 returned -22 [ 484.960712][T13463] binder: 13457:13463 ioctl c0306201 0 returned -14 [ 485.024062][ T979] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 485.054714][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 485.060667][ T979] usb 2-1: no configurations [ 485.068091][ T979] usb 2-1: can't read configurations, error -22 [ 485.204180][ T979] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 485.235492][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 485.246627][ T979] usb 2-1: no configurations [ 485.255375][ T979] usb 2-1: can't read configurations, error -22 [ 485.269933][ T979] usb usb2-port1: unable to enumerate USB device [ 485.276791][T13399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 485.300380][T13399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 485.316977][T13399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 485.330085][T13399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 485.452361][T13399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.475696][T13399] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.497722][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.504893][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.556784][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.564004][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.692694][T13399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.839017][T13399] veth0_vlan: entered promiscuous mode [ 485.860505][T13399] veth1_vlan: entered promiscuous mode [ 486.135285][T13399] veth0_macvtap: entered promiscuous mode [ 486.145489][T13399] veth1_macvtap: entered promiscuous mode [ 486.179550][T13399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.203785][T13399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.232705][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.241830][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.256527][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.275774][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.493392][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.520343][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.620046][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 486.839876][ T5149] Bluetooth: hci5: command tx timeout [ 486.850612][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.868872][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.054156][ T5909] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 487.097869][T13511] binder: 13509:13511 ioctl 4018620d 0 returned -22 [ 487.118394][T13511] binder: 13509:13511 ioctl c0306201 0 returned -14 [ 487.204002][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 487.211130][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 487.229712][ T5909] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 487.254109][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 487.278645][ T5909] usb 4-1: Product: syz [ 487.282853][ T5909] usb 4-1: Manufacturer: syz [ 487.288062][ T5909] usb 4-1: SerialNumber: syz [ 487.303433][ T5909] usb 4-1: config 0 descriptor?? [ 487.316624][T13502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 487.503990][ T5909] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 487.538926][ T5916] usb 4-1: USB disconnect, device number 37 [ 487.675697][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 487.682354][ T5909] usb 3-1: no configurations [ 487.687161][ T5909] usb 3-1: can't read configurations, error -22 [ 487.834097][ T5909] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 488.013965][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 488.020141][ T5909] usb 3-1: no configurations [ 488.027036][ T5909] usb 3-1: can't read configurations, error -22 [ 488.035034][ T5909] usb usb3-port1: attempt power cycle [ 488.358564][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 488.410568][ T5909] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 488.510047][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 488.515496][ T5916] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 488.523747][ T5909] usb 3-1: no configurations [ 488.529442][ T5909] usb 3-1: can't read configurations, error -22 [ 488.707200][ T5909] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 488.752419][ T5916] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 488.767347][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.776581][ T5916] usb 4-1: Product: syz [ 488.781146][ T5916] usb 4-1: Manufacturer: syz [ 488.786044][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 488.791907][ T5909] usb 3-1: no configurations [ 488.797708][ T5909] usb 3-1: can't read configurations, error -22 [ 488.807905][ T5909] usb usb3-port1: unable to enumerate USB device [ 488.817918][ T5916] usb 4-1: SerialNumber: syz [ 488.852483][ T5916] usb 4-1: config 0 descriptor?? [ 488.868055][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2593'. [ 488.882791][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2593'. [ 488.901337][T13546] gretap0: entered promiscuous mode [ 488.914028][ T5149] Bluetooth: hci5: command tx timeout [ 488.931182][T13546] gretap0: left promiscuous mode [ 489.098434][ T5916] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 489.497363][T13559] binder: 13555:13559 ioctl 4018620d 0 returned -22 [ 489.515893][T13559] binder: 13555:13559 ioctl c0306201 0 returned -14 [ 489.530951][T13562] input: syz1 as /devices/virtual/input/input28 [ 489.604006][ T107] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 489.766956][ T107] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 489.775652][ T107] usb 5-1: config 0 has no interface number 0 [ 489.781830][ T107] usb 5-1: config 0 interface 236 has no altsetting 0 [ 489.792365][ T107] usb 5-1: string descriptor 0 read error: -22 [ 489.799624][ T107] usb 5-1: New USB device found, idVendor=07d1, idProduct=3a10, bcdDevice=52.31 [ 489.816287][ T107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.828215][ T107] usb 5-1: config 0 descriptor?? [ 489.843269][ T107] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 490.050848][ T107] usb 5-1: USB disconnect, device number 41 [ 490.528477][ T5916] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 490.557282][ T5916] usb 4-1: USB disconnect, device number 38 [ 490.623964][ T5909] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 490.794070][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 490.806727][ T5909] usb 2-1: config 16 has an invalid interface number: 124 but max is 0 [ 490.818431][ T5909] usb 2-1: config 16 has no interface number 0 [ 490.827584][ T5909] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 490.841777][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.856535][ T5909] usb 2-1: MBOX3: Invalid descriptor size=18. [ 490.894341][ T5916] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 490.960053][T13584] bridge0: port 3(erspan0) entered blocking state [ 490.967695][T13584] bridge0: port 3(erspan0) entered disabled state [ 490.975879][T13584] erspan0: entered allmulticast mode [ 490.992511][T13584] erspan0: entered promiscuous mode [ 490.997930][ T5149] Bluetooth: hci5: command tx timeout [ 491.008249][T13584] bridge0: port 3(erspan0) entered blocking state [ 491.015195][T13584] bridge0: port 3(erspan0) entered forwarding state [ 491.075252][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 491.090603][ T5916] usb 5-1: config 2 has an invalid interface number: 184 but max is 0 [ 491.107363][ T5916] usb 5-1: config 2 has no interface number 0 [ 491.121546][ T5916] usb 5-1: config 2 interface 184 altsetting 9 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 491.151165][ T5916] usb 5-1: config 2 interface 184 altsetting 9 endpoint 0x8A has invalid maxpacket 33703, setting to 64 [ 491.197086][ T5916] usb 5-1: config 2 interface 184 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 491.225034][ T5916] usb 5-1: config 2 interface 184 has no altsetting 0 [ 491.238049][ T5916] usb 5-1: string descriptor 0 read error: -22 [ 491.251785][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=67.c4 [ 491.270674][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.291576][ T5916] usbtest 5-1:2.184: couldn't get endpoints, -22 [ 491.316383][ T5916] usbtest 5-1:2.184: probe with driver usbtest failed with error -22 [ 491.504585][ T107] usb 5-1: USB disconnect, device number 42 [ 491.588199][ T5935] usb 2-1: USB disconnect, device number 57 [ 491.644873][T13600] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2615'. [ 491.672685][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 491.866016][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 492.257448][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2622'. [ 492.539918][T13621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2617'. [ 493.153327][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 493.421318][T13650] binder: 13646:13650 ioctl 4018620d 0 returned -22 [ 493.507479][T13650] binder: 13646:13650 ioctl c0306201 0 returned -14 [ 493.525073][T13655] loop5: detected capacity change from 0 to 7 [ 493.531851][T13655] loop5: [ 493.534960][T13655] loop5: partition table partially beyond EOD, truncated [ 494.268581][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 494.497253][T13693] syzkaller0: entered promiscuous mode [ 494.502786][T13693] syzkaller0: entered allmulticast mode [ 494.563636][T13696] binder: 13694:13696 ioctl 4018620d 0 returned -22 [ 494.575435][T13696] binder: 13694:13696 ioctl c0306201 0 returned -14 [ 494.603990][ T107] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 494.765879][ T107] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.783251][ T107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.798189][ T107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.812751][ T107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.826544][ T107] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.836403][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.847398][ T107] usb 4-1: config 0 descriptor?? [ 495.203140][T13719] syzkaller0: entered promiscuous mode [ 495.208715][T13719] syzkaller0: entered allmulticast mode [ 495.263727][ T107] usbhid 4-1:0.0: can't add hid device: -71 [ 495.271476][ T107] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 495.283271][ T107] usb 4-1: USB disconnect, device number 39 [ 495.424095][ T5935] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 495.585456][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.596553][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.607692][ T5935] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 495.616898][ T5935] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.624979][ T5935] usb 2-1: Manufacturer: syz [ 495.631475][ T5935] usb 2-1: config 0 descriptor?? [ 495.763974][ T107] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 495.924138][ T107] usb 1-1: Using ep0 maxpacket: 16 [ 495.932726][ T107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.959002][ T107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.971082][ T107] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.981023][ T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.989547][ T107] usb 1-1: Product: syz [ 495.989971][T13745] syzkaller0: entered promiscuous mode [ 495.995202][ T107] usb 1-1: Manufacturer: syz [ 496.000602][T13745] syzkaller0: entered allmulticast mode [ 496.004348][ T107] usb 1-1: SerialNumber: syz [ 496.240784][ T5935] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 496.254506][ T107] usb 1-1: 0:2 : does not exist [ 496.269684][ T107] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 496.394319][ T107] usb 1-1: USB disconnect, device number 47 [ 496.444427][T11239] udevd[11239]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.467372][ T5935] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 496.492960][ T5935] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 496.533643][ T5935] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 496.554679][ T5935] usb 2-1: USB disconnect, device number 58 [ 496.603058][ T30] audit: type=1326 audit(1765559903.726:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 496.743410][ T30] audit: type=1326 audit(1765559903.736:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.135420][ T30] audit: type=1326 audit(1765559903.736:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.236964][T13757] fido_id[13757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 497.253670][ T30] audit: type=1326 audit(1765559903.736:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.343356][ T30] audit: type=1326 audit(1765559903.736:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.509631][ T30] audit: type=1326 audit(1765559903.736:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.664034][ T30] audit: type=1326 audit(1765559903.736:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.720722][ T30] audit: type=1326 audit(1765559903.736:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.767663][ T30] audit: type=1326 audit(1765559903.736:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.818549][ T30] audit: type=1326 audit(1765559903.736:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 497.894763][ T5935] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 498.046479][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.070881][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.098008][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.124420][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.143240][ T5935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.155251][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.166870][ T5935] usb 2-1: config 0 descriptor?? [ 498.373946][ T5917] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 498.587296][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 498.599795][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 498.615753][ T5917] usb 5-1: config 4 has an invalid interface number: 52 but max is 0 [ 498.662645][ T5917] usb 5-1: config 4 has no interface number 0 [ 498.676261][ T5935] usb 2-1: USB disconnect, device number 59 [ 498.688624][ T5917] usb 5-1: config 4 interface 52 altsetting 3 endpoint 0x84 has invalid maxpacket 16, setting to 8 [ 498.806630][ T5917] usb 5-1: config 4 interface 52 altsetting 3 endpoint 0x9 has invalid maxpacket 32, setting to 0 [ 498.831280][ T5917] usb 5-1: config 4 interface 52 has no altsetting 0 [ 498.857084][ T5917] usb 5-1: string descriptor 0 read error: -22 [ 498.871553][ T5917] usb 5-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice=12.2b [ 498.939221][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.002510][ T5917] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.212351][ T5917] usb 5-1: USB disconnect, device number 43 [ 500.162089][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 500.299447][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 501.399959][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.406334][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.885682][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'. [ 502.112553][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 502.154974][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 502.195347][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 502.587665][T13854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.023974][ T5935] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 504.495837][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.526533][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 504.543970][ T5935] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 504.563558][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.604548][ T5935] usb 1-1: config 0 descriptor?? [ 504.634037][ T5909] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 504.725665][T13895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.791750][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.824268][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.845182][ T5909] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.865852][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.894189][ T5909] usb 4-1: SerialNumber: syz [ 505.121031][ T5909] usb 4-1: 0:2 : does not exist [ 505.167912][ T5909] usb 4-1: USB disconnect, device number 40 [ 505.215491][T11199] udevd[11199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.610341][T13915] netlink: 'syz.4.2735': attribute type 10 has an invalid length. [ 505.618840][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2735'. [ 506.326116][ T5935] Bluetooth: Can't get state to change to load ram patch err [ 506.355343][ T5935] Bluetooth: Loading patch file failed [ 506.362544][ T5935] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 506.399046][ T5935] usb 1-1: USB disconnect, device number 48 [ 506.902890][T13941] kvm: user requested TSC rate below hardware speed [ 506.938166][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 507.065695][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2746'. [ 508.053393][T13965] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 508.080933][T13965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2753'. [ 508.233979][ T5935] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 508.401588][ T5935] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 508.418417][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.448672][ T5935] usb 3-1: Product: syz [ 508.453053][ T5935] usb 3-1: Manufacturer: syz [ 508.494000][ T5935] usb 3-1: SerialNumber: syz [ 508.594358][ T5935] usb 3-1: config 0 descriptor?? [ 508.603231][ T5935] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 508.617410][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.635305][T13979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 508.644351][ T5935] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 508.659400][ T5935] usb 3-1: media controller created [ 508.683396][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.767268][ T5935] DVB: Unable to find symbol mt352_attach() [ 508.806958][T13964] dvb-usb: bulk message failed: -22 (7/0) [ 508.836705][ T5935] DVB: Unable to find symbol nxt6000_attach() [ 508.848950][ T5935] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 508.906592][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 508.970882][ T5935] dvb-usb: schedule remote query interval to 1000 msecs. [ 508.982725][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 508.991803][ T5935] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 509.007973][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 509.017346][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 509.025498][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 509.031364][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 509.493995][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 509.494013][ T30] audit: type=1326 audit(1765559916.356:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.510197][ T5935] usb 3-1: USB disconnect, device number 44 [ 509.573549][ T30] audit: type=1326 audit(1765559916.356:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.653914][ T30] audit: type=1326 audit(1765559916.356:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.708656][ T30] audit: type=1326 audit(1765559916.356:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.782721][ T30] audit: type=1326 audit(1765559916.356:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.795174][ T5935] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 509.869958][ T30] audit: type=1326 audit(1765559916.356:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.919977][ T30] audit: type=1326 audit(1765559916.366:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 509.948672][ T30] audit: type=1326 audit(1765559916.366:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 510.038594][ T30] audit: type=1326 audit(1765559916.366:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 510.102757][ T30] audit: type=1326 audit(1765559916.366:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 510.430056][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 510.494224][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 510.519642][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 510.742024][T14030] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.079237][ T5935] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 511.264850][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 511.287811][ T5935] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.375624][ T5935] usb 2-1: config 0 has no interface number 0 [ 511.381951][ T5935] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.418349][ T5935] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.509548][ T5935] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 511.532813][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.579949][ T5935] usb 2-1: config 0 descriptor?? [ 512.242441][ T5935] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001D/input/input30 [ 512.377680][ T5935] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001D/input/input31 [ 512.547152][ T5935] uclogic 0003:28BD:0071.001D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 512.707374][ T5935] usb 2-1: USB disconnect, device number 60 [ 512.881595][T14053] fido_id[14053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 513.374299][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 513.801305][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2797'. [ 515.080887][T14109] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 515.089627][T14109] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 515.119981][T14109] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 515.152480][T14109] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 515.181393][T14109] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 515.208633][T14109] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 515.245742][T14109] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 515.274645][T14109] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 515.293097][T14109] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 515.323432][T14109] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 515.649771][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 516.416113][T14139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 516.434403][T14132] kvm: user requested TSC rate below hardware speed [ 516.570628][T14139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 516.628116][ T5909] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 516.651946][T14139] bond2: up delay (10) is not a multiple of miimon (71), value rounded to 0 ms [ 516.671315][T14139] bond2: down delay (3) is not a multiple of miimon (71), value rounded to 0 ms [ 516.813969][ T5909] usb 5-1: device descriptor read/64, error -71 [ 517.081099][ T5909] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 517.243782][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 517.253995][ T5909] usb 5-1: device descriptor read/64, error -71 [ 517.365833][ T5909] usb usb5-port1: attempt power cycle [ 517.672286][T14162] dummy0: entered promiscuous mode [ 517.689489][T14162] bond0: entered promiscuous mode [ 517.703986][T14162] bond_slave_0: entered promiscuous mode [ 517.710019][T14162] bond_slave_1: entered promiscuous mode [ 517.716340][T14162] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 517.723943][ T5909] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 517.732239][T14162] bond0: left promiscuous mode [ 517.739094][T14162] bond_slave_0: left promiscuous mode [ 517.745503][ T5909] usb 5-1: device descriptor read/8, error -71 [ 517.764018][T14162] bond_slave_1: left promiscuous mode [ 517.773272][T14162] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 517.792721][T14162] dummy0: left promiscuous mode [ 518.034157][ T5909] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 518.075516][ T5909] usb 5-1: device descriptor read/8, error -71 [ 518.204396][ T5909] usb usb5-port1: unable to enumerate USB device [ 518.792055][T14176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 519.561450][T14192] kvm: user requested TSC rate below hardware speed [ 519.815010][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 520.374009][ T5909] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 520.555628][ T5909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 520.593260][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.613491][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.633612][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 520.668840][ T5909] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 520.696297][ T5909] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 520.716567][ T5909] usb 3-1: Manufacturer: syz [ 520.762584][ T5909] usb 3-1: config 0 descriptor?? [ 521.375218][T14216] fuse: Bad value for 'fd' [ 521.384567][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 521.397498][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 521.424195][ T5909] usb 3-1: USB disconnect, device number 45 [ 521.833828][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 522.021158][ T10] usb 5-1: device descriptor read/64, error -71 [ 522.304469][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 522.463916][ T10] usb 5-1: device descriptor read/64, error -71 [ 522.574602][ T10] usb usb5-port1: attempt power cycle [ 522.674816][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 522.983936][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 523.024784][ T10] usb 5-1: device descriptor read/8, error -71 [ 523.303955][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 523.347363][ T10] usb 5-1: device descriptor read/8, error -71 [ 523.474628][ T10] usb usb5-port1: unable to enumerate USB device [ 524.303992][ T5827] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 524.304169][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 524.385214][T14270] vxlan0: entered promiscuous mode [ 524.403895][ T6094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.412684][ T6094] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.435184][ T6094] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.453937][ T6094] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.455601][ T5827] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 524.476022][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.487479][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.498139][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 524.516612][ T5827] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 524.536623][ T5827] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 524.555266][ T5827] usb 1-1: Manufacturer: syz [ 524.569716][ T5827] usb 1-1: config 0 descriptor?? [ 524.670368][T14277] kvm: user requested TSC rate below hardware speed [ 525.838024][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 525.845923][ T5827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 525.879720][ T5827] usb 1-1: USB disconnect, device number 49 [ 526.635358][T14312] Sensor B: ================= START STATUS ================= [ 526.642975][T14312] Sensor B: Test Pattern: 75% Colorbar [ 526.704140][T14312] Sensor B: Show Information: All [ 526.724333][T14312] Sensor B: Vertical Flip: false [ 526.737095][T14312] Sensor B: Horizontal Flip: false [ 526.757643][T14312] Sensor B: Brightness: 128 [ 526.777604][T14312] Sensor B: Contrast: 128 [ 526.795269][T14312] Sensor B: Hue: 0 [ 526.810049][T14312] Sensor B: Saturation: 128 [ 526.824263][T14312] Sensor B: ================== END STATUS ================== [ 527.103985][ T5909] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 527.162017][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 527.262755][T14321] kvm: user requested TSC rate below hardware speed [ 527.362596][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 527.380642][ T5909] usb 2-1: can't read configurations, error -61 [ 527.450002][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'. [ 527.524391][ T5909] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 527.697735][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 527.724795][ T5909] usb 2-1: can't read configurations, error -61 [ 527.741776][ T5909] usb usb2-port1: attempt power cycle [ 528.026874][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 528.113984][ T5909] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 528.181128][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.190837][ T5909] usb 2-1: can't read configurations, error -61 [ 528.207837][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 528.223359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.234688][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.244919][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 528.259290][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 528.268671][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 528.268703][T14343] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 528.276919][ T10] usb 1-1: Manufacturer: syz [ 528.295157][ T10] usb 1-1: config 0 descriptor?? [ 528.354027][ T5909] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 528.389819][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.404067][ T5909] usb 2-1: can't read configurations, error -61 [ 528.410996][ T5909] usb usb2-port1: unable to enumerate USB device [ 528.421270][T14345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.731776][ T10] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 528.762762][ T10] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 529.413959][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 529.584156][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 529.596536][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 529.619399][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 529.636365][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.660344][ T10] usb 3-1: Product: syz [ 529.664778][ T10] usb 3-1: Manufacturer: syz [ 529.669492][ T10] usb 3-1: SerialNumber: syz [ 529.682198][ T10] usb 3-1: config 0 descriptor?? [ 529.694810][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 529.707176][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 529.938169][T14375] kvm: user requested TSC rate below hardware speed [ 530.467964][ T10] em28xx 3-1:0.0: chip ID is em28178 [ 530.683938][ T5827] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 530.734738][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 530.841378][T13560] usb 1-1: USB disconnect, device number 50 [ 530.870833][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 530.881761][ T10] em28xx 3-1:0.0: board has no eeprom [ 530.900931][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 530.917500][ T5827] usb 5-1: can't read configurations, error -61 [ 530.964220][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 530.972457][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 530.978501][ T5909] em28xx 3-1:0.0: Binding DVB extension [ 531.032954][ T10] usb 3-1: USB disconnect, device number 46 [ 531.094676][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 531.144362][ T5827] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 531.152250][ T5909] em28xx 3-1:0.0: Registering input extension [ 531.333962][ T5909] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 531.346369][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 531.366585][ T5827] usb 5-1: can't read configurations, error -61 [ 531.367783][ T5909] Registered IR keymap rc-empty [ 531.389627][ T5827] usb usb5-port1: attempt power cycle [ 531.416819][ T5909] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 531.456937][ T5909] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 531.511797][ T5909] em28xx 3-1:0.0: Input extension successfully initialized [ 531.539652][ T10] em28xx 3-1:0.0: Closing input extension [ 531.625123][ T10] em28xx 3-1:0.0: Freeing device [ 531.669402][T14405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.734493][ T5827] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 531.787647][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 531.817541][ T5827] usb 5-1: can't read configurations, error -61 [ 531.932945][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'. [ 531.963979][ T5827] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 531.996876][ T5827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 532.020514][ T5827] usb 5-1: can't read configurations, error -61 [ 532.036215][ T5827] usb usb5-port1: unable to enumerate USB device [ 532.115255][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 532.294130][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 532.303067][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 532.324567][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.335044][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.345777][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 532.357494][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 532.368128][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 532.377632][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.445513][ T10] usb 1-1: config 0 descriptor?? [ 532.455226][T14414] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 532.491293][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 532.883551][ T5827] usb 1-1: USB disconnect, device number 51 [ 532.891238][ T5149] Bluetooth: hci2: Opcode 0x0c03 failed: -19 [ 533.180078][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 533.296860][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 533.867444][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 534.028270][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 534.045727][T14486] tipc: Enabling of bearer rejected, failed to enable media [ 534.560614][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 535.023975][ T5827] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 535.176350][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 535.186034][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.217727][ T5827] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 535.248284][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.277558][ T5827] usb 5-1: config 0 descriptor?? [ 535.712146][ T5827] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 535.843950][ T5827] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 535.851049][ T5827] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 535.873948][ T5827] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 535.881037][ T5827] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 535.904797][ T5827] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 536.015029][ T5827] usb 5-1: USB disconnect, device number 56 [ 536.015674][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2973'. [ 537.124271][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 538.414291][T14573] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 539.537264][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 540.714060][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 540.893898][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 540.942515][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3004'. [ 540.974654][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.987514][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 541.173979][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.216129][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.260688][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.284002][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.529960][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 541.537283][ T10] usbtmc 1-1:16.0: can't read capabilities [ 541.645745][T14638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 541.842449][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 542.012701][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 542.088565][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.097691][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.107580][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.116643][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.125686][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.134723][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.143778][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.185282][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.207301][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.216413][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.225595][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.234684][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.243765][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.252843][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.375772][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.384909][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 542.447205][T14438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.456560][T14438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.460498][T14663] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 542.471992][T14438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.484714][T14438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.493375][T14438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.823079][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.945898][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.085479][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.192541][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.272182][T14665] chnl_net:caif_netlink_parms(): no params data found [ 543.591741][ T5909] usb 1-1: USB disconnect, device number 52 [ 543.621100][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.658979][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.684456][T14665] bridge_slave_0: entered allmulticast mode [ 543.704269][T14665] bridge_slave_0: entered promiscuous mode [ 543.745977][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.763437][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.784112][T14665] bridge_slave_1: entered allmulticast mode [ 543.802843][T14665] bridge_slave_1: entered promiscuous mode [ 543.903971][ T5935] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 544.037483][T14665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.077798][T14665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.114476][ T50] erspan0: left allmulticast mode [ 544.128358][ T5935] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 544.129195][ T50] erspan0: left promiscuous mode [ 544.136885][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.145576][ T50] bridge0: port 3(erspan0) entered disabled state [ 544.175431][ T5935] usb 2-1: config 0 has no interface number 0 [ 544.184348][ T5935] usb 2-1: config 0 interface 255 has no altsetting 0 [ 544.191169][ T5935] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 544.201082][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.218484][ T50] bridge_slave_1: left allmulticast mode [ 544.227092][ T50] bridge_slave_1: left promiscuous mode [ 544.237908][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.257236][ T5935] usb 2-1: config 0 descriptor?? [ 544.301604][ T50] bridge_slave_0: left allmulticast mode [ 544.312618][ T50] bridge_slave_0: left promiscuous mode [ 544.325027][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.491142][ T5935] usb 2-1: USB disconnect, device number 65 [ 544.514161][T14438] Bluetooth: hci2: command tx timeout [ 544.957139][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.968836][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.978811][ T50] bond0 (unregistering): Released all slaves [ 545.001684][ T50] bond1 (unregistering): Released all slaves [ 545.140848][ T50] bond2 (unregistering): Released all slaves [ 545.153268][T14735] program syz.1.3049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.214672][ T5935] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 545.310247][ T50] bond3 (unregistering): Released all slaves [ 545.335532][ T50] bond4 (unregistering): Released all slaves [ 545.373996][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 545.420068][ T5935] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 545.432039][ T50] tipc: Left network mode [ 545.448056][T14665] team0: Port device team_slave_0 added [ 545.457299][ T5935] usb 1-1: config 0 has no interface number 0 [ 545.464479][ T5935] usb 1-1: config 0 interface 184 has no altsetting 0 [ 545.482509][T14665] team0: Port device team_slave_1 added [ 545.525205][ T5935] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 545.569178][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.592781][ T5935] usb 1-1: Product: syz [ 545.613261][ T5935] usb 1-1: Manufacturer: syz [ 545.629579][ T5935] usb 1-1: SerialNumber: syz [ 545.697190][ T5935] usb 1-1: config 0 descriptor?? [ 545.712980][ T5935] smsc75xx v1.0.0 [ 545.809012][T14665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.844332][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.930250][T14665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.017164][T14750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.074082][T14665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.111585][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.176917][T14665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.298928][ T50] hsr_slave_0: left promiscuous mode [ 546.343571][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.594352][T14438] Bluetooth: hci2: command tx timeout [ 546.623995][ T5909] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 546.818837][ T5909] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 546.842778][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.861435][ T5909] usb 2-1: config 0 has no interface number 0 [ 546.871576][ T5909] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.885704][ T5909] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 546.896585][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.937839][ T5909] usb 2-1: config 0 descriptor?? [ 546.966705][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 546.984453][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 546.995065][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 547.005902][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 547.016537][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 547.027146][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 547.037295][ T5935] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 547.059183][ T5935] usb 1-1: USB disconnect, device number 53 [ 547.142043][ T50] team0 (unregistering): Port device team_slave_1 removed [ 547.170397][ T5909] usb 2-1: string descriptor 0 read error: -71 [ 547.208718][ T5909] usb 2-1: USB disconnect, device number 66 [ 547.216684][ T50] team0 (unregistering): Port device team_slave_0 removed [ 547.755598][T14665] hsr_slave_0: entered promiscuous mode [ 547.762444][T14665] hsr_slave_1: entered promiscuous mode [ 547.781476][T14665] debugfs: 'hsr0' already exists in 'hsr' [ 547.793530][T14665] Cannot create hsr debugfs directory [ 547.822168][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'. [ 548.674171][T14438] Bluetooth: hci2: command tx timeout [ 549.116531][T14665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.155666][T14665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.175437][T14665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.211781][T14665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.423917][ T5909] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 549.605941][ T5909] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 549.616044][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.700035][ T5909] usb 4-1: config 0 has no interface number 0 [ 549.711417][ T5909] usb 4-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.766290][ T5909] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 549.799393][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.825732][T14665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.844784][ T5909] usb 4-1: config 0 descriptor?? [ 549.896917][T14665] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.928862][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.936096][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.986336][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.993516][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.027684][T14854] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3083'. [ 550.061176][ T5909] usb 4-1: string descriptor 0 read error: -71 [ 550.068160][T14854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 550.102325][ T5909] usb 4-1: USB disconnect, device number 41 [ 550.292552][T14665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.382906][T14665] veth0_vlan: entered promiscuous mode [ 550.426073][T14665] veth1_vlan: entered promiscuous mode [ 550.455499][T14870] vxcan1: entered promiscuous mode [ 550.517578][T14665] veth0_macvtap: entered promiscuous mode [ 550.537882][T14665] veth1_macvtap: entered promiscuous mode [ 550.586318][T14665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.629595][T14665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.662001][ T6027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.684918][ T6027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.719857][ T6027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.748782][ T6027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.757866][T14438] Bluetooth: hci2: command tx timeout [ 551.002978][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.035108][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.125162][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.144645][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.599295][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.609315][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.627310][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.641123][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.658020][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.723922][T13560] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 552.965939][T13560] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 552.976747][T13560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.010922][T13560] usb 2-1: config 0 has no interface number 0 [ 553.036631][T13560] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.215726][T13560] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 553.283622][T13560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.380912][T13560] usb 2-1: config 0 descriptor?? [ 553.596674][T13560] usb 2-1: string descriptor 0 read error: -71 [ 553.619825][T13560] usb 2-1: USB disconnect, device number 67 [ 553.670873][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.802384][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.814202][ T5935] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 553.855141][T14925] chnl_net:caif_netlink_parms(): no params data found [ 553.919282][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.984413][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 553.993556][ T5935] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 554.009308][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.027059][ T5935] usb 4-1: Product: syz [ 554.031256][ T5935] usb 4-1: Manufacturer: syz [ 554.036368][ T5935] usb 4-1: SerialNumber: syz [ 554.042775][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.044904][ T5935] usb 4-1: config 0 descriptor?? [ 554.131868][T14925] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.139220][T14925] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.147987][T14925] bridge_slave_0: entered allmulticast mode [ 554.157767][T14925] bridge_slave_0: entered promiscuous mode [ 554.168942][T14925] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.176610][T14925] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.184303][T14925] bridge_slave_1: entered allmulticast mode [ 554.192380][T14925] bridge_slave_1: entered promiscuous mode [ 554.356210][T14925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.380945][T14925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.465989][ T5935] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 554.485559][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.499818][ T5935] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 554.509720][ T5935] usb 4-1: media controller created [ 554.570344][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.587991][T14925] team0: Port device team_slave_0 added [ 554.632759][T14925] team0: Port device team_slave_1 added [ 554.666970][ T5935] zl10353_read_register: readreg error (reg=127, ret==0) [ 554.682665][ T5935] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 554.702432][ T5935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 554.727940][ T5935] usb 4-1: USB disconnect, device number 42 [ 554.755237][T14438] Bluetooth: hci4: command tx timeout [ 554.799280][ T144] erspan0: left allmulticast mode [ 554.804992][ T5935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 554.835615][ T144] erspan0: left promiscuous mode [ 554.856990][ T144] bridge0: port 1(erspan0) entered disabled state [ 555.378322][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 555.378342][ T30] audit: type=1326 audit(1765559962.506:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 555.599704][ T30] audit: type=1326 audit(1765559962.506:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 555.780120][ T30] audit: type=1326 audit(1765559962.506:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 555.833099][ T144] team0: Port device geneve0 removed [ 555.862846][ T30] audit: type=1326 audit(1765559962.506:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 555.887053][ T5935] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 555.897459][ T30] audit: type=1326 audit(1765559962.506:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 555.961338][ T30] audit: type=1326 audit(1765559962.506:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 556.125442][ T30] audit: type=1326 audit(1765559962.506:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 556.155450][ T5935] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 556.190472][ T5935] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 556.209515][ T5935] usb 5-1: config 0 has no interface number 0 [ 556.223116][ T30] audit: type=1326 audit(1765559962.506:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 556.245966][ T5935] usb 5-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.266807][ T5935] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 556.343986][ T30] audit: type=1326 audit(1765559962.506:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 556.375129][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.401600][ T5935] usb 5-1: config 0 descriptor?? [ 556.443135][ T30] audit: type=1326 audit(1765559962.506:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.0.3115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 556.568058][ T144] team0: Port device bond0 removed [ 556.588656][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.621036][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.631409][ T5935] usb 5-1: USB disconnect, device number 57 [ 556.645858][ T144] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 556.716153][ T144] bond0 (unregistering): Released all slaves [ 556.778873][T14925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.794086][T14925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.830161][T14925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.850349][T14438] Bluetooth: hci4: command tx timeout [ 556.870193][T14925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.881008][T14925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.908082][T14925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.982866][T14925] hsr_slave_0: entered promiscuous mode [ 557.005343][T14925] hsr_slave_1: entered promiscuous mode [ 557.011787][T14925] debugfs: 'hsr0' already exists in 'hsr' [ 557.025608][T14925] Cannot create hsr debugfs directory [ 557.344363][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 557.431755][T15024] fuse: Bad value for 'fd' [ 557.509523][T15029] tipc: Started in network mode [ 557.515625][T15029] tipc: Node identity 84e, cluster identity 4711 [ 557.521970][T15029] tipc: Node number set to 2126 [ 557.595224][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 557.608073][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 557.623906][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.641980][ T10] usb 2-1: Product: syz [ 557.652683][ T10] usb 2-1: Manufacturer: syz [ 557.745347][ T10] usb 2-1: SerialNumber: syz [ 557.771941][ T10] usb 2-1: config 0 descriptor?? [ 558.175460][T14925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 558.199720][T14925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 558.208558][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 558.231224][T14925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 558.245647][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.270178][T14925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 558.330610][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 558.365322][ T10] usb 2-1: media controller created [ 558.417311][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.460464][ T144] tipc: Left network mode [ 558.625148][ T5935] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 558.681107][ T144] hsr_slave_0: left promiscuous mode [ 558.697255][ T144] hsr_slave_1: left promiscuous mode [ 558.708822][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.735575][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.790613][ T5935] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 558.813436][ T5935] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 558.838841][ T5935] usb 1-1: config 0 has no interface number 0 [ 558.856826][ T5935] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.893072][ T5935] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 558.914215][T14438] Bluetooth: hci4: command tx timeout [ 558.919961][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.948260][ T5935] usb 1-1: config 0 descriptor?? [ 558.960593][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 558.977319][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 558.988560][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 559.008361][ T10] usb 2-1: USB disconnect, device number 68 [ 559.084927][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 559.163781][ T5935] usb 1-1: USB disconnect, device number 54 [ 559.181566][T15071] fuse: Unknown parameter '0x0000000000000003' [ 559.601610][T15089] binfmt_misc: register: failed to install interpreter file . [ 559.902609][T15093] fuse: Unknown parameter '0x0000000000000003' [ 559.944322][ T144] team0 (unregistering): Port device team_slave_1 removed [ 560.051187][ T144] team0 (unregistering): Port device team_slave_0 removed [ 560.293980][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 560.444895][T15107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3159'. [ 560.474090][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 560.483455][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 560.514095][ T10] usb 1-1: config 0 has no interface number 0 [ 560.537671][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.556200][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 560.570293][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.581708][ T10] usb 1-1: Product: syz [ 560.585959][ T10] usb 1-1: Manufacturer: syz [ 560.590664][ T10] usb 1-1: SerialNumber: syz [ 560.648109][ T10] usb 1-1: config 0 descriptor?? [ 560.662585][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 560.704421][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 560.749735][T15116] fuse: Unknown parameter '0x0000000000000003' [ 560.924462][ T5935] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 561.004196][T14438] Bluetooth: hci4: command tx timeout [ 561.071708][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 561.089326][ T5935] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 561.108642][ T5935] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 561.145772][ T5935] usb 5-1: config 0 has no interface number 0 [ 561.158739][ T5935] usb 5-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.181254][ T5935] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 561.190936][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.201802][ T5935] usb 5-1: config 0 descriptor?? [ 561.338602][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 561.364047][ T5935] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 561.387818][T14925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.445623][ T5916] usb 5-1: USB disconnect, device number 58 [ 561.446100][T14925] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.471663][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.478909][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.529597][ T5935] usb 2-1: config 0 has no interfaces? [ 561.535959][ T5935] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 561.563939][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.577359][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.584566][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.588262][ T5935] usb 2-1: config 0 descriptor?? [ 561.623566][ T144] IPVS: stop unused estimator thread 0... [ 561.774837][T14925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.881399][ T5935] usb 2-1: USB disconnect, device number 69 [ 561.920937][T14925] veth0_vlan: entered promiscuous mode [ 561.961627][T14925] veth1_vlan: entered promiscuous mode [ 562.068850][T14925] veth0_macvtap: entered promiscuous mode [ 562.092376][T14925] veth1_macvtap: entered promiscuous mode [ 562.157894][T14925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.199745][T14925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.208276][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 562.243502][T15099] em28xx 1-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 562.258394][T12722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.267197][ T10] em28xx 1-1:0.132: board has no eeprom [ 562.290227][T12722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.308979][T12722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.332492][T12722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.344287][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 562.464615][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 562.482976][ T5834] em28xx 1-1:0.132: Registering V4L2 extension [ 562.503236][ T10] usb 1-1: USB disconnect, device number 55 [ 562.541840][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 562.721634][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.745679][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.856196][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.862555][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.872197][ T5834] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 562.888961][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.906245][ T5834] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 562.913672][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.921509][ T5834] em28xx 1-1:0.132: No AC97 audio processor [ 562.938729][ T5834] usb 1-1: Decoder not found [ 562.971210][ T5834] em28xx 1-1:0.132: failed to create media graph [ 562.990582][ T5834] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 563.010035][ T5834] em28xx 1-1:0.132: Remote control support is not available for this card. [ 563.021792][ T10] em28xx 1-1:0.132: Closing input extension [ 563.051795][ T10] em28xx 1-1:0.132: Freeing device [ 563.070723][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'. [ 563.084907][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'. [ 563.897443][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.907406][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.915467][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.923385][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.931086][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.034742][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 564.151717][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3185'. [ 564.216844][ T10] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 564.225404][ T10] usb 1-1: config 0 has no interface number 0 [ 564.234246][ T10] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.250039][ T10] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 564.259395][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.272269][ T10] usb 1-1: config 0 descriptor?? [ 564.331740][T15198] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 564.427915][T15187] chnl_net:caif_netlink_parms(): no params data found [ 564.518820][ T10] usb 1-1: USB disconnect, device number 56 [ 564.983720][T15211] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3191'. [ 565.493061][T15187] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.542678][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.555192][T15187] bridge_slave_0: entered allmulticast mode [ 565.574638][T15187] bridge_slave_0: entered promiscuous mode [ 565.645686][T15187] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.791594][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.806397][T15187] bridge_slave_1: entered allmulticast mode [ 565.822268][T15187] bridge_slave_1: entered promiscuous mode [ 565.997937][T12722] erspan0: left allmulticast mode [ 566.009781][T12722] erspan0: left promiscuous mode [ 566.021379][T12722] bridge0: port 1(erspan0) entered disabled state [ 566.034053][T14438] Bluetooth: hci3: command tx timeout [ 566.065913][T12722] bridge_slave_1: left allmulticast mode [ 566.071600][T12722] bridge_slave_1: left promiscuous mode [ 566.079000][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.784576][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3200'. [ 566.793629][T15242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3200'. [ 566.840988][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3201'. [ 566.882591][T12722] team0: Port device geneve0 removed [ 567.108177][T12722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.118618][T12722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.127988][T12722] bond0 (unregistering): Released all slaves [ 567.145195][T15187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.224190][T15187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.382821][T15187] team0: Port device team_slave_0 added [ 567.420115][T15187] team0: Port device team_slave_1 added [ 567.517269][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'. [ 567.518503][T15187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.550310][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.576148][T15264] netlink: 'syz.2.3209': attribute type 72 has an invalid length. [ 567.612863][T15187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.613911][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3209'. [ 567.635772][T15187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.661190][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.708794][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3212'. [ 567.714449][T15187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.718080][T15268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3212'. [ 567.854680][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3214'. [ 567.909811][T15187] hsr_slave_0: entered promiscuous mode [ 567.924556][T15187] hsr_slave_1: entered promiscuous mode [ 567.933220][T15187] debugfs: 'hsr0' already exists in 'hsr' [ 567.943859][T15187] Cannot create hsr debugfs directory [ 568.114490][T14438] Bluetooth: hci3: command tx timeout [ 568.445877][T15302] netlink: 'syz.2.3224': attribute type 72 has an invalid length. [ 568.453734][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3224'. [ 568.513518][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3226'. [ 568.716412][T12722] tipc: Left network mode [ 569.593095][T12722] hsr_slave_0: left promiscuous mode [ 569.614117][T12722] hsr_slave_1: left promiscuous mode [ 569.631138][T12722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.193979][T14438] Bluetooth: hci3: command tx timeout [ 570.501427][T12722] team0 (unregistering): Port device team_slave_1 removed [ 570.549775][T12722] team0 (unregistering): Port device team_slave_0 removed [ 571.024410][T15187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 571.065270][T15187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 571.098865][T15187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 571.147307][T15187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 571.379873][T15187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.421085][T15187] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.451864][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.459078][T12724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.467191][ T5827] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 571.506080][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.513233][T12724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.604433][ T5827] usb 1-1: device descriptor read/64, error -71 [ 571.657910][T15187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.854529][ T5827] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 571.864669][T15187] veth0_vlan: entered promiscuous mode [ 571.870973][T15405] __nla_validate_parse: 3 callbacks suppressed [ 571.870988][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3259'. [ 571.898056][T15187] veth1_vlan: entered promiscuous mode [ 571.918943][T15405] macvtap1: entered promiscuous mode [ 571.926138][T15405] vlan0: entered promiscuous mode [ 571.931607][T15405] macvtap1: entered allmulticast mode [ 571.937329][T15405] vlan0: entered allmulticast mode [ 571.945820][T15405] veth0_vlan: entered allmulticast mode [ 571.988986][T15187] veth0_macvtap: entered promiscuous mode [ 571.994149][ T5827] usb 1-1: device descriptor read/64, error -71 [ 572.010688][T15187] veth1_macvtap: entered promiscuous mode [ 572.039220][T15187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.061829][T15187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.092421][T12724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.104667][ T5827] usb usb1-port1: attempt power cycle [ 572.110228][T12724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.136568][T12724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.154439][T12724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.274673][T14438] Bluetooth: hci3: command tx timeout [ 572.347337][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.364635][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.385465][T15416] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3262'. [ 572.404914][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.424273][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.450161][T15418] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3263'. [ 572.473944][ T5827] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 572.506633][ T5827] usb 1-1: device descriptor read/8, error -71 [ 572.570603][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 572.604145][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 572.755799][ T5827] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 572.794524][ T5827] usb 1-1: device descriptor read/8, error -71 [ 572.914397][ T5827] usb usb1-port1: unable to enumerate USB device [ 572.979276][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.996336][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.004407][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.012474][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.020272][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.131617][T15442] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3273'. [ 573.450631][T15447] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3275'. [ 574.089269][T15441] chnl_net:caif_netlink_parms(): no params data found [ 574.387667][T15475] tipc: Started in network mode [ 574.392563][T15475] tipc: Node identity 84e, cluster identity 4711 [ 574.419196][T15475] tipc: Node number set to 2126 [ 574.569578][T15477] bridge0: port 3(erspan0) entered blocking state [ 574.621907][T15477] bridge0: port 3(erspan0) entered disabled state [ 574.631481][T15477] erspan0: entered allmulticast mode [ 574.696712][T15477] erspan0: entered promiscuous mode [ 574.708884][T15477] bridge0: port 3(erspan0) entered blocking state [ 574.715544][T15477] bridge0: port 3(erspan0) entered forwarding state [ 574.807276][T15441] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.820874][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.837743][T15441] bridge_slave_0: entered allmulticast mode [ 574.848470][T15441] bridge_slave_0: entered promiscuous mode [ 574.906507][T15441] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.936891][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.945572][T15441] bridge_slave_1: entered allmulticast mode [ 574.964117][T15441] bridge_slave_1: entered promiscuous mode [ 575.147116][T15441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.163965][T14438] Bluetooth: hci0: command tx timeout [ 575.177141][ T73] erspan0: left allmulticast mode [ 575.182382][ T73] erspan0: left promiscuous mode [ 575.189394][ T73] bridge0: port 3(erspan0) entered disabled state [ 575.214286][ T73] bridge_slave_1: left allmulticast mode [ 575.225675][ T73] bridge_slave_1: left promiscuous mode [ 575.243544][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3294'. [ 575.271051][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.284854][ T73] bridge_slave_0: left allmulticast mode [ 575.290600][ T73] bridge_slave_0: left promiscuous mode [ 575.296400][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.928172][ T73] bond1 (unregistering): (slave geneve2): Releasing active interface [ 575.986237][ T73] team0: Port device geneve0 removed [ 576.028097][ T73] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 576.294314][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.305034][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.315160][ T73] bond0 (unregistering): Released all slaves [ 576.324667][T15518] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 576.334558][T15518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 576.438313][ T73] bond1 (unregistering): Released all slaves [ 576.453187][ T73] bond2 (unregistering): Released all slaves [ 576.468477][T15441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.480289][T15508] tipc: Started in network mode [ 576.486194][T15508] tipc: Node identity 84e, cluster identity 4711 [ 576.492772][T15508] tipc: Node number set to 2126 [ 576.569854][T15518] team0: Port device geneve0 added [ 576.669199][T15441] team0: Port device team_slave_0 added [ 576.670825][T15524] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3302'. [ 576.687717][T15441] team0: Port device team_slave_1 added [ 576.792359][T15441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.810996][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.849485][T15441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.866135][T15441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.873192][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.918949][T15441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.063719][T15441] hsr_slave_0: entered promiscuous mode [ 577.071742][T15441] hsr_slave_1: entered promiscuous mode [ 577.090990][T15441] debugfs: 'hsr0' already exists in 'hsr' [ 577.100778][T15441] Cannot create hsr debugfs directory [ 577.255506][T14438] Bluetooth: hci0: command tx timeout [ 578.068055][ T73] : left promiscuous mode [ 578.246463][T15563] __nla_validate_parse: 1 callbacks suppressed [ 578.246481][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3315'. [ 578.324296][T15563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3315'. [ 578.855374][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 578.976476][T15583] netlink: 'syz.4.3321': attribute type 10 has an invalid length. [ 579.000963][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3321'. [ 579.102767][T15583] team0: Port device geneve0 added [ 579.226476][ T73] hsr_slave_0: left promiscuous mode [ 579.274088][ T73] hsr_slave_1: left promiscuous mode [ 579.287653][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.309005][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.323899][T14438] Bluetooth: hci0: command tx timeout [ 579.331540][ T73] vlan0: left allmulticast mode [ 579.340032][ T73] veth0_vlan: left allmulticast mode [ 579.408130][ T73] vlan0: left promiscuous mode [ 579.736379][T15606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 579.767151][T15606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3327'. [ 580.487778][ T73] team0 (unregistering): Port device team_slave_1 removed [ 580.525375][ T73] team0 (unregistering): Port device team_slave_0 removed [ 581.095182][T15441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 581.138670][T15441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 581.181049][T15441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 581.227022][T15441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 581.336069][T15645] netlink: 'syz.4.3338': attribute type 10 has an invalid length. [ 581.353957][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3338'. [ 581.396098][T14438] Bluetooth: hci0: command tx timeout [ 581.436108][T15650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3341'. [ 581.449347][T15650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3341'. [ 581.600079][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.676810][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.701193][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.708443][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.739449][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.746672][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.915255][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.000936][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 582.059506][T15441] veth0_vlan: entered promiscuous mode [ 582.089241][T15441] veth1_vlan: entered promiscuous mode [ 582.152733][T15441] veth0_macvtap: entered promiscuous mode [ 582.198077][T15441] veth1_macvtap: entered promiscuous mode [ 582.261259][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.312931][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.329362][ T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.367457][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.468137][ T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.494560][ T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.708469][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.762009][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.801903][T15690] input: syz0 as /devices/virtual/input/input34 [ 582.905281][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.913305][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.531120][T15705] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 583.687081][T15707] syz_tun: entered allmulticast mode [ 584.434069][T15682] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 584.633509][T15682] usb 1-1: Using ep0 maxpacket: 32 [ 584.679229][T15682] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 584.689769][T15682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.702214][T15682] usb 1-1: config 0 descriptor?? [ 584.917890][T15682] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 584.938218][T15682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 584.973471][T15682] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 585.001312][T15682] usb 1-1: media controller created [ 585.041637][T15682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.122219][T15682] az6027: usb out operation failed. (-71) [ 585.141805][T15682] az6027: usb out operation failed. (-71) [ 585.165448][T15682] stb0899_attach: Driver disabled by Kconfig [ 585.178148][T15682] az6027: no front-end attached [ 585.178148][T15682] [ 585.189752][T15682] az6027: usb out operation failed. (-71) [ 585.198808][T15682] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 585.302588][T15682] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 585.377477][T15682] dvb-usb: schedule remote query interval to 400 msecs. [ 585.541630][T15682] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 585.587897][T15682] usb 1-1: USB disconnect, device number 61 [ 585.733383][T15682] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 585.908418][T15749] delete_channel: no stack [ 586.242316][T15755] __nla_validate_parse: 1 callbacks suppressed [ 586.242334][T15755] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3385'. [ 586.263976][ T5909] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 586.652895][ T5909] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.720259][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.734902][ T5909] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 586.790972][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.804398][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 586.847415][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.962578][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3390'. [ 586.988984][T15749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 587.043061][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.860374][T15786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3398'. [ 588.250731][T15798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3402'. [ 588.395140][T15798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3402'. [ 588.642174][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 588.862967][T14884] usb 4-1: USB disconnect, device number 43 [ 589.159044][T15813] binder: 15811:15813 ioctl 4018620d 0 returned -22 [ 589.189393][T15813] binder: 15811:15813 ioctl c0306201 0 returned -14 [ 589.197266][T15818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3410'. [ 589.839179][T15845] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3421'. [ 589.906800][T15845] netlink: 'syz.0.3421': attribute type 10 has an invalid length. [ 589.915388][T15845] bridge0: port 4(netdevsim0) entered blocking state [ 589.925705][T15845] bridge0: port 4(netdevsim0) entered disabled state [ 589.934045][T15845] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 589.945595][T15845] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 589.981273][T15845] bridge0: port 4(netdevsim0) entered blocking state [ 589.988155][T15845] bridge0: port 4(netdevsim0) entered forwarding state [ 590.017910][T15846] bridge0: port 3(erspan0) entered blocking state [ 590.030418][T15846] bridge0: port 3(erspan0) entered disabled state [ 590.042311][T15846] erspan0: entered allmulticast mode [ 590.177394][T15846] erspan0: entered promiscuous mode [ 590.214153][T15846] bridge0: port 3(erspan0) entered blocking state [ 590.220747][T15846] bridge0: port 3(erspan0) entered forwarding state [ 590.308606][T15856] syz_tun (unregistering): left allmulticast mode [ 591.530096][T15879] binder: 15875:15879 ioctl 4018620d 0 returned -22 [ 591.544430][T15879] binder: 15875:15879 ioctl c0306201 0 returned -14 [ 592.040089][T15900] __nla_validate_parse: 1 callbacks suppressed [ 592.040103][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 592.075173][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 592.086143][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 592.095698][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 592.109552][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 592.555222][T14884] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 592.746067][T14884] usb 3-1: Using ep0 maxpacket: 16 [ 592.765760][T14884] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 592.796753][T14884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.806867][T14884] usb 3-1: Product: syz [ 592.812717][T14884] usb 3-1: Manufacturer: syz [ 592.886923][T14884] usb 3-1: SerialNumber: syz [ 593.006519][T14884] usb 3-1: config 0 descriptor?? [ 593.015303][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 593.658843][T14884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 593.835061][T14884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.847306][T14884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 593.866651][T14884] usb 3-1: media controller created [ 593.939118][T14884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.984594][T14884] zl10353_read_register: readreg error (reg=127, ret==0) [ 594.010605][T14884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 594.023890][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 594.100489][T14884] usb 3-1: USB disconnect, device number 47 [ 594.204398][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 594.259963][T15940] binder: 15935:15940 ioctl 4018620d 0 returned -22 [ 594.278316][T15940] binder: 15935:15940 ioctl c0306201 0 returned -14 [ 594.349456][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 594.371898][T15944] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3456'. [ 594.579925][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 594.589971][ T30] audit: type=1326 audit(1765560001.706:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.630738][ T30] audit: type=1326 audit(1765560001.706:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.672920][ T30] audit: type=1326 audit(1765560001.706:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.711017][ T30] audit: type=1326 audit(1765560001.706:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.741482][ T30] audit: type=1326 audit(1765560001.706:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.766495][ T30] audit: type=1326 audit(1765560001.706:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.797081][ T30] audit: type=1326 audit(1765560001.706:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.833596][T15955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3460'. [ 594.867679][ T30] audit: type=1326 audit(1765560001.716:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.901563][ T30] audit: type=1326 audit(1765560001.716:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.975479][ T30] audit: type=1326 audit(1765560001.716:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.4.3457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 594.984166][T15959] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 595.434313][ T5827] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 595.662385][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.684269][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.694825][ T5827] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 595.705275][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.722704][ T5827] usb 1-1: config 0 descriptor?? [ 595.736914][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3467'. [ 596.140903][ T5827] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 596.178988][ T5827] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 596.194785][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 596.338808][ T5827] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 596.364076][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 596.388567][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 596.426982][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.470865][ T24] usb 4-1: Product: syz [ 596.487811][ T24] usb 4-1: Manufacturer: syz [ 596.508030][ T24] usb 4-1: SerialNumber: syz [ 596.536350][ T24] usb 4-1: config 0 descriptor?? [ 596.981304][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 596.983115][T15963] cp2112 0003:10C4:EA90.0020: Error starting transaction: -38 [ 597.003983][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 597.019197][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 597.047851][ T24] usb 4-1: media controller created [ 597.055024][ T5827] cp2112 0003:10C4:EA90.0020: error reading lock byte: -71 [ 597.070910][T15993] binder: 15990:15993 ioctl 4018620d 0 returned -22 [ 597.078717][T15993] binder: 15990:15993 ioctl c0306201 0 returned -14 [ 597.123966][ T5827] usb 1-1: USB disconnect, device number 62 [ 597.165690][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.285305][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 597.293377][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 597.306361][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 597.341519][ T24] usb 4-1: USB disconnect, device number 44 [ 597.455685][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 597.886204][T15995] bridge0: port 3(erspan0) entered blocking state [ 597.892745][T15995] bridge0: port 3(erspan0) entered disabled state [ 597.900663][T15995] erspan0: entered allmulticast mode [ 597.914882][T15995] erspan0: entered promiscuous mode [ 597.925617][T15995] bridge0: port 3(erspan0) entered blocking state [ 597.932190][T15995] bridge0: port 3(erspan0) entered forwarding state [ 599.042455][T16023] __nla_validate_parse: 1 callbacks suppressed [ 599.042503][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 599.200112][T16029] binder: 16027:16029 ioctl 4018620d 0 returned -22 [ 599.213933][T14884] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 599.224819][T16029] binder: 16027:16029 ioctl c0306201 0 returned -14 [ 599.433899][T14884] usb 1-1: Using ep0 maxpacket: 16 [ 599.445301][T14884] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 599.455599][T14884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.518786][T14884] usb 1-1: Product: syz [ 599.537297][T14884] usb 1-1: Manufacturer: syz [ 599.548657][T14884] usb 1-1: SerialNumber: syz [ 599.556935][T16034] program syz.2.3488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.578226][T14884] usb 1-1: config 0 descriptor?? [ 600.006020][T14884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 600.046792][T14884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 600.068210][T14884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 600.099406][T14884] usb 1-1: media controller created [ 600.147166][T14884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.214308][T14884] zl10353_read_register: readreg error (reg=127, ret==0) [ 600.234341][T14884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 600.245828][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 600.286011][T14884] usb 1-1: USB disconnect, device number 63 [ 600.381999][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 600.389251][T16055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'. [ 600.403739][T16055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3500'. [ 600.497395][T16062] misc userio: Can't change port type on an already running userio instance [ 600.612075][T16069] binder: 16063:16069 ioctl 4018620d 0 returned -22 [ 600.622392][T16069] binder: 16063:16069 ioctl c0306201 0 returned -14 [ 602.090087][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3517'. [ 602.558902][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 602.735878][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 602.748530][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 603.576695][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.610618][ T24] usb 2-1: Product: syz [ 603.648745][ T24] usb 2-1: Manufacturer: syz [ 603.657207][ T24] usb 2-1: SerialNumber: syz [ 603.681647][ T24] usb 2-1: config 0 descriptor?? [ 603.709241][T16128] binder: 16126:16128 ioctl 4018620d 0 returned -22 [ 603.735368][T16128] binder: 16126:16128 ioctl c0306201 0 returned -14 [ 604.020140][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 604.097460][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 604.121321][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.143746][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 604.168552][ T24] usb 2-1: media controller created [ 604.194744][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.298508][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 604.311578][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 604.321539][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 604.353444][ T24] usb 2-1: USB disconnect, device number 70 [ 604.398832][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 604.425379][T16144] ucma_write: process 276 (syz.4.3533) changed security contexts after opening file descriptor, this is not allowed. [ 604.659109][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 605.319645][T16172] delete_channel: no stack [ 605.714187][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 605.724281][T16179] binder: 16176:16179 ioctl 4018620d 0 returned -22 [ 605.731358][T16179] binder: 16176:16179 ioctl c0306201 0 returned -14 [ 605.949472][T14438] Bluetooth: hci5: command 0x0406 tx timeout [ 605.966193][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.979709][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.991877][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.001433][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.165957][T16172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.183783][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.448086][ T107] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 606.624866][ T107] usb 4-1: Using ep0 maxpacket: 16 [ 606.629996][T16196] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3554'. [ 606.700277][ T107] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 606.712266][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.730276][ T107] usb 4-1: Product: syz [ 606.736795][ T107] usb 4-1: Manufacturer: syz [ 606.748184][ T107] usb 4-1: SerialNumber: syz [ 606.786631][ T107] usb 4-1: config 0 descriptor?? [ 607.328386][ T107] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 607.352462][ T107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.388300][ T107] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 607.433322][ T107] usb 4-1: media controller created [ 607.458710][ T107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.555634][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 607.555652][ T30] audit: type=1326 audit(1765560014.676:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 607.799228][ T30] audit: type=1326 audit(1765560014.676:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 607.844426][ T107] zl10353_read_register: readreg error (reg=127, ret==0) [ 607.865557][ T30] audit: type=1326 audit(1765560014.676:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 607.866606][ T107] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 607.933951][ T107] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 607.959176][ T30] audit: type=1326 audit(1765560014.676:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 607.983132][ T30] audit: type=1326 audit(1765560014.686:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.016292][ T107] usb 4-1: USB disconnect, device number 45 [ 608.107278][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'. [ 608.122615][ T30] audit: type=1326 audit(1765560014.686:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.158056][ T30] audit: type=1326 audit(1765560014.686:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.201330][ T30] audit: type=1326 audit(1765560014.686:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.227414][ T30] audit: type=1326 audit(1765560014.686:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.227788][T14884] usb 2-1: USB disconnect, device number 71 [ 608.289412][ T107] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 608.498203][ T30] audit: type=1326 audit(1765560014.686:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 608.683673][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3562'. [ 610.200084][T16256] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 610.254178][ T5916] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 610.403918][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 610.439650][ T5916] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 610.449898][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.459515][ T5916] usb 5-1: Product: syz [ 610.463727][ T5916] usb 5-1: Manufacturer: syz [ 610.489105][ T5916] usb 5-1: SerialNumber: syz [ 610.503680][ T5916] usb 5-1: config 0 descriptor?? [ 610.855867][ T5954] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 610.968103][ T5916] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 610.977358][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.043906][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 611.067573][ T5954] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 611.076132][ T5954] usb 1-1: config 0 has no interface number 0 [ 611.083665][ T5954] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 611.104385][ T5954] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 611.128924][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.154172][ T5954] usb 1-1: Product: syz [ 611.158472][ T5954] usb 1-1: Manufacturer: syz [ 611.168269][ T5916] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 611.180173][ T5954] usb 1-1: SerialNumber: syz [ 611.196877][ T5916] usb 5-1: media controller created [ 611.203545][ T5954] usb 1-1: config 0 descriptor?? [ 611.243894][ T5954] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 611.271766][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.303889][ T5954] em28xx 1-1:0.132: Video interface 132 found: [ 611.477017][ T5916] zl10353_read_register: readreg error (reg=127, ret==0) [ 611.484993][ T5916] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 611.496432][ T5916] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 611.566193][ T5916] usb 5-1: USB disconnect, device number 59 [ 611.604003][ T5916] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 611.621049][ T5954] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 611.688678][ T5954] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 611.697844][ T5954] em28xx 1-1:0.132: board has no eeprom [ 611.773872][ T5954] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 611.800917][ T5954] em28xx 1-1:0.132: analog set to bulk mode. [ 611.887029][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 611.926289][ T5916] em28xx 1-1:0.132: Registering V4L2 extension [ 611.952234][ T5954] usb 1-1: USB disconnect, device number 64 [ 611.976305][ T5954] em28xx 1-1:0.132: Disconnecting em28xx [ 612.401724][ T5916] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 612.410884][ T5916] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 612.429491][ T5916] em28xx 1-1:0.132: No AC97 audio processor [ 612.452013][ T5916] usb 1-1: Decoder not found [ 612.457004][ T5916] em28xx 1-1:0.132: failed to create media graph [ 612.463454][ T5916] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 612.684983][ T5916] em28xx 1-1:0.132: Remote control support is not available for this card. [ 612.817659][ T5954] em28xx 1-1:0.132: Closing input extension [ 612.830624][ T5954] em28xx 1-1:0.132: Freeing device [ 613.425825][T16306] binder: 16304:16306 ioctl 4018620d 0 returned -22 [ 613.436342][T16306] binder: 16304:16306 ioctl c0306201 0 returned -14 [ 613.483929][T14884] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 613.634170][T14884] usb 5-1: Using ep0 maxpacket: 16 [ 613.644868][T14884] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 613.654174][T14884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.662213][T14884] usb 5-1: Product: syz [ 613.666477][T14884] usb 5-1: Manufacturer: syz [ 613.672282][T14884] usb 5-1: SerialNumber: syz [ 613.703278][T14884] usb 5-1: config 0 descriptor?? [ 614.084247][ T5917] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 614.122072][T14884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 614.144719][T14884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 614.156195][T14884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 614.168347][T14884] usb 5-1: media controller created [ 614.186878][T14884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.253987][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 614.269207][ T5917] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 614.283979][ T5917] usb 2-1: config 0 has no interface number 0 [ 614.286912][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 614.294242][ T5917] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.312257][ T5917] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 614.321927][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.331803][T14884] zl10353_read_register: readreg error (reg=127, ret==0) [ 614.346083][T14884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 614.354243][ T5917] usb 2-1: Product: syz [ 614.358500][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 614.367732][ T5917] usb 2-1: Manufacturer: syz [ 614.372356][ T5917] usb 2-1: SerialNumber: syz [ 614.396048][T14884] usb 5-1: USB disconnect, device number 60 [ 614.402590][ T5917] usb 2-1: config 0 descriptor?? [ 614.418337][ T5917] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 614.452334][ T5917] em28xx 2-1:0.132: Video interface 132 found: [ 614.499715][T14884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 614.821033][ T5917] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 614.887133][ T5917] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 614.907328][ T5917] em28xx 2-1:0.132: board has no eeprom [ 614.963974][ T5917] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 615.045991][ T5917] em28xx 2-1:0.132: analog set to bulk mode. [ 615.063298][T14884] em28xx 2-1:0.132: Registering V4L2 extension [ 615.105647][ T5917] usb 2-1: USB disconnect, device number 72 [ 615.125520][ T5917] em28xx 2-1:0.132: Disconnecting em28xx [ 615.398141][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 615.596177][T14884] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 615.687357][T14884] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 615.992590][T14884] em28xx 2-1:0.132: No AC97 audio processor [ 616.035237][T14884] usb 2-1: Decoder not found [ 616.053422][T14884] em28xx 2-1:0.132: failed to create media graph [ 616.123459][T14884] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 616.352428][T14884] em28xx 2-1:0.132: Remote control support is not available for this card. [ 616.371349][ T5917] em28xx 2-1:0.132: Closing input extension [ 616.517091][ T5917] em28xx 2-1:0.132: Freeing device [ 616.815549][T14884] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 617.013890][T14884] usb 5-1: Using ep0 maxpacket: 16 [ 617.164407][ T5916] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 617.186104][T14884] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 617.213582][T14884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.235052][T14884] usb 5-1: Product: syz [ 617.245269][T14884] usb 5-1: Manufacturer: syz [ 617.249887][T14884] usb 5-1: SerialNumber: syz [ 617.274510][T14884] usb 5-1: config 0 descriptor?? [ 617.333983][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 617.341159][ T5916] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 617.353940][ T5916] usb 2-1: config 0 has no interface number 0 [ 617.363891][ T5916] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.376514][ T5916] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 617.385962][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.393996][ T5916] usb 2-1: Product: syz [ 617.398373][ T5916] usb 2-1: Manufacturer: syz [ 617.403023][ T5916] usb 2-1: SerialNumber: syz [ 617.416063][ T5916] usb 2-1: config 0 descriptor?? [ 617.429163][ T5916] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 617.439440][ T5916] em28xx 2-1:0.132: Video interface 132 found: [ 617.506422][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 617.703115][T14884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 617.723775][T14884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 617.738259][T14884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 617.746394][T14884] usb 5-1: media controller created [ 617.769438][T14884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.830979][ T5916] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 617.905866][T14884] zl10353_read_register: readreg error (reg=127, ret==0) [ 617.916410][T14884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 617.925455][T16388] ------------[ cut here ]------------ [ 617.931281][T16388] usb 5-1: BOGUS control dir, pipe 80003d80 doesn't match bRequestType c0 [ 617.939890][T16388] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.1.3623/16388 [ 617.948272][T16388] Modules linked in: [ 617.952560][T16388] CPU: 1 UID: 0 PID: 16388 Comm: syz.1.3623 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.963578][T16388] Tainted: [L]=SOFTLOCKUP [ 617.968127][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 617.978254][T16388] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 617.983964][T16388] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 618.003677][T16388] RSP: 0018:ffffc900034575c0 EFLAGS: 00010246 [ 618.009832][T16388] RAX: 0000000000000000 RBX: ffff888033b1d400 RCX: 0000000080003d80 [ 618.018100][T16388] RDX: ffff888067c82560 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 618.026753][T16388] RBP: 1ffff11004b63210 R08: 00000000000000c0 R09: 0000000000000000 [ 618.035165][T16388] R10: ffffc900034576c0 R11: fffff5200068aee4 R12: ffff8880767b9100 [ 618.043152][T16388] R13: ffff888025b19080 R14: 0000000080003d80 R15: ffff888067c82560 [ 618.051201][T16388] FS: 0000000000000000(0000) GS:ffff888125f3a000(0063) knlGS:00000000f54d6b40 [ 618.060188][T16388] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 618.066821][T16388] CR2: 000000000c259ae1 CR3: 000000008e292000 CR4: 00000000003526f0 [ 618.074847][T16388] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 618.082811][T16388] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 618.090855][T16388] Call Trace: [ 618.094167][T16388] [ 618.097124][T16388] ? __init_swait_queue_head+0xa9/0x150 [ 618.102698][T16388] usb_start_wait_urb+0x115/0x4f0 [ 618.107796][T16388] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 618.113372][T16388] usb_control_msg+0x232/0x3e0 [ 618.118189][T16388] dtv5100_i2c_msg+0x231/0x2f0 [ 618.122973][T16388] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 618.128379][T16388] __i2c_transfer+0x871/0x2110 [ 618.133166][T16388] ? i2c_transfer+0x120/0x3a0 [ 618.138284][T16388] ? __pfx___i2c_transfer+0x10/0x10 [ 618.143499][T16388] ? rt_mutex_lock_nested+0x172/0x1e0 [ 618.148971][T16388] ? i2c_transfer+0x120/0x3a0 [ 618.153656][T16388] i2c_transfer+0x25b/0x3a0 [ 618.158217][T16388] ? __pfx_i2c_transfer+0x10/0x10 [ 618.163247][T16388] ? __might_fault+0xb0/0x130 [ 618.168014][T16388] i2c_transfer_buffer_flags+0x105/0x190 [ 618.173648][T16388] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 618.179858][T16388] ? _copy_from_user+0x94/0xb0 [ 618.184666][T16388] i2cdev_write+0x113/0x1e0 [ 618.189186][T16388] vfs_writev+0x4b6/0x960 [ 618.193506][T16388] ? __pfx_i2cdev_write+0x10/0x10 [ 618.198652][T16388] ? __pfx_vfs_writev+0x10/0x10 [ 618.203530][T16388] ? __fget_files+0x2a/0x420 [ 618.208232][T16388] ? __fget_files+0x3a0/0x420 [ 618.212907][T16388] ? __fget_files+0x2a/0x420 [ 618.217527][T16388] do_writev+0x14d/0x2d0 [ 618.221803][T16388] ? __pfx_do_writev+0x10/0x10 [ 618.227213][T16388] ? __do_fast_syscall_32+0xbe/0x570 [ 618.232508][T16388] __do_fast_syscall_32+0x1f7/0x570 [ 618.238121][T16388] ? lockdep_hardirqs_on+0x98/0x140 [ 618.243334][T16388] ? do_fast_syscall_32+0x34/0x80 [ 618.248440][T16388] ? irqentry_exit+0x10f/0x660 [ 618.253204][T16388] ? rcu_is_watching+0x15/0xb0 [ 618.258017][T16388] do_fast_syscall_32+0x34/0x80 [ 618.262877][T16388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.269274][T16388] RIP: 0023:0xf7fe1539 [ 618.273347][T16388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 618.293281][T16388] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 618.301830][T16388] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 618.309859][T16388] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.317868][T16388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.325991][T16388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.334426][T16388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.342405][T16388] [ 618.345895][T16388] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.353189][T16388] CPU: 1 UID: 0 PID: 16388 Comm: syz.1.3623 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.364135][T16388] Tainted: [L]=SOFTLOCKUP [ 618.368467][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.378524][T16388] Call Trace: [ 618.381807][T16388] [ 618.384736][T16388] dump_stack_lvl+0x99/0x250 [ 618.389330][T16388] ? __asan_memcpy+0x40/0x70 [ 618.393902][T16388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.399085][T16388] ? __pfx__printk+0x10/0x10 [ 618.403686][T16388] vpanic+0x237/0x6d0 [ 618.407675][T16388] ? __pfx_vpanic+0x10/0x10 [ 618.412170][T16388] ? is_bpf_text_address+0x292/0x2b0 [ 618.417460][T16388] ? is_bpf_text_address+0x26/0x2b0 [ 618.422668][T16388] panic+0xb9/0xc0 [ 618.426382][T16388] ? __pfx_panic+0x10/0x10 [ 618.430805][T16388] __warn+0x317/0x4b0 [ 618.434784][T16388] __report_bug+0x288/0x500 [ 618.439296][T16388] ? __pfx___report_bug+0x10/0x10 [ 618.444342][T16388] report_bug_entry+0x16a/0x220 [ 618.449182][T16388] ? usb_submit_urb+0x111c/0x18d0 [ 618.454193][T16388] ? usb_submit_urb+0x1121/0x18d0 [ 618.459230][T16388] handle_bug+0xca/0x200 [ 618.463477][T16388] exc_invalid_op+0x1a/0x50 [ 618.467982][T16388] asm_exc_invalid_op+0x1a/0x20 [ 618.472817][T16388] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 618.478441][T16388] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 618.498033][T16388] RSP: 0018:ffffc900034575c0 EFLAGS: 00010246 [ 618.504101][T16388] RAX: 0000000000000000 RBX: ffff888033b1d400 RCX: 0000000080003d80 [ 618.512055][T16388] RDX: ffff888067c82560 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 618.520011][T16388] RBP: 1ffff11004b63210 R08: 00000000000000c0 R09: 0000000000000000 [ 618.527968][T16388] R10: ffffc900034576c0 R11: fffff5200068aee4 R12: ffff8880767b9100 [ 618.535933][T16388] R13: ffff888025b19080 R14: 0000000080003d80 R15: ffff888067c82560 [ 618.543920][T16388] ? __init_swait_queue_head+0xa9/0x150 [ 618.549472][T16388] usb_start_wait_urb+0x115/0x4f0 [ 618.554494][T16388] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 618.560062][T16388] usb_control_msg+0x232/0x3e0 [ 618.564833][T16388] dtv5100_i2c_msg+0x231/0x2f0 [ 618.569586][T16388] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 618.574447][T16388] __i2c_transfer+0x871/0x2110 [ 618.579205][T16388] ? i2c_transfer+0x120/0x3a0 [ 618.583892][T16388] ? __pfx___i2c_transfer+0x10/0x10 [ 618.589087][T16388] ? rt_mutex_lock_nested+0x172/0x1e0 [ 618.594445][T16388] ? i2c_transfer+0x120/0x3a0 [ 618.599115][T16388] i2c_transfer+0x25b/0x3a0 [ 618.603609][T16388] ? __pfx_i2c_transfer+0x10/0x10 [ 618.608627][T16388] ? __might_fault+0xb0/0x130 [ 618.613314][T16388] i2c_transfer_buffer_flags+0x105/0x190 [ 618.618950][T16388] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 618.625103][T16388] ? _copy_from_user+0x94/0xb0 [ 618.629865][T16388] i2cdev_write+0x113/0x1e0 [ 618.634384][T16388] vfs_writev+0x4b6/0x960 [ 618.638711][T16388] ? __pfx_i2cdev_write+0x10/0x10 [ 618.643748][T16388] ? __pfx_vfs_writev+0x10/0x10 [ 618.648614][T16388] ? __fget_files+0x2a/0x420 [ 618.653204][T16388] ? __fget_files+0x3a0/0x420 [ 618.657868][T16388] ? __fget_files+0x2a/0x420 [ 618.662471][T16388] do_writev+0x14d/0x2d0 [ 618.666717][T16388] ? __pfx_do_writev+0x10/0x10 [ 618.671486][T16388] ? __do_fast_syscall_32+0xbe/0x570 [ 618.676766][T16388] __do_fast_syscall_32+0x1f7/0x570 [ 618.681961][T16388] ? lockdep_hardirqs_on+0x98/0x140 [ 618.687147][T16388] ? do_fast_syscall_32+0x34/0x80 [ 618.692160][T16388] ? irqentry_exit+0x10f/0x660 [ 618.696911][T16388] ? rcu_is_watching+0x15/0xb0 [ 618.701668][T16388] do_fast_syscall_32+0x34/0x80 [ 618.706535][T16388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.712866][T16388] RIP: 0023:0xf7fe1539 [ 618.716937][T16388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 618.736532][T16388] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 618.744949][T16388] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 618.752917][T16388] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.760874][T16388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.768832][T16388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.776788][T16388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.784750][T16388] [ 618.788235][T16388] Kernel Offset: disabled [ 618.792575][T16388] Rebooting in 86400 seconds..