last executing test programs: 8.433524055s ago: executing program 4 (id=3749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000002540)=[{0x80, 0x1000, 0x0, 0x0}, {0x8, 0x6810, 0x0, 0x0}], 0x2}) 7.663222545s ago: executing program 0 (id=3755): syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 7.458618262s ago: executing program 0 (id=3756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6.762638517s ago: executing program 1 (id=3759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.572675389s ago: executing program 1 (id=3762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002440)=@delchain={0x488, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6ee, 0x10000000, 0x6, 0x4, 0x7f, {0x6, 0x1, 0x7fff, 0x8, 0x2, 0x4}, {0x7, 0x2, 0xc59, 0x8, 0x0, 0x2}, 0x401, 0x5, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x101, 0xbf58, 0xfffffffe, 0x10000, 0x100, 0x4, 0x800, 0xc5, 0x3, 0x2, 0x200, 0x9, 0xe, 0x0, 0x24, 0x400, 0x0, 0x7, 0x80, 0x90000, 0x6, 0x73, 0x3, 0xd11d, 0x1, 0xe, 0x20004, 0x8000, 0x7d, 0x5, 0x10, 0x7, 0x1, 0x0, 0x3, 0x5, 0x5, 0x64a, 0x80, 0x39, 0xc70, 0x2, 0xfa5, 0x2, 0x8, 0x7ff, 0x72, 0x7fff, 0x3, 0x7354, 0x7ff, 0x3, 0x9, 0x1, 0xffffff01, 0xc, 0x0, 0x0, 0x9, 0x3, 0x8, 0x7, 0xe, 0x80000001, 0x80, 0x100, 0x2, 0x5, 0xb, 0x4, 0x7, 0xdeed, 0x4, 0xff, 0x0, 0x2, 0x5, 0xfff, 0x5c, 0x9, 0x8, 0x88000, 0x9, 0x1ff, 0x8b5c, 0x65a, 0xa2f, 0x8, 0x0, 0x75, 0xe80c, 0x14a, 0x5, 0x7e3, 0x200, 0x9, 0x201, 0x0, 0x3d39, 0x7, 0x2, 0x80000001, 0x3, 0x40, 0xdb, 0x4, 0x80000001, 0x4, 0xf844, 0x6, 0x6, 0x18a, 0x4, 0x4, 0x8, 0x2, 0xf, 0x0, 0x1, 0x5, 0x8, 0x6, 0x4, 0x8, 0x2, 0x4, 0x9, 0x9, 0x1fe, 0x19c, 0x1, 0x5, 0x20000000, 0x5, 0x0, 0x200, 0x8, 0x4, 0x8000, 0x7, 0xfffffff9, 0x2, 0x10001, 0x4, 0x0, 0xcc7, 0x3, 0xf1, 0x8, 0x7, 0xc82, 0x4, 0x2, 0xfffffff7, 0x7, 0x5, 0x0, 0x0, 0x3, 0x71, 0x6, 0x5d, 0xd7, 0x30000, 0x5, 0x1, 0x671e894c, 0x200, 0x8, 0x4, 0x7, 0x2, 0x3, 0x6, 0x4, 0xd, 0xffffffff, 0x9, 0x80, 0xe, 0x1ff, 0x101, 0x0, 0xffffffff, 0x0, 0x3ff, 0xd6, 0x7f, 0x800, 0x2, 0x6530c187, 0x9, 0x35bfbad2, 0x1, 0xffffffff, 0x6, 0xc76, 0x8, 0x8, 0x8, 0x1d, 0x10001, 0x3, 0x2, 0x7, 0x4, 0x7, 0xcd31, 0x5, 0x6, 0xfba, 0x8, 0xd, 0x5, 0x4, 0x1, 0x9, 0x7, 0x7, 0x5, 0x424f90a6, 0xfff, 0x6f, 0xfffffffb, 0x2, 0xc, 0x101, 0xc, 0x12, 0x0, 0x2, 0x2, 0x3, 0x2, 0x1, 0xbe90, 0x56, 0x100000, 0x3, 0x7, 0xf, 0x0, 0x9, 0x4, 0x9, 0x1, 0x800, 0xffffffff, 0xfffffff5, 0x401, 0x8, 0x7, 0xf, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.046940355s ago: executing program 2 (id=3766): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') preadv(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, 0x80000005, 0x3) 5.930482461s ago: executing program 2 (id=3767): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x3, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4080) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41, 0x10}}}, 0x10, 0x0}, 0x20001) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0xdc, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x50, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}, @dstopts={0x4b, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x1ff, [0x9, 0x60]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x104) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x3, 0x34, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xf}) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000002c0)={0x5, "1ed898ec7e4df0615db402c686a02a016195c713d37a6ab0ea8f488c8d0f450e", 0x4, 0x200, 0x3, 0x1, 0x2, 0x0, 0xffffffff, 0xf}) 5.195595905s ago: executing program 4 (id=3769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x6e, &(0x7f0000000040)=0x0) r3 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 4.932163338s ago: executing program 4 (id=3770): socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000000009002300731142000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 4.408095682s ago: executing program 3 (id=3771): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x20}}], 0x2, 0x45) 4.233996334s ago: executing program 3 (id=3772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.178007203s ago: executing program 3 (id=3773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0) io_submit(r1, 0x1, &(0x7f0000003340)=[&(0x7f0000001f40)={0x0, 0x0, 0x0, 0x5, 0xf16, r0, &(0x7f0000000f40), 0x0, 0x10001, 0x0, 0x2}]) 3.804090677s ago: executing program 3 (id=3776): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.615696095s ago: executing program 2 (id=3777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.473474163s ago: executing program 3 (id=3778): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x7fff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ec1301002abd7000fddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004800}, 0x60000800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, 0x0, &(0x7f0000000080)=0x272) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0x0) fcntl$setown(r1, 0x8, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) 1.673920435s ago: executing program 1 (id=3779): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 1.654712305s ago: executing program 4 (id=3780): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r1, 0x0, 0x9, 0x2000403) accept4$inet(r1, 0x0, 0x0, 0x800) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) 1.653501051s ago: executing program 0 (id=3781): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.44776471s ago: executing program 4 (id=3782): mmap(&(0x7f00001d4000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2c256000) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x28, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x18, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}], 0x1}, 0x40) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x2, 0xc4ffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.446219107s ago: executing program 1 (id=3783): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.114743383s ago: executing program 1 (id=3784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x3, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4080) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41, 0x10}}}, 0x10, 0x0}, 0x20001) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0xdc, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x50, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}, @dstopts={0x4b, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x1ff, [0x9, 0x60]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x104) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x3, 0x34, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xf}) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000002c0)={0x5, "1ed898ec7e4df0615db402c686a02a016195c713d37a6ab0ea8f488c8d0f450e", 0x4, 0x200, 0x3, 0x1, 0x2, 0x0, 0xffffffff, 0xf}) 959.860185ms ago: executing program 1 (id=3786): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, 0x0, 0x0) 459.714837ms ago: executing program 2 (id=3787): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/uevent_seqnum', 0x100, 0x110) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 298.260793ms ago: executing program 2 (id=3788): r0 = eventfd(0xfffff204) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 220.305724ms ago: executing program 0 (id=3789): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002440)=@delchain={0x488, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6ee, 0x10000000, 0x6, 0x4, 0x7f, {0x6, 0x1, 0x7fff, 0x8, 0x2, 0x4}, {0x7, 0x2, 0xc59, 0x8, 0x0, 0x2}, 0x401, 0x5, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x101, 0xbf58, 0xfffffffe, 0x10000, 0x100, 0x4, 0x800, 0xc5, 0x3, 0x2, 0x200, 0x9, 0xe, 0x0, 0x24, 0x400, 0x0, 0x7, 0x80, 0x90000, 0x6, 0x73, 0x3, 0xd11d, 0x1, 0xe, 0x20004, 0x8000, 0x7d, 0x5, 0x10, 0x7, 0x1, 0x0, 0x3, 0x5, 0x5, 0x64a, 0x80, 0x39, 0xc70, 0x2, 0xfa5, 0x2, 0x8, 0x7ff, 0x72, 0x7fff, 0x3, 0x7354, 0x7ff, 0x3, 0x9, 0x1, 0xffffff01, 0xc, 0x0, 0x0, 0x9, 0x3, 0x8, 0x7, 0xe, 0x80000001, 0x80, 0x100, 0x2, 0x5, 0xb, 0x4, 0x7, 0xdeed, 0x4, 0xff, 0x0, 0x2, 0x5, 0xfff, 0x5c, 0x9, 0x8, 0x88000, 0x9, 0x1ff, 0x8b5c, 0x65a, 0xa2f, 0x8, 0x0, 0x75, 0xe80c, 0x14a, 0x5, 0x7e3, 0x200, 0x9, 0x201, 0x0, 0x3d39, 0x7, 0x2, 0x80000001, 0x3, 0x40, 0xdb, 0x4, 0x80000001, 0x4, 0xf844, 0x6, 0x6, 0x18a, 0x4, 0x4, 0x8, 0x2, 0xf, 0x0, 0x1, 0x5, 0x8, 0x6, 0x4, 0x8, 0x2, 0x4, 0x9, 0x9, 0x1fe, 0x19c, 0x1, 0x5, 0x20000000, 0x5, 0x0, 0x200, 0x8, 0x4, 0x8000, 0x7, 0xfffffff9, 0x2, 0x10001, 0x4, 0x0, 0xcc7, 0x3, 0xf1, 0x8, 0x7, 0xc82, 0x4, 0x2, 0xfffffff7, 0x7, 0x5, 0x0, 0x0, 0x3, 0x71, 0x6, 0x5d, 0xd7, 0x30000, 0x5, 0x1, 0x671e894c, 0x200, 0x8, 0x4, 0x7, 0x2, 0x3, 0x6, 0x4, 0xd, 0xffffffff, 0x9, 0x80, 0xe, 0x1ff, 0x101, 0x0, 0xffffffff, 0x0, 0x3ff, 0xd6, 0x7f, 0x800, 0x2, 0x6530c187, 0x9, 0x35bfbad2, 0x1, 0xffffffff, 0x6, 0xc76, 0x8, 0x8, 0x8, 0x1d, 0x10001, 0x3, 0x2, 0x7, 0x4, 0x7, 0xcd31, 0x5, 0x6, 0xfba, 0x8, 0xd, 0x5, 0x4, 0x1, 0x9, 0x7, 0x7, 0x5, 0x424f90a6, 0xfff, 0x6f, 0xfffffffb, 0x2, 0xc, 0x101, 0xc, 0x12, 0x0, 0x2, 0x2, 0x3, 0x2, 0x1, 0xbe90, 0x56, 0x100000, 0x3, 0x7, 0xf, 0x0, 0x9, 0x4, 0x9, 0x1, 0x800, 0xffffffff, 0xfffffff5, 0x401, 0x8, 0x7, 0xf, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 135.022922ms ago: executing program 0 (id=3790): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0000}]}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) kernel console output (not intermixed with test programs): eo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 589.649739][ T9767] uvcvideo 3-1:220.0: No valid video chain found. [ 589.696505][ T9767] usb 3-1: selecting invalid altsetting 0 [ 589.704187][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'. [ 589.721887][ T9767] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 589.761533][ T9767] usb 3-1: USB disconnect, device number 66 [ 590.520820][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 590.563954][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 590.593134][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 591.860344][T13934] tipc: Enabled bearer , priority 0 [ 591.914873][T13937] syzkaller0: entered promiscuous mode [ 591.938081][T13937] syzkaller0: entered allmulticast mode [ 592.039390][T13934] tipc: Resetting bearer [ 592.078383][T13933] tipc: Resetting bearer [ 592.146856][T13933] tipc: Disabling bearer [ 592.269022][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 592.583878][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 592.606109][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 592.630999][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 592.670587][ T30] audit: type=1804 audit(1776468143.056:54): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3032" name="bus" dev="ramfs" ino=48283 res=1 errno=0 [ 592.721790][ T30] audit: type=1804 audit(1776468143.086:55): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3032" name="bus" dev="ramfs" ino=48283 res=1 errno=0 [ 592.767992][ T9765] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 592.921009][ T9765] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 592.930134][ T9765] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 592.946792][ T9765] usb 1-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 592.964362][ T9765] usb 1-1: config 220 has no interface number 2 [ 592.972345][ T9765] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 592.992813][ T9765] usb 1-1: config 220 interface 0 has no altsetting 0 [ 593.002721][ T9765] usb 1-1: config 220 interface 76 has no altsetting 0 [ 593.021870][ T9765] usb 1-1: config 220 interface 1 has no altsetting 0 [ 593.028965][ T9767] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 593.048047][ T9765] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 593.059854][ T9765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.074813][ T9765] usb 1-1: Product: syz [ 593.082037][ T9765] usb 1-1: Manufacturer: syz [ 593.087642][ T9765] usb 1-1: SerialNumber: syz [ 593.190511][ T9767] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.200077][ T9767] usb 2-1: config 0 has no interface number 0 [ 593.214375][ T9767] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 593.236981][ T9767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.284497][ T9767] usb 2-1: config 0 descriptor?? [ 593.304710][T13947] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 593.304710][T13947] program syz.0.3031 not setting count and/or reply_len properly [ 593.337121][ T9767] usb 2-1: selecting invalid altsetting 1 [ 593.361659][ T9767] dvb_ttusb_budget: ttusb_init_controller: error [ 593.392303][ T9767] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 593.562286][ T9765] usb 1-1: selecting invalid altsetting 0 [ 593.587523][T13970] tipc: Enabled bearer , priority 0 [ 593.600753][ T9765] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 593.623481][ T9765] uvcvideo 1-1:220.0: No valid video chain found. [ 593.631348][ T9767] DVB: Unable to find symbol cx22700_attach() [ 593.643778][T13970] syzkaller0: entered promiscuous mode [ 593.663646][T13970] syzkaller0: entered allmulticast mode [ 593.674202][ T9765] usb 1-1: selecting invalid altsetting 0 [ 593.691207][ T9765] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 593.736390][ T9765] usb 1-1: USB disconnect, device number 74 [ 593.757046][ T9767] DVB: Unable to find symbol tda10046_attach() [ 593.784151][T13970] tipc: Resetting bearer [ 593.790104][ T9767] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 593.843709][ T9767] usb 2-1: USB disconnect, device number 76 [ 593.866118][T13969] tipc: Resetting bearer [ 593.945525][T13969] tipc: Disabling bearer [ 594.216247][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 594.459895][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 594.495303][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 594.618048][ T5909] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 594.792665][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.819345][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.860265][ T5909] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 594.887939][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.914160][ T5909] usb 2-1: config 0 descriptor?? [ 595.141525][ T30] audit: type=1326 audit(1776468145.526:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.167170][ T30] audit: type=1326 audit(1776468145.526:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.191647][ T30] audit: type=1326 audit(1776468145.526:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.213836][ T30] audit: type=1326 audit(1776468145.526:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.263381][ T30] audit: type=1326 audit(1776468145.526:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.287638][ T30] audit: type=1326 audit(1776468145.526:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.312133][ T9780] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 595.327992][ T9779] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 595.344267][ T30] audit: type=1326 audit(1776468145.546:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7175cab code=0x7ffc0000 [ 595.391335][ T5909] playstation 0003:054C:0BA0.000A: item fetching failed at offset 0/7 [ 595.401613][ T30] audit: type=1326 audit(1776468145.756:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.430628][ T5909] playstation 0003:054C:0BA0.000A: Parse failed [ 595.449199][ T5909] playstation 0003:054C:0BA0.000A: probe with driver playstation failed with error -22 [ 595.468211][ T30] audit: type=1326 audit(1776468145.756:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.472585][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.510024][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.521674][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.537234][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.547117][ T9779] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 595.555732][ T30] audit: type=1326 audit(1776468145.756:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 595.559605][ T9780] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 595.588116][ T9767] usb 2-1: USB disconnect, device number 77 [ 595.592567][ T9779] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 595.596872][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.639607][ T9779] usb 3-1: config 220 has an invalid descriptor of length 242, skipping remainder of the config [ 595.690016][ T9779] usb 3-1: config 220 has no interface number 2 [ 595.705947][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.731014][ T9779] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 595.764717][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.780658][ T9779] usb 3-1: config 220 interface 0 has no altsetting 0 [ 595.796463][ T9780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 595.819603][ T9779] usb 3-1: config 220 interface 76 has no altsetting 0 [ 595.836714][ T9779] usb 3-1: config 220 interface 1 has no altsetting 0 [ 595.851480][ T9780] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 595.867270][ T9779] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 595.890886][ T9780] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 595.908868][ T9779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.919874][ T9780] usb 5-1: Manufacturer: syz [ 595.928248][ T9779] usb 3-1: Product: syz [ 595.945373][ T9780] usb 5-1: config 0 descriptor?? [ 595.954769][ T9779] usb 3-1: Manufacturer: syz [ 595.973290][ T9779] usb 3-1: SerialNumber: syz [ 596.124955][T14003] chnl_net:caif_netlink_parms(): no params data found [ 596.203813][T14010] __nla_validate_parse: 1 callbacks suppressed [ 596.203834][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 596.225774][T13999] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 596.225774][T13999] program syz.2.3053 not setting count and/or reply_len properly [ 596.274656][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 596.367625][T14010] hsr_slave_1 (unregistering): left promiscuous mode [ 596.399743][ T9780] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 596.420173][ T9779] usb 3-1: selecting invalid altsetting 0 [ 596.431746][ T9780] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 596.445402][ T9779] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 596.466185][ T9779] uvcvideo 3-1:220.0: No valid video chain found. [ 596.519109][ T9779] usb 3-1: selecting invalid altsetting 0 [ 596.528148][ T9779] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 596.559596][ T9779] usb 3-1: USB disconnect, device number 67 [ 596.684513][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.824468][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 596.836758][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 596.837653][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.848259][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 596.876862][T14003] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.889704][T14003] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.905317][T14003] bridge_slave_0: entered allmulticast mode [ 596.926221][T14003] bridge_slave_0: entered promiscuous mode [ 596.988799][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.058573][T14025] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3060' sets config #1 [ 597.069960][T14025] binder: 14024:14025 ioctl c0306201 0 returned -14 [ 597.100076][T14003] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.111490][T14003] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.119418][T14003] bridge_slave_1: entered allmulticast mode [ 597.127686][T14003] bridge_slave_1: entered promiscuous mode [ 597.261738][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.395681][T14003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.426902][T14003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.533559][T14003] team0: Port device team_slave_0 added [ 597.548521][T14038] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 597.567465][T14003] team0: Port device team_slave_1 added [ 597.668260][T14003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.676971][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.705337][T14003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.718517][ T50] Bluetooth: hci4: command tx timeout [ 597.727977][T14040] tipc: Enabled bearer , priority 0 [ 597.742564][T14003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.757981][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.809942][T14003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.833743][T14040] syzkaller0: entered promiscuous mode [ 597.848791][T14040] syzkaller0: entered allmulticast mode [ 597.996068][T14040] tipc: Resetting bearer [ 598.071995][T14039] tipc: Resetting bearer [ 598.104012][T14039] tipc: Disabling bearer [ 598.129604][T14003] hsr_slave_0: entered promiscuous mode [ 598.140532][T14003] hsr_slave_1: entered promiscuous mode [ 598.147814][T14003] debugfs: 'hsr0' already exists in 'hsr' [ 598.154432][T14003] Cannot create hsr debugfs directory [ 598.345549][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 598.387233][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 598.429963][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 598.502737][ T36] bridge_slave_1: left allmulticast mode [ 598.511845][ T36] bridge_slave_1: left promiscuous mode [ 598.520535][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.533544][ T36] bridge_slave_0: left allmulticast mode [ 598.551620][ T9779] usb 5-1: USB disconnect, device number 67 [ 598.660284][ T9780] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 598.669529][ T36] bridge_slave_0: left promiscuous mode [ 598.675325][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.902808][ T9780] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 598.937072][ T9780] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 598.967369][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 598.983932][ T9780] usb 3-1: config 220 has an invalid descriptor of length 242, skipping remainder of the config [ 599.021632][ T9780] usb 3-1: config 220 has no interface number 2 [ 599.038069][ T9780] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 599.051737][ T9780] usb 3-1: config 220 interface 0 has no altsetting 0 [ 599.060458][ T9780] usb 3-1: config 220 interface 76 has no altsetting 0 [ 599.067542][ T9780] usb 3-1: config 220 interface 1 has no altsetting 0 [ 599.077497][ T9780] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 599.096224][ T9780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.114943][ T9780] usb 3-1: Product: syz [ 599.125090][ T9780] usb 3-1: Manufacturer: syz [ 599.135247][ T9780] usb 3-1: SerialNumber: syz [ 599.384453][T14050] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 599.384453][T14050] program syz.2.3070 not setting count and/or reply_len properly [ 599.570886][ T9780] usb 3-1: selecting invalid altsetting 0 [ 599.592506][ T9780] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 599.632079][ T9780] uvcvideo 3-1:220.0: No valid video chain found. [ 599.675219][ T9780] usb 3-1: selecting invalid altsetting 0 [ 599.693338][ T9780] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 599.717190][ T9780] usb 3-1: USB disconnect, device number 68 [ 599.798384][ T50] Bluetooth: hci4: command tx timeout [ 599.860694][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.875432][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.897511][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 599.941300][ T36] bond0 (unregistering): Released all slaves [ 600.025044][T14068] tipc: Enabled bearer , priority 0 [ 600.033423][T14068] syzkaller0: entered promiscuous mode [ 600.038181][ T5833] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 600.043262][T14068] syzkaller0: entered allmulticast mode [ 600.224929][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 600.235132][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.257217][ T36] tipc: Left network mode [ 600.259573][T14072] tipc: Resetting bearer [ 600.274688][ T5833] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=ec.b7 [ 600.297260][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.318114][ T5833] usb 5-1: Product: syz [ 600.322389][ T5833] usb 5-1: Manufacturer: syz [ 600.327109][ T5833] usb 5-1: SerialNumber: syz [ 600.341445][ T5833] usb 5-1: config 0 descriptor?? [ 600.375699][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.515725][T14067] tipc: Resetting bearer [ 600.616741][T14067] tipc: Disabling bearer [ 600.720449][ T5833] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 600.748989][ T5833] usb 5-1: USB disconnect, device number 68 [ 600.850960][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.957079][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'. [ 601.278706][T14091] __nla_validate_parse: 2 callbacks suppressed [ 601.278730][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 601.495487][T14100] tipc: Enabled bearer , priority 0 [ 601.600563][T14096] syzkaller0: entered promiscuous mode [ 601.611196][T14096] syzkaller0: entered allmulticast mode [ 601.653380][ T36] hsr_slave_0: left promiscuous mode [ 601.672806][ T36] hsr_slave_1: left promiscuous mode [ 601.685879][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.700823][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.720551][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.737216][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.786259][ T36] veth1_macvtap: left promiscuous mode [ 601.792041][ T36] veth0_macvtap: left promiscuous mode [ 601.807230][ T36] veth1_vlan: left promiscuous mode [ 601.878123][ T50] Bluetooth: hci4: command tx timeout [ 602.479942][ T36] team_slave_1 (unregistering): left promiscuous mode [ 602.491572][ T36] team0 (unregistering): Port device team_slave_1 removed [ 602.530453][ T36] team_slave_0 (unregistering): left promiscuous mode [ 602.540500][ T36] team0 (unregistering): Port device team_slave_0 removed [ 602.748030][ T5833] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 602.818900][T14096] tipc: Resetting bearer [ 602.830567][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 602.857066][T14094] tipc: Resetting bearer [ 602.883133][T14094] tipc: Disabling bearer [ 602.915753][ T5833] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 602.924596][ T5833] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 602.934404][ T5833] usb 1-1: config 220 has an invalid descriptor of length 242, skipping remainder of the config [ 602.946243][ T5833] usb 1-1: config 220 has no interface number 2 [ 602.968725][ T5833] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 602.998138][ T5833] usb 1-1: config 220 interface 0 has no altsetting 0 [ 603.025931][ T5833] usb 1-1: config 220 interface 76 has no altsetting 0 [ 603.066998][ T5833] usb 1-1: config 220 interface 1 has no altsetting 0 [ 603.088676][ T5833] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.104715][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.123312][ T5833] usb 1-1: Product: syz [ 603.139590][ T5833] usb 1-1: Manufacturer: syz [ 603.151429][ T5833] usb 1-1: SerialNumber: syz [ 603.405035][T14112] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 603.405035][T14112] program syz.0.3088 not setting count and/or reply_len properly [ 603.467049][ T36] IPVS: stop unused estimator thread 0... [ 603.707899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 603.783443][ T5833] usb 1-1: selecting invalid altsetting 0 [ 603.815788][ T5833] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 603.842500][ T5833] uvcvideo 1-1:220.0: No valid video chain found. [ 603.895782][ T5833] usb 1-1: selecting invalid altsetting 0 [ 603.925790][ T5833] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 603.968509][ T50] Bluetooth: hci4: command tx timeout [ 603.973224][ T5833] usb 1-1: USB disconnect, device number 75 [ 604.147694][T14003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.186982][T14003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.218923][T14003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.275422][T14003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.310120][T14003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.331836][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 604.356662][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 604.369870][T14003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.382449][T14003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 604.390396][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 604.416150][T14003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.620100][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 604.702251][T14003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.799842][T14003] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.819197][ T5833] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 604.842669][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.850019][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.911418][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.918707][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.019951][ T5833] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 605.034532][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.065563][ T5833] usb 1-1: config 0 has no interface number 0 [ 605.083909][ T5833] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 605.108343][ T9784] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 605.109048][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.133775][ T5833] usb 1-1: Product: syz [ 605.146902][T14003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.151632][ T5833] usb 1-1: Manufacturer: syz [ 605.165605][ T5833] usb 1-1: SerialNumber: syz [ 605.183796][ T5833] usb 1-1: config 0 descriptor?? [ 605.201580][ T5833] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 605.280043][T14003] veth0_vlan: entered promiscuous mode [ 605.293216][ T9784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 605.319756][ T9784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.337218][T14003] veth1_vlan: entered promiscuous mode [ 605.346509][ T9784] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 605.365885][ T9784] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 605.391650][ T9784] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 605.412859][ T9784] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 605.426662][ T9784] usb 3-1: config 1 interface 1 has no altsetting 0 [ 605.437477][ T9784] usb 3-1: string descriptor 0 read error: -22 [ 605.444302][ T9784] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 605.452130][ T5918] usb 1-1: USB disconnect, device number 76 [ 605.456485][T14003] veth0_macvtap: entered promiscuous mode [ 605.470964][ T9784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.509117][T14003] veth1_macvtap: entered promiscuous mode [ 605.564742][T14003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.610849][T14003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.649802][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.662824][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.681050][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.709513][ T759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.711605][ T9784] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 605.897510][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.920277][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.013632][ T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.032199][ T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.131571][ T9784] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 606.341588][ T9784] usb 3-1: USB disconnect, device number 69 [ 606.941726][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.957314][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.963768][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 606.977042][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.994553][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.006294][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.049773][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 607.118942][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 608.089185][T14180] chnl_net:caif_netlink_parms(): no params data found [ 608.405195][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.413132][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.420628][T14180] bridge_slave_0: entered allmulticast mode [ 608.429165][T14180] bridge_slave_0: entered promiscuous mode [ 608.438694][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.446484][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.454493][T14180] bridge_slave_1: entered allmulticast mode [ 608.470383][T14180] bridge_slave_1: entered promiscuous mode [ 608.563503][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.593741][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.762673][T14180] team0: Port device team_slave_0 added [ 608.787202][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 608.798476][T14180] team0: Port device team_slave_1 added [ 608.824867][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 608.866481][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 608.940514][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.961284][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.992416][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.078480][ T5840] Bluetooth: hci3: command tx timeout [ 609.093314][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.116308][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.189787][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.305318][T14226] netlink: 'syz.3.3121': attribute type 39 has an invalid length. [ 609.615697][T14180] hsr_slave_0: entered promiscuous mode [ 609.629502][T14180] hsr_slave_1: entered promiscuous mode [ 609.640385][T14180] debugfs: 'hsr0' already exists in 'hsr' [ 609.643319][T14229] loop5: detected capacity change from 0 to 7 [ 609.646444][T14180] Cannot create hsr debugfs directory [ 609.691678][T14230] binder: 14225:14230 ioctl c0285840 80000000 returned -22 [ 609.722816][T14229] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 609.734870][T14229] loop5: partition table partially beyond EOD, truncated [ 609.815928][T14229] loop5: p1 size 487441168 extends beyond EOD, truncated [ 610.132124][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 610.628608][T14180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.781740][T14253] fuse: Unknown parameter '00000000000000000000' [ 610.903906][T14180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.139027][T14180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.158609][ T5840] Bluetooth: hci3: command tx timeout [ 611.260855][T14180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.873884][T14180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 611.901523][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3135'. [ 611.905184][T14180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.931900][T14180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 611.955583][T14180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.979815][T14180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.009026][T14180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.028490][T14180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.053932][T14180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.405272][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.506260][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.536777][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.544049][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.625724][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.633099][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.854428][T14280] fuse: Bad value for 'fd' [ 612.899734][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.131850][T14180] veth0_vlan: entered promiscuous mode [ 613.196762][T14180] veth1_vlan: entered promiscuous mode [ 613.239182][ T5840] Bluetooth: hci3: command tx timeout [ 613.290064][T14180] veth0_macvtap: entered promiscuous mode [ 613.301903][T14180] veth1_macvtap: entered promiscuous mode [ 613.327658][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.374628][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.420379][ T3470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.460274][ T3470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.495561][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.519038][ T3470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.823260][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.851083][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.930726][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.954713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.403839][ T13] bridge_slave_1: left allmulticast mode [ 614.434001][ T13] bridge_slave_1: left promiscuous mode [ 614.455351][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.504152][ T13] bridge_slave_0: left allmulticast mode [ 614.529701][ T13] bridge_slave_0: left promiscuous mode [ 614.551658][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.915778][T14300] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3146'. [ 615.422252][ T5840] Bluetooth: hci3: command tx timeout [ 615.460738][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 615.703718][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b670800: rx timeout, send abort [ 616.074203][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.095087][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.111178][ T13] bond0 (unregistering): Released all slaves [ 616.279154][ T13] tipc: Left network mode [ 616.467744][T14312] fuse: Bad value for 'fd' [ 616.874199][ T13] hsr_slave_0: left promiscuous mode [ 616.893569][ T13] hsr_slave_1: left promiscuous mode [ 616.903989][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.915575][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.079169][ T9784] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 617.228026][ T9784] usb 5-1: device descriptor read/64, error -71 [ 617.424932][ T13] team_slave_1 (unregistering): left promiscuous mode [ 617.442369][ T13] team_slave_1 (unregistering): left allmulticast mode [ 617.474817][ T13] team0 (unregistering): Port device team_slave_1 removed [ 617.489711][ T9784] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 617.510737][ T13] team_slave_0 (unregistering): left promiscuous mode [ 617.518102][ T13] team_slave_0 (unregistering): left allmulticast mode [ 617.530463][ T13] team0 (unregistering): Port device team_slave_0 removed [ 617.628967][ T9784] usb 5-1: device descriptor read/64, error -71 [ 617.752474][ T9784] usb usb5-port1: attempt power cycle [ 618.119247][ T9784] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 618.149168][ T9784] usb 5-1: device descriptor read/8, error -71 [ 618.250475][ T13] IPVS: stop unused estimator thread 0... [ 618.418099][ T9784] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 618.470961][ T9784] usb 5-1: device descriptor read/8, error -71 [ 618.582419][ T9784] usb usb5-port1: unable to enumerate USB device [ 618.848654][ T9765] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 619.008519][ T9765] usb 4-1: Using ep0 maxpacket: 32 [ 619.022103][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880258b2c00: rx timeout, send abort [ 619.044765][ T9765] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 619.064121][ T9765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.083624][ T9765] usb 4-1: Product: syz [ 619.088255][ T9765] usb 4-1: Manufacturer: syz [ 619.093043][ T9765] usb 4-1: SerialNumber: syz [ 619.110643][ T9765] usb 4-1: config 0 descriptor?? [ 619.118935][ T9765] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 619.522339][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802580c000: rx timeout, send abort [ 619.531016][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880258b2c00: abort rx timeout. Force session deactivation [ 620.030818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802580c000: abort rx timeout. Force session deactivation [ 620.123054][ T9765] gspca_ov534_9: reg_w failed -71 [ 620.198098][ T5895] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 620.358290][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 620.370075][ T5895] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 620.381302][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.389916][ T5895] usb 1-1: Product: syz [ 620.394459][ T5895] usb 1-1: Manufacturer: syz [ 620.400618][ T5895] usb 1-1: SerialNumber: syz [ 620.413193][ T5895] usb 1-1: config 0 descriptor?? [ 620.419190][ T9765] gspca_ov534_9: Unknown sensor 0000 [ 620.419290][ T9765] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 620.443786][ T5895] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 620.452027][ T9765] usb 4-1: USB disconnect, device number 67 [ 620.463872][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 620.475203][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.488489][ T5895] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 620.503577][ T5895] usb 1-1: media controller created [ 620.529014][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.625578][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 620.692636][ T5895] DVB: Unable to find symbol mt352_attach() [ 620.706283][ T5895] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 620.826703][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.839417][ T5895] rc_core: IR keymap rc-dvico-portable not found [ 620.850834][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.861815][ T5895] Registered IR keymap rc-empty [ 620.876240][ T5895] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 620.903564][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.922248][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.931256][ T5895] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input35 [ 620.976233][ T5895] dvb-usb: schedule remote query interval to 100 msecs. [ 620.983697][ T5895] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 621.088706][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 621.151923][T14375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 621.208168][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 621.285752][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 621.297156][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 621.309429][ T5833] usb 1-1: USB disconnect, device number 77 [ 621.322742][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 621.328002][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 621.348194][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 621.461005][ T5833] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 622.018083][ T5833] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 622.159421][ T5833] usb 5-1: device descriptor read/64, error -71 [ 622.188082][ T5918] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 622.347992][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 622.356374][ T5918] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.371310][ T5918] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 622.381501][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.391312][ T5918] usb 1-1: Product: syz [ 622.395665][ T5918] usb 1-1: Manufacturer: syz [ 622.401172][ T5918] usb 1-1: SerialNumber: syz [ 622.407988][ T5833] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 622.420994][ T5918] usb 1-1: config 0 descriptor?? [ 622.548078][ T5833] usb 5-1: device descriptor read/64, error -71 [ 622.661328][ T5833] usb usb5-port1: attempt power cycle [ 622.960994][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 622.974634][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 622.997281][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 623.008005][ T5833] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 623.010885][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 623.043656][ T5833] usb 5-1: device descriptor read/8, error -71 [ 623.318984][ T5833] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 623.348023][ T5895] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 623.348763][ T5833] usb 5-1: device descriptor read/8, error -71 [ 623.362251][ T9765] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 623.478643][ T5833] usb usb5-port1: unable to enumerate USB device [ 623.518028][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 623.518048][ T9765] usb 2-1: Using ep0 maxpacket: 8 [ 623.522657][ T9765] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 623.524982][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.530201][ T9765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.557401][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.559378][ T9765] usb 2-1: Product: syz [ 623.571667][ T5895] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 623.572682][ T9765] usb 2-1: Manufacturer: syz [ 623.581248][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.586147][ T9765] usb 2-1: SerialNumber: syz [ 623.600845][ T5895] usb 3-1: config 0 descriptor?? [ 623.602145][ T9765] usb 2-1: config 0 descriptor?? [ 623.626847][ T9765] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 623.641220][ T9765] dvb-usb: bulk message failed: -22 (2/0) [ 623.650761][ T9765] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.661499][ T9765] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 623.670881][ T9765] usb 2-1: media controller created [ 623.687708][ T9765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.828382][ T9765] dvb-usb: bulk message failed: -22 (1/0) [ 623.880331][ T9765] DVB: Unable to find symbol mt352_attach() [ 623.886531][ T9765] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 623.968013][ T9765] rc_core: IR keymap rc-dvico-portable not found [ 623.975831][ T9765] Registered IR keymap rc-empty [ 623.987231][ T9765] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 624.001257][ T9765] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 624.018369][ T9765] dvb-usb: schedule remote query interval to 100 msecs. [ 624.026481][ T9765] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 624.035525][ T5895] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 624.037769][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.059882][ T5895] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 624.064445][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.127997][ T9765] dvb-usb: bulk message failed: -22 (1/0) [ 624.191513][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.203024][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.231863][ T5895] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 624.238063][ T9765] dvb-usb: bulk message failed: -22 (1/0) [ 624.282510][T14433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 624.341961][ T9765] usb 2-1: USB disconnect, device number 78 [ 624.392087][ T9765] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 624.432100][ T5895] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 624.622685][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.629288][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.641115][ T5895] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 624.680481][ T12] bridge_slave_1: left allmulticast mode [ 624.698355][ T12] bridge_slave_1: left promiscuous mode [ 624.712508][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.731615][ T12] bridge_slave_0: left allmulticast mode [ 624.748221][ T12] bridge_slave_0: left promiscuous mode [ 624.754052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.778340][ T12] dvmrp8: left allmulticast mode [ 625.034179][ T5918] usb 3-1: USB disconnect, device number 70 [ 625.062858][ T5895] usb 1-1: USB disconnect, device number 78 [ 625.627150][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.672906][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.710271][ T12] bond0 (unregistering): Released all slaves [ 625.848079][ T12] tipc: Left network mode [ 625.897502][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 625.910757][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 626.571898][ T5895] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 626.596167][T14476] mmap: syz.2.3217 (14476): VmData 37629952 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 626.622699][ T12] hsr_slave_0: left promiscuous mode [ 626.644009][ T12] hsr_slave_1: left promiscuous mode [ 626.664028][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.679072][ T9780] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 626.688751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.712278][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.720390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.739907][ T12] veth1_macvtap: left promiscuous mode [ 626.748288][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 626.753607][ T12] veth0_macvtap: left promiscuous mode [ 626.761680][ T12] veth1_vlan: left promiscuous mode [ 626.763937][ T5895] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 626.777995][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.786487][ T5895] usb 5-1: Product: syz [ 626.791229][ T5895] usb 5-1: Manufacturer: syz [ 626.796024][ T5895] usb 5-1: SerialNumber: syz [ 626.809383][ T5895] usb 5-1: config 0 descriptor?? [ 626.822797][ T5895] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 626.832038][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 626.842283][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.853775][ T5895] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 626.863301][ T5895] usb 5-1: media controller created [ 626.869055][ T9780] usb 4-1: Using ep0 maxpacket: 16 [ 626.879482][ T9780] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 626.892305][ T9780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.911915][ T9780] usb 4-1: Product: syz [ 626.918932][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.927527][ T9780] usb 4-1: Manufacturer: syz [ 626.933968][ T9780] usb 4-1: SerialNumber: syz [ 626.947088][ T9780] usb 4-1: config 0 descriptor?? [ 627.025266][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 627.104874][ T5895] DVB: Unable to find symbol mt352_attach() [ 627.114603][ T5895] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 627.227537][ T5895] rc_core: IR keymap rc-dvico-portable not found [ 627.244502][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.258200][ T5895] Registered IR keymap rc-empty [ 627.259957][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.266355][ T5895] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 627.288901][ T5895] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input37 [ 627.315311][ T5895] dvb-usb: schedule remote query interval to 100 msecs. [ 627.334707][ T5895] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 627.361963][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.367341][ T9780] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 627.377106][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.437927][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 627.476080][ T9780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.488130][ T9780] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 627.496654][ T9780] usb 4-1: media controller created [ 627.558119][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 627.589161][ T9780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.659265][T14497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 627.678058][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 627.687532][ T9780] zl10353_read_register: readreg error (reg=127, ret==0) [ 627.706291][ T9780] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 627.715380][ T9780] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 627.736131][ T9780] usb 4-1: USB disconnect, device number 68 [ 627.773661][T14501] __nla_validate_parse: 2 callbacks suppressed [ 627.773693][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 627.795042][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 627.807581][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 627.818200][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 627.818681][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 627.915783][ T9780] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 627.942183][ T12] team_slave_1 (unregistering): left promiscuous mode [ 627.957651][ T12] team0 (unregistering): Port device team_slave_1 removed [ 627.969571][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 628.001503][ T12] team_slave_0 (unregistering): left promiscuous mode [ 628.010994][ T12] team0 (unregistering): Port device team_slave_0 removed [ 628.088031][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 628.199864][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 628.306389][ T5918] usb 5-1: USB disconnect, device number 77 [ 628.319263][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 628.471072][ T5918] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 628.536011][T14514] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3225'. [ 628.733872][ T12] IPVS: stop unused estimator thread 0... [ 629.185787][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 629.196276][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 629.217149][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 629.234174][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 629.256482][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 629.727999][ T9765] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 629.899477][ T9765] usb 1-1: Using ep0 maxpacket: 16 [ 629.912990][ T9765] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 629.931911][ T9765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.957707][ T9765] usb 1-1: Product: syz [ 629.972616][ T9765] usb 1-1: Manufacturer: syz [ 629.987177][ T9765] usb 1-1: SerialNumber: syz [ 629.996341][ T9765] usb 1-1: config 0 descriptor?? [ 630.118024][ T9780] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 630.249845][ T5918] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 630.311546][ T9780] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 630.329064][ T9780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.347327][ T9780] usb 3-1: config 0 descriptor?? [ 630.373412][ T9780] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 630.408028][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 630.421809][ T9765] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 630.435424][ T5918] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 630.449896][ T9765] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.460893][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.475525][ T9765] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 630.483905][ T5918] usb 2-1: Product: syz [ 630.488274][ T5918] usb 2-1: Manufacturer: syz [ 630.494423][ T9765] usb 1-1: media controller created [ 630.500110][ T5918] usb 2-1: SerialNumber: syz [ 630.514842][ T5918] usb 2-1: config 0 descriptor?? [ 630.530897][ T5918] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 630.543359][ T9765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.552272][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 630.574221][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.599596][ T5918] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 630.609969][ T5918] usb 2-1: media controller created [ 630.628504][ T9765] zl10353_read_register: readreg error (reg=127, ret==0) [ 630.642144][ T9765] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 630.651538][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.660362][ T9765] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 630.686619][ T9765] usb 1-1: USB disconnect, device number 79 [ 630.748603][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 630.763704][ T9780] gp8psk: usb in 128 operation failed. [ 630.770749][ T9780] gp8psk: usb in 137 operation failed. [ 630.781146][ T9780] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 630.795806][ T9780] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 630.802082][ T9765] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 630.833108][ T9780] usb 3-1: USB disconnect, device number 71 [ 630.848230][ T5918] DVB: Unable to find symbol mt352_attach() [ 630.856575][ T5918] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 630.949447][T14549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.968830][T14549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.977241][ T5918] rc_core: IR keymap rc-dvico-portable not found [ 630.987447][T14554] tipc: Started in network mode [ 630.991610][ T5918] Registered IR keymap rc-empty [ 630.997472][T14554] tipc: Node identity e6518dc61f7e, cluster identity 4711 [ 631.000424][ T5918] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 631.008520][T14554] tipc: Enabled bearer , priority 0 [ 631.020548][ T5918] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input38 [ 631.040803][T14549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.043178][T14554] syzkaller0: entered promiscuous mode [ 631.053359][T14549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.055101][T14554] syzkaller0: entered allmulticast mode [ 631.072962][ T5918] dvb-usb: schedule remote query interval to 100 msecs. [ 631.084490][ T5918] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 631.162971][T14553] tipc: Resetting bearer [ 631.164600][T14549] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.190623][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 631.263526][T14553] tipc: Disabling bearer [ 631.314051][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 631.402515][ T5833] usb 2-1: USB disconnect, device number 79 [ 631.507528][ T5833] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 631.578438][ T9765] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 631.649835][T14569] netlink: 'syz.3.3247': attribute type 39 has an invalid length. [ 631.732030][ T9765] usb 1-1: Using ep0 maxpacket: 32 [ 631.738027][ T9780] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 631.740510][ T9765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.759376][ T9765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.769965][ T9765] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 631.779389][ T9765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.789795][T14570] binder: 14568:14570 ioctl c0285840 80000000 returned -22 [ 631.813580][ T9765] usb 1-1: config 0 descriptor?? [ 632.002746][ T9780] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 632.016900][ T9780] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 632.026648][ T9780] usb 3-1: Product: syz [ 632.046163][ T9780] usb 3-1: config 0 descriptor?? [ 632.065813][ T9780] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 632.096471][ T9780] usb 3-1: Detected FT232H [ 632.285573][ T9765] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 632.290064][ T9780] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 632.300436][ T9765] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 632.463253][ T9765] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 632.493233][ T9780] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 632.512877][ T9780] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 632.538596][ T9780] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 632.570785][ T9780] usb 3-1: USB disconnect, device number 72 [ 632.599514][ T9780] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 632.626424][ T9780] ftdi_sio 3-1:0.0: device disconnected [ 632.648085][ T5833] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 632.667178][ T9765] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 632.759839][T14587] tipc: Enabled bearer , priority 0 [ 632.768318][T14587] syzkaller0: entered promiscuous mode [ 632.773943][T14587] syzkaller0: entered allmulticast mode [ 632.809404][T14586] tipc: Resetting bearer [ 632.836774][T14586] tipc: Disabling bearer [ 632.849201][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 632.861868][ T5833] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 632.871452][ T9765] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 632.884705][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.894699][ T5833] usb 2-1: Product: syz [ 632.900110][ T5833] usb 2-1: Manufacturer: syz [ 632.906190][ T5833] usb 2-1: SerialNumber: syz [ 632.931580][ T5833] usb 2-1: config 0 descriptor?? [ 633.118300][ T9780] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 633.176541][T14597] syzkaller0: entered promiscuous mode [ 633.182794][T14597] syzkaller0: entered allmulticast mode [ 633.196197][T14559] i2c i2c-1: adapter quirk: too many messages (addr 0x0006, size 0, read) [ 633.214800][ T9765] usb 1-1: USB disconnect, device number 80 [ 633.288795][ T9780] usb 4-1: Using ep0 maxpacket: 8 [ 633.309811][ T9780] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 633.320991][ T9780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.331699][ T9780] usb 4-1: Product: syz [ 633.336033][ T9780] usb 4-1: Manufacturer: syz [ 633.341674][ T9780] usb 4-1: SerialNumber: syz [ 633.351749][ T9780] usb 4-1: config 0 descriptor?? [ 633.359552][ T5833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 633.363892][ T9780] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 633.378498][ T9780] dvb-usb: bulk message failed: -22 (2/0) [ 633.385805][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.391275][ T9780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.403790][ T5833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 633.414513][ T9780] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 633.415083][ T5833] usb 2-1: media controller created [ 633.429822][ T9780] usb 4-1: media controller created [ 633.448936][ T9780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.495403][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.580355][ T5833] zl10353_read_register: readreg error (reg=127, ret==0) [ 633.600887][ T5833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 633.601131][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 633.610824][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 633.644920][ T5833] usb 2-1: USB disconnect, device number 80 [ 633.711452][ T9780] DVB: Unable to find symbol mt352_attach() [ 633.726013][ T9780] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 633.729595][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 633.811292][ T9780] rc_core: IR keymap rc-dvico-portable not found [ 633.818252][ T9780] Registered IR keymap rc-empty [ 633.823282][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.835537][ T9780] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 633.842140][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.864341][ T9780] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input39 [ 633.891442][ T9780] dvb-usb: schedule remote query interval to 100 msecs. [ 633.902564][ T9780] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 633.983634][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.004934][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.020417][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 634.149344][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 634.186197][T14607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.302854][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 634.433763][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 634.458809][T14617] __nla_validate_parse: 8 callbacks suppressed [ 634.458830][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3266'. [ 634.527502][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3266'. [ 634.559853][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 634.578649][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3266'. [ 634.610461][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3266'. [ 634.720718][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 634.824771][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 634.854351][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 634.978024][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.094225][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.238248][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.358385][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.472249][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.512140][T14615] syz.1.3265 (14615): drop_caches: 2 [ 635.608518][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.718083][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.845269][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 635.968155][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.078360][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.196208][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.313817][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.438329][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.552575][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.686896][ T9780] dvb-usb: bulk message failed: -22 (1/0) [ 636.803952][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 636.928077][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.047939][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.167478][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.286070][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.368742][T14621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3268'. [ 637.400394][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.502448][T14626] tipc: Enabling of bearer rejected, failed to enable media [ 637.528228][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.637993][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 637.667560][ T5909] usb 4-1: USB disconnect, device number 69 [ 637.812790][ T5909] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 639.919304][T14673] program syz.3.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.971820][T14673] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 640.051765][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 640.467958][ T9784] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 640.666808][ T9784] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 640.693281][ T9784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.725075][ T9784] usb 4-1: config 0 descriptor?? [ 640.959288][ T9784] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 640.982562][ T9784] [drm:udl_init] *ERROR* Selecting channel failed [ 641.117384][ T9784] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 641.134601][ T9784] [drm] Initialized udl on minor 2 [ 641.190245][ T9784] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 641.255427][ T9784] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 641.312950][ T9784] usb 4-1: USB disconnect, device number 70 [ 641.322567][ T9780] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 641.363455][ T9780] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 642.048964][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 642.598253][ T5833] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 642.768074][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 642.800570][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.822080][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.844170][ T5833] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 642.863637][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 642.863830][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.894751][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 642.925243][ T5833] usb 3-1: config 0 descriptor?? [ 642.935195][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 642.972776][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 643.368198][ T5833] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 643.387933][ T5833] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 643.564429][ T5833] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 643.765674][ T5833] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 643.966998][ T5833] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 644.312233][T14709] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0008, size 0, write) [ 644.367465][ T9784] usb 3-1: USB disconnect, device number 73 [ 644.738290][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 644.771194][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 644.798906][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 644.849675][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 645.254838][T14757] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3317'. [ 645.929013][ T9784] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 646.110356][ T9784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.130064][ T9784] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 646.162278][ T9784] usb 4-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 646.176968][ T9784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.193288][ T9784] usb 4-1: Product: syz [ 646.202739][ T9784] usb 4-1: Manufacturer: syz [ 646.211360][ T9784] usb 4-1: SerialNumber: syz [ 646.387995][ T9780] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 646.530533][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 646.570511][ T9780] usb 5-1: Using ep0 maxpacket: 32 [ 646.578218][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 646.592914][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.607000][ T9780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.619489][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 646.639243][ T9780] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 646.652870][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 646.663992][ T9780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.690475][ T9784] usb 4-1: USB disconnect, device number 71 [ 646.706586][ T9780] usb 5-1: config 0 descriptor?? [ 646.722906][ T9780] hub 5-1:0.0: USB hub found [ 646.923716][ T9780] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 647.137486][ T9780] usbhid 5-1:0.0: can't add hid device: -71 [ 647.155980][ T9780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 647.159683][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 647.230210][ T9780] usb 5-1: USB disconnect, device number 78 [ 647.838560][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 647.868693][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 647.906952][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 647.943978][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 648.098359][ T5918] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 648.156999][T14811] capability: warning: `syz.3.3338' uses deprecated v2 capabilities in a way that may be insecure [ 648.281203][ T5918] usb 1-1: no configurations [ 648.290036][ T5918] usb 1-1: can't read configurations, error -22 [ 648.448008][ T5918] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 648.618795][ T5918] usb 1-1: no configurations [ 648.627976][ T5918] usb 1-1: can't read configurations, error -22 [ 648.651276][ T5918] usb usb1-port1: attempt power cycle [ 648.929031][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'. [ 649.007962][ T5918] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 649.053237][ T5918] usb 1-1: no configurations [ 649.067982][ T5918] usb 1-1: can't read configurations, error -22 [ 649.201751][ T5918] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 649.240832][ T5918] usb 1-1: no configurations [ 649.252248][ T5918] usb 1-1: can't read configurations, error -22 [ 649.275807][ T5918] usb usb1-port1: unable to enumerate USB device [ 649.694688][ T9780] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 649.860251][ T9780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.881691][ T9780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.902930][ T9780] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 649.921920][ T9780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.942848][ T9780] usb 4-1: config 0 descriptor?? [ 650.162858][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 650.162878][ T30] audit: type=1326 audit(1776468200.546:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.224395][ T30] audit: type=1326 audit(1776468200.546:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.280387][ T30] audit: type=1326 audit(1776468200.546:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.339256][ T30] audit: type=1326 audit(1776468200.546:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.390391][ T9780] playstation 0003:054C:0BA0.000F: item fetching failed at offset 0/7 [ 650.402578][ T30] audit: type=1326 audit(1776468200.546:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.403246][ T9780] playstation 0003:054C:0BA0.000F: Parse failed [ 650.463719][ T9780] playstation 0003:054C:0BA0.000F: probe with driver playstation failed with error -22 [ 650.489581][ T30] audit: type=1326 audit(1776468200.546:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.595231][ T30] audit: type=1326 audit(1776468200.546:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.685548][ T30] audit: type=1326 audit(1776468200.546:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.708047][ T30] audit: type=1326 audit(1776468200.546:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 650.751227][ T30] audit: type=1326 audit(1776468200.546:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 651.029984][ T5918] usb 4-1: USB disconnect, device number 72 [ 651.164318][T14864] loop6: detected capacity change from 0 to 524287999 [ 651.186637][T14864] buffer_io_error: 27 callbacks suppressed [ 651.186658][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.213315][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.223734][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.232138][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.283147][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.365600][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.368506][T14867] __nla_validate_parse: 4 callbacks suppressed [ 651.368524][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 651.395635][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.415125][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.425443][T14864] ldm_validate_partition_table(): Disk read failed. [ 651.433124][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.439650][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 651.446975][T14864] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.471418][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 651.477666][T14864] Dev loop6: unable to read RDB block 0 [ 651.492152][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 651.499557][T14864] loop6: unable to read partition table [ 651.519241][T14864] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 651.572021][T14865] ldm_validate_partition_table(): Disk read failed. [ 651.584629][T14865] Dev loop6: unable to read RDB block 0 [ 651.632326][T14865] loop6: unable to read partition table [ 651.660879][T14865] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 652.206509][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'. [ 652.318208][ T9784] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 652.412513][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 652.431388][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 652.471555][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 652.486669][ T9784] usb 4-1: Using ep0 maxpacket: 8 [ 652.521399][ T9784] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 652.543333][ T9784] usb 4-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 652.557516][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 652.569847][ T9784] usb 4-1: config 179 has no interface number 0 [ 652.576438][ T9784] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 652.589164][T14904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 652.600993][ T9784] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 652.630299][ T9784] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 652.659335][T14904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3377'. [ 652.669563][ T9784] usb 4-1: config 179 interface 65 has no altsetting 0 [ 652.686017][ T9784] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 652.705467][ T9784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.953422][ T9784] usb 4-1: USB disconnect, device number 73 [ 655.207997][ T9784] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 655.367958][ T9784] usb 1-1: Using ep0 maxpacket: 8 [ 655.384364][ T9784] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 655.411852][ T9784] usb 1-1: config 179 has no interface number 0 [ 655.440300][ T9784] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 655.475990][ T9784] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 655.538017][ T9784] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 655.580756][ T9784] usb 1-1: config 179 interface 65 has no altsetting 0 [ 655.609728][ T9784] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 655.639928][ T9784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.655668][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.663536][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.889584][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.903149][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.944078][T14960] usb 1-1: USB disconnect, device number 85 [ 656.348346][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.401992][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.426804][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.481332][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.569409][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.583536][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.597167][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.609376][T14985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.619628][T14985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.988257][ T5918] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 657.151030][ T5918] usb 1-1: device descriptor read/64, error -71 [ 657.208196][T14960] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 657.300199][T14990] chnl_net:caif_netlink_parms(): no params data found [ 657.378776][T14960] usb 4-1: no configurations [ 657.383529][T14960] usb 4-1: can't read configurations, error -22 [ 657.398041][ T5918] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 657.443349][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.451050][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.458622][T14990] bridge_slave_0: entered allmulticast mode [ 657.466925][T14990] bridge_slave_0: entered promiscuous mode [ 657.476565][T14990] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.485858][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.494124][T14990] bridge_slave_1: entered allmulticast mode [ 657.502470][T14990] bridge_slave_1: entered promiscuous mode [ 657.518210][T14960] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 657.538045][ T5918] usb 1-1: device descriptor read/64, error -71 [ 657.552529][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.565951][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.610472][T14990] team0: Port device team_slave_0 added [ 657.619905][T14990] team0: Port device team_slave_1 added [ 657.648369][ T5918] usb usb1-port1: attempt power cycle [ 657.668391][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.675415][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.701819][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.708773][T14960] usb 4-1: no configurations [ 657.715212][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.724862][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.726106][T14960] usb 4-1: can't read configurations, error -22 [ 657.770274][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.798755][T14960] usb usb4-port1: attempt power cycle [ 657.901821][T15007] __nla_validate_parse: 5 callbacks suppressed [ 657.901844][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 657.909882][T14990] hsr_slave_0: entered promiscuous mode [ 657.925480][T14990] hsr_slave_1: entered promiscuous mode [ 657.932742][T14990] debugfs: 'hsr0' already exists in 'hsr' [ 657.940605][T14990] Cannot create hsr debugfs directory [ 657.948686][T15007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3409'. [ 657.968953][T15007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3409'. [ 658.038437][ T5918] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 658.059014][ T5918] usb 1-1: device descriptor read/8, error -71 [ 658.147963][T14960] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 658.181813][T14960] usb 4-1: no configurations [ 658.186920][T14960] usb 4-1: can't read configurations, error -22 [ 658.233431][T14990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.314735][ T5918] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 658.326017][T14990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.339085][ T5918] usb 1-1: device descriptor read/8, error -71 [ 658.340867][T14960] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 658.369134][T14960] usb 4-1: no configurations [ 658.373860][T14960] usb 4-1: can't read configurations, error -22 [ 658.381137][T14960] usb usb4-port1: unable to enumerate USB device [ 658.416398][T14990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.449259][ T5918] usb usb1-port1: unable to enumerate USB device [ 658.487599][T14964] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 658.497811][T14990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.662755][T14990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.669927][T14964] usb 3-1: Using ep0 maxpacket: 32 [ 658.677779][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.684992][T14985] Bluetooth: hci0: command tx timeout [ 658.692893][T14990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.699911][T14964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.710957][T14964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.721212][T14964] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 658.723196][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.739626][T14964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.750873][T14964] usb 3-1: config 0 descriptor?? [ 658.757525][T14990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.778984][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.787206][T14990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.824011][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.961931][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.002011][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.024815][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.032077][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.059855][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.064763][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 659.067120][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.199804][T14964] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 659.210279][T14964] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 659.228048][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.268569][T14990] veth0_vlan: entered promiscuous mode [ 659.282384][T14990] veth1_vlan: entered promiscuous mode [ 659.321610][T14990] veth0_macvtap: entered promiscuous mode [ 659.333178][T14990] veth1_macvtap: entered promiscuous mode [ 659.354451][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.373112][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.382833][T14964] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 659.394144][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.403470][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.414721][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.418190][ T5918] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 659.426369][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.544128][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.555349][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.587946][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 659.594008][T14964] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 659.596518][ T5918] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 659.613325][ T5918] usb 2-1: config 179 has no interface number 0 [ 659.620143][ T5918] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 659.624379][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.633148][ T5918] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 659.642587][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.654827][ T5918] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 659.674592][ T5918] usb 2-1: config 179 interface 65 has no altsetting 0 [ 659.683185][ T5918] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 659.693860][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.805534][T14964] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 659.820343][T14964] ft260 0003:0403:6030.0010: failed to retrieve status: -71 [ 659.828678][T14964] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 659.863232][T14964] usb 3-1: USB disconnect, device number 74 [ 659.887337][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 659.911598][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 659.952317][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 659.990249][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 660.015391][ T5918] usb 2-1: USB disconnect, device number 81 [ 660.768030][T14985] Bluetooth: hci0: command tx timeout [ 660.978746][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 661.014385][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3428'. [ 661.069824][ T5918] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 661.225122][T15064] netlink: 'syz.2.3429': attribute type 29 has an invalid length. [ 661.251124][T15064] netlink: 'syz.2.3429': attribute type 29 has an invalid length. [ 661.270625][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.285947][T15064] netlink: 'syz.2.3429': attribute type 29 has an invalid length. [ 661.297915][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.321183][ T5918] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 661.345688][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.377237][ T5918] usb 4-1: config 0 descriptor?? [ 661.630452][ T5918] usb 4-1: USB disconnect, device number 78 [ 662.047972][ T9764] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 662.208051][ T9764] usb 3-1: Using ep0 maxpacket: 32 [ 662.223797][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.259165][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.278416][ T9764] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 662.310253][ T9764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.334904][ T9764] usb 3-1: config 0 descriptor?? [ 662.779580][ T9764] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 662.807960][ T9764] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 662.837901][T14985] Bluetooth: hci0: command tx timeout [ 662.965049][ T9764] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 663.174296][ T9764] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 663.388969][ T9764] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 663.431917][ T9764] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 663.453508][ T9764] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 663.506403][ T9764] usb 3-1: USB disconnect, device number 75 [ 664.351349][T15112] __nla_validate_parse: 1 callbacks suppressed [ 664.351372][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 664.401503][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 664.445924][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 664.928610][T14985] Bluetooth: hci0: command tx timeout [ 665.211515][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 665.232637][T15138] netlink: 'syz.1.3461': attribute type 29 has an invalid length. [ 665.263724][T15135] netlink: 'syz.1.3461': attribute type 29 has an invalid length. [ 665.292616][T15138] netlink: 'syz.1.3461': attribute type 29 has an invalid length. [ 665.503478][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'. [ 665.532162][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'. [ 665.557083][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'. [ 666.039198][T15161] netlink: 'syz.0.3472': attribute type 29 has an invalid length. [ 666.074746][T15158] netlink: 'syz.0.3472': attribute type 29 has an invalid length. [ 666.104759][T15161] netlink: 'syz.0.3472': attribute type 29 has an invalid length. [ 666.258420][T14964] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 666.429175][T14964] usb 4-1: Using ep0 maxpacket: 8 [ 666.454647][T14964] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 666.481395][T14964] usb 4-1: config 179 has no interface number 0 [ 666.493010][T14964] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 666.521549][T14964] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 666.547946][T14964] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 666.570422][T14964] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 666.606984][T14964] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 666.645074][T14964] usb 4-1: config 179 interface 65 has no altsetting 0 [ 666.658015][T14964] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 666.677690][T14964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.954203][T14963] usb 4-1: USB disconnect, device number 79 [ 667.055303][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 667.107077][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 667.149187][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 667.778657][T15196] netlink: 'syz.4.3487': attribute type 29 has an invalid length. [ 667.810664][T15191] netlink: 'syz.4.3487': attribute type 29 has an invalid length. [ 667.856770][T15191] netlink: 'syz.4.3487': attribute type 29 has an invalid length. [ 668.897984][T14979] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 669.060495][T14979] usb 5-1: Using ep0 maxpacket: 16 [ 669.088653][T14979] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 669.112585][T14979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.148427][T14979] usb 5-1: Product: syz [ 669.154613][T14979] usb 5-1: Manufacturer: syz [ 669.169198][T14979] usb 5-1: SerialNumber: syz [ 669.189044][T14979] usb 5-1: config 0 descriptor?? [ 669.618235][T14979] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 669.651483][T14979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 669.685706][T14979] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 669.709581][T14979] usb 5-1: media controller created [ 669.766700][T15255] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 669.779405][T14979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.785177][T15254] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 669.818259][T15232] dtv5100: wlen = 0, aborting. [ 669.827677][T15255] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 669.860143][T14979] zl10353_read_register: readreg error (reg=127, ret==0) [ 669.887670][T14979] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 669.911007][T14979] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 669.941810][T14979] usb 5-1: USB disconnect, device number 79 [ 670.073643][T14979] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 670.519276][T15265] syzkaller0: entered promiscuous mode [ 670.532987][T15265] syzkaller0: entered allmulticast mode [ 674.053346][T15274] syz.2.3524 (15274): drop_caches: 2 [ 675.002156][T14963] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 675.168612][T14963] usb 3-1: Using ep0 maxpacket: 16 [ 675.227623][T14963] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 675.237013][T14963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.248039][T14963] usb 3-1: Product: syz [ 675.252308][T14963] usb 3-1: Manufacturer: syz [ 675.256947][T14963] usb 3-1: SerialNumber: syz [ 675.279177][T14963] usb 3-1: config 0 descriptor?? [ 675.715746][T14963] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 675.728175][T14963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 675.738749][T14963] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 675.746860][T14963] usb 3-1: media controller created [ 675.778780][T14963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.889235][T15272] __nla_validate_parse: 4 callbacks suppressed [ 675.889273][T15272] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3523'. [ 676.339311][T14963] zl10353_read_register: readreg error (reg=127, ret==0) [ 676.346513][T15292] dtv5100: wlen = 0, aborting. [ 676.369076][T14963] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 676.386633][T14963] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 676.409604][T14963] usb 3-1: USB disconnect, device number 76 [ 676.534716][T14963] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 676.903252][T15320] syzkaller0: entered promiscuous mode [ 676.919255][T15320] syzkaller0: entered allmulticast mode [ 677.643446][T14963] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 677.820862][T14963] usb 3-1: Using ep0 maxpacket: 8 [ 677.845030][T14963] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 677.861796][T14963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.884992][T14963] usb 3-1: Product: syz [ 677.897934][T14963] usb 3-1: Manufacturer: syz [ 677.906191][T14963] usb 3-1: SerialNumber: syz [ 677.927643][T14963] usb 3-1: config 0 descriptor?? [ 677.948373][T14963] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 677.967044][T14963] dvb-usb: bulk message failed: -22 (2/0) [ 677.997786][T14963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.022583][T14963] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 678.048015][T14963] usb 3-1: media controller created [ 678.128141][T14963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.183081][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 678.301150][T14963] DVB: Unable to find symbol mt352_attach() [ 678.337931][T14963] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 678.386883][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.418848][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.479115][T14963] rc_core: IR keymap rc-dvico-portable not found [ 678.502680][T14963] Registered IR keymap rc-empty [ 678.520206][T14963] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 678.525943][T15367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.558784][T14963] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input40 [ 678.561951][T15367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.600454][T14963] dvb-usb: schedule remote query interval to 100 msecs. [ 678.617053][T14963] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 678.704821][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 678.717970][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 678.829039][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 678.856538][T15367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 678.947977][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.067892][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.187934][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.317925][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.447974][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 679.569390][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 679.698869][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.818812][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 679.939175][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 680.058013][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 680.177919][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 680.299310][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 680.407975][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 680.539377][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 680.657938][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 680.778129][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 680.877957][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 681.014901][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 681.149122][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 681.267994][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 681.377954][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 681.497936][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 681.598219][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 681.718988][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 681.854671][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 681.971997][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 682.099404][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 682.228528][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.328049][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.448253][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.572180][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.697973][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.848692][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 682.971644][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.087989][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.214644][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.337972][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.456520][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.588020][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 683.692210][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 683.812699][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 683.928495][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.045418][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.162209][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.284873][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.408347][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.523670][ T9784] dvb-usb: bulk message failed: -22 (1/0) [ 684.642075][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 684.766018][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 684.879311][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 684.994378][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 685.111235][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 685.229077][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 685.338176][T14963] dvb-usb: bulk message failed: -22 (1/0) [ 685.415535][ T9764] usb 3-1: USB disconnect, device number 77 [ 685.630876][ T9764] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 686.046290][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.052873][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.263730][T15433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 686.729880][T15455] netlink: 'syz.1.3600': attribute type 29 has an invalid length. [ 686.763675][T15455] netlink: 'syz.1.3600': attribute type 29 has an invalid length. [ 687.205320][T15469] IPv6: NLM_F_CREATE should be specified when creating new route [ 688.778155][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 688.948019][T14963] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 689.131386][T14963] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 689.169872][T15527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3634'. [ 689.171193][T14963] usb 1-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 689.199838][T14963] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 689.209445][T14963] usb 1-1: config 220 has no interface number 1 [ 689.224130][T14963] usb 1-1: config 220 interface 0 has no altsetting 0 [ 689.232816][T14963] usb 1-1: config 220 interface 76 has no altsetting 0 [ 689.267040][T14963] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 689.280425][T14963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.288848][T14963] usb 1-1: Product: syz [ 689.293248][T14963] usb 1-1: Manufacturer: syz [ 689.299413][T14963] usb 1-1: SerialNumber: syz [ 689.327010][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 689.468086][T14964] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 689.518541][T15514] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 689.518541][T15514] program syz.0.3627 not setting count and/or reply_len properly [ 689.633764][T14964] usb 4-1: Using ep0 maxpacket: 8 [ 689.648454][T14964] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 689.659918][T14964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.684194][T14964] usb 4-1: Product: syz [ 689.694640][T14964] usb 4-1: Manufacturer: syz [ 689.699888][T14964] usb 4-1: SerialNumber: syz [ 689.716719][T14964] usb 4-1: config 0 descriptor?? [ 689.742258][T14964] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 689.774147][T14964] dvb-usb: bulk message failed: -22 (2/0) [ 689.796249][T14964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 689.833177][T14964] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 689.846935][T14963] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 689.854387][T14964] usb 4-1: media controller created [ 689.859666][T14963] uvcvideo 1-1:220.0: No valid video chain found. [ 689.918859][T14963] usb 1-1: USB disconnect, device number 90 [ 689.932754][T14964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.983183][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 690.053577][T14964] DVB: Unable to find symbol mt352_attach() [ 690.062254][T14964] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 690.147916][T14964] rc_core: IR keymap rc-dvico-portable not found [ 690.159763][T14964] Registered IR keymap rc-empty [ 690.181720][T14964] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 690.185975][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.216420][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.231684][T14964] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input41 [ 690.252392][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.252632][T14964] dvb-usb: schedule remote query interval to 100 msecs. [ 690.268442][T14964] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 690.272356][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.387947][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 690.521667][T15565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.530777][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 690.561587][T15563] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 690.639451][T14964] dvb-usb: bulk message failed: -22 (1/0) [ 690.681201][T14960] usb 4-1: USB disconnect, device number 80 [ 690.793615][T14960] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 691.529106][ T5918] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 691.691446][ T5918] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 691.709263][ T5918] usb 3-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 691.730058][ T5918] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 691.749713][ T5918] usb 3-1: config 220 has no interface number 1 [ 691.759754][ T5918] usb 3-1: config 220 interface 0 has no altsetting 0 [ 691.767736][ T5918] usb 3-1: config 220 interface 76 has no altsetting 0 [ 691.780503][ T5918] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 691.789894][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.804843][ T5918] usb 3-1: Product: syz [ 691.809504][ T5918] usb 3-1: Manufacturer: syz [ 691.814233][ T5918] usb 3-1: SerialNumber: syz [ 691.890717][T15613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 692.027368][T15592] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 692.027368][T15592] program syz.2.3660 not setting count and/or reply_len properly [ 692.138058][T14964] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 692.262370][ T5918] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 692.286199][ T5918] uvcvideo 3-1:220.0: No valid video chain found. [ 692.318270][ T5918] usb 3-1: USB disconnect, device number 78 [ 692.328172][T14964] usb 1-1: Using ep0 maxpacket: 32 [ 692.347758][T14964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.377567][T14964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.401132][T14964] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 692.423624][T14964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.457710][T14964] usb 1-1: config 0 descriptor?? [ 692.925050][T14964] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 692.949784][T14964] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 693.113684][T14964] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 693.321293][T14964] ft260 0003:0403:6030.0012: failed to retrieve system status [ 693.345449][T14964] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -32 [ 693.374417][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3688'. [ 694.118236][T14964] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 694.290699][T14964] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 694.299297][T14964] usb 5-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 694.314471][T14964] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 694.335535][T14964] usb 5-1: config 220 has no interface number 1 [ 694.347968][T14964] usb 5-1: config 220 interface 0 has no altsetting 0 [ 694.362810][T14964] usb 5-1: config 220 interface 76 has no altsetting 0 [ 694.377917][T14964] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 694.388025][T14964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.397770][T14964] usb 5-1: Product: syz [ 694.402734][T14964] usb 5-1: Manufacturer: syz [ 694.407507][T14964] usb 5-1: SerialNumber: syz [ 694.633759][T15671] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 694.633759][T15671] program syz.4.3693 not setting count and/or reply_len properly [ 694.936589][T14964] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 694.952882][ T5918] usb 1-1: USB disconnect, device number 91 [ 694.958230][T14964] uvcvideo 5-1:220.0: No valid video chain found. [ 695.013349][T14964] usb 5-1: USB disconnect, device number 80 [ 696.881869][ T9764] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 697.052065][ T9764] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 697.079409][ T9764] usb 5-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 697.106771][ T9764] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 697.135764][ T9764] usb 5-1: config 220 has no interface number 1 [ 697.155857][ T9764] usb 5-1: config 220 interface 0 has no altsetting 0 [ 697.176725][ T9764] usb 5-1: config 220 interface 76 has no altsetting 0 [ 697.200931][ T9764] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 697.230698][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.256607][ T9764] usb 5-1: Product: syz [ 697.270857][ T9764] usb 5-1: Manufacturer: syz [ 697.285465][ T9764] usb 5-1: SerialNumber: syz [ 697.524385][T15722] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 697.524385][T15722] program syz.4.3712 not setting count and/or reply_len properly [ 697.758460][ T9764] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 697.791670][ T9764] uvcvideo 5-1:220.0: No valid video chain found. [ 697.831986][ T9764] usb 5-1: USB disconnect, device number 81 [ 698.184032][T15767] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3729'. [ 699.165957][T15789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2916680627 (46666890032 ns) > initial count (16865692240 ns). Using initial count to start timer. [ 699.780781][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 699.798643][T14964] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 699.803291][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 699.846740][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 699.970176][T14964] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 699.993405][T14964] usb 3-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 700.017048][T14964] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 700.039671][T14964] usb 3-1: config 220 has no interface number 1 [ 700.052838][T14964] usb 3-1: config 220 interface 0 has no altsetting 0 [ 700.074446][T14964] usb 3-1: config 220 interface 76 has no altsetting 0 [ 700.092049][T14964] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 700.107234][T14964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.141621][T14964] usb 3-1: Product: syz [ 700.158377][T14964] usb 3-1: Manufacturer: syz [ 700.166557][T14964] usb 3-1: SerialNumber: syz [ 700.287962][ T9764] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 700.389200][T15801] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 700.389200][T15801] program syz.2.3742 not setting count and/or reply_len properly [ 700.447895][ T9764] usb 5-1: Using ep0 maxpacket: 32 [ 700.475740][ T9764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.512137][ T9764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.538438][ T9764] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 700.556291][ T9764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.591824][ T9764] usb 5-1: config 0 descriptor?? [ 700.790442][T14964] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 700.813172][T14964] uvcvideo 3-1:220.0: No valid video chain found. [ 700.854189][T14964] usb 3-1: USB disconnect, device number 79 [ 701.047467][ T9764] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 701.063159][ T9764] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 701.115979][T15835] syzkaller0: entered promiscuous mode [ 701.121814][T15835] syzkaller0: entered allmulticast mode [ 701.229655][ T9764] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 701.437359][ T9764] ft260 0003:0403:6030.0013: failed to retrieve system status [ 701.467206][ T9764] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -32 [ 701.663823][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 701.676275][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 701.685999][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 701.686019][ T30] audit: type=1326 audit(1776468252.066:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15845 comm="syz.2.3760" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x0 [ 701.716478][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 702.598130][T15865] fuse: Unknown parameter 'grou00000000000000000000' [ 702.813282][ T9764] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 702.992928][ T9764] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 703.001917][ T9764] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 703.011349][ T9764] usb 3-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 703.039482][ T9764] usb 3-1: config 220 has no interface number 2 [ 703.069284][ T9764] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.096735][ T9767] usb 5-1: USB disconnect, device number 82 [ 703.120824][ T9764] usb 3-1: config 220 interface 0 has no altsetting 0 [ 703.137572][ T9764] usb 3-1: config 220 interface 76 has no altsetting 0 [ 703.155495][ T9764] usb 3-1: config 220 interface 1 has no altsetting 0 [ 703.184120][ T9764] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 703.206047][ T9764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.235305][ T9764] usb 3-1: Product: syz [ 703.240974][ T9764] usb 3-1: Manufacturer: syz [ 703.246069][ T9764] usb 3-1: SerialNumber: syz [ 703.475805][T15863] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 703.475805][T15863] program syz.2.3767 not setting count and/or reply_len properly [ 703.556181][T15870] netlink: 'syz.4.3770': attribute type 24 has an invalid length. [ 703.564710][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 703.814790][ T9764] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 703.825384][ T9764] uvcvideo 3-1:220.0: No valid video chain found. [ 703.861626][ T9764] usb 3-1: USB disconnect, device number 80 [ 704.112557][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 704.131561][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 704.143188][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 706.620924][T15870] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 706.962036][T15899] fuse: Unknown parameter 'grou00000000000000000000' [ 707.042386][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 707.074917][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 707.105052][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 707.108994][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 707.153452][T15903] futex_wake_op: syz.4.3782 tries to shift op by -1; fix this program [ 707.687954][ T9764] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 707.849893][ T9764] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 707.862483][ T9764] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 707.872817][ T9764] usb 5-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 707.890793][ T9764] usb 5-1: config 220 has no interface number 2 [ 707.899571][ T9764] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.915776][ T9764] usb 5-1: config 220 interface 0 has no altsetting 0 [ 707.927325][ T9764] usb 5-1: config 220 interface 76 has no altsetting 0 [ 707.939078][ T9764] usb 5-1: config 220 interface 1 has no altsetting 0 [ 707.952745][ T9764] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 707.974381][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.992246][ T9764] usb 5-1: Product: syz [ 708.001574][ T9764] usb 5-1: Manufacturer: syz [ 708.018401][ T9764] usb 5-1: SerialNumber: syz [ 708.233395][T15908] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 708.233395][T15908] program syz.4.3785 not setting count and/or reply_len properly [ 708.370217][ T9764] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 708.386716][ T9764] uvcvideo 5-1:220.0: No valid video chain found. [ 708.395983][T15921] ------------[ cut here ]------------ [ 708.401888][T15921] !valid_signal(sig) [ 708.401909][T15921] WARNING: kernel/signal.c:2174 at do_notify_parent+0xd18/0xe30, CPU#0: syz.2.3788/15921 [ 708.415724][T15921] Modules linked in: [ 708.419999][T15921] CPU: 0 UID: 0 PID: 15921 Comm: syz.2.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.430967][T15921] Tainted: [L]=SOFTLOCKUP [ 708.435295][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.445351][T15921] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 708.450998][T15921] Code: c6 05 0a 06 93 0e 01 48 c7 c7 20 36 cb 8b be a3 08 00 00 48 c7 c2 a0 37 cb 8b e8 c3 8c 17 00 e9 2e fa ff ff e8 79 3e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 68 3e 3b 00 90 0f 0b 90 e9 db [ 708.470623][T15921] RSP: 0000:ffffc90006177c00 EFLAGS: 00010093 [ 708.476721][T15921] RAX: ffffffff8189d697 RBX: dffffc0000000000 RCX: ffff88802e083d80 [ 708.484793][T15921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 708.492776][T15921] RBP: ffffc90006177d50 R08: 0000000000000003 R09: 0000000000000004 [ 708.500756][T15921] R10: dffffc0000000000 R11: fffff52000c2ef9c R12: ffff88802ac16590 [ 708.508741][T15921] R13: ffff88802e083d80 R14: 0000000000000080 R15: 1ffff92000c2ef88 [ 708.516716][T15921] FS: 0000000000000000(0000) GS:ffff88812522b000(0000) knlGS:0000000000000000 [ 708.525663][T15921] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 708.532251][T15921] CR2: 0000000000000000 CR3: 0000000029bf0000 CR4: 00000000003526f0 [ 708.540243][T15921] Call Trace: [ 708.543530][T15921] [ 708.546473][T15921] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.551596][T15921] ? __pfx_do_notify_parent+0x10/0x10 [ 708.556983][T15921] ? do_raw_write_lock+0x11d/0x260 [ 708.562104][T15921] ? do_exit+0x79d/0x22c0 [ 708.566444][T15921] ? __pfx_do_raw_write_lock+0x10/0x10 [ 708.571911][T15921] ? lockdep_hardirqs_on+0x7a/0x110 [ 708.577118][T15921] ? kill_orphaned_pgrp+0x170/0x610 [ 708.582427][T15921] do_exit+0x13f1/0x22c0 [ 708.586709][T15921] ? __pfx_do_exit+0x10/0x10 [ 708.591336][T15921] __ia32_sys_exit+0x40/0x40 [ 708.595945][T15921] ia32_sys_call+0x2211/0x2230 [ 708.600808][T15921] __do_fast_syscall_32+0x229/0x6e0 [ 708.606190][T15921] ? do_fast_syscall_32+0x33/0x70 [ 708.611219][T15921] ? lockdep_hardirqs_on+0x7a/0x110 [ 708.616453][T15921] ? asm_int80_emulation+0x1a/0x20 [ 708.621568][T15921] ? do_int80_emulation+0x286/0x530 [ 708.626773][T15921] ? trace_irq_disable+0x3b/0x140 [ 708.631810][T15921] do_fast_syscall_32+0x33/0x70 [ 708.636669][T15921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.643008][T15921] RIP: 0023:0xf704f01c [ 708.647079][T15921] Code: Unable to access opcode bytes at 0xf704eff2. [ 708.653746][T15921] RSP: 002b:00000000f541c4cc EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 708.662182][T15921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f541c5ec [ 708.670178][T15921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f541c5f4 [ 708.678154][T15921] RBP: 00000000f7074f29 R08: 0000000000000000 R09: 0000000000000000 [ 708.686132][T15921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.694103][T15921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.702092][T15921] [ 708.705117][T15921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 708.712491][T15921] CPU: 0 UID: 0 PID: 15921 Comm: syz.2.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.723441][T15921] Tainted: [L]=SOFTLOCKUP [ 708.727897][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.737971][T15921] Call Trace: [ 708.741257][T15921] [ 708.744191][T15921] vpanic+0x56c/0xa60 [ 708.748192][T15921] ? __pfx__printk+0x10/0x10 [ 708.752822][T15921] ? __pfx_vpanic+0x10/0x10 [ 708.757505][T15921] ? is_bpf_text_address+0x292/0x2b0 [ 708.762798][T15921] ? is_bpf_text_address+0x26/0x2b0 [ 708.768281][T15921] panic+0xc5/0xd0 [ 708.772017][T15921] ? __pfx_panic+0x10/0x10 [ 708.776460][T15921] __warn+0x315/0x4c0 [ 708.780465][T15921] ? do_notify_parent+0xd18/0xe30 [ 708.785521][T15921] ? do_notify_parent+0xd18/0xe30 [ 708.790936][T15921] __report_bug+0x29a/0x540 [ 708.795561][T15921] ? do_notify_parent+0xd18/0xe30 [ 708.800601][T15921] ? __pfx___report_bug+0x10/0x10 [ 708.805648][T15921] ? stack_depot_save_flags+0x33/0x810 [ 708.811206][T15921] ? kasan_save_track+0x4f/0x80 [ 708.816087][T15921] ? kasan_save_track+0x3e/0x80 [ 708.820943][T15921] ? kasan_save_free_info+0x46/0x50 [ 708.826153][T15921] ? __kasan_slab_free+0x5c/0x80 [ 708.831101][T15921] ? kmem_cache_free+0x182/0x650 [ 708.836050][T15921] ? do_notify_parent+0xd18/0xe30 [ 708.841174][T15921] report_bug+0x16a/0x220 [ 708.845523][T15921] ? do_notify_parent+0xd18/0xe30 [ 708.850554][T15921] ? do_notify_parent+0xd1a/0xe30 [ 708.855631][T15921] handle_bug+0x9c/0x200 [ 708.859885][T15921] exc_invalid_op+0x1a/0x50 [ 708.864576][T15921] asm_exc_invalid_op+0x1a/0x20 [ 708.869431][T15921] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 708.875072][T15921] Code: c6 05 0a 06 93 0e 01 48 c7 c7 20 36 cb 8b be a3 08 00 00 48 c7 c2 a0 37 cb 8b e8 c3 8c 17 00 e9 2e fa ff ff e8 79 3e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 68 3e 3b 00 90 0f 0b 90 e9 db [ 708.894681][T15921] RSP: 0000:ffffc90006177c00 EFLAGS: 00010093 [ 708.900760][T15921] RAX: ffffffff8189d697 RBX: dffffc0000000000 RCX: ffff88802e083d80 [ 708.908747][T15921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 708.916725][T15921] RBP: ffffc90006177d50 R08: 0000000000000003 R09: 0000000000000004 [ 708.924702][T15921] R10: dffffc0000000000 R11: fffff52000c2ef9c R12: ffff88802ac16590 [ 708.932696][T15921] R13: ffff88802e083d80 R14: 0000000000000080 R15: 1ffff92000c2ef88 [ 708.940686][T15921] ? do_notify_parent+0xd17/0xe30 [ 708.945739][T15921] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.950769][T15921] ? __pfx_do_notify_parent+0x10/0x10 [ 708.956151][T15921] ? do_raw_write_lock+0x11d/0x260 [ 708.961268][T15921] ? do_exit+0x79d/0x22c0 [ 708.965612][T15921] ? __pfx_do_raw_write_lock+0x10/0x10 [ 708.971082][T15921] ? lockdep_hardirqs_on+0x7a/0x110 [ 708.976288][T15921] ? kill_orphaned_pgrp+0x170/0x610 [ 708.981498][T15921] do_exit+0x13f1/0x22c0 [ 708.985772][T15921] ? __pfx_do_exit+0x10/0x10 [ 708.990383][T15921] __ia32_sys_exit+0x40/0x40 [ 708.994980][T15921] ia32_sys_call+0x2211/0x2230 [ 709.000445][T15921] __do_fast_syscall_32+0x229/0x6e0 [ 709.005654][T15921] ? do_fast_syscall_32+0x33/0x70 [ 709.010771][T15921] ? lockdep_hardirqs_on+0x7a/0x110 [ 709.015976][T15921] ? asm_int80_emulation+0x1a/0x20 [ 709.021093][T15921] ? do_int80_emulation+0x286/0x530 [ 709.026479][T15921] ? trace_irq_disable+0x3b/0x140 [ 709.031521][T15921] do_fast_syscall_32+0x33/0x70 [ 709.036379][T15921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.042721][T15921] RIP: 0023:0xf704f01c [ 709.046812][T15921] Code: Unable to access opcode bytes at 0xf704eff2. [ 709.053482][T15921] RSP: 002b:00000000f541c4cc EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 709.061901][T15921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f541c5ec [ 709.069886][T15921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f541c5f4 [ 709.077869][T15921] RBP: 00000000f7074f29 R08: 0000000000000000 R09: 0000000000000000 [ 709.085879][T15921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.093855][T15921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.101843][T15921] [ 709.105257][T15921] Kernel Offset: disabled [ 709.109583][T15921] Rebooting in 86400 seconds..