last executing test programs: 38.46848594s ago: executing program 1 (id=2731): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 37.969086344s ago: executing program 1 (id=2733): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 27.687199064s ago: executing program 1 (id=2750): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 11.805907988s ago: executing program 3 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffff8, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}}, 0x40010) 11.274205501s ago: executing program 4 (id=2788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f000000bb80), 0x0, 0x4004000) 11.130864605s ago: executing program 3 (id=2790): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) 10.722278134s ago: executing program 4 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/132, 0x84}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000000)=""/124, 0x7c}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000000, 0x0) 9.157954702s ago: executing program 4 (id=2793): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB='v'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.691429026s ago: executing program 4 (id=2800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000f1"], 0x10}}], 0x1, 0x4004000) 6.106242344s ago: executing program 4 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0x1, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.701053526s ago: executing program 2 (id=2805): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 5.246744468s ago: executing program 2 (id=2806): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 5.19821569s ago: executing program 4 (id=2807): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x82, 0x1e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) fanotify_init(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640), 0x0, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in=@loopback}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0x9a) sendmmsg$unix(r4, &(0x7f0000000940), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) 4.696435865s ago: executing program 2 (id=2809): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB='v'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.690539899s ago: executing program 0 (id=2811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x24040881) 2.982892461s ago: executing program 0 (id=2812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000f1"], 0x10}}], 0x1, 0x4004000) 2.332197079s ago: executing program 0 (id=2813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 2.167519275s ago: executing program 3 (id=2814): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x5c, 0x8001, 0x0, 0x9, 0x0, 0xfffbfe0000000001, 0xfa11, 0xffffffff}, 0x0) 2.119531067s ago: executing program 2 (id=2815): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 2.011211005s ago: executing program 1 (id=2752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x34, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.655107841s ago: executing program 0 (id=2816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0x1, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.608366555s ago: executing program 2 (id=2817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x0) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket(0x0, 0x80000, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.540516974s ago: executing program 3 (id=2818): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.53717164s ago: executing program 1 (id=2819): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x25c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_ACT={0x128, 0x1, [@m_ctinfo={0x124, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xf5, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9b8a1a44f36c7a11299b6c14c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 908.16373ms ago: executing program 1 (id=2820): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000d80)) read$hidraw(r6, 0x0, 0x49) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4000) syz_clone3(&(0x7f00000003c0)={0x4002000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240), {0x16}, &(0x7f0000000280)=""/87, 0x57, &(0x7f0000000300)=""/60, &(0x7f0000000380)=[r7, r8], 0x2, {r0}}, 0x58) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r12, 0x1, &(0x7f0000000000)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r11, 0x0, 0x0, 0x8}]) 877.861745ms ago: executing program 3 (id=2821): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000100)) 704.160676ms ago: executing program 0 (id=2822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000f1"], 0x10}}], 0x1, 0x4004000) 154.475251ms ago: executing program 3 (id=2823): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) 65.622871ms ago: executing program 0 (id=2824): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB='v'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=2825): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): yzkaller0>, priority 0 [ 657.779278][T11384] syzkaller0: entered promiscuous mode [ 657.784928][T11384] syzkaller0: entered allmulticast mode [ 657.945582][T11382] tipc: Resetting bearer [ 658.083523][T11381] tipc: Resetting bearer [ 658.164171][T11381] tipc: Disabling bearer [ 659.481783][T11394] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1849'. [ 662.041191][T11412] tipc: Enabled bearer , priority 0 [ 662.070478][T11412] syzkaller0: entered promiscuous mode [ 662.076136][T11412] syzkaller0: entered allmulticast mode [ 662.193894][T11412] tipc: Resetting bearer [ 662.286678][T11411] tipc: Resetting bearer [ 662.350789][T11411] tipc: Disabling bearer [ 663.050479][T11420] tipc: Enabled bearer , priority 0 [ 663.117443][T11421] syzkaller0: entered promiscuous mode [ 663.123585][T11421] syzkaller0: entered allmulticast mode [ 663.264349][T11420] tipc: Resetting bearer [ 663.364921][T11419] tipc: Resetting bearer [ 663.395614][T11419] tipc: Disabling bearer [ 664.152023][T11433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1863'. [ 665.181374][T11446] 9pnet_fd: Insufficient options for proto=fd [ 666.171294][T11453] tipc: Enabled bearer , priority 0 [ 666.199589][T11453] tipc: Resetting bearer [ 666.258326][T11452] tipc: Disabling bearer [ 666.553058][ T30] audit: type=1326 audit(1758380584.555:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.1.1872" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 669.104067][T11475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1878'. [ 669.319891][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 670.146361][T11480] 9pnet_fd: Insufficient options for proto=fd [ 671.794733][T11492] tipc: Enabled bearer , priority 0 [ 671.805928][T11493] syzkaller0: entered promiscuous mode [ 671.812166][T11493] syzkaller0: entered allmulticast mode [ 671.986676][T11492] tipc: Resetting bearer [ 672.062240][T11490] tipc: Resetting bearer [ 672.114799][T11490] tipc: Disabling bearer [ 672.329281][ T11] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 672.531204][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 672.573895][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 672.582427][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.592628][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.602614][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.612838][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.626084][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.635307][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.089583][ T11] usb 1-1: usb_control_msg returned -32 [ 673.095444][ T11] usbtmc 1-1:16.0: can't read capabilities [ 673.493528][T11503] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 673.523465][ T11] usb 1-1: USB disconnect, device number 17 [ 674.010307][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 674.745189][T11513] 9pnet_fd: Insufficient options for proto=fd [ 675.578874][ T3372] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 675.759709][ T3372] usb 3-1: Using ep0 maxpacket: 8 [ 675.840016][ T3372] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 675.887478][ T3372] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 675.896877][ T3372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.905247][ T3372] usb 3-1: Product: syz [ 675.909727][ T3372] usb 3-1: Manufacturer: syz [ 675.914483][ T3372] usb 3-1: SerialNumber: syz [ 676.013865][ T3372] usb 3-1: config 0 descriptor?? [ 676.106417][ T3372] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 676.114719][ T3372] usb 3-1: setting power ON [ 676.119441][ T3372] dvb-usb: bulk message failed: -22 (2/0) [ 676.229022][ T3372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 676.272256][ T3372] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 676.281163][ T3372] usb 3-1: media controller created [ 676.476113][ T3372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.910917][ T3372] usb 3-1: selecting invalid altsetting 6 [ 676.916910][ T3372] usb 3-1: digital interface selection failed (-22) [ 676.924090][ T3372] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 676.987720][ T3372] usb 3-1: setting power OFF [ 676.992713][ T3372] dvb-usb: bulk message failed: -22 (2/0) [ 676.998860][ T3372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 677.008584][ T3372] (NULL device *): no alternate interface [ 678.056018][T11537] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1899'. [ 679.065596][ T30] audit: type=1326 audit(1758380597.065:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.0.1901" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x0 [ 682.492622][T11560] 9pnet_fd: Insufficient options for proto=fd [ 684.597502][ T3372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 684.684642][ T3372] usb 3-1: USB disconnect, device number 13 [ 685.713411][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 685.813519][T11576] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1913'. [ 687.243479][T11590] 9pnet_fd: Insufficient options for proto=fd [ 688.514284][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 689.250484][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 689.283630][T11611] tipc: Enabled bearer , priority 0 [ 689.307349][T11612] syzkaller0: entered promiscuous mode [ 689.313252][T11612] syzkaller0: entered allmulticast mode [ 689.560886][T11611] tipc: Resetting bearer [ 689.601687][T11610] tipc: Resetting bearer [ 689.678135][T11610] tipc: Disabling bearer [ 689.911485][T11618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1925'. [ 691.234776][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1927'. [ 693.930757][T11632] tipc: Enabled bearer , priority 0 [ 693.971868][T11632] syzkaller0: entered promiscuous mode [ 693.977546][T11632] syzkaller0: entered allmulticast mode [ 694.159121][T11632] tipc: Resetting bearer [ 694.246499][T11630] tipc: Resetting bearer [ 694.269174][T11630] tipc: Disabling bearer [ 695.183204][ T11] hid_parser_main: 5 callbacks suppressed [ 695.183268][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.199536][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.207083][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.215745][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.223414][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.231105][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.238757][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.246268][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.253915][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.261552][ T11] hid-generic 0005:0006:0003.000D: unknown main item tag 0x0 [ 695.599744][ T5875] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 695.660298][ T11] hid-generic 0005:0006:0003.000D: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on syz0 [ 695.769028][ T5875] usb 5-1: device descriptor read/64, error -71 [ 696.028922][ T5875] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 696.194748][ T5875] usb 5-1: device descriptor read/64, error -71 [ 696.325833][ T5875] usb usb5-port1: attempt power cycle [ 696.704054][ T5875] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 696.780441][ T5875] usb 5-1: device descriptor read/8, error -71 [ 697.351467][ T5875] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 697.372829][T11652] tipc: Enabled bearer , priority 0 [ 697.392379][ T5875] usb 5-1: device descriptor read/8, error -71 [ 697.405679][T11653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1937'. [ 697.441296][T11649] syzkaller0: entered promiscuous mode [ 697.446962][T11649] syzkaller0: entered allmulticast mode [ 697.513677][ T5875] usb usb5-port1: unable to enumerate USB device [ 697.563171][T11646] netlink: 'syz.0.1934': attribute type 20 has an invalid length. [ 697.571502][T11646] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.618881][T11649] tipc: Resetting bearer [ 697.650009][T11648] tipc: Resetting bearer [ 697.699881][T11648] tipc: Disabling bearer [ 698.644566][T11661] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1940'. [ 698.654011][T11661] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1940'. [ 699.341827][T11668] loop6: detected capacity change from 0 to 63 [ 699.366061][ T6002] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.441894][ T6002] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.478309][T11671] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.486871][T11671] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.523148][ T6002] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.559909][ T6002] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.674322][ T6002] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.687665][T11671] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.724562][T11671] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.780806][T11668] Buffer I/O error on dev loop6, logical block 0, async page read [ 701.723212][T11669] kvm: user requested TSC rate below hardware speed [ 703.068698][ T3372] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 703.298712][ T3372] usb 5-1: Using ep0 maxpacket: 16 [ 703.336378][ T3372] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.347884][ T3372] usb 5-1: config 0 interface 0 has no altsetting 0 [ 703.355056][ T3372] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 703.364276][ T3372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.578532][ T3372] usb 5-1: config 0 descriptor?? [ 703.605985][T11696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1949'. [ 704.145537][ T3372] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 704.663753][ T5875] usb 5-1: USB disconnect, device number 23 [ 705.037007][T11699] fido_id[11699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 705.087849][T11703] tipc: Enabled bearer , priority 0 [ 705.122827][T11703] syzkaller0: entered promiscuous mode [ 705.131866][T11703] syzkaller0: entered allmulticast mode [ 705.298059][T11703] tipc: Resetting bearer [ 705.387905][T11702] tipc: Resetting bearer [ 705.489490][T11702] tipc: Disabling bearer [ 706.968911][ T5875] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 707.332980][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.344178][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 707.353849][ T5875] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 707.363501][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.651365][ T5875] usb 3-1: config 0 descriptor?? [ 707.683123][ T5875] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 707.693396][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 707.851633][ T5875] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 707.899235][T11714] dvb-usb: bulk message failed: -22 (2/0) [ 707.940381][T11714] netlink: 'syz.2.1952': attribute type 6 has an invalid length. [ 707.948233][T11714] netlink: 'syz.2.1952': attribute type 7 has an invalid length. [ 707.956336][T11714] netlink: 'syz.2.1952': attribute type 8 has an invalid length. [ 707.967718][ T5875] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 707.975848][ T5875] usb 3-1: media controller created [ 708.042858][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 709.413125][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 709.419741][ T5875] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 709.511316][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 709.780435][ T5875] dvb-usb: schedule remote query interval to 150 msecs. [ 709.787552][ T5875] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 709.939244][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 709.947539][ T5875] dvb-usb: error while querying for an remote control event. [ 710.000319][T11722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1956'. [ 710.108878][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.114738][ T5875] dvb-usb: error while querying for an remote control event. [ 710.282730][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.288833][ T5875] dvb-usb: error while querying for an remote control event. [ 710.449094][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.456705][ T5875] dvb-usb: error while querying for an remote control event. [ 710.619053][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.624926][ T5875] dvb-usb: error while querying for an remote control event. [ 710.808918][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.814862][ T5875] dvb-usb: error while querying for an remote control event. [ 710.978991][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 710.984942][ T5875] dvb-usb: error while querying for an remote control event. [ 711.149102][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 711.155049][ T5875] dvb-usb: error while querying for an remote control event. [ 711.298720][ T3372] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 711.338884][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 711.344899][ T5875] dvb-usb: error while querying for an remote control event. [ 711.498860][ T3372] usb 1-1: Using ep0 maxpacket: 8 [ 711.508950][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 711.515009][ T5875] dvb-usb: error while querying for an remote control event. [ 711.521390][ T3372] usb 1-1: unable to get BOS descriptor or descriptor too short [ 711.567070][ T3372] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 711.577483][ T3372] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.677266][ T3372] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 711.688188][ T3372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.696746][ T3372] usb 1-1: Product: syz [ 711.701099][ T3372] usb 1-1: Manufacturer: syz [ 711.705948][ T3372] usb 1-1: SerialNumber: syz [ 711.852683][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 711.858883][ T5875] dvb-usb: error while querying for an remote control event. [ 712.018926][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 712.024864][ T5875] dvb-usb: error while querying for an remote control event. [ 712.235149][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1960'. [ 712.249879][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 712.255901][ T5875] dvb-usb: error while querying for an remote control event. [ 712.418905][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 712.424848][ T5875] dvb-usb: error while querying for an remote control event. [ 712.589184][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 712.595129][ T5875] dvb-usb: error while querying for an remote control event. [ 712.732802][ T3372] usb 1-1: USB disconnect, device number 18 [ 712.933365][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 712.939443][ T5875] dvb-usb: error while querying for an remote control event. [ 713.099266][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 713.105326][ T5875] dvb-usb: error while querying for an remote control event. [ 713.371780][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 713.377881][ T5875] dvb-usb: error while querying for an remote control event. [ 713.545615][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 713.551916][ T5875] dvb-usb: error while querying for an remote control event. [ 713.718947][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 713.724895][ T5875] dvb-usb: error while querying for an remote control event. [ 713.888832][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 713.894895][ T5875] dvb-usb: error while querying for an remote control event. [ 714.059037][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 714.065079][ T5875] dvb-usb: error while querying for an remote control event. [ 714.228915][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 714.234851][ T5875] dvb-usb: error while querying for an remote control event. [ 714.472596][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 714.478573][ T5875] dvb-usb: error while querying for an remote control event. [ 714.642058][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 714.647863][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 714.661062][ T5875] dvb-usb: error while querying for an remote control event. [ 714.829022][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 714.834978][ T5875] dvb-usb: error while querying for an remote control event. [ 715.009148][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.015219][ T5875] dvb-usb: error while querying for an remote control event. [ 715.183394][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.189913][ T5875] dvb-usb: error while querying for an remote control event. [ 715.349470][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.355323][ T5875] dvb-usb: error while querying for an remote control event. [ 715.519024][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.525077][ T5875] dvb-usb: error while querying for an remote control event. [ 715.689996][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.695964][ T5875] dvb-usb: error while querying for an remote control event. [ 715.874198][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 715.882598][ T5875] dvb-usb: error while querying for an remote control event. [ 716.049321][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 716.055178][ T5875] dvb-usb: error while querying for an remote control event. [ 716.071739][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.078326][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.283452][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 716.292085][ T5875] dvb-usb: error while querying for an remote control event. [ 716.458690][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 716.464618][ T5875] dvb-usb: error while querying for an remote control event. [ 716.719247][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 716.725228][ T5875] dvb-usb: error while querying for an remote control event. [ 716.889696][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 716.895852][ T5875] dvb-usb: error while querying for an remote control event. [ 717.059556][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 717.065690][ T5875] dvb-usb: error while querying for an remote control event. [ 717.228801][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 717.234916][ T5875] dvb-usb: error while querying for an remote control event. [ 717.362257][ T3372] usb 3-1: USB disconnect, device number 14 [ 717.533048][ T3372] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 720.190575][T11788] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[11788] [ 720.228100][ T30] audit: type=1326 audit(1758380638.245:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11783 comm="syz.4.1979" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 720.722317][T11792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 720.903626][T11792] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 720.942255][T11792] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 722.451302][ T5875] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 722.724393][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 722.820138][ T5875] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 722.921143][ T5875] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 722.930999][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.939472][ T5875] usb 3-1: Product: syz [ 722.943796][ T5875] usb 3-1: Manufacturer: syz [ 722.951499][ T5875] usb 3-1: SerialNumber: syz [ 723.176799][ T5875] usb 3-1: config 0 descriptor?? [ 723.266834][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 723.275160][ T5875] usb 3-1: setting power ON [ 723.279868][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 723.432794][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 723.548797][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 723.557457][ T5875] usb 3-1: media controller created [ 724.250365][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.867039][ T5875] usb 3-1: selecting invalid altsetting 6 [ 724.873448][ T5875] usb 3-1: digital interface selection failed (-22) [ 724.880352][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 725.042574][ T5875] usb 3-1: setting power OFF [ 725.047351][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 725.053618][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 725.063454][ T5875] (NULL device *): no alternate interface [ 729.952754][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 730.110071][ T5875] usb 3-1: USB disconnect, device number 15 [ 730.369180][T11835] tipc: Enabled bearer , priority 0 [ 730.406195][T11841] syzkaller0: entered promiscuous mode [ 730.412092][T11841] syzkaller0: entered allmulticast mode [ 730.644382][T11835] tipc: Resetting bearer [ 730.737340][T11834] tipc: Resetting bearer [ 730.892084][T11834] tipc: Disabling bearer [ 731.638575][ C1] sd 0:0:1:0: [sda] tag#230 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 731.649508][ C1] sd 0:0:1:0: [sda] tag#230 CDB: Write(6) 0a 00 4e 24 00 00 [ 732.021515][T11849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1997'. [ 734.908860][ T5875] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 735.209834][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 735.246015][ T5875] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 735.295069][ T5875] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 735.304683][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.313049][ T5875] usb 3-1: Product: syz [ 735.317368][ T5875] usb 3-1: Manufacturer: syz [ 735.322307][ T5875] usb 3-1: SerialNumber: syz [ 735.476161][ T5875] usb 3-1: config 0 descriptor?? [ 735.523156][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 735.531468][ T5875] usb 3-1: setting power ON [ 735.536055][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 735.757124][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.821769][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 735.830558][ T5875] usb 3-1: media controller created [ 735.890207][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.352564][ T5875] usb 3-1: selecting invalid altsetting 6 [ 736.362844][ T5875] usb 3-1: digital interface selection failed (-22) [ 736.372501][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 736.721503][ T5875] usb 3-1: setting power OFF [ 736.726404][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 736.732590][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 736.742127][ T5875] (NULL device *): no alternate interface [ 739.826878][T11912] 9pnet: Could not find request transport: fd0x0000000000000005 [ 744.236522][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 744.342033][ T5875] usb 3-1: USB disconnect, device number 16 [ 747.598743][ T3372] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 747.848763][ T3372] usb 1-1: Using ep0 maxpacket: 16 [ 747.884147][ T3372] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.895384][ T3372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 747.902343][ T3372] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 747.911607][ T3372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.968304][ T30] audit: type=1326 audit(1758380665.985:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11947 comm="syz.2.2032" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be539 code=0x0 [ 748.029562][ T3372] usb 1-1: config 0 descriptor?? [ 748.528708][ T3372] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 750.181694][ T5875] usb 1-1: USB disconnect, device number 19 [ 750.416966][ T3372] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 750.500040][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 750.588882][ T42] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 750.600665][ T3372] usb 2-1: Using ep0 maxpacket: 16 [ 750.617283][ T3372] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.628695][ T3372] usb 2-1: config 0 interface 0 has no altsetting 0 [ 750.635537][ T3372] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 750.644940][ T3372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.741993][ T3372] usb 2-1: config 0 descriptor?? [ 750.848856][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 750.870876][ T42] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 750.879747][ T42] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 750.889060][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 750.898347][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.910834][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 750.921324][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 750.934797][ T42] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 750.944340][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.981948][ T42] usb 4-1: config 0 descriptor?? [ 751.221601][ T3372] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 751.237085][ T42] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 751.399359][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 751.535413][ T5875] usb 4-1: USB disconnect, device number 19 [ 751.625267][ T5875] usblp0: removed [ 751.797941][ T3372] usb 2-1: USB disconnect, device number 14 [ 751.986297][T11977] fido_id[11977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 753.171303][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 753.338947][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 753.356301][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 753.387697][T12003] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[12003] [ 753.440159][ T5875] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.451573][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 753.458713][ T5875] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 753.459644][ T30] audit: type=1326 audit(1758380671.455:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.4.2049" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 753.470818][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.608010][ T5875] usb 1-1: config 0 descriptor?? [ 753.933293][T12009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.369288][ T5875] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 754.614329][ T5875] usb 1-1: USB disconnect, device number 20 [ 755.667816][T12014] fido_id[12014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 755.873105][T12016] hub 9-0:1.0: USB hub found [ 755.913118][T12016] hub 9-0:1.0: 1 port detected [ 757.709561][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 757.898702][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 757.932656][ T42] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 757.941470][ T42] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 757.950312][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 757.959426][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.971050][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 757.981243][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 757.994409][ T42] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 758.003674][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.292888][ T42] usb 4-1: config 0 descriptor?? [ 758.530472][ T42] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 758.740103][ T42] usb 4-1: USB disconnect, device number 20 [ 758.851931][ T42] usblp0: removed [ 759.084671][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 761.820743][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 763.028875][ T5875] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 763.166477][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 763.249388][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 763.261146][ T5875] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 763.272843][ T5875] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 763.281850][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 763.294024][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.305379][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.315532][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 763.328985][ T5875] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 763.338230][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.621559][ T5875] usb 3-1: config 0 descriptor?? [ 763.853428][ T5875] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 764.097506][ T5875] usb 3-1: USB disconnect, device number 17 [ 764.141378][ T5875] usblp0: removed [ 764.544788][T12081] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 767.078888][ T5875] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 767.238189][T12122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 767.349669][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 767.420670][ T5875] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 767.429536][ T5875] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 767.438321][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 767.447698][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 767.458044][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 767.467994][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 767.481436][ T5875] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 767.493227][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.730496][ T5875] usb 1-1: config 0 descriptor?? [ 767.960462][ T5875] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 768.159061][ T42] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 768.378342][ T5875] usb 1-1: USB disconnect, device number 21 [ 768.391242][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 768.405536][ T5875] usblp0: removed [ 768.435955][ T42] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 768.477087][ T42] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 768.486708][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.494968][ T42] usb 5-1: Product: syz [ 768.499317][ T42] usb 5-1: Manufacturer: syz [ 768.504007][ T42] usb 5-1: SerialNumber: syz [ 768.543599][ T42] usb 5-1: config 0 descriptor?? [ 768.581739][ T42] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 768.590118][ T42] usb 5-1: setting power ON [ 768.594712][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 768.725421][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 768.761074][T12128] dvb-usb: bulk message failed: -22 (3/0) [ 768.767017][T12128] dvb-usb: bulk message failed: -22 (4/0) [ 768.773072][T12128] cxusb: i2c read failed [ 768.824590][ T42] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 768.833744][ T42] usb 5-1: media controller created [ 768.881353][T12128] dvb-usb: bulk message failed: -22 (4/0) [ 768.887261][T12128] cxusb: i2c read failed [ 768.945986][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.316436][ T42] usb 5-1: selecting invalid altsetting 6 [ 769.322492][ T42] usb 5-1: digital interface selection failed (-22) [ 769.329371][ T42] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 769.455082][ T42] usb 5-1: setting power OFF [ 769.460884][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 769.466852][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 769.476396][ T42] (NULL device *): no alternate interface [ 770.071084][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 770.284522][ T42] usb 5-1: USB disconnect, device number 24 [ 770.762091][T12157] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 771.976501][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 772.122709][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 772.171688][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 772.228106][ T42] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 772.236807][ T42] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 772.245851][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 772.255186][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.265197][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 772.275370][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 772.288660][ T42] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 772.297939][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.328910][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 772.351446][ T42] usb 5-1: config 0 descriptor?? [ 772.374329][ T5875] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 772.467777][ T5875] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 772.477501][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.486165][ T5875] usb 1-1: Product: syz [ 772.490688][ T5875] usb 1-1: Manufacturer: syz [ 772.495468][ T5875] usb 1-1: SerialNumber: syz [ 772.639883][ T42] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 772.878274][ T5875] usb 1-1: config 0 descriptor?? [ 772.954381][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 772.962721][ T5875] usb 1-1: setting power ON [ 772.967436][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 773.000889][ T42] usb 5-1: USB disconnect, device number 25 [ 773.013893][ T42] usblp0: removed [ 773.025319][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.075499][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 773.085751][ T5875] usb 1-1: media controller created [ 773.111600][T12172] dvb-usb: bulk message failed: -22 (3/0) [ 773.117664][T12172] dvb-usb: bulk message failed: -22 (4/0) [ 773.127037][T12172] cxusb: i2c read failed [ 773.145118][T12184] netlink: 'syz.1.2114': attribute type 11 has an invalid length. [ 773.153367][T12184] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2114'. [ 773.233877][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.374518][ T5875] usb 1-1: selecting invalid altsetting 6 [ 773.380737][ T5875] usb 1-1: digital interface selection failed (-22) [ 773.387590][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 773.624180][ T5875] usb 1-1: setting power OFF [ 773.629074][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 773.639286][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 773.650575][ T5875] (NULL device *): no alternate interface [ 774.261192][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 774.430050][ T5875] usb 1-1: USB disconnect, device number 22 [ 776.849740][ T5875] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 777.061576][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 777.101070][ T5875] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 777.109901][ T5875] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 777.121429][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 777.132013][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 777.141957][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 777.151981][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 777.165431][ T5875] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 777.174866][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.485282][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.491905][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.511638][ T5875] usb 3-1: config 0 descriptor?? [ 777.678847][ T42] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 777.743793][ T5875] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 777.915436][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 777.958034][ T42] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 778.027274][ T42] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 778.039563][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.047757][ T42] usb 2-1: Product: syz [ 778.053083][ T42] usb 2-1: Manufacturer: syz [ 778.057812][ T42] usb 2-1: SerialNumber: syz [ 778.134794][ T3372] usb 3-1: USB disconnect, device number 18 [ 778.153689][ T3372] usblp0: removed [ 778.220682][ T42] usb 2-1: config 0 descriptor?? [ 778.249898][ T42] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 778.258215][ T42] usb 2-1: setting power ON [ 778.263254][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 778.375031][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.444613][T12221] dvb-usb: bulk message failed: -22 (3/0) [ 778.453492][T12221] dvb-usb: bulk message failed: -22 (4/0) [ 778.459870][T12221] cxusb: i2c read failed [ 778.466419][ T42] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 778.475287][ T42] usb 2-1: media controller created [ 778.547127][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.824896][ T42] usb 2-1: selecting invalid altsetting 6 [ 778.831014][ T42] usb 2-1: digital interface selection failed (-22) [ 778.837740][ T42] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 778.937573][ T42] usb 2-1: setting power OFF [ 778.942439][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 778.948253][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 778.961327][ T42] (NULL device *): no alternate interface [ 779.603666][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 779.761394][ T42] usb 2-1: USB disconnect, device number 15 [ 781.398648][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 781.599475][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 781.616581][ T42] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.629500][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 781.636265][ T42] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 781.645784][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.753656][ T42] usb 3-1: config 0 descriptor?? [ 782.211606][ T42] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 782.604355][ T42] usb 3-1: USB disconnect, device number 19 [ 783.218959][ T5875] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 783.237418][T12245] fido_id[12245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 783.324811][ T11] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 783.437173][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 783.486929][ T5875] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 783.495849][ T5875] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 783.504954][ T5875] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 783.514163][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 783.524056][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 783.533885][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 783.547060][ T5875] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 783.556276][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.609819][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 783.682952][ T11] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 783.779542][ T11] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 783.789116][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.797267][ T11] usb 1-1: Product: syz [ 783.801770][ T11] usb 1-1: Manufacturer: syz [ 783.806522][ T11] usb 1-1: SerialNumber: syz [ 783.871736][ T11] usb 1-1: config 0 descriptor?? [ 783.925517][ T5875] usb 2-1: config 0 descriptor?? [ 784.027053][ T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 784.035363][ T11] usb 1-1: setting power ON [ 784.040203][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 784.077032][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 784.120169][T12249] dvb-usb: bulk message failed: -22 (3/0) [ 784.126068][T12249] dvb-usb: bulk message failed: -22 (4/0) [ 784.131991][T12249] cxusb: i2c read failed [ 784.161066][ T5875] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 784.237291][ T11] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 784.246061][ T11] usb 1-1: media controller created [ 784.336663][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 784.421707][ T5875] usb 2-1: USB disconnect, device number 16 [ 784.447786][ T5875] usblp0: removed [ 784.578246][ T11] usb 1-1: selecting invalid altsetting 6 [ 784.584788][ T11] usb 1-1: digital interface selection failed (-22) [ 784.595892][ T11] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 784.710518][ T11] usb 1-1: setting power OFF [ 784.715329][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 784.721486][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 784.731278][ T11] (NULL device *): no alternate interface [ 785.141098][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 785.163344][ T11] usb 1-1: USB disconnect, device number 23 [ 785.612514][T12265] loop6: detected capacity change from 0 to 7 [ 785.676721][T12265] Dev loop6: unable to read RDB block 7 [ 785.682809][T12265] loop6: unable to read partition table [ 785.733356][T12265] loop6: partition table beyond EOD, truncated [ 785.740112][T12265] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.213726][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 786.525372][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 786.659129][ T42] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.670398][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 786.677134][ T42] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 786.686365][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.862576][ T42] usb 2-1: config 0 descriptor?? [ 787.397024][ T42] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 787.732594][ T42] usb 2-1: USB disconnect, device number 17 [ 788.315681][T12290] fido_id[12290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 788.679193][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 788.884065][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 788.926419][ T42] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 788.983911][ T42] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 788.996000][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.004499][ T42] usb 3-1: Product: syz [ 789.009026][ T42] usb 3-1: Manufacturer: syz [ 789.013763][ T42] usb 3-1: SerialNumber: syz [ 789.048209][ T42] usb 3-1: config 0 descriptor?? [ 789.066775][ T42] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 789.075401][ T42] usb 3-1: setting power ON [ 789.080262][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 789.112604][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.124008][ T42] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 789.133000][ T42] usb 3-1: media controller created [ 789.138681][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 789.204176][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.388639][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 789.458996][ T11] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 789.467543][ T11] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 789.476406][ T11] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 789.485643][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 789.495484][ T11] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 789.508808][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 789.522996][ T11] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 789.532298][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.663531][ T42] usb 3-1: selecting invalid altsetting 6 [ 789.669914][ T42] usb 3-1: digital interface selection failed (-22) [ 789.676761][ T42] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 789.761094][ T42] usb 3-1: setting power OFF [ 789.765809][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 789.772040][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 789.781525][ T11] usb 2-1: config 0 descriptor?? [ 789.786669][ T42] (NULL device *): no alternate interface [ 789.999976][ T11] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 790.373856][ T3372] usb 2-1: USB disconnect, device number 18 [ 790.393611][ T3372] usblp0: removed [ 790.454103][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 790.610098][ T42] usb 3-1: USB disconnect, device number 20 [ 794.288828][ T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 794.578779][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 794.605799][ T11] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 794.714460][ T11] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 794.724007][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.734933][ T11] usb 1-1: Product: syz [ 794.740645][ T11] usb 1-1: Manufacturer: syz [ 794.745415][ T11] usb 1-1: SerialNumber: syz [ 794.893957][ T11] usb 1-1: config 0 descriptor?? [ 794.968867][ T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 794.977073][ T11] usb 1-1: setting power ON [ 794.982424][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 795.017427][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 795.062206][ T5875] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 795.103975][ T11] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 795.114135][ T11] usb 1-1: media controller created [ 795.230691][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.298498][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 795.326001][ T5875] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 795.335286][ T5875] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 795.347039][ T5875] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 795.357522][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.367759][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.377785][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 795.391137][ T5875] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 795.400475][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.483387][ T11] usb 1-1: selecting invalid altsetting 6 [ 795.489460][ T11] usb 1-1: digital interface selection failed (-22) [ 795.496447][ T11] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 795.515409][ T5875] usb 2-1: config 0 descriptor?? [ 795.553072][ T11] usb 1-1: setting power OFF [ 795.558103][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 795.564788][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 795.574860][ T11] (NULL device *): no alternate interface [ 795.802181][ T5875] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 795.925469][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 795.997224][ T11] usb 1-1: USB disconnect, device number 24 [ 796.157119][ T42] usb 2-1: USB disconnect, device number 19 [ 796.205223][ T42] usblp0: removed [ 798.084694][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 798.230987][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 798.266994][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 799.788932][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 800.049025][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 800.106355][ T42] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 800.132756][ T42] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 800.142090][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.150600][ T42] usb 3-1: Product: syz [ 800.157734][ T42] usb 3-1: Manufacturer: syz [ 800.162903][ T42] usb 3-1: SerialNumber: syz [ 800.228694][ T42] usb 3-1: config 0 descriptor?? [ 800.272279][ T42] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 800.280502][ T42] usb 3-1: setting power ON [ 800.285080][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 800.377248][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 800.415977][ T42] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 800.424966][ T42] usb 3-1: media controller created [ 800.603015][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.715233][ T42] usb 3-1: selecting invalid altsetting 6 [ 800.721209][ T42] usb 3-1: digital interface selection failed (-22) [ 800.728179][ T42] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 800.755126][ T42] usb 3-1: setting power OFF [ 800.760142][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 800.765988][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 800.777921][ T42] (NULL device *): no alternate interface [ 801.584457][ T42] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 801.750218][ T42] usb 3-1: USB disconnect, device number 21 [ 803.170080][T12405] loop6: detected capacity change from 0 to 7 [ 803.247109][T12405] Dev loop6: unable to read RDB block 7 [ 803.252989][T12405] loop6: unable to read partition table [ 803.369189][T12405] loop6: partition table beyond EOD, truncated [ 803.375535][T12405] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 805.256054][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 807.290291][T12435] loop6: detected capacity change from 0 to 7 [ 807.440855][T12435] Dev loop6: unable to read RDB block 7 [ 807.446710][T12435] loop6: unable to read partition table [ 807.559359][T12435] loop6: partition table beyond EOD, truncated [ 807.565808][T12435] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 808.322729][T12443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2213'. [ 811.740707][T12469] loop6: detected capacity change from 0 to 7 [ 811.823180][T12469] Dev loop6: unable to read RDB block 7 [ 811.832456][T12469] loop6: unable to read partition table [ 811.936194][T12469] loop6: partition table beyond EOD, truncated [ 811.942680][T12469] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.623262][T12474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2225'. [ 814.781464][ T11] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 814.999251][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 815.023032][ T11] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 815.057402][ T11] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 815.067048][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.075502][ T11] usb 3-1: Product: syz [ 815.079968][ T11] usb 3-1: Manufacturer: syz [ 815.084742][ T11] usb 3-1: SerialNumber: syz [ 815.155207][ T11] usb 3-1: config 0 descriptor?? [ 815.235823][ T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 815.244356][ T11] usb 3-1: setting power ON [ 815.249372][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 815.459793][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 815.536777][ T11] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 815.546452][ T11] usb 3-1: media controller created [ 815.632868][T12504] loop6: detected capacity change from 0 to 7 [ 815.660729][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.697731][T12504] Dev loop6: unable to read RDB block 7 [ 815.704276][T12504] loop6: unable to read partition table [ 815.787262][T12504] loop6: partition table beyond EOD, truncated [ 815.794710][T12504] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 816.144216][ T11] usb 3-1: selecting invalid altsetting 6 [ 816.150497][ T11] usb 3-1: digital interface selection failed (-22) [ 816.157239][ T11] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 816.296429][ T11] usb 3-1: setting power OFF [ 816.301582][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 816.307449][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 816.317146][ T11] (NULL device *): no alternate interface [ 816.430382][T12510] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2239'. [ 818.551288][T12535] loop6: detected capacity change from 0 to 7 [ 818.609440][T12535] Dev loop6: unable to read RDB block 7 [ 818.615369][T12535] loop6: AHDI p1 p2 [ 818.619646][T12535] loop6: partition table partially beyond EOD, truncated [ 818.627709][T12535] loop6: p1 start 926365495 is beyond EOD, truncated [ 819.658001][T12548] loop6: detected capacity change from 0 to 7 [ 819.759418][T12548] Dev loop6: unable to read RDB block 7 [ 819.765487][T12548] loop6: unable to read partition table [ 819.867290][T12548] loop6: partition table beyond EOD, truncated [ 819.873956][T12548] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 823.169209][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 823.309458][ T11] usb 3-1: USB disconnect, device number 22 [ 823.475636][T12586] loop6: detected capacity change from 0 to 7 [ 823.549551][T12586] Dev loop6: unable to read RDB block 7 [ 823.555514][T12586] loop6: unable to read partition table [ 823.632641][T12586] loop6: partition table beyond EOD, truncated [ 823.639743][T12586] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 823.882329][T12592] overlayfs: missing 'lowerdir' [ 826.705128][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2279'. [ 826.908927][T12623] loop6: detected capacity change from 0 to 7 [ 826.962523][T12623] Dev loop6: unable to read RDB block 7 [ 826.968690][T12623] loop6: unable to read partition table [ 827.036580][T12623] loop6: partition table beyond EOD, truncated [ 827.043457][T12623] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 827.081014][T12626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2281'. [ 827.160699][ T11] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 827.349281][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 827.391605][ T11] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 827.517147][ T11] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 827.526659][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.534939][ T11] usb 5-1: Product: syz [ 827.539306][ T11] usb 5-1: Manufacturer: syz [ 827.543986][ T11] usb 5-1: SerialNumber: syz [ 827.711529][ T11] usb 5-1: config 0 descriptor?? [ 827.783786][ T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 827.792012][ T11] usb 5-1: setting power ON [ 827.796593][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 827.929439][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.048870][ T11] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 828.057659][ T11] usb 5-1: media controller created [ 828.307675][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.396369][T12633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2284'. [ 829.045967][ T11] usb 5-1: selecting invalid altsetting 6 [ 829.052350][ T11] usb 5-1: digital interface selection failed (-22) [ 829.059314][ T11] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 829.201637][ T11] usb 5-1: setting power OFF [ 829.206535][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 829.212882][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 829.222348][ T11] (NULL device *): no alternate interface [ 830.013932][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 831.520044][T12659] loop6: detected capacity change from 0 to 7 [ 831.589661][T12659] Dev loop6: unable to read RDB block 7 [ 831.597296][T12659] loop6: unable to read partition table [ 831.648363][T12659] loop6: partition table beyond EOD, truncated [ 831.654861][T12659] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 837.946881][ T3009] tipc: Subscription rejected, illegal request [ 838.884904][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.891534][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.555351][T12679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2298'. [ 840.226556][ T42] usb 5-1: USB disconnect, device number 26 [ 843.654974][T12705] tipc: Enabled bearer , priority 0 [ 843.699211][T12705] syzkaller0: entered promiscuous mode [ 843.704794][T12705] syzkaller0: entered allmulticast mode [ 843.781690][T12705] tipc: Resetting bearer [ 843.889279][T12704] tipc: Resetting bearer [ 843.937144][T12704] tipc: Disabling bearer [ 846.546631][T12715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2309'. [ 850.510193][T12736] binder: 12735:12736 ioctl c0306201 0 returned -14 [ 855.500617][T12753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2323'. [ 856.057175][T12758] program syz.3.2325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.512904][T12761] binder: 12759:12761 ioctl c0306201 0 returned -14 [ 859.710713][T12792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2336'. [ 861.769611][T12801] binder: 12800:12801 ioctl c0306201 0 returned -14 [ 864.962384][T12815] tipc: Enabled bearer , priority 0 [ 864.985754][T12815] syzkaller0: entered promiscuous mode [ 864.991614][T12815] syzkaller0: entered allmulticast mode [ 865.156524][T12815] tipc: Resetting bearer [ 865.210815][T12814] tipc: Resetting bearer [ 865.255886][T12814] tipc: Disabling bearer [ 866.340949][T12821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2347'. [ 868.577548][T12833] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 869.214078][T12848] tipc: Enabled bearer , priority 0 [ 869.266673][T12848] syzkaller0: entered promiscuous mode [ 869.277943][T12848] syzkaller0: entered allmulticast mode [ 869.383028][T12851] tipc: Resetting bearer [ 869.446693][T12845] tipc: Resetting bearer [ 869.531201][T12845] tipc: Disabling bearer [ 871.405929][T12865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2361'. [ 876.417740][T12893] tipc: Enabled bearer , priority 0 [ 876.575026][T12895] syzkaller0: entered promiscuous mode [ 876.582261][T12895] syzkaller0: entered allmulticast mode [ 876.594752][T12884] mmap: syz.0.2366 (12884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 876.682506][T12893] tipc: Resetting bearer [ 876.748712][T12891] tipc: Resetting bearer [ 876.792859][T12891] tipc: Disabling bearer [ 877.663709][T12899] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2372'. [ 881.799814][ T11] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 882.151439][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 882.215653][ T11] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.225826][ T11] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 882.239325][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 882.246173][ T11] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 882.255504][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.370564][ T11] usb 5-1: config 0 descriptor?? [ 882.680159][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 882.686692][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 882.778975][ T11] usb 5-1: USB disconnect, device number 27 [ 884.151241][T12941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2385'. [ 887.607759][T12967] input: syz0 as /devices/virtual/input/input7 [ 888.412460][ T30] audit: type=1326 audit(1758380806.435:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.574637][ T30] audit: type=1326 audit(1758380806.505:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.597481][ T30] audit: type=1326 audit(1758380806.525:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.619853][ T30] audit: type=1326 audit(1758380806.575:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.908910][ T30] audit: type=1326 audit(1758380806.795:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.931361][ T30] audit: type=1326 audit(1758380806.815:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.955969][ T30] audit: type=1326 audit(1758380806.825:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 888.978823][ T30] audit: type=1326 audit(1758380806.825:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 889.001130][ T30] audit: type=1326 audit(1758380806.825:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 889.023374][ T30] audit: type=1326 audit(1758380806.825:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 893.036410][T12996] tipc: Enabled bearer , priority 0 [ 893.077814][T12996] syzkaller0: entered promiscuous mode [ 893.083996][T12996] syzkaller0: entered allmulticast mode [ 893.173434][T12996] tipc: Resetting bearer [ 893.195897][T12995] tipc: Resetting bearer [ 893.224778][T12995] tipc: Disabling bearer [ 900.328282][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.334968][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.478903][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 900.649150][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 900.701923][ T42] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.714618][ T42] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 900.728325][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 900.735229][ T42] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 900.744457][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.989258][ T42] usb 2-1: config 0 descriptor?? [ 901.242339][T13036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 901.558276][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 901.564815][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.620312][ T42] usb 2-1: USB disconnect, device number 20 [ 902.406272][T13040] tipc: Enabled bearer , priority 0 [ 902.499192][T13044] syzkaller0: entered promiscuous mode [ 902.504919][T13044] syzkaller0: entered allmulticast mode [ 902.749814][T13040] tipc: Resetting bearer [ 902.913741][T13038] tipc: Resetting bearer [ 902.970552][T13038] tipc: Disabling bearer [ 905.251683][T13061] loop6: detected capacity change from 0 to 2560 [ 905.353464][T13061] buffer_io_error: 865 callbacks suppressed [ 905.353519][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.367736][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.375836][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.384048][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.392170][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.400414][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.408722][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.416772][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.427711][T13061] ldm_validate_partition_table(): Disk read failed. [ 905.436561][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.444818][T13061] Buffer I/O error on dev loop6, logical block 0, async page read [ 905.453060][T13061] Dev loop6: unable to read RDB block 0 [ 905.459850][T13061] loop6: unable to read partition table [ 905.539279][T13061] loop_reread_partitions: partition scan of loop6 (3Ÿ‚ ¾‚³˜) failed (rc=-5) [ 906.784661][T13079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2424'. [ 910.923573][T13113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2437'. [ 913.361772][T13126] syzkaller1: entered promiscuous mode [ 913.367367][T13126] syzkaller1: entered allmulticast mode [ 913.462250][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 913.516185][T13128] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2441'. [ 913.525664][T13128] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2441'. [ 916.496729][T13142] netlink: 'syz.1.2446': attribute type 20 has an invalid length. [ 916.505170][T13142] IPv6: NLM_F_CREATE should be specified when creating new route [ 919.449795][T13152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2448'. [ 920.608952][ T42] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 920.818819][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 920.873929][ T42] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.886964][ T42] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 920.900592][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 920.907363][ T42] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 920.916605][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.126020][ T42] usb 1-1: config 0 descriptor?? [ 921.362732][T13157] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 921.591364][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 921.597889][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 921.670311][ T42] usb 1-1: USB disconnect, device number 25 [ 921.877714][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 921.888145][T13167] bridge_slave_1: left allmulticast mode [ 921.895471][T13167] bridge_slave_1: left promiscuous mode [ 921.902947][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.079848][T13167] bridge_slave_0: left allmulticast mode [ 922.085863][T13167] bridge_slave_0: left promiscuous mode [ 922.092726][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.278880][ T11] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 922.488816][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 922.568073][ T11] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 922.577653][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.586010][ T11] usb 5-1: Product: syz [ 922.590374][ T11] usb 5-1: Manufacturer: syz [ 922.595072][ T11] usb 5-1: SerialNumber: syz [ 922.695618][ T11] usb 5-1: config 0 descriptor?? [ 922.742445][ T11] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 923.529347][ T11] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 925.159290][T13187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2458'. [ 926.299696][T13194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2460'. [ 930.292967][T13205] tipc: Enabled bearer , priority 0 [ 930.373735][T13204] syzkaller0: entered promiscuous mode [ 930.379570][T13204] syzkaller0: entered allmulticast mode [ 930.522139][T13204] tipc: Resetting bearer [ 930.548933][ T3372] usb 5-1: USB disconnect, device number 28 [ 930.628243][T13203] tipc: Resetting bearer [ 930.648631][T13203] tipc: Disabling bearer [ 931.076727][ T30] audit: type=1326 audit(1758380849.075:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.099011][ T30] audit: type=1326 audit(1758380849.075:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=99 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.121135][ T30] audit: type=1326 audit(1758380849.075:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.144916][ T30] audit: type=1326 audit(1758380849.085:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.167776][ T30] audit: type=1326 audit(1758380849.085:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.190050][ T30] audit: type=1326 audit(1758380849.095:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.212549][ T30] audit: type=1326 audit(1758380849.095:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.236446][ T30] audit: type=1326 audit(1758380849.245:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.259014][ T30] audit: type=1326 audit(1758380849.245:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.281152][ T30] audit: type=1326 audit(1758380849.245:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 931.404612][T13208] trusted_key: syz.4.2466 sent an empty control message without MSG_MORE. [ 933.144869][T13219] netlink: 'syz.4.2469': attribute type 20 has an invalid length. [ 933.153249][T13219] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.258086][T13222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2470'. [ 933.442554][T13228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2471'. [ 938.502672][T13260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2482'. [ 939.544368][T13263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2483'. [ 941.235225][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 942.210637][T13278] syzkaller1: entered promiscuous mode [ 942.216289][T13278] syzkaller1: entered allmulticast mode [ 942.671009][T13280] binder: 13279:13280 ioctl c0306201 0 returned -14 [ 944.087337][T13295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2494'. [ 945.463675][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 946.477920][T13319] binder: 13317:13319 ioctl c0306201 0 returned -14 [ 948.216577][T13328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'. [ 948.926611][T13335] loop6: detected capacity change from 0 to 7 [ 948.985575][T13335] Dev loop6: unable to read RDB block 7 [ 948.991659][T13335] loop6: unable to read partition table [ 949.049350][T13335] loop6: partition table beyond EOD, truncated [ 949.055824][T13335] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 949.489841][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 951.242463][T13353] binder: 13352:13353 ioctl c0306201 0 returned -14 [ 952.944988][T13361] tipc: Enabled bearer , priority 0 [ 953.190774][T13362] syzkaller0: entered promiscuous mode [ 953.196357][T13362] syzkaller0: entered allmulticast mode [ 953.222808][T13361] tipc: Resetting bearer [ 953.329797][T13360] tipc: Resetting bearer [ 953.421513][T13360] tipc: Disabling bearer [ 954.120954][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 954.357927][T13372] loop6: detected capacity change from 0 to 7 [ 954.414798][T13372] Dev loop6: unable to read RDB block 7 [ 954.421151][T13372] loop6: unable to read partition table [ 954.519368][T13372] loop6: partition table beyond EOD, truncated [ 954.525907][T13372] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 955.357591][T13382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2526'. [ 956.632190][T13394] tipc: Enabled bearer , priority 0 [ 956.655461][T13394] syzkaller0: entered promiscuous mode [ 956.661481][T13394] syzkaller0: entered allmulticast mode [ 956.771501][T13392] tipc: Resetting bearer [ 956.863243][T13392] tipc: Disabling bearer [ 957.095438][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2534'. [ 957.335498][T13403] loop6: detected capacity change from 0 to 7 [ 957.351782][T13403] Dev loop6: unable to read RDB block 7 [ 957.357630][T13403] loop6: unable to read partition table [ 957.392994][T13403] loop6: partition table beyond EOD, truncated [ 957.399909][T13403] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 957.878075][T13407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 958.373653][T13416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2539'. [ 961.268871][T13440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2547'. [ 961.767436][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.774267][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.669140][T13459] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2552'. [ 965.613470][T13477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 966.388140][T13480] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 966.708918][ T5875] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 966.898839][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 967.017685][ T5875] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.028053][ T5875] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 967.041566][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 967.048316][ T5875] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 967.057629][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.249198][T13493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2565'. [ 967.259007][ T5875] usb 5-1: config 0 descriptor?? [ 967.644507][T13496] tipc: Enabled bearer , priority 0 [ 967.748226][T13482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 967.820885][T13496] tipc: Resetting bearer [ 967.913585][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 967.920168][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 967.945881][T13494] tipc: Disabling bearer [ 967.994312][ T5875] usb 5-1: USB disconnect, device number 29 [ 968.889169][ T3372] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 969.050119][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2571'. [ 969.103545][ T3372] usb 2-1: Using ep0 maxpacket: 8 [ 969.139403][ T3372] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 969.163715][ T3372] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 969.173017][ T3372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.181529][ T3372] usb 2-1: Product: syz [ 969.185781][ T3372] usb 2-1: Manufacturer: syz [ 969.190555][ T3372] usb 2-1: SerialNumber: syz [ 969.272567][ T3372] usb 2-1: config 0 descriptor?? [ 969.317857][ T3372] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 969.328965][ T3372] usb 2-1: setting power ON [ 969.333632][ T3372] dvb-usb: bulk message failed: -22 (2/0) [ 969.412665][ T3372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 969.520511][ T3372] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 969.533831][ T3372] usb 2-1: media controller created [ 969.610240][ T3372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.138285][ T3372] usb 2-1: selecting invalid altsetting 6 [ 970.147881][ T3372] usb 2-1: digital interface selection failed (-22) [ 970.155345][ T3372] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 970.277287][ T3372] usb 2-1: setting power OFF [ 970.282213][ T3372] dvb-usb: bulk message failed: -22 (2/0) [ 970.288088][ T3372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 970.298056][ T3372] (NULL device *): no alternate interface [ 970.670966][T13525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2577'. [ 970.720226][T13523] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 970.875578][ T3372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 970.976933][ T3372] usb 2-1: USB disconnect, device number 21 [ 971.817406][T13536] tipc: Enabled bearer , priority 0 [ 971.921843][T13536] tipc: Resetting bearer [ 971.967226][ T3372] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 971.989272][T13533] tipc: Disabling bearer [ 972.208977][ T3372] usb 1-1: Using ep0 maxpacket: 32 [ 972.231744][ T3372] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.241849][ T3372] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 972.254902][ T3372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 972.261916][ T3372] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 972.271102][ T3372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.579484][ T3372] usb 1-1: config 0 descriptor?? [ 972.902729][T13535] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 973.114880][ T3372] usbhid 1-1:0.0: can't add hid device: -71 [ 973.121668][ T3372] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 973.185141][ T3372] usb 1-1: USB disconnect, device number 26 [ 974.229749][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2584'. [ 975.332696][ T5875] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 975.553233][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 975.593263][ T5875] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 975.660687][ T5875] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 975.672803][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.682501][ T5875] usb 3-1: Product: syz [ 975.686836][ T5875] usb 3-1: Manufacturer: syz [ 975.691767][ T5875] usb 3-1: SerialNumber: syz [ 975.865453][ T5875] usb 3-1: config 0 descriptor?? [ 975.974937][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 975.987100][ T5875] usb 3-1: setting power ON [ 975.993812][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 976.196940][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.319905][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 976.328927][ T5875] usb 3-1: media controller created [ 976.450810][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.621756][ T5875] usb 3-1: selecting invalid altsetting 6 [ 976.627688][ T5875] usb 3-1: digital interface selection failed (-22) [ 976.634934][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 976.648923][ T5875] usb 3-1: setting power OFF [ 976.653693][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 976.660077][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 976.669594][ T5875] (NULL device *): no alternate interface [ 976.946879][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 976.991944][T13564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2591'. [ 977.110580][ T5875] usb 3-1: USB disconnect, device number 23 [ 978.288806][T13520] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 978.529869][T13520] usb 1-1: Using ep0 maxpacket: 32 [ 978.598710][T13520] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.608920][T13520] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 978.622157][T13520] usb 1-1: config 0 interface 0 has no altsetting 0 [ 978.629085][T13520] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 978.640857][T13520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.779317][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2596'. [ 978.841607][T13520] usb 1-1: config 0 descriptor?? [ 979.086025][T13573] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 979.350073][T13520] usbhid 1-1:0.0: can't add hid device: -71 [ 979.360093][T13520] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 979.444199][T13520] usb 1-1: USB disconnect, device number 27 [ 979.750068][T13587] tipc: Enabled bearer , priority 0 [ 979.805762][T13589] syzkaller0: entered promiscuous mode [ 979.811676][T13589] syzkaller0: entered allmulticast mode [ 980.011235][T13586] tipc: Resetting bearer [ 980.116447][T13586] tipc: Disabling bearer [ 980.625024][T13598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2605'. [ 980.670806][T13596] tipc: Enabled bearer , priority 0 [ 980.723329][T13596] tipc: Resetting bearer [ 980.769678][ T5875] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 980.823286][T13594] tipc: Disabling bearer [ 980.989980][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 981.067934][ T5875] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 981.174999][ T5875] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 981.184646][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.193327][ T5875] usb 5-1: Product: syz [ 981.200674][ T5875] usb 5-1: Manufacturer: syz [ 981.205457][ T5875] usb 5-1: SerialNumber: syz [ 981.277724][ T5875] usb 5-1: config 0 descriptor?? [ 981.293031][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 981.304331][ T5875] usb 5-1: setting power ON [ 981.311032][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 981.391351][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 981.624297][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 981.633318][ T5875] usb 5-1: media controller created [ 981.693053][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.880695][ T5875] usb 5-1: selecting invalid altsetting 6 [ 981.886717][ T5875] usb 5-1: digital interface selection failed (-22) [ 981.893602][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 981.997058][ T5875] usb 5-1: setting power OFF [ 982.002541][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 982.008570][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 982.021155][ T5875] (NULL device *): no alternate interface [ 982.260618][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 982.432289][ T5875] usb 5-1: USB disconnect, device number 30 [ 983.540095][ T5875] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 983.749156][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 983.799063][ T5875] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.809358][ T5875] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 983.822698][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 983.829618][ T5875] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 983.839633][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.085977][ T5875] usb 1-1: config 0 descriptor?? [ 984.354189][T13625] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 984.507988][T13633] tipc: Enabled bearer , priority 0 [ 984.515979][T13631] syzkaller0: entered promiscuous mode [ 984.523422][T13631] syzkaller0: entered allmulticast mode [ 984.664867][ T5875] usbhid 1-1:0.0: can't add hid device: -71 [ 984.671522][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 984.699413][T13634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2618'. [ 984.797402][ T5875] usb 1-1: USB disconnect, device number 28 [ 984.939231][T13630] tipc: Resetting bearer [ 985.000303][T13630] tipc: Disabling bearer [ 985.505310][T13638] tipc: Enabled bearer , priority 0 [ 985.547119][T13638] tipc: Resetting bearer [ 985.613178][T13637] tipc: Disabling bearer [ 986.435553][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 986.648734][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 986.669901][ T5875] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 986.715896][ T5875] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 986.725894][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.735996][ T5875] usb 1-1: Product: syz [ 986.741705][ T5875] usb 1-1: Manufacturer: syz [ 986.746472][ T5875] usb 1-1: SerialNumber: syz [ 986.856660][ T5875] usb 1-1: config 0 descriptor?? [ 986.882195][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 986.890507][ T5875] usb 1-1: setting power ON [ 986.895085][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 987.246313][T13645] dvb-usb: bulk message failed: -22 (3/0) [ 987.252611][T13645] dvb-usb: bulk message failed: -22 (4/0) [ 987.258974][T13645] cxusb: i2c read failed [ 987.312615][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 987.470307][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 987.479183][ T5875] usb 1-1: media controller created [ 987.597468][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 987.930872][ T5875] usb 1-1: selecting invalid altsetting 6 [ 987.936821][ T5875] usb 1-1: digital interface selection failed (-22) [ 987.943776][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 988.040061][ T5875] usb 1-1: setting power OFF [ 988.044852][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 988.050983][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 988.064373][ T5875] (NULL device *): no alternate interface [ 988.302299][T13656] GUP no longer grows the stack in syz.4.2627 (13656): 80005000-80008000 (80004000) [ 988.318638][T13656] CPU: 1 UID: 0 PID: 13656 Comm: syz.4.2627 Not tainted syzkaller #0 PREEMPT(none) [ 988.318782][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 988.318875][T13656] Call Trace: [ 988.318935][T13656] [ 988.318987][T13656] __dump_stack+0x26/0x30 [ 988.319175][T13656] dump_stack_lvl+0x1df/0x270 [ 988.319344][T13656] dump_stack+0x1e/0x25 [ 988.319493][T13656] fixup_user_fault+0xcf0/0xe20 [ 988.319664][T13656] fault_in_user_writeable+0x9a/0x1b0 [ 988.319844][T13656] futex_lock_pi+0x5a9/0x1530 [ 988.320013][T13656] ? kmsan_get_metadata+0xfb/0x160 [ 988.320173][T13656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 988.320322][T13656] ? kmsan_get_metadata+0xfb/0x160 [ 988.320474][T13656] ? __se_sys_futex_time32+0x558/0x6c0 [ 988.320660][T13656] ? __msan_warning+0x1b/0x30 [ 988.320803][T13656] ? __pfx_futex_wake_mark+0x10/0x10 [ 988.320986][T13656] do_futex+0x2de/0x480 [ 988.321168][T13656] __se_sys_futex_time32+0x558/0x6c0 [ 988.321341][T13656] ? kmsan_get_metadata+0xfb/0x160 [ 988.321495][T13656] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 988.321647][T13656] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 988.321816][T13656] __ia32_sys_futex_time32+0x112/0x1a0 [ 988.322026][T13656] ia32_sys_call+0x3da0/0x4310 [ 988.322163][T13656] __do_fast_syscall_32+0xb0/0x150 [ 988.322303][T13656] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 988.322496][T13656] do_fast_syscall_32+0x38/0x80 [ 988.322630][T13656] do_SYSENTER_32+0x1f/0x30 [ 988.322756][T13656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.322929][T13656] RIP: 0023:0xf707e539 [ 988.323035][T13656] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 988.323157][T13656] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 988.323287][T13656] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 988.323380][T13656] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 988.323470][T13656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.323553][T13656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 988.323637][T13656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.323751][T13656] [ 988.849708][ T11] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 988.952556][T13663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2629'. [ 988.998019][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 989.052241][ T5875] usb 1-1: USB disconnect, device number 29 [ 989.122255][ T11] usb 5-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 989.132885][ T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 989.143157][ T11] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.153469][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.170133][ T9949] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 989.265409][ T11] usb 5-1: config 0 descriptor?? [ 989.378931][ T9949] usb 2-1: Using ep0 maxpacket: 32 [ 989.400925][ T9949] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.411486][ T9949] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 989.424904][ T9949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.431808][ T9949] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 989.441319][ T9949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.526973][T13666] tipc: Enabled bearer , priority 0 [ 989.573041][ T9949] usb 2-1: config 0 descriptor?? [ 989.624968][T13666] tipc: Resetting bearer [ 989.705742][T13665] tipc: Disabling bearer [ 989.835127][T13662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 990.024741][ T9949] usbhid 2-1:0.0: can't add hid device: -71 [ 990.031669][ T9949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 990.080846][ T9949] usb 2-1: USB disconnect, device number 22 [ 990.160390][T13670] tipc: Enabled bearer , priority 0 [ 990.199514][T13670] tipc: Resetting bearer [ 990.225650][T13668] tipc: Disabling bearer [ 991.368918][T13520] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 991.517448][ T3372] usb 5-1: USB disconnect, device number 31 [ 991.608639][T13520] usb 2-1: Using ep0 maxpacket: 8 [ 991.625295][T13520] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 991.675101][T13520] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 991.685071][T13520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.693434][T13520] usb 2-1: Product: syz [ 991.697761][T13520] usb 2-1: Manufacturer: syz [ 991.702629][T13520] usb 2-1: SerialNumber: syz [ 991.855049][T13520] usb 2-1: config 0 descriptor?? [ 991.912041][T13520] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 991.921172][T13520] usb 2-1: setting power ON [ 991.925838][T13520] dvb-usb: bulk message failed: -22 (2/0) [ 992.025223][T13695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2642'. [ 992.035969][T13520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.101460][T13520] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 992.110424][T13520] usb 2-1: media controller created [ 992.114677][T13687] dvb-usb: bulk message failed: -22 (3/0) [ 992.122166][T13687] dvb-usb: bulk message failed: -22 (4/0) [ 992.128035][T13687] cxusb: i2c read failed [ 992.265566][T13520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.436025][T13703] tipc: Enabled bearer , priority 0 [ 992.579708][T13703] tipc: Resetting bearer [ 992.674526][T13702] tipc: Disabling bearer [ 992.708698][T13520] usb 2-1: selecting invalid altsetting 6 [ 992.714633][T13520] usb 2-1: digital interface selection failed (-22) [ 992.721661][T13520] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 992.732357][T13520] usb 2-1: setting power OFF [ 992.737122][T13520] dvb-usb: bulk message failed: -22 (2/0) [ 992.743323][T13520] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 992.753208][T13520] (NULL device *): no alternate interface [ 992.923157][T13520] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 993.073101][T13520] usb 2-1: USB disconnect, device number 23 [ 993.878787][ T9949] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 994.089063][ T9949] usb 4-1: Using ep0 maxpacket: 32 [ 994.117640][ T9949] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.128062][ T9949] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 994.141359][ T9949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 994.148197][ T9949] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 994.157549][ T9949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.354209][ T9949] usb 4-1: config 0 descriptor?? [ 994.589690][T13717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 994.849995][ T9949] usbhid 4-1:0.0: can't add hid device: -71 [ 994.856733][ T9949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 994.879459][T13726] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 994.960527][ T9949] usb 4-1: USB disconnect, device number 21 [ 995.011323][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2654'. [ 995.025378][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2654'. [ 995.529922][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'. [ 995.971775][T13739] tipc: Enabled bearer , priority 0 [ 996.017436][T13739] tipc: Resetting bearer [ 996.060053][T13738] tipc: Disabling bearer [ 996.154320][ T9949] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 996.370530][ T9949] usb 4-1: Using ep0 maxpacket: 16 [ 996.409180][ T9949] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.420599][ T9949] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.430994][ T9949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 996.437740][ T9949] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 996.446983][ T9949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.613353][ T9949] usb 4-1: config 0 descriptor?? [ 996.675868][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 997.117757][ T9949] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 997.238863][T13520] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 997.438739][T13520] usb 1-1: device descriptor read/64, error -71 [ 997.455448][T13757] tipc: Enabled bearer , priority 0 [ 997.468806][T13757] syzkaller0: entered promiscuous mode [ 997.474707][T13757] syzkaller0: entered allmulticast mode [ 997.660996][T13757] tipc: Resetting bearer [ 997.749542][T13520] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 997.927313][T13756] tipc: Resetting bearer [ 997.973022][T13520] usb 1-1: device descriptor read/64, error -71 [ 997.975599][T13756] tipc: Disabling bearer [ 998.120613][T13520] usb usb1-port1: attempt power cycle [ 998.358874][ T9949] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 998.514867][T13520] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 998.629583][T13520] usb 1-1: device descriptor read/8, error -71 [ 998.688849][T13765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 998.909278][T13520] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 998.995056][ T3372] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 999.033832][T13520] usb 1-1: device descriptor read/8, error -71 [ 999.151059][T13520] usb usb1-port1: unable to enumerate USB device [ 999.193514][ T3372] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 999.202250][ T3372] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.214871][ T3372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 999.228882][ T3372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 999.240472][ T3372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.253941][ T3372] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.263476][ T3372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.421370][ T3372] usb 5-1: config 0 descriptor?? [ 999.432589][T13768] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 999.618963][ T9949] usb 4-1: device descriptor read/64, error -71 [ 999.889197][ T9949] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 999.940307][ T9949] usb 4-1: device reset changed ep0 maxpacket size! [ 999.950137][ T3372] hid_parser_main: 5 callbacks suppressed [ 999.950228][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 999.965242][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 999.977621][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 999.990818][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 999.996524][ T11] usb 4-1: USB disconnect, device number 22 [ 999.999469][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.012036][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.019874][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.027508][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.035847][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.047417][ T3372] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1000.234392][T13776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1000.268883][ T11] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1000.351926][ T3372] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1000.430767][ T3372] usb 5-1: USB disconnect, device number 32 [ 1000.460118][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1000.498166][ T11] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.509362][ T11] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1000.523387][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1000.530342][ T11] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1000.539682][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.721329][ T11] usb 4-1: config 0 descriptor?? [ 1000.998603][T13772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1001.164951][T13784] fido_id[13784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1001.409336][ T11] usbhid 4-1:0.0: can't add hid device: -71 [ 1001.415954][ T11] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1001.531053][ T11] usb 4-1: USB disconnect, device number 23 [ 1002.016060][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 1002.638707][ T11] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1002.654664][T13801] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1002.829267][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1002.871577][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.883040][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.893861][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1002.901402][ T11] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1002.913879][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.960137][ T11] usb 3-1: config 0 descriptor?? [ 1003.563882][ T11] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1004.006058][T13818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1004.799198][ T11] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 1005.988766][T13832] syzkaller0: entered promiscuous mode [ 1005.994594][T13832] syzkaller0: entered allmulticast mode [ 1006.244333][T13834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'. [ 1006.733535][ T9949] usb 3-1: USB disconnect, device number 24 [ 1010.699320][T13854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2696'. [ 1012.439695][T13866] syzkaller0: entered promiscuous mode [ 1012.445367][T13866] syzkaller0: entered allmulticast mode [ 1013.731293][T13883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1016.079023][T13906] syzkaller0: entered promiscuous mode [ 1016.084814][T13906] syzkaller0: entered allmulticast mode [ 1017.713595][T13925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1020.155614][T13947] syzkaller0: entered promiscuous mode [ 1020.161452][T13947] syzkaller0: entered allmulticast mode [ 1021.398974][ T3372] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1021.676717][ T3372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.687891][ T3372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.697888][ T3372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.711260][ T3372] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.720565][ T3372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.982163][ T3372] usb 1-1: config 0 descriptor?? [ 1022.539165][ T3372] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1023.254456][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.261597][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.740488][ C1] plantronics 0003:047F:FFFF.0017: usb_submit_urb(ctrl) failed: -1 [ 1023.879681][ T3372] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 1024.048905][ T3372] usb 1-1: device descriptor read/64, error -32 [ 1024.289147][ T3372] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 1024.480137][ T3372] usb 1-1: device descriptor read/64, error -32 [ 1024.729694][ T3372] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 1024.813302][ T3372] usb 1-1: device descriptor read/8, error -32 [ 1025.081467][ T3372] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 1025.204105][ T3372] usb 1-1: device descriptor read/8, error -32 [ 1025.328995][ T3372] raw-gadget.0 gadget.0: failed to queue suspend event [ 1025.439980][T13520] usb 1-1: USB disconnect, device number 34 [ 1025.555435][T13520] raw-gadget.0 gadget.0: failed to queue reset event [ 1025.584157][T13981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2735'. [ 1025.600275][T13969] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1027.344484][T13995] syzkaller0: entered promiscuous mode [ 1027.351046][T13995] syzkaller0: entered allmulticast mode [ 1027.649213][ T9949] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1027.842287][ T9949] usb 3-1: Using ep0 maxpacket: 32 [ 1027.877426][ T9949] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.887959][ T9949] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1027.902945][ T9949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1027.910573][ T9949] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1027.919910][ T9949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.011428][ T9949] usb 3-1: config 0 descriptor?? [ 1028.251956][T14000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1028.487021][ T9949] usbhid 3-1:0.0: can't add hid device: -71 [ 1028.494076][ T9949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1028.649591][ T9949] usb 3-1: USB disconnect, device number 25 [ 1028.835593][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 1030.260759][T14021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2748'. [ 1031.848293][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'. [ 1034.146567][T14036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.185191][T14036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.200539][T14036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.219016][T14036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1034.253586][T14036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1035.362565][T14035] chnl_net:caif_netlink_parms(): no params data found [ 1035.699249][T14045] syzkaller0: entered promiscuous mode [ 1035.705017][T14045] syzkaller0: entered allmulticast mode [ 1036.388865][T14036] Bluetooth: hci5: command tx timeout [ 1037.487032][T14054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1037.921189][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.933458][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.941808][T14035] bridge_slave_0: entered allmulticast mode [ 1037.951538][T14035] bridge_slave_0: entered promiscuous mode [ 1037.986554][T14058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2759'. [ 1038.043235][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.050636][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.058237][T14035] bridge_slave_1: entered allmulticast mode [ 1038.066581][T14035] bridge_slave_1: entered promiscuous mode [ 1038.471378][T14036] Bluetooth: hci5: command tx timeout [ 1038.538320][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.581898][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.769390][T14066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1038.938909][T14035] team0: Port device team_slave_0 added [ 1039.009536][T14035] team0: Port device team_slave_1 added [ 1039.561088][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.571446][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.600264][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.776431][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.785477][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.811936][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.303834][T14035] hsr_slave_0: entered promiscuous mode [ 1040.312691][T14035] hsr_slave_1: entered promiscuous mode [ 1040.321288][T14035] debugfs: 'hsr0' already exists in 'hsr' [ 1040.327144][T14035] Cannot create hsr debugfs directory [ 1040.394675][T14079] syzkaller0: entered promiscuous mode [ 1040.401332][T14079] syzkaller0: entered allmulticast mode [ 1040.558775][T14036] Bluetooth: hci5: command tx timeout [ 1041.038913][T14035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.152719][T14035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.311681][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1041.476073][T14035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.674187][T14035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.882347][T14092] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1042.483856][T14035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1042.537867][T14096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2771'. [ 1042.601726][T14035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1042.629095][T14036] Bluetooth: hci5: command tx timeout [ 1042.713334][T14035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1042.908891][T14035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1043.864077][T14106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1044.121999][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.332097][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.467392][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.475067][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.638186][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.645806][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.174618][T14115] syzkaller0: entered promiscuous mode [ 1045.181103][T14115] syzkaller0: entered allmulticast mode [ 1046.714560][T14129] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1047.194892][T14134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2784'. [ 1047.766188][T14139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2786'. [ 1047.892176][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.415503][T14035] veth0_vlan: entered promiscuous mode [ 1048.525326][T14035] veth1_vlan: entered promiscuous mode [ 1048.561026][T14148] tipc: Enabled bearer , priority 0 [ 1049.270820][T14150] syzkaller0: entered promiscuous mode [ 1049.276479][T14150] syzkaller0: entered allmulticast mode [ 1049.319129][T14148] tipc: Resetting bearer [ 1049.579471][T14145] tipc: Resetting bearer [ 1049.611083][T14145] tipc: Disabling bearer [ 1049.846777][T14035] veth0_macvtap: entered promiscuous mode [ 1049.899179][T14035] veth1_macvtap: entered promiscuous mode [ 1050.022467][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.120059][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.220498][ T3422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.275461][ T3422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.331813][ T3422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.388342][ T3422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.695149][ T3372] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1050.929766][ T3372] usb 5-1: Using ep0 maxpacket: 32 [ 1050.992048][ T3372] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.002214][ T3372] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1051.015310][ T3372] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1051.022098][ T3372] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1051.031406][ T3372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.100616][ T3372] usb 5-1: config 0 descriptor?? [ 1051.348868][T14160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1051.794804][ T3372] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.802293][ T3372] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1051.921205][ T3372] usb 5-1: USB disconnect, device number 33 [ 1052.282107][T14179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1052.358361][T14181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1053.002718][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1053.396149][T14194] tipc: Enabled bearer , priority 0 [ 1053.474873][T14194] tipc: Resetting bearer [ 1053.518910][T14193] tipc: Disabling bearer [ 1054.990971][T14214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2810'. [ 1055.040037][ T3372] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1055.228689][ T3372] usb 3-1: Using ep0 maxpacket: 32 [ 1055.289332][ T3372] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.300683][ T3372] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1055.315308][ T3372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1055.322284][ T3372] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1055.331688][ T3372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.496780][ T3372] usb 3-1: config 0 descriptor?? [ 1055.796501][T14211] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1056.233821][ T3372] usbhid 3-1:0.0: can't add hid device: -71 [ 1056.241331][ T3372] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1056.316001][ T3372] usb 3-1: USB disconnect, device number 26 [ 1056.672642][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.680952][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.985683][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.994231][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.172223][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 1057.941103][T14232] tipc: Enabled bearer , priority 0 [ 1058.044512][T14232] tipc: Resetting bearer [ 1058.084007][T14236] tipc: Enabled bearer , priority 0 [ 1058.109175][T14231] tipc: Disabling bearer [ 1058.224745][T14236] syzkaller0: entered promiscuous mode [ 1058.231257][T14236] syzkaller0: entered allmulticast mode [ 1058.401791][T14236] tipc: Resetting bearer [ 1058.720597][T14234] tipc: Resetting bearer [ 1058.781222][T14234] tipc: Disabling bearer [ 1060.075478][ T9949] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1061.533285][T14259] ===================================================== [ 1061.540470][T14259] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 1061.547831][T14259] _copy_to_iter+0xef3/0x33f0 [ 1061.552753][T14259] rng_recvmsg+0x1af/0x2d0 [ 1061.557250][T14259] sock_recvmsg+0x2df/0x390 [ 1061.561900][T14259] ____sys_recvmsg+0x193/0x610 [ 1061.566754][T14259] ___sys_recvmsg+0x20b/0x850 [ 1061.571602][T14259] do_recvmmsg+0x50b/0xdf0 [ 1061.576125][T14259] __sys_recvmmsg+0xf3/0x460 [ 1061.580911][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1061.590832][T14259] ia32_sys_call+0x2970/0x4310 [ 1061.595680][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1061.602599][T14259] do_fast_syscall_32+0x38/0x80 [ 1061.607529][T14259] do_SYSENTER_32+0x1f/0x30 [ 1061.612192][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.618701][T14259] [ 1061.621043][T14259] [ 1061.621043][T14259] [ 1061.629946][T14259] Uninit was stored to memory at: [ 1061.635115][T14259] crypto_sha3_finup+0x136/0xe00 [ 1061.640230][T14259] crypto_shash_finup+0x327/0xe80 [ 1061.645326][T14259] jent_hash_time+0x247/0x590 [ 1061.651121][T14259] jent_condition_data+0x4f0/0x510 [ 1061.656630][T14259] jent_measure_jitter+0x547/0x770 [ 1061.662010][T14259] jent_gen_entropy+0x209/0x450 [ 1061.667164][T14259] jent_read_entropy+0x353/0xeb0 [ 1061.672288][T14259] jent_kcapi_random+0x6c/0x250 [ 1061.677206][T14259] rng_recvmsg+0x149/0x2d0 [ 1061.681832][T14259] sock_recvmsg+0x2df/0x390 [ 1061.690003][T14259] ____sys_recvmsg+0x193/0x610 [ 1061.694906][T14259] ___sys_recvmsg+0x20b/0x850 [ 1061.700445][T14259] do_recvmmsg+0x50b/0xdf0 [ 1061.704968][T14259] __sys_recvmmsg+0xf3/0x460 [ 1061.709723][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1061.716248][T14259] ia32_sys_call+0x2970/0x4310 [ 1061.721242][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1061.726444][T14259] do_fast_syscall_32+0x38/0x80 [ 1061.731440][T14259] do_SYSENTER_32+0x1f/0x30 [ 1061.736019][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.742541][T14259] [ 1061.744903][T14259] Uninit was stored to memory at: [ 1061.750169][T14259] crypto_shash_finup+0xc5a/0xe80 [ 1061.755270][T14259] jent_hash_time+0x1de/0x590 [ 1061.760086][T14259] jent_condition_data+0x4f0/0x510 [ 1061.765311][T14259] jent_measure_jitter+0x547/0x770 [ 1061.770605][T14259] jent_gen_entropy+0x209/0x450 [ 1061.775546][T14259] jent_read_entropy+0x353/0xeb0 [ 1061.780748][T14259] jent_kcapi_random+0x6c/0x250 [ 1061.785668][T14259] rng_recvmsg+0x149/0x2d0 [ 1061.793412][T14259] sock_recvmsg+0x2df/0x390 [ 1061.797995][T14259] ____sys_recvmsg+0x193/0x610 [ 1061.803499][T14259] ___sys_recvmsg+0x20b/0x850 [ 1061.808282][T14259] do_recvmmsg+0x50b/0xdf0 [ 1061.812903][T14259] __sys_recvmmsg+0xf3/0x460 [ 1061.817580][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1061.824080][T14259] ia32_sys_call+0x2970/0x4310 [ 1061.828970][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1061.834150][T14259] do_fast_syscall_32+0x38/0x80 [ 1061.839214][T14259] do_SYSENTER_32+0x1f/0x30 [ 1061.843798][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.850288][T14259] [ 1061.852633][T14259] Uninit was stored to memory at: [ 1061.857750][T14259] crypto_sha3_finup+0xc98/0xe00 [ 1061.862833][T14259] crypto_shash_finup+0x327/0xe80 [ 1061.867916][T14259] jent_hash_time+0x247/0x590 [ 1061.872735][T14259] jent_condition_data+0x4f0/0x510 [ 1061.877949][T14259] jent_measure_jitter+0x547/0x770 [ 1061.883476][T14259] jent_gen_entropy+0x209/0x450 [ 1061.888515][T14259] jent_read_entropy+0x353/0xeb0 [ 1061.896655][T14259] jent_kcapi_random+0x6c/0x250 [ 1061.902294][T14259] rng_recvmsg+0x149/0x2d0 [ 1061.906803][T14259] sock_recvmsg+0x2df/0x390 [ 1061.911466][T14259] ____sys_recvmsg+0x193/0x610 [ 1061.916320][T14259] ___sys_recvmsg+0x20b/0x850 [ 1061.921147][T14259] do_recvmmsg+0x50b/0xdf0 [ 1061.925658][T14259] __sys_recvmmsg+0xf3/0x460 [ 1061.930434][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1061.936864][T14259] ia32_sys_call+0x2970/0x4310 [ 1061.941757][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1061.947017][T14259] do_fast_syscall_32+0x38/0x80 [ 1061.952142][T14259] do_SYSENTER_32+0x1f/0x30 [ 1061.956704][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.963269][T14259] [ 1061.965622][T14259] Uninit was stored to memory at: [ 1061.970834][T14259] keccakf+0x1efb/0x2110 [ 1061.975159][T14259] crypto_sha3_finup+0x772/0xe00 [ 1061.980248][T14259] crypto_shash_finup+0x327/0xe80 [ 1061.985340][T14259] jent_hash_time+0x247/0x590 [ 1061.990128][T14259] jent_condition_data+0x4f0/0x510 [ 1061.998547][T14259] jent_measure_jitter+0x547/0x770 [ 1062.003784][T14259] jent_gen_entropy+0x209/0x450 [ 1062.009391][T14259] jent_read_entropy+0x353/0xeb0 [ 1062.014454][T14259] jent_kcapi_random+0x6c/0x250 [ 1062.019739][T14259] rng_recvmsg+0x149/0x2d0 [ 1062.024323][T14259] sock_recvmsg+0x2df/0x390 [ 1062.028975][T14259] ____sys_recvmsg+0x193/0x610 [ 1062.033939][T14259] ___sys_recvmsg+0x20b/0x850 [ 1062.038770][T14259] do_recvmmsg+0x50b/0xdf0 [ 1062.043277][T14259] __sys_recvmmsg+0xf3/0x460 [ 1062.047953][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.054444][T14259] ia32_sys_call+0x2970/0x4310 [ 1062.059333][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1062.064508][T14259] do_fast_syscall_32+0x38/0x80 [ 1062.069932][T14259] do_SYSENTER_32+0x1f/0x30 [ 1062.074500][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.081122][T14259] [ 1062.083468][T14259] Uninit was stored to memory at: [ 1062.088674][T14259] crypto_sha3_finup+0x5be/0xe00 [ 1062.098162][T14259] crypto_shash_finup+0x327/0xe80 [ 1062.103877][T14259] jent_hash_time+0x247/0x590 [ 1062.108682][T14259] jent_condition_data+0x4f0/0x510 [ 1062.113896][T14259] jent_measure_jitter+0x547/0x770 [ 1062.119166][T14259] jent_gen_entropy+0x209/0x450 [ 1062.124105][T14259] jent_read_entropy+0x353/0xeb0 [ 1062.129200][T14259] jent_kcapi_random+0x6c/0x250 [ 1062.134288][T14259] rng_recvmsg+0x149/0x2d0 [ 1062.138937][T14259] sock_recvmsg+0x2df/0x390 [ 1062.143501][T14259] ____sys_recvmsg+0x193/0x610 [ 1062.148363][T14259] ___sys_recvmsg+0x20b/0x850 [ 1062.153927][T14259] do_recvmmsg+0x50b/0xdf0 [ 1062.158527][T14259] __sys_recvmmsg+0xf3/0x460 [ 1062.163286][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.169959][T14259] ia32_sys_call+0x2970/0x4310 [ 1062.174803][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1062.180179][T14259] do_fast_syscall_32+0x38/0x80 [ 1062.185132][T14259] do_SYSENTER_32+0x1f/0x30 [ 1062.189773][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.200476][T14259] [ 1062.202852][T14259] Uninit was stored to memory at: [ 1062.208010][T14259] crypto_sha3_finup+0x136/0xe00 [ 1062.213860][T14259] crypto_shash_finup+0x327/0xe80 [ 1062.219043][T14259] jent_hash_time+0x247/0x590 [ 1062.223789][T14259] jent_condition_data+0x4f0/0x510 [ 1062.231244][T14259] jent_measure_jitter+0x547/0x770 [ 1062.236483][T14259] jent_gen_entropy+0x209/0x450 [ 1062.243896][T14259] jent_read_entropy+0x353/0xeb0 [ 1062.249032][T14259] jent_kcapi_random+0x6c/0x250 [ 1062.253955][T14259] rng_recvmsg+0x149/0x2d0 [ 1062.258623][T14259] sock_recvmsg+0x2df/0x390 [ 1062.263215][T14259] ____sys_recvmsg+0x193/0x610 [ 1062.268074][T14259] ___sys_recvmsg+0x20b/0x850 [ 1062.273028][T14259] do_recvmmsg+0x50b/0xdf0 [ 1062.277542][T14259] __sys_recvmmsg+0xf3/0x460 [ 1062.282324][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.288816][T14259] ia32_sys_call+0x2970/0x4310 [ 1062.293659][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1062.302709][T14259] do_fast_syscall_32+0x38/0x80 [ 1062.307636][T14259] do_SYSENTER_32+0x1f/0x30 [ 1062.312846][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.319383][T14259] [ 1062.321741][T14259] Uninit was stored to memory at: [ 1062.326868][T14259] crypto_shash_finup+0xc5a/0xe80 [ 1062.332086][T14259] jent_hash_time+0x1de/0x590 [ 1062.336822][T14259] jent_condition_data+0x4f0/0x510 [ 1062.342103][T14259] jent_measure_jitter+0x547/0x770 [ 1062.347304][T14259] jent_gen_entropy+0x209/0x450 [ 1062.352299][T14259] jent_read_entropy+0x353/0xeb0 [ 1062.357408][T14259] jent_kcapi_random+0x6c/0x250 [ 1062.362378][T14259] rng_recvmsg+0x149/0x2d0 [ 1062.366877][T14259] sock_recvmsg+0x2df/0x390 [ 1062.371540][T14259] ____sys_recvmsg+0x193/0x610 [ 1062.376410][T14259] ___sys_recvmsg+0x20b/0x850 [ 1062.381323][T14259] do_recvmmsg+0x50b/0xdf0 [ 1062.385824][T14259] __sys_recvmmsg+0xf3/0x460 [ 1062.390693][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.397128][T14259] ia32_sys_call+0x2970/0x4310 [ 1062.406008][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1062.411843][T14259] do_fast_syscall_32+0x38/0x80 [ 1062.416783][T14259] do_SYSENTER_32+0x1f/0x30 [ 1062.421485][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.427940][T14259] [ 1062.430366][T14259] Local variable intermediary created at: [ 1062.436193][T14259] jent_hash_time+0x9b/0x590 [ 1062.440896][T14259] jent_condition_data+0x4f0/0x510 [ 1062.446097][T14259] [ 1062.448645][T14259] Byte 0 of 1 is uninitialized [ 1062.453457][T14259] Memory access of size 1 starts at ffff888128123890 [ 1062.460251][T14259] Data copied to user address 0000000080001d00 [ 1062.466438][T14259] [ 1062.468896][T14259] CPU: 1 UID: 0 PID: 14259 Comm: syz.3.2823 Not tainted syzkaller #0 PREEMPT(none) [ 1062.478345][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.488701][T14259] ===================================================== [ 1062.496101][T14259] Disabling lock debugging due to kernel taint [ 1062.502375][T14259] Kernel panic - not syncing: kmsan.panic set ... [ 1062.508964][T14259] CPU: 1 UID: 0 PID: 14259 Comm: syz.3.2823 Tainted: G B syzkaller #0 PREEMPT(none) [ 1062.520277][T14259] Tainted: [B]=BAD_PAGE [ 1062.524466][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.534595][T14259] Call Trace: [ 1062.537912][T14259] [ 1062.540873][T14259] __dump_stack+0x26/0x30 [ 1062.545291][T14259] dump_stack_lvl+0x53/0x270 [ 1062.549969][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.556032][T14259] dump_stack+0x1e/0x25 [ 1062.560284][T14259] vpanic+0x361/0xc50 [ 1062.564378][T14259] panic+0x15d/0x160 [ 1062.568391][T14259] kmsan_report+0x31c/0x320 [ 1062.573028][T14259] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1062.579091][T14259] ? kmsan_copy_to_user+0xf1/0x190 [ 1062.584396][T14259] ? _copy_to_iter+0xef3/0x33f0 [ 1062.589332][T14259] ? rng_recvmsg+0x1af/0x2d0 [ 1062.594009][T14259] ? sock_recvmsg+0x2df/0x390 [ 1062.598761][T14259] ? ____sys_recvmsg+0x193/0x610 [ 1062.603788][T14259] ? ___sys_recvmsg+0x20b/0x850 [ 1062.608744][T14259] ? do_recvmmsg+0x50b/0xdf0 [ 1062.613506][T14259] ? __sys_recvmmsg+0xf3/0x460 [ 1062.618359][T14259] ? __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.625018][T14259] ? ia32_sys_call+0x2970/0x4310 [ 1062.630053][T14259] ? __do_fast_syscall_32+0xb0/0x150 [ 1062.635479][T14259] ? do_fast_syscall_32+0x38/0x80 [ 1062.640570][T14259] ? do_SYSENTER_32+0x1f/0x30 [ 1062.645316][T14259] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.651918][T14259] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1062.658065][T14259] ? __msan_memset+0xf6/0x1b0 [ 1062.662813][T14259] ? jent_read_random_block+0x231/0x270 [ 1062.668434][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.673664][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.679561][T14259] ? jent_read_entropy+0xe7b/0xeb0 [ 1062.684770][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.689957][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.696211][T14259] kmsan_internal_check_memory+0x1e1/0x230 [ 1062.702107][T14259] kmsan_copy_to_user+0xf1/0x190 [ 1062.707146][T14259] _copy_to_iter+0xef3/0x33f0 [ 1062.711953][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.717171][T14259] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1062.723342][T14259] rng_recvmsg+0x1af/0x2d0 [ 1062.727853][T14259] ? aa_sock_msg_perm+0x29c/0x2f0 [ 1062.733156][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.738391][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.744336][T14259] ? __pfx_rng_recvmsg+0x10/0x10 [ 1062.749360][T14259] ? __pfx_rng_recvmsg+0x10/0x10 [ 1062.754378][T14259] sock_recvmsg+0x2df/0x390 [ 1062.758978][T14259] ____sys_recvmsg+0x193/0x610 [ 1062.763839][T14259] ? import_iovec+0xb0/0xe0 [ 1062.768447][T14259] ? get_compat_msghdr+0x670/0x740 [ 1062.773705][T14259] ___sys_recvmsg+0x20b/0x850 [ 1062.778505][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.784447][T14259] ? __fget_files+0x3b4/0x4a0 [ 1062.789225][T14259] ? __fget_files+0x3b9/0x4a0 [ 1062.794084][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.799392][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.805302][T14259] do_recvmmsg+0x50b/0xdf0 [ 1062.809839][T14259] ? kmsan_get_metadata+0xfb/0x160 [ 1062.815058][T14259] __sys_recvmmsg+0xf3/0x460 [ 1062.819842][T14259] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1062.825751][T14259] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1062.832202][T14259] ia32_sys_call+0x2970/0x4310 [ 1062.837057][T14259] __do_fast_syscall_32+0xb0/0x150 [ 1062.842247][T14259] do_fast_syscall_32+0x38/0x80 [ 1062.847169][T14259] do_SYSENTER_32+0x1f/0x30 [ 1062.851744][T14259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.858245][T14259] RIP: 0023:0xf7f63539 [ 1062.862409][T14259] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1062.882106][T14259] RSP: 002b:00000000f500155c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1062.890602][T14259] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800048c0 [ 1062.898630][T14259] RDX: 0000000000000001 RSI: 0000000000010002 RDI: 0000000000000000 [ 1062.906682][T14259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1062.914707][T14259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1062.922782][T14259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1062.930860][T14259] [ 1062.934236][T14259] Kernel Offset: disabled [ 1062.938600][T14259] Rebooting in 86400 seconds..