last executing test programs: 8.554556587s ago: executing program 2 (id=521): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) time(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080018"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.498798901s ago: executing program 1 (id=532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) preadv(r1, &(0x7f00000033c0)=[{0x0}, {&(0x7f00000001c0)=""/141, 0x8d}], 0x2, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.237618874s ago: executing program 2 (id=534): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 5.090421916s ago: executing program 2 (id=536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 4.760407432s ago: executing program 4 (id=539): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) 4.423169106s ago: executing program 4 (id=542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4.002038632s ago: executing program 1 (id=544): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 3.316479732s ago: executing program 3 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ac95ff9afd96e6c0"}, 0x38) sendto(r0, &(0x7f0000000580), 0x0, 0xc000, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.279342853s ago: executing program 4 (id=546): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 3.011250146s ago: executing program 4 (id=547): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0x2, 0x0, 0x4b}) 2.785493309s ago: executing program 3 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0xffffffffffffffcb}]}]}, 0x20}}, 0x0) 2.711232981s ago: executing program 1 (id=550): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x1c4e) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0xffffffffffffff07) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.550982533s ago: executing program 0 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000500)="0a00000100249eed0100000000000000cc1f14f62790590dd25bed76fe8c907eae11aa87414a9b03360fa8bf09000000ae82bf01ff90cac78e9654e6b5e0e7f0e4cb1d78001cb9b5ab73ffcf5ad0769372"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.527392993s ago: executing program 3 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) 2.335378146s ago: executing program 3 (id=553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000180)) 2.156256949s ago: executing program 3 (id=554): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) preadv(r1, &(0x7f00000033c0)=[{0x0}, {&(0x7f00000001c0)=""/141, 0x8d}], 0x2, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.952807342s ago: executing program 0 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x34, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x34}}, 0x20000014) 1.723114865s ago: executing program 1 (id=556): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x64, 0xce, 0x0, 0xfffffff8}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x26020480) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x3, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x287, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x1, 0x4d88, 0x80000000, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x2, 0x0, 0x100d5b8, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x0, 0x0, 0xa, 0x0}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x3, 0x0, 0x1000, &(0x7f00005dd000/0x1000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000080)=0xb0000) r13 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r13, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r13, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000040)={@local, 0x1}) 1.519419998s ago: executing program 0 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.314140391s ago: executing program 2 (id=558): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 1.227078392s ago: executing program 4 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.047205805s ago: executing program 2 (id=560): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 652.85715ms ago: executing program 3 (id=561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 464.540763ms ago: executing program 1 (id=562): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 423.919164ms ago: executing program 0 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) 299.573396ms ago: executing program 0 (id=564): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000180)) 153.299468ms ago: executing program 1 (id=565): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) openat$ptmx(0xffffff9c, 0x0, 0x64101, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40051) syz_emit_ethernet(0x4e, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 117.914058ms ago: executing program 4 (id=566): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000500)="0a00000100249eed0100000000000000cc1f14f62790590dd25bed76fe8c907eae11aa87414a9b03360fa8bf09000000ae82bf01ff90cac78e9654e6b5e0e7f0e4cb1d78001cb9b5ab73ffcf5ad0769372"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 39.276499ms ago: executing program 0 (id=567): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x1c4e) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0xffffffffffffff07) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 0s ago: executing program 2 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) kernel console output (not intermixed with test programs): hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.733877][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.755470][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.774261][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.793310][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.818513][ T4275] device veth1_vlan entered promiscuous mode [ 86.854411][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.910418][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.941535][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.949903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.981754][ T4275] device veth0_macvtap entered promiscuous mode [ 87.012964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.021933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.053960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.092495][ T4275] device veth1_macvtap entered promiscuous mode [ 87.109468][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.123923][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.163423][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.221444][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.264730][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.274837][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.310640][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.318571][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 87.320941][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 87.324646][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 87.353376][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.373385][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.393879][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 87.399997][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 87.419636][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.440418][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.452917][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.461868][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.487309][ T4283] device veth0_vlan entered promiscuous mode [ 87.497526][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.506528][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.516576][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.525388][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.568264][ T4283] device veth1_vlan entered promiscuous mode [ 87.609861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.655091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.680486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.719046][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.857517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.874574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.902012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.918907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.940956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.971862][ T4283] device veth0_macvtap entered promiscuous mode [ 88.011812][ T4273] device veth0_vlan entered promiscuous mode [ 88.043898][ T4283] device veth1_macvtap entered promiscuous mode [ 88.067734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.087515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.103367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.139146][ T4273] device veth1_vlan entered promiscuous mode [ 88.163701][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.172425][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.196190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.208203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.217865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.227259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.241785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.251446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.270575][ T4288] device veth0_vlan entered promiscuous mode [ 88.302038][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.314047][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.326785][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.335641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.349118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.359202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.374672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.382272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.389982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.399451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.424022][ T4288] device veth1_vlan entered promiscuous mode [ 88.443416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.455078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.465439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.482798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.498175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.508921][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.517952][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.529524][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.540020][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.545066][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.563522][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.579129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.590802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.601397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.627068][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636337][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645967][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.655746][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669418][ T4273] device veth0_macvtap entered promiscuous mode [ 88.724403][ T4273] device veth1_macvtap entered promiscuous mode [ 88.764409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.775066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.784349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.792492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.803418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.871038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.884804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.898076][ T4288] device veth0_macvtap entered promiscuous mode [ 88.940749][ T4279] device veth0_vlan entered promiscuous mode [ 88.971074][ T4288] device veth1_macvtap entered promiscuous mode [ 88.987149][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.007334][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.018649][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.031176][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.049751][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.056279][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.087372][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.106557][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.122868][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.132224][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.145718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.155145][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.164333][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.194280][ T4279] device veth1_vlan entered promiscuous mode [ 89.207793][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.222519][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.240900][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.245040][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.266713][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.280747][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.298701][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.330893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.343994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.366037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.377497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.396104][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 89.403147][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 89.404357][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 89.417744][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.435214][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.447701][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.458842][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.469272][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.480223][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 89.487593][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 89.493727][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.498690][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.520125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.536378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.545705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.559458][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.571214][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.580358][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.589627][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.630570][ T4279] device veth0_macvtap entered promiscuous mode [ 89.656403][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.665527][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.683062][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.694688][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.705173][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.716632][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.727367][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.738757][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.751182][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.761668][ T4279] device veth1_macvtap entered promiscuous mode [ 89.768856][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.777577][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.783079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.792250][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.805768][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.814376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.823763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.846004][ T4288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.855687][ T4288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.867360][ T4288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.877234][ T4288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.927230][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.939149][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.953585][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.965613][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.975656][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.988363][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.998331][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.009201][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.021947][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.058437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.078891][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.093946][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.129013][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.152616][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.166713][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.185390][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.197296][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.207739][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.231416][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.255457][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.284318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.305451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.321668][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331850][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.341253][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368616][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.481440][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.502295][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.513576][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.547163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.567221][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.588285][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.634299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.694144][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.710144][ T14] usb 3-1: device descriptor read/64, error -71 [ 90.719292][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.727826][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.743070][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.751634][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.776955][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.785621][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.794391][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.827077][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.861172][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.886547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.035660][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.202795][ T14] usb 3-1: device descriptor read/64, error -71 [ 91.324635][ T14] usb usb3-port1: attempt power cycle [ 91.753022][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.793666][ T14] usb 3-1: device descriptor read/8, error -71 [ 91.797020][ T4324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.012702][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 92.023004][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.036573][ T3044] cfg80211: failed to load regulatory.db [ 92.053914][ T4324] usb 4-1: config 4 interface 0 has no altsetting 0 [ 92.072653][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.076654][ T4324] usb 4-1: string descriptor 0 read error: -22 [ 92.109798][ T4324] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 92.133830][ T14] usb 3-1: device descriptor read/8, error -71 [ 92.140577][ T4324] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 92.204004][ T4324] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 92.229155][ T4324] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.242456][ T4324] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 92.251094][ T4324] usb 4-1: media controller created [ 92.265078][ T14] usb usb3-port1: unable to enumerate USB device [ 92.286036][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.505996][ T3044] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.706987][ T3044] usb 2-1: config 0 has no interfaces? [ 92.723155][ T3044] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 92.754277][ T3044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.783381][ T3044] usb 2-1: Product: syz [ 92.808427][ T3044] usb 2-1: Manufacturer: syz [ 92.817569][ T3044] usb 2-1: SerialNumber: syz [ 92.848742][ T3044] usb 2-1: config 0 descriptor?? [ 93.178321][ T4401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.257206][ T3044] usb 2-1: USB disconnect, device number 2 [ 93.398012][ T4324] zl10353_read_register: readreg error (reg=127, ret==0) [ 93.538310][ T4324] usb 4-1: USB disconnect, device number 2 [ 95.262257][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.270579][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.489322][ T4484] device syzkaller0 entered promiscuous mode [ 95.512772][ T4484] tipc: Enabling of bearer rejected, failed to enable media [ 95.677778][ T4502] fuse: Unknown parameter '0x0000000000000003' [ 95.779595][ T4487] device bridge_slave_1 left promiscuous mode [ 95.819136][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.867567][ T4487] device bridge_slave_0 left promiscuous mode [ 95.911564][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.118480][ T4538] fuse: Unknown parameter 'fd0x0000000000000003' [ 97.470967][ T4552] device syzkaller0 entered promiscuous mode [ 97.506040][ T4552] tipc: Enabling of bearer rejected, failed to enable media [ 97.675842][ T4551] binder_alloc: 4550: binder_alloc_buf, no vma [ 98.706633][ T4582] fuse: Unknown parameter 'fd0x0000000000000003' [ 98.811588][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.819320][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.869030][ T4589] device syzkaller0 entered promiscuous mode [ 98.911614][ T4589] tipc: Enabling of bearer rejected, failed to enable media [ 99.098891][ T4590] device bridge_slave_1 left promiscuous mode [ 99.114777][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.169205][ T4590] device bridge_slave_0 left promiscuous mode [ 99.241296][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.431222][ T4595] binder_alloc: 4594: binder_alloc_buf, no vma [ 100.060425][ T4623] fuse: Unknown parameter 'fd0x0000000000000003' [ 100.116136][ T3044] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.134202][ T4627] fuse: Bad value for 'fd' [ 100.315235][ T3044] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.342797][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.352094][ T4633] device syzkaller0 entered promiscuous mode [ 100.378732][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.402805][ T3044] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.405229][ T4633] tipc: Enabling of bearer rejected, failed to enable media [ 100.436268][ T3044] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.458149][ T3044] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.472834][ T3044] usb 5-1: Manufacturer: syz [ 100.485974][ T3044] usb 5-1: config 0 descriptor?? [ 100.908986][ T3044] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 100.921223][ T3044] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 100.946869][ T3044] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 101.154086][ T4324] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.238380][ T4323] usb 5-1: USB disconnect, device number 2 [ 101.352726][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.358689][ T4324] usb 3-1: config 0 has no interfaces? [ 101.376712][ T4324] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 101.391896][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.400417][ T4324] usb 3-1: Product: syz [ 101.413934][ T4324] usb 3-1: Manufacturer: syz [ 101.418617][ T4324] usb 3-1: SerialNumber: syz [ 101.447438][ T4324] usb 3-1: config 0 descriptor?? [ 101.562685][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 101.570399][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.588213][ T14] usb 2-1: config 4 interface 0 has no altsetting 0 [ 101.603502][ T14] usb 2-1: string descriptor 0 read error: -22 [ 101.624283][ T14] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 101.642330][ T14] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 101.679238][ T14] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 101.696507][ T14] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.708029][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 101.721944][ T14] usb 2-1: media controller created [ 101.748724][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.809659][ T4652] binder_alloc: 4651: binder_alloc_buf, no vma [ 101.843320][ T4639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.871053][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 101.897482][ T4284] usb 3-1: USB disconnect, device number 6 [ 101.979294][ T14] usb 2-1: USB disconnect, device number 3 [ 102.678163][ T4679] netlink: 108 bytes leftover after parsing attributes in process `syz.2.92'. [ 102.687754][ T4679] Zero length message leads to an empty skb [ 102.719897][ T4680] device syzkaller0 entered promiscuous mode [ 102.746802][ T4680] tipc: Enabling of bearer rejected, failed to enable media [ 103.030388][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.038031][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.239117][ T4690] device bridge_slave_1 left promiscuous mode [ 103.249058][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.259412][ T4690] device bridge_slave_0 left promiscuous mode [ 103.266080][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.482685][ T4323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.584121][ T4697] fuse: Bad value for 'fd' [ 103.665260][ T4323] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.688861][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.711667][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.724910][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.745309][ T4323] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.769488][ T4323] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.780087][ T4323] usb 1-1: Manufacturer: syz [ 103.794361][ T4323] usb 1-1: config 0 descriptor?? [ 104.189287][ T4711] syz.2.104 uses obsolete (PF_INET,SOCK_PACKET) [ 104.212253][ T4323] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 104.234646][ T4323] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 104.257772][ T4323] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 104.353579][ T14] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 104.505320][ T4284] usb 1-1: USB disconnect, device number 2 [ 104.545949][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.571209][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 104.584433][ T4323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.603695][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.637796][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.684533][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.708864][ T14] usbtmc: probe of 2-1:16.0 failed with error -22 [ 104.792700][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 104.800576][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.825794][ T4323] usb 5-1: config 4 interface 0 has no altsetting 0 [ 104.851257][ T4323] usb 5-1: string descriptor 0 read error: -22 [ 104.875366][ T4323] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 104.906472][ T4323] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 104.949087][ T4323] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 104.983936][ T4323] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.001692][ T4323] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 105.022937][ T4323] usb 5-1: media controller created [ 105.052258][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.168439][ T4323] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.238313][ T4323] usb 5-1: USB disconnect, device number 3 [ 105.468533][ T4728] device syzkaller0 entered promiscuous mode [ 105.535141][ T4728] tipc: Enabling of bearer rejected, failed to enable media [ 106.545658][ T4751] process 'syz.2.115' launched './file0' with NULL argv: empty string added [ 107.102711][ T14] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 107.167492][ T4323] usb 2-1: USB disconnect, device number 4 [ 107.338334][ T14] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 107.359744][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.371032][ T14] usb 3-1: config 0 has no interface number 0 [ 107.378060][ T14] usb 3-1: config 0 interface 205 has no altsetting 0 [ 107.390871][ T14] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 107.402342][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.412150][ T14] usb 3-1: Product: syz [ 107.417062][ T14] usb 3-1: Manufacturer: syz [ 107.422166][ T14] usb 3-1: SerialNumber: syz [ 107.436323][ T14] usb 3-1: config 0 descriptor?? [ 107.449184][ T14] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 107.465243][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 107.500371][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.513293][ T14] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 107.526467][ T14] usb 3-1: media controller created [ 107.535614][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.570886][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 107.588732][ T14] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 107.621067][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 107.662360][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.667504][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 107.711883][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.796488][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 107.922663][ T14] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 108.063268][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 108.112735][ T4284] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.126230][ T14] dvb-usb: error while querying for an remote control event. [ 108.313982][ T4284] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.337363][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.345647][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 108.370540][ T4323] dvb-usb: error while querying for an remote control event. [ 108.396532][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.437892][ T4284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.491546][ T4284] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.534448][ T4284] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.570289][ T4284] usb 4-1: Manufacturer: syz [ 108.623125][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 108.634446][ T4323] dvb-usb: error while querying for an remote control event. [ 108.648715][ T4284] usb 4-1: config 0 descriptor?? [ 108.803483][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 108.828557][ T4323] dvb-usb: error while querying for an remote control event. [ 109.034586][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 109.040537][ T4323] dvb-usb: error while querying for an remote control event. [ 109.082516][ T4284] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 109.116928][ T4284] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 109.161188][ T4284] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 109.222680][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 109.230425][ T4323] dvb-usb: error while querying for an remote control event. [ 109.394192][ T4323] usb 4-1: USB disconnect, device number 3 [ 109.433288][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 109.439115][ T7] dvb-usb: error while querying for an remote control event. [ 109.632776][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 109.638726][ T7] dvb-usb: error while querying for an remote control event. [ 109.782393][ T4786] fido_id[4786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.818515][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 109.826974][ T4323] dvb-usb: error while querying for an remote control event. [ 110.002813][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 110.009260][ T4323] dvb-usb: error while querying for an remote control event. [ 110.202679][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 110.226611][ T7] dvb-usb: error while querying for an remote control event. [ 110.239294][ T26] audit: type=1326 audit(1782472748.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.3.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f880ab9ce59 code=0x0 [ 110.404426][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 110.411035][ T7] dvb-usb: error while querying for an remote control event. [ 110.594356][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 110.605100][ T7] dvb-usb: error while querying for an remote control event. [ 110.698339][ T3044] usb 3-1: USB disconnect, device number 7 [ 110.744926][ T3044] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 111.332777][ T3044] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.557604][ T3044] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 111.584832][ T3044] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 111.637304][ T3044] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.674471][ T3044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.704471][ T3044] usb 3-1: config 0 descriptor?? [ 111.719503][ T3044] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 112.095110][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.145'. [ 112.703621][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 112.926497][ T7] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 112.944243][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.970014][ T7] usb 4-1: config 0 has no interface number 0 [ 112.978733][ T4853] device syzkaller0 entered promiscuous mode [ 112.985031][ T7] usb 4-1: config 0 interface 205 has no altsetting 0 [ 113.017198][ T7] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 113.027102][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.035973][ T7] usb 4-1: Product: syz [ 113.040552][ T7] usb 4-1: Manufacturer: syz [ 113.045398][ T7] usb 4-1: SerialNumber: syz [ 113.065283][ T7] usb 4-1: config 0 descriptor?? [ 113.110303][ T7] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 113.133538][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 113.170806][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.191274][ T7] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 113.205139][ T7] usb 4-1: media controller created [ 113.212108][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.258129][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 113.287967][ T7] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 113.366036][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 113.380824][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.420653][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.438475][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 113.454661][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 113.492769][ T7] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 113.612741][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 113.619119][ T7] dvb-usb: error while querying for an remote control event. [ 113.812736][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 113.820858][ T4323] dvb-usb: error while querying for an remote control event. [ 113.971470][ T7] usb 3-1: USB disconnect, device number 8 [ 114.012840][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 114.018966][ T4323] dvb-usb: error while querying for an remote control event. [ 114.130780][ T4871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 114.213654][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 114.220992][ T4323] dvb-usb: error while querying for an remote control event. [ 114.422653][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 114.428993][ T4323] dvb-usb: error while querying for an remote control event. [ 114.612659][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 114.625118][ T4323] dvb-usb: error while querying for an remote control event. [ 114.842724][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 114.849252][ T4323] dvb-usb: error while querying for an remote control event. [ 115.052752][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 115.058705][ T4323] dvb-usb: error while querying for an remote control event. [ 115.262929][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 115.279364][ T4323] dvb-usb: error while querying for an remote control event. [ 115.472834][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 115.484564][ T14] dvb-usb: error while querying for an remote control event. [ 115.652778][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.674038][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 115.680689][ T4323] dvb-usb: error while querying for an remote control event. [ 115.728630][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 115.852783][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 115.865318][ T4323] dvb-usb: error while querying for an remote control event. [ 115.875967][ T14] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 115.902642][ T3044] usb 4-1: USB disconnect, device number 4 [ 115.922790][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 115.950733][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.968427][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.005540][ T3044] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 116.019999][ T14] usb 3-1: config 0 descriptor?? [ 116.052508][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.651508][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 116.892685][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.001066][ T4930] device syzkaller0 entered promiscuous mode [ 117.014027][ T4284] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 117.073405][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 117.096492][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.117216][ T14] usb 2-1: config 4 interface 0 has no altsetting 0 [ 117.135923][ T14] usb 2-1: string descriptor 0 read error: -22 [ 117.153026][ T14] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 117.162441][ T14] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 117.221004][ T14] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 117.241632][ T14] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.254947][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 117.262293][ T14] usb 2-1: media controller created [ 117.294417][ T4284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.314970][ T4284] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 117.332440][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.342970][ T4284] usb 4-1: can't read configurations, error -71 [ 118.022759][ T32] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 118.225618][ T32] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 118.243912][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.294934][ T32] usb 5-1: config 0 has no interface number 0 [ 118.345662][ T32] usb 5-1: config 0 interface 205 has no altsetting 0 [ 118.408397][ T32] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 118.433271][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 118.473817][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.499404][ T126] usb 3-1: USB disconnect, device number 9 [ 118.553583][ T14] usb 2-1: USB disconnect, device number 5 [ 118.593810][ T32] usb 5-1: Product: syz [ 118.667790][ T32] usb 5-1: Manufacturer: syz [ 118.697273][ T32] usb 5-1: SerialNumber: syz [ 118.726345][ T32] usb 5-1: config 0 descriptor?? [ 118.755364][ T32] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 118.779674][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 118.844484][ T32] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.885044][ T32] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 118.937399][ T32] usb 5-1: media controller created [ 118.981394][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.056676][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 119.088892][ T32] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 119.158102][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 119.235067][ T32] dvb-usb: schedule remote query interval to 150 msecs. [ 119.266075][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 119.328550][ T32] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 119.429139][ T4284] dvb-usb: bulk message failed: -22 (1/0) [ 119.437536][ T4284] dvb-usb: error while querying for an remote control event. [ 119.612940][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 119.627567][ T32] dvb-usb: error while querying for an remote control event. [ 119.823932][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 119.840297][ T32] dvb-usb: error while querying for an remote control event. [ 120.072681][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 120.080366][ T32] dvb-usb: error while querying for an remote control event. [ 120.262758][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 120.270619][ T32] dvb-usb: error while querying for an remote control event. [ 120.462727][ T4284] dvb-usb: bulk message failed: -22 (1/0) [ 120.469047][ T4284] dvb-usb: error while querying for an remote control event. [ 120.531571][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 120.542586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 120.652722][ T3044] dvb-usb: bulk message failed: -22 (1/0) [ 120.661081][ T3044] dvb-usb: error while querying for an remote control event. [ 120.702667][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.834361][ T3044] dvb-usb: bulk message failed: -22 (1/0) [ 120.840542][ T3044] dvb-usb: error while querying for an remote control event. [ 120.882629][ T4284] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 120.894422][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.923198][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 120.974033][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.993361][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.014096][ T4324] dvb-usb: bulk message failed: -22 (1/0) [ 121.020212][ T4324] dvb-usb: error while querying for an remote control event. [ 121.029074][ T126] usb 5-1: USB disconnect, device number 4 [ 121.033784][ T32] usb 1-1: config 0 descriptor?? [ 121.057700][ T32] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 121.093797][ T126] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 121.136265][ T4284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.151477][ T4993] device syzkaller0 entered promiscuous mode [ 121.162023][ T4284] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.197789][ T4284] usb 3-1: can't read configurations, error -71 [ 121.642676][ T4324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.822621][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 121.830324][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.847366][ T4324] usb 4-1: config 4 interface 0 has no altsetting 0 [ 121.867913][ T4324] usb 4-1: string descriptor 0 read error: -22 [ 121.881822][ T4324] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.900357][ T4324] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 121.929296][ T4324] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 121.947488][ T4324] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.965793][ T4324] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 121.984054][ T4324] usb 4-1: media controller created [ 122.029673][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.032415][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 123.099507][ T4324] zl10353_read_register: readreg error (reg=127, ret==0) [ 123.149887][ T4324] usb 4-1: USB disconnect, device number 7 [ 123.200794][ T5039] device syzkaller0 entered promiscuous mode [ 123.332644][ T4284] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 123.470994][ T4324] usb 1-1: USB disconnect, device number 3 [ 123.544562][ T4284] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 123.559740][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.575055][ T4284] usb 5-1: config 0 has no interface number 0 [ 123.582479][ T4284] usb 5-1: config 0 interface 205 has no altsetting 0 [ 123.603155][ T4284] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 123.620956][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.632972][ T4284] usb 5-1: Product: syz [ 123.637418][ T4284] usb 5-1: Manufacturer: syz [ 123.642301][ T4284] usb 5-1: SerialNumber: syz [ 123.684225][ T4284] usb 5-1: config 0 descriptor?? [ 123.737227][ T4284] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 123.788080][ T4284] dvb-usb: bulk message failed: -22 (3/0) [ 123.855502][ T4284] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 123.866943][ T4284] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 123.881308][ T4284] usb 5-1: media controller created [ 123.888975][ T4284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.923591][ T4284] dvb-usb: bulk message failed: -22 (6/0) [ 123.942319][ T4284] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 123.976737][ T4284] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 124.010345][ T4284] dvb-usb: schedule remote query interval to 150 msecs. [ 124.037214][ T4284] dvb-usb: bulk message failed: -22 (3/0) [ 124.092787][ T4284] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 124.152890][ T4284] usb 5-1: USB disconnect, device number 5 [ 124.228937][ T4284] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 124.975119][ T4284] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.174004][ T4284] usb 5-1: Using ep0 maxpacket: 16 [ 125.182882][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.232811][ T4284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.253543][ T4284] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 125.282607][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.325477][ T4284] usb 5-1: config 0 descriptor?? [ 125.502900][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.569705][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 125.651554][ T5097] device syzkaller0 entered promiscuous mode [ 125.726747][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 125.738431][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.749900][ T32] usb 1-1: config 4 interface 0 has no altsetting 0 [ 125.760756][ T32] usb 1-1: string descriptor 0 read error: -22 [ 125.770918][ T32] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 125.783037][ T32] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 125.804989][ T32] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 125.825798][ T32] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.840281][ T32] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 125.849949][ T32] usb 1-1: media controller created [ 125.892649][ T4284] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 125.910473][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.114646][ T4284] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 126.125656][ T4284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.137270][ T4284] usb 4-1: config 0 has no interface number 0 [ 126.144608][ T4284] usb 4-1: config 0 interface 205 has no altsetting 0 [ 126.172929][ T4284] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 126.196751][ T4284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.221962][ T4284] usb 4-1: Product: syz [ 126.243853][ T4284] usb 4-1: Manufacturer: syz [ 126.275296][ T4284] usb 4-1: SerialNumber: syz [ 126.324723][ T4284] usb 4-1: config 0 descriptor?? [ 126.339430][ T4324] usb 5-1: USB disconnect, device number 6 [ 126.367051][ T4284] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 126.384259][ T4284] dvb-usb: bulk message failed: -22 (3/0) [ 126.449611][ T4284] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 126.495260][ T4284] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 126.510934][ T4284] usb 4-1: media controller created [ 126.520889][ T4284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.537327][ T4284] dvb-usb: bulk message failed: -22 (6/0) [ 126.544486][ T4284] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 126.579265][ T4284] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 126.600425][ T4284] dvb-usb: schedule remote query interval to 150 msecs. [ 126.618066][ T4284] dvb-usb: bulk message failed: -22 (3/0) [ 126.662773][ T4284] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 126.736181][ T4284] usb 4-1: USB disconnect, device number 8 [ 126.816762][ T4284] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 127.003458][ T32] zl10353_read_register: readreg error (reg=127, ret==0) [ 127.061010][ T32] usb 1-1: USB disconnect, device number 4 [ 127.103324][ T4324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.322858][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 127.334544][ T4324] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 127.387024][ T4324] usb 5-1: config 0 has no interface number 0 [ 127.405197][ T4324] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.463488][ T4324] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.507336][ T4324] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.533839][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.589066][ T4324] usb 5-1: Product: syz [ 127.602723][ T4324] usb 5-1: SerialNumber: syz [ 127.630680][ T4324] usb 5-1: config 0 descriptor?? [ 127.667521][ T4324] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 127.697760][ T4324] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 127.871092][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 128.012720][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.096268][ T5114] rdma_op ffff8880713181f0 conn xmit_rdma 0000000000000000 [ 128.202792][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 128.204720][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.204750][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.204787][ T7] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 128.204816][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.207193][ T7] usb 1-1: config 0 descriptor?? [ 128.553819][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.554025][ T7] usb 5-1: USB disconnect, device number 7 [ 128.561834][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 128.579281][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.618962][ T7] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 128.958416][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 129.156366][ T4324] usb 1-1: USB disconnect, device number 5 [ 129.260127][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 129.282971][ T32] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 129.497532][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.547790][ T32] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 129.593331][ T32] usb 4-1: can't read configurations, error -71 [ 130.222767][ T4323] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.415962][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 130.441235][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.492218][ T4323] usb 1-1: config 4 interface 0 has no altsetting 0 [ 130.506521][ T4323] usb 1-1: string descriptor 0 read error: -22 [ 130.514399][ T4323] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 130.526472][ T4323] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 130.562727][ T4323] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 130.581569][ T4323] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.614239][ T4323] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.640092][ T4323] usb 1-1: media controller created [ 130.697377][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.725923][ T3044] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.745558][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.820258][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 130.949291][ T3044] usb 3-1: Using ep0 maxpacket: 16 [ 130.956448][ T32] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 130.975985][ T3044] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.990020][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.006527][ T3044] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.020627][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.031790][ T3044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.039117][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.053514][ T3044] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 131.063213][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.066873][ T3044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.082601][ T32] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.094984][ T32] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.110518][ T3044] usb 3-1: config 0 descriptor?? [ 131.116755][ T32] usb 4-1: Manufacturer: syz [ 131.125638][ T3044] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 131.136815][ T32] usb 4-1: config 0 descriptor?? [ 131.264645][ T126] usb 2-1: config 0 has no interfaces? [ 131.275523][ T126] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 131.291306][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.300589][ T126] usb 2-1: Product: syz [ 131.314754][ T126] usb 2-1: Manufacturer: syz [ 131.319479][ T126] usb 2-1: SerialNumber: syz [ 131.331202][ T126] usb 2-1: config 0 descriptor?? [ 131.551090][ T126] usb 2-1: USB disconnect, device number 6 [ 131.560819][ T32] usbhid 4-1:0.0: can't add hid device: -71 [ 131.580707][ T32] usbhid: probe of 4-1:0.0 failed with error -71 [ 131.606091][ T32] usb 4-1: USB disconnect, device number 10 [ 131.793817][ T4323] zl10353_read_register: readreg error (reg=127, ret==0) [ 131.840680][ T4323] usb 1-1: USB disconnect, device number 6 [ 132.069819][ T32] usb 3-1: USB disconnect, device number 12 [ 132.303139][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 132.617825][ T5224] device syzkaller0 entered promiscuous mode [ 133.292910][ T4323] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 133.302686][ T3044] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 133.499665][ T4323] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 133.514470][ T3044] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 133.526763][ T3044] usb 5-1: config 0 has no interface number 0 [ 133.537458][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.569681][ T4323] usb 3-1: config 0 has no interface number 0 [ 133.574453][ T3044] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 133.598688][ T4323] usb 3-1: config 0 interface 205 has no altsetting 0 [ 133.648792][ T3044] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 133.689778][ T4323] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 133.715204][ T3044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.737306][ T3044] usb 5-1: Product: syz [ 133.739786][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.760831][ T3044] usb 5-1: Manufacturer: syz [ 133.781776][ T3044] usb 5-1: SerialNumber: syz [ 133.789549][ T4323] usb 3-1: Product: syz [ 133.816792][ T4323] usb 3-1: Manufacturer: syz [ 133.832359][ T3044] usb 5-1: config 0 descriptor?? [ 133.846509][ T4323] usb 3-1: SerialNumber: syz [ 133.853095][ T5242] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.916319][ T4323] usb 3-1: config 0 descriptor?? [ 133.938305][ T3044] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 76:c3:85:ee:fc:61 [ 133.953131][ T4323] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 133.978718][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 134.028938][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.081423][ T4323] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 134.124075][ T4323] usb 3-1: media controller created [ 134.150822][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.207044][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 134.225286][ T4323] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 134.242661][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.250773][ T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.291513][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 134.327978][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 134.341093][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 134.382860][ T4323] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 134.474595][ T4320] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.486822][ T32] usb 4-1: config 0 has no interfaces? [ 134.492703][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 134.499309][ T32] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 134.520363][ T4323] dvb-usb: error while querying for an remote control event. [ 134.549753][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.603341][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.645209][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.663484][ T32] usb 4-1: Product: syz [ 134.681430][ T32] usb 4-1: Manufacturer: syz [ 134.697618][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.718148][ T32] usb 4-1: SerialNumber: syz [ 134.722937][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 134.722966][ T126] dvb-usb: error while querying for an remote control event. [ 134.750160][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 134.780868][ T32] usb 4-1: config 0 descriptor?? [ 134.814093][ T4320] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.851260][ T4320] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.897401][ T4320] usb 2-1: Manufacturer: syz [ 134.928459][ T4320] usb 2-1: config 0 descriptor?? [ 134.933249][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 134.941280][ T126] dvb-usb: error while querying for an remote control event. [ 135.008049][ T32] usb 4-1: USB disconnect, device number 11 [ 135.152768][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 135.160457][ T126] dvb-usb: error while querying for an remote control event. [ 135.373316][ T4320] usbhid 2-1:0.0: can't add hid device: -71 [ 135.382807][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 135.388743][ T4363] dvb-usb: error while querying for an remote control event. [ 135.426101][ T4320] usbhid: probe of 2-1:0.0 failed with error -71 [ 135.496872][ T4320] usb 2-1: USB disconnect, device number 7 [ 135.582799][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 135.589035][ T4363] dvb-usb: error while querying for an remote control event. [ 135.822743][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 135.874599][ T126] dvb-usb: error while querying for an remote control event. [ 136.076401][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 136.089552][ T126] dvb-usb: error while querying for an remote control event. [ 136.304394][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 136.314887][ T126] dvb-usb: error while querying for an remote control event. [ 136.492892][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 136.498802][ T4323] dvb-usb: error while querying for an remote control event. [ 136.682658][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 136.692985][ T4363] dvb-usb: error while querying for an remote control event. [ 136.838242][ T4363] usb 5-1: USB disconnect, device number 8 [ 136.859142][ T4363] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 136.904891][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 136.922311][ T126] dvb-usb: error while querying for an remote control event. [ 137.093526][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 137.109756][ T4323] dvb-usb: error while querying for an remote control event. [ 137.313662][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 137.320149][ T4323] dvb-usb: error while querying for an remote control event. [ 137.489171][ T4284] usb 3-1: USB disconnect, device number 13 [ 137.534439][ T4284] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 138.070337][ T5292] device syzkaller0 entered promiscuous mode [ 138.116175][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.123933][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.434853][ T5332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 140.112702][ T4323] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 140.314472][ T5347] device syzkaller0 entered promiscuous mode [ 140.334938][ T4323] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 140.354566][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.404450][ T4323] usb 2-1: config 0 has no interface number 0 [ 140.425322][ T4323] usb 2-1: config 0 interface 205 has no altsetting 0 [ 140.453125][ T4323] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 140.476186][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.556415][ T4323] usb 2-1: Product: syz [ 140.580287][ T4323] usb 2-1: Manufacturer: syz [ 140.621059][ T4323] usb 2-1: SerialNumber: syz [ 140.642444][ T4323] usb 2-1: config 0 descriptor?? [ 140.679596][ T4323] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 140.748892][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 140.805731][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 140.843038][ T4323] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 140.924548][ T4323] usb 2-1: media controller created [ 140.971722][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.028351][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 141.053616][ T4323] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 141.126052][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 141.187312][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 141.223057][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 141.302619][ T4323] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 141.352730][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.445463][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 141.457966][ T7] dvb-usb: error while querying for an remote control event. [ 141.583529][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 141.596697][ T32] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 141.636618][ T32] usb 4-1: config 0 has no interface number 0 [ 141.643008][ T4323] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.652639][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 141.659216][ T7] dvb-usb: error while querying for an remote control event. [ 141.743922][ T32] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.791569][ T32] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.824521][ T32] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 141.834448][ T4323] usb 3-1: config 0 has no interfaces? [ 141.843089][ T4323] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.854483][ T32] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 141.871309][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.872390][ T32] usb 4-1: Product: syz [ 141.905803][ T4323] usb 3-1: Product: syz [ 141.910304][ T32] usb 4-1: SerialNumber: syz [ 141.922606][ T4323] usb 3-1: Manufacturer: syz [ 141.938568][ T32] usb 4-1: config 0 descriptor?? [ 141.948042][ T4323] usb 3-1: SerialNumber: syz [ 141.986718][ T32] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 141.987491][ T4323] usb 3-1: config 0 descriptor?? [ 142.017372][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 142.024559][ T7] dvb-usb: error while querying for an remote control event. [ 142.025176][ T32] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 142.208456][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 142.214031][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 142.235828][ T4323] dvb-usb: error while querying for an remote control event. [ 142.307446][ T4323] usb 3-1: USB disconnect, device number 14 [ 142.456749][ T5360] rdma_op ffff8880243721f0 conn xmit_rdma 0000000000000000 [ 142.464483][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 142.475569][ T126] dvb-usb: error while querying for an remote control event. [ 142.523126][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.667771][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 142.667814][ T4323] dvb-usb: error while querying for an remote control event. [ 142.704583][ T32] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 142.704648][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 142.704720][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.704747][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.708099][ T32] usb 1-1: config 0 descriptor?? [ 142.711552][ T32] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.824231][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 142.824266][ T4323] dvb-usb: error while querying for an remote control event. [ 142.982738][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 142.982771][ T4323] dvb-usb: error while querying for an remote control event. [ 143.142746][ T4323] dvb-usb: bulk message failed: -22 (1/0) [ 143.142782][ T4323] dvb-usb: error while querying for an remote control event. [ 143.302773][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 143.302810][ T126] dvb-usb: error while querying for an remote control event. [ 143.452912][ T126] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 143.462797][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 143.462832][ T4363] dvb-usb: error while querying for an remote control event. [ 143.612970][ T4323] usb 2-1: USB disconnect, device number 8 [ 143.635190][ T126] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 143.635225][ T126] usb 3-1: config 0 has no interface number 0 [ 143.635263][ T126] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 143.638762][ T126] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 143.638800][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.638826][ T126] usb 3-1: Product: syz [ 143.638846][ T126] usb 3-1: Manufacturer: syz [ 143.638865][ T126] usb 3-1: SerialNumber: syz [ 143.646420][ T126] usb 3-1: config 0 descriptor?? [ 143.647176][ T5370] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.657469][ T4323] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 143.689251][ T126] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:ca:79:1b:c2:b6 [ 144.011344][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 144.013139][ T4323] usb 4-1: USB disconnect, device number 12 [ 144.018880][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 144.071070][ T4323] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 144.131993][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 144.432304][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 145.359473][ T32] usb 3-1: USB disconnect, device number 15 [ 145.370042][ T32] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 145.383858][ T7] usb 1-1: USB disconnect, device number 7 [ 145.806925][ T5427] binder_alloc: 5426: binder_alloc_buf, no vma [ 145.892765][ T3044] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.942649][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.085531][ T3044] usb 4-1: config 0 has no interfaces? [ 146.102402][ T3044] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.132213][ T3044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.154454][ T3044] usb 4-1: Product: syz [ 146.159167][ T3044] usb 4-1: Manufacturer: syz [ 146.179968][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 146.183033][ T3044] usb 4-1: SerialNumber: syz [ 146.204033][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.223974][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.228716][ T3044] usb 4-1: config 0 descriptor?? [ 146.270345][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.292193][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.325864][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.383871][ T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.392128][ T7] usb 1-1: Manufacturer: syz [ 146.440043][ T7] usb 1-1: config 0 descriptor?? [ 146.514735][ T32] usb 4-1: USB disconnect, device number 13 [ 146.864075][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 146.878953][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 146.919849][ T7] usb 1-1: USB disconnect, device number 8 [ 147.502713][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.705281][ T32] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 147.741553][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 147.771542][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.805787][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.844512][ T32] usb 4-1: config 0 descriptor?? [ 147.874245][ T32] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 147.999760][ T5485] binder_alloc: 5484: binder_alloc_buf, no vma [ 148.932879][ T4320] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 149.147984][ T4320] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 149.165255][ T4320] usb 1-1: config 0 has no interface number 0 [ 149.185991][ T4320] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 149.213483][ T4320] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 149.240092][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.269305][ T4320] usb 1-1: Product: syz [ 149.290283][ T4320] usb 1-1: Manufacturer: syz [ 149.340444][ T4320] usb 1-1: SerialNumber: syz [ 149.352708][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.379885][ T4320] usb 1-1: config 0 descriptor?? [ 149.401352][ T5503] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 149.454301][ T4320] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:1c:ef:ed:49:b8 [ 149.564377][ T32] usb 3-1: config 0 has no interfaces? [ 149.589063][ T32] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 149.628760][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.656362][ T32] usb 3-1: Product: syz [ 149.668799][ T32] usb 3-1: Manufacturer: syz [ 149.676930][ T32] usb 3-1: SerialNumber: syz [ 149.704758][ T32] usb 3-1: config 0 descriptor?? [ 149.950440][ T32] usb 3-1: USB disconnect, device number 16 [ 150.222283][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 150.255118][ T32] usb 4-1: USB disconnect, device number 14 [ 150.854763][ T5546] binder_alloc: 5545: binder_alloc_buf, no vma [ 151.561950][ T3044] usb 1-1: USB disconnect, device number 9 [ 151.582340][ T3044] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 152.663510][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.877506][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 152.898705][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.945999][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.008286][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.039373][ T32] usb 1-1: config 0 descriptor?? [ 153.058530][ T32] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 153.392865][ T126] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 153.596105][ T126] usb 3-1: config 0 has no interfaces? [ 153.607370][ T126] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 153.631833][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.652640][ T126] usb 3-1: Product: syz [ 153.665071][ T126] usb 3-1: Manufacturer: syz [ 153.677784][ T126] usb 3-1: SerialNumber: syz [ 153.707106][ T126] usb 3-1: config 0 descriptor?? [ 153.930715][ T32] usb 3-1: USB disconnect, device number 17 [ 155.413210][ T5644] device syzkaller0 entered promiscuous mode [ 155.424367][ T3044] usb 1-1: USB disconnect, device number 10 [ 155.494549][ T5644] tipc: Started in network mode [ 155.522734][ T5644] tipc: Node identity 1abe68be377, cluster identity 4711 [ 155.540280][ T5644] tipc: Enabled bearer , priority 0 [ 155.613469][ T5644] tipc: Resetting bearer [ 155.633397][ T5643] tipc: Resetting bearer [ 155.673861][ T5643] tipc: Disabling bearer [ 155.872838][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.072644][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 156.084517][ T126] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 156.113419][ T126] usb 2-1: config 0 has no interface number 0 [ 156.131237][ T126] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.165022][ T5668] kvm: emulating exchange as write [ 156.165849][ T126] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.193292][ T126] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 156.204076][ T126] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 156.212631][ T126] usb 2-1: Product: syz [ 156.217194][ T126] usb 2-1: SerialNumber: syz [ 156.231418][ T126] usb 2-1: config 0 descriptor?? [ 156.275017][ T126] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 156.325678][ T126] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input14 [ 156.472540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 156.497565][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 156.522567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 156.652589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 156.896693][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.906147][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.914796][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.915129][ T3044] usb 2-1: USB disconnect, device number 9 [ 156.922156][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 156.954547][ T3044] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 157.582674][ T126] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.752633][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.785016][ T126] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 157.800299][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.813823][ T126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.824436][ T32] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 157.833916][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.876236][ T126] usb 4-1: config 0 descriptor?? [ 157.893556][ T126] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 157.944307][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 157.976716][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.012628][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.054238][ T32] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 158.066942][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.066941][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.092804][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.107545][ T32] usb 5-1: config 0 has no interface number 0 [ 158.114569][ T32] usb 5-1: config 0 interface 205 has no altsetting 0 [ 158.124166][ T32] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 158.135521][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.144311][ T32] usb 5-1: Product: syz [ 158.148705][ T32] usb 5-1: Manufacturer: syz [ 158.156640][ T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.171162][ T32] usb 5-1: SerialNumber: syz [ 158.186211][ T7] usb 1-1: Manufacturer: syz [ 158.198267][ T7] usb 1-1: config 0 descriptor?? [ 158.211823][ T32] usb 5-1: config 0 descriptor?? [ 158.256663][ T32] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 158.370935][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 158.454853][ T32] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 158.482426][ T32] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 158.493140][ T126] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 158.537002][ T32] usb 5-1: media controller created [ 158.577981][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.595565][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 158.601590][ T32] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 158.618045][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 158.633143][ T32] dvb-usb: schedule remote query interval to 150 msecs. [ 158.640335][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 158.650149][ T7] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 158.672723][ T32] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 158.686337][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.698240][ T7] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 158.752119][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.785030][ T7] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 158.802764][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 158.817487][ T32] dvb-usb: error while querying for an remote control event. [ 158.825701][ T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.861216][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.917366][ T126] usb 3-1: Product: syz [ 158.933886][ T4320] usb 1-1: USB disconnect, device number 11 [ 158.959308][ T126] usb 3-1: Manufacturer: syz [ 158.982969][ T126] usb 3-1: SerialNumber: syz [ 159.052854][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 159.066513][ T32] dvb-usb: error while querying for an remote control event. [ 159.230979][ T126] usb 3-1: 0:2 : does not exist [ 159.243527][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 159.256403][ T126] usb 3-1: unit 9 not found! [ 159.264172][ T4320] dvb-usb: error while querying for an remote control event. [ 159.289872][ T126] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 159.315619][ T5710] fido_id[5710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.336633][ T126] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 159.377441][ T126] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 159.411012][ T126] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 159.474794][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 159.488521][ T4320] dvb-usb: error while querying for an remote control event. [ 159.496343][ T126] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 159.530545][ T126] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 159.564058][ T126] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 159.618712][ T126] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 159.712917][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 159.722891][ T126] usb 3-1: USB disconnect, device number 18 [ 159.732303][ T4320] dvb-usb: error while querying for an remote control event. [ 159.815393][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.942672][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 159.948858][ T4320] dvb-usb: error while querying for an remote control event. [ 160.152711][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 160.161737][ T4320] dvb-usb: error while querying for an remote control event. [ 160.362631][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 160.368616][ T4320] dvb-usb: error while querying for an remote control event. [ 160.392037][ T126] usb 4-1: USB disconnect, device number 15 [ 160.562700][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 160.570377][ T4320] dvb-usb: error while querying for an remote control event. [ 160.772671][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 160.780313][ T32] dvb-usb: error while querying for an remote control event. [ 160.982677][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 160.988551][ T32] dvb-usb: error while querying for an remote control event. [ 161.012722][ T4320] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.200469][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 161.222906][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 161.230905][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.249238][ T32] dvb-usb: error while querying for an remote control event. [ 161.284762][ T4320] usb 4-1: config 4 interface 0 has no altsetting 0 [ 161.296162][ T32] usb 5-1: USB disconnect, device number 9 [ 161.327153][ T4320] usb 4-1: string descriptor 0 read error: -22 [ 161.355625][ T4320] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 161.383412][ T4320] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 161.431641][ T4320] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 161.456485][ T32] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 161.477120][ T4320] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.515915][ T4320] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 161.524759][ T4320] usb 4-1: media controller created [ 161.582972][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.312643][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.491675][ T5768] device syzkaller0 entered promiscuous mode [ 162.504499][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 162.538682][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.571365][ T5768] tipc: Started in network mode [ 162.589807][ T5768] tipc: Node identity 5a4d52fe46dd, cluster identity 4711 [ 162.620197][ T5768] tipc: Enabled bearer , priority 0 [ 162.627430][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.655424][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.683254][ T4320] zl10353_read_register: readreg error (reg=127, ret==0) [ 162.693675][ T7] usb 5-1: config 0 descriptor?? [ 162.705701][ T5768] tipc: Resetting bearer [ 162.734591][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 162.776679][ T5767] tipc: Resetting bearer [ 162.818291][ T5767] tipc: Disabling bearer [ 162.829135][ T4320] usb 4-1: USB disconnect, device number 16 [ 163.508881][ T5779] binder: BINDER_SET_CONTEXT_MGR already set [ 163.549311][ T5779] binder: 5778:5779 ioctl 4018620d 200000000240 returned -16 [ 164.322648][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 164.522649][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 164.529798][ T7] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 164.548011][ T7] usb 3-1: config 0 has no interface number 0 [ 164.560089][ T7] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.580126][ T7] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.600412][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 164.618938][ T7] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 164.637209][ T7] usb 3-1: Product: syz [ 164.646198][ T7] usb 3-1: SerialNumber: syz [ 164.654442][ T5795] device vlan2 entered promiscuous mode [ 164.663764][ T7] usb 3-1: config 0 descriptor?? [ 164.669057][ T5795] device batadv0 entered promiscuous mode [ 164.680035][ T7] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 164.695350][ T7] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 164.951673][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 165.084117][ T4363] usb 5-1: USB disconnect, device number 10 [ 165.479651][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 165.481064][ T32] usb 3-1: USB disconnect, device number 19 [ 165.486841][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 165.578261][ T32] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 165.622597][ T4363] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 165.734714][ T5812] binder: BINDER_SET_CONTEXT_MGR already set [ 165.740999][ T5812] binder: 5811:5812 ioctl 4018620d 200000000240 returned -16 [ 165.816146][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 165.834403][ T4363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.852988][ T4363] usb 5-1: config 4 interface 0 has no altsetting 0 [ 165.864034][ T4363] usb 5-1: string descriptor 0 read error: -22 [ 165.877767][ T4363] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.908100][ T4363] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 165.938099][ T4363] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 165.965312][ T4363] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.976494][ T4363] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 165.991953][ T4363] usb 5-1: media controller created [ 166.020059][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.766378][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 166.832750][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 166.933721][ T5840] device syzkaller0 entered promiscuous mode [ 166.967004][ T5840] tipc: Enabled bearer , priority 0 [ 167.026495][ T5840] tipc: Resetting bearer [ 167.034448][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.062621][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.072484][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.079107][ T5839] tipc: Resetting bearer [ 167.113963][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.148145][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.169441][ T32] usb 3-1: config 0 descriptor?? [ 167.173944][ T4363] zl10353_read_register: readreg error (reg=127, ret==0) [ 167.243548][ T4363] usb 5-1: USB disconnect, device number 11 [ 167.268761][ T5839] tipc: Disabling bearer [ 167.467340][ T5850] binder: BINDER_SET_CONTEXT_MGR already set [ 167.474929][ T5850] binder: 5849:5850 ioctl 4018620d 200000000240 returned -16 [ 167.612879][ T32] usbhid 3-1:0.0: can't add hid device: -71 [ 167.630806][ T32] usbhid: probe of 3-1:0.0 failed with error -71 [ 167.649769][ T32] usb 3-1: USB disconnect, device number 20 [ 168.132601][ T4320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.232798][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.322648][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 168.334431][ T4320] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 168.356944][ T4320] usb 5-1: config 0 has no interface number 0 [ 168.364340][ T4320] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.377549][ T4320] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.391220][ T4320] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.402083][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 168.410789][ T4320] usb 5-1: Product: syz [ 168.418546][ T4320] usb 5-1: SerialNumber: syz [ 168.427347][ T4320] usb 5-1: config 0 descriptor?? [ 168.432828][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 168.446939][ T4320] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 168.448872][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.464763][ T4320] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17 [ 168.477607][ T7] usb 2-1: config 4 interface 0 has no altsetting 0 [ 168.495275][ T7] usb 2-1: string descriptor 0 read error: -22 [ 168.514998][ T7] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 168.532676][ T3044] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.551725][ T7] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 168.586809][ T7] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 168.617954][ T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.637727][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 168.652651][ T7] usb 2-1: media controller created [ 168.661554][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 168.685270][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.697775][ T3044] usb 4-1: device descriptor read/64, error -71 [ 168.972834][ T3044] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 169.122603][ T3044] usb 4-1: device descriptor read/64, error -71 [ 169.171668][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.173154][ T32] usb 5-1: USB disconnect, device number 12 [ 169.179114][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 169.212678][ T4320] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 169.243112][ T3044] usb usb4-port1: attempt power cycle [ 169.250739][ T32] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 169.568201][ T4320] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 169.580306][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.596913][ T4320] usb 3-1: config 0 has no interface number 0 [ 169.611980][ T4320] usb 3-1: config 0 interface 205 has no altsetting 0 [ 169.631348][ T4320] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 169.642347][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.652914][ T3044] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 169.665607][ T4320] usb 3-1: Product: syz [ 169.670301][ T4320] usb 3-1: Manufacturer: syz [ 169.679742][ T4320] usb 3-1: SerialNumber: syz [ 169.691229][ T4320] usb 3-1: config 0 descriptor?? [ 169.700048][ T3044] usb 4-1: device descriptor read/8, error -71 [ 169.713321][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.730716][ T4320] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 169.759940][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 169.808243][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.831216][ T4320] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 169.859603][ T4320] usb 3-1: media controller created [ 169.874113][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.896404][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 169.926731][ T4320] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 169.978356][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 169.992723][ T3044] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 170.043515][ T3044] usb 4-1: device descriptor read/8, error -71 [ 170.081407][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 170.140867][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 170.182816][ T3044] usb usb4-port1: unable to enumerate USB device [ 170.222594][ T4320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 170.265681][ T5895] input: syz0 as /devices/virtual/input/input19 [ 170.303750][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 170.348770][ T4320] dvb-usb: error while querying for an remote control event. [ 170.502754][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 170.508685][ T4320] dvb-usb: error while querying for an remote control event. [ 170.682692][ T4363] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.702776][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 170.708773][ T4320] dvb-usb: error while querying for an remote control event. [ 170.850250][ T7] usb 2-1: USB disconnect, device number 10 [ 170.882712][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 170.890237][ T4320] dvb-usb: error while querying for an remote control event. [ 170.900896][ T4363] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 170.923615][ T4363] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 170.965145][ T4363] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 170.978294][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.009273][ T4363] usb 1-1: Product: syz [ 171.032294][ T4363] usb 1-1: Manufacturer: syz [ 171.055146][ T4363] usb 1-1: SerialNumber: syz [ 171.097540][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 171.102879][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.106213][ T22] dvb-usb: error while querying for an remote control event. [ 171.305774][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.321919][ T5895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.367087][ T5895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.375146][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.401547][ T4363] usb 1-1: unit 4 not found! [ 171.420234][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 171.436709][ T4363] usb 1-1: unit 2 not found! [ 171.441618][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.460271][ T4320] dvb-usb: error while querying for an remote control event. [ 171.512994][ T4363] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 171.525147][ T126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.544572][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.556333][ T4363] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 171.588762][ T126] usb 5-1: config 0 descriptor?? [ 171.594705][ T4363] usb 1-1: USB disconnect, device number 12 [ 171.646723][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 171.663819][ T22] dvb-usb: error while querying for an remote control event. [ 171.680876][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.822618][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 171.828798][ T22] dvb-usb: error while querying for an remote control event. [ 172.023505][ T126] usbhid 5-1:0.0: can't add hid device: -71 [ 172.029581][ T126] usbhid: probe of 5-1:0.0 failed with error -71 [ 172.033744][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.041836][ T22] dvb-usb: error while querying for an remote control event. [ 172.079665][ T126] usb 5-1: USB disconnect, device number 13 [ 172.252802][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.258715][ T22] dvb-usb: error while querying for an remote control event. [ 172.327247][ T126] usb 3-1: USB disconnect, device number 21 [ 172.399376][ T126] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 173.249337][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 173.278331][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 173.353416][ T4363] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 173.532782][ T4363] usb 5-1: device descriptor read/64, error -71 [ 173.822742][ T4363] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.992614][ T4363] usb 5-1: device descriptor read/64, error -71 [ 174.112819][ T4363] usb usb5-port1: attempt power cycle [ 174.232697][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.312761][ T7] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 174.434574][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.454825][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.491261][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.532772][ T4363] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 174.547714][ T7] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 174.556930][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.576514][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.587949][ T4363] usb 5-1: device descriptor read/8, error -71 [ 174.606372][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.625282][ T7] usb 1-1: config 0 has no interface number 0 [ 174.632050][ T7] usb 1-1: config 0 interface 205 has no altsetting 0 [ 174.648629][ T14] usb 3-1: config 0 descriptor?? [ 174.718883][ T7] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 174.729589][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.741879][ T7] usb 1-1: Product: syz [ 174.747868][ T7] usb 1-1: Manufacturer: syz [ 174.762091][ T7] usb 1-1: SerialNumber: syz [ 174.783818][ T7] usb 1-1: config 0 descriptor?? [ 174.816336][ T7] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 174.859520][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 174.872658][ T4363] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 174.915725][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 174.925088][ T4363] usb 5-1: device descriptor read/8, error -71 [ 174.943358][ T7] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 174.990014][ T7] usb 1-1: media controller created [ 175.012112][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.044921][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 175.050965][ T7] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 175.063794][ T4363] usb usb5-port1: unable to enumerate USB device [ 175.074782][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 175.081113][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 175.102649][ T4320] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.111158][ T14] usb 3-1: USB disconnect, device number 22 [ 175.139106][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 175.157219][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 175.165415][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 175.202591][ T7] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 175.292783][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 175.300374][ T4320] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.328681][ T4320] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.332868][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 175.359900][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.365945][ T7] dvb-usb: error while querying for an remote control event. [ 175.378307][ T4320] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 175.390691][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.410898][ T4320] usb 2-1: config 0 descriptor?? [ 175.582644][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 175.588815][ T7] dvb-usb: error while querying for an remote control event. [ 175.792774][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 175.798797][ T7] dvb-usb: error while querying for an remote control event. [ 175.836602][ T4320] usbhid 2-1:0.0: can't add hid device: -71 [ 175.847676][ T4320] usbhid: probe of 2-1:0.0 failed with error -71 [ 175.881134][ T4320] usb 2-1: USB disconnect, device number 11 [ 176.023204][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 176.036274][ T7] dvb-usb: error while querying for an remote control event. [ 176.242741][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 176.251603][ T7] dvb-usb: error while querying for an remote control event. [ 176.452643][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 176.458582][ T7] dvb-usb: error while querying for an remote control event. [ 176.672986][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 176.679302][ T7] dvb-usb: error while querying for an remote control event. [ 176.882916][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 176.889959][ T7] dvb-usb: error while querying for an remote control event. [ 177.122714][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 177.128798][ T126] dvb-usb: error while querying for an remote control event. [ 177.322892][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 177.332800][ T126] dvb-usb: error while querying for an remote control event. [ 177.573613][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 177.583148][ T126] dvb-usb: error while querying for an remote control event. [ 177.734855][ T4320] usb 1-1: USB disconnect, device number 13 [ 177.742818][ T6001] binder: BINDER_SET_CONTEXT_MGR already set [ 177.781158][ T6001] binder: 6000:6001 ioctl 4018620d 200000000240 returned -16 [ 177.823638][ T4320] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 178.492684][ T4320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 178.722614][ T4320] usb 1-1: Using ep0 maxpacket: 16 [ 178.730438][ T4320] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.754496][ T4320] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.781546][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.798629][ T4320] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 178.829010][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.865814][ T4320] usb 1-1: config 0 descriptor?? [ 179.022894][ T3044] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 179.208874][ T3044] usb 4-1: device descriptor read/64, error -71 [ 179.254926][ T6017] netlink: 'syz.1.502': attribute type 12 has an invalid length. [ 179.295562][ T4320] usbhid 1-1:0.0: can't add hid device: -71 [ 179.301635][ T4320] usbhid: probe of 1-1:0.0 failed with error -71 [ 179.350363][ T4320] usb 1-1: USB disconnect, device number 14 [ 179.502629][ T3044] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 179.619371][ T6022] device syzkaller0 entered promiscuous mode [ 179.672650][ T3044] usb 4-1: device descriptor read/64, error -71 [ 179.699723][ T6022] tipc: Started in network mode [ 179.707930][ T6022] tipc: Node identity 46592742d6e8, cluster identity 4711 [ 179.736538][ T6022] tipc: Enabled bearer , priority 0 [ 179.763222][ T6022] tipc: Resetting bearer [ 179.778079][ T6021] tipc: Resetting bearer [ 179.812994][ T3044] usb usb4-port1: attempt power cycle [ 179.837490][ T6021] tipc: Disabling bearer [ 180.242581][ T3044] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 180.293460][ T3044] usb 4-1: device descriptor read/8, error -71 [ 180.427599][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 180.436219][ T6040] binder: 6039:6040 ioctl 4018620d 200000000240 returned -16 [ 180.569015][ T3044] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 180.610658][ T3044] usb 4-1: device descriptor read/8, error -71 [ 180.762764][ T3044] usb usb4-port1: unable to enumerate USB device [ 180.772921][ T126] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 180.979149][ T126] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 180.996977][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.063118][ T126] usb 2-1: config 0 has no interface number 0 [ 181.101718][ T126] usb 2-1: config 0 interface 205 has no altsetting 0 [ 181.167858][ T126] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 181.209310][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.230007][ T126] usb 2-1: Product: syz [ 181.247968][ T126] usb 2-1: Manufacturer: syz [ 181.264692][ T126] usb 2-1: SerialNumber: syz [ 181.301166][ T126] usb 2-1: config 0 descriptor?? [ 181.326214][ T126] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 181.388605][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 181.434778][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 181.469211][ T126] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 181.482926][ T3044] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 181.512739][ T126] usb 2-1: media controller created [ 181.529892][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.580712][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 181.630066][ T126] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 181.671340][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 181.693837][ T3044] usb 5-1: Using ep0 maxpacket: 16 [ 181.703806][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 181.710970][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 181.721008][ T3044] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.743096][ T126] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 181.763922][ T3044] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.808731][ T3044] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.836985][ T6064] device syzkaller0 entered promiscuous mode [ 181.855875][ T6064] tipc: Started in network mode [ 181.861066][ T6064] tipc: Node identity 2211af4b0a81, cluster identity 4711 [ 181.871825][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 181.888181][ T6064] tipc: Enabled bearer , priority 0 [ 181.888211][ T3044] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 181.907213][ T126] dvb-usb: error while querying for an remote control event. [ 181.939650][ T6064] tipc: Resetting bearer [ 181.961942][ T6063] tipc: Resetting bearer [ 181.982391][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.017681][ T3044] usb 5-1: config 0 descriptor?? [ 182.024968][ T6063] tipc: Disabling bearer [ 182.084295][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 182.105280][ T7] dvb-usb: error while querying for an remote control event. [ 182.285462][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 182.291739][ T7] dvb-usb: error while querying for an remote control event. [ 182.495436][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 182.511071][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 182.522225][ T7] dvb-usb: error while querying for an remote control event. [ 182.529859][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 182.555531][ T3044] usb 5-1: USB disconnect, device number 18 [ 182.569847][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 182.752717][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 182.761092][ T7] dvb-usb: error while querying for an remote control event. [ 182.952601][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 182.958607][ T7] dvb-usb: error while querying for an remote control event. [ 183.152766][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 183.158678][ T7] dvb-usb: error while querying for an remote control event. [ 183.392912][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 183.398958][ T7] dvb-usb: error while querying for an remote control event. [ 183.512601][ T3044] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.592659][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 183.598521][ T7] dvb-usb: error while querying for an remote control event. [ 183.735975][ T3044] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.754111][ T3044] usb 1-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 183.792780][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 183.798782][ T7] dvb-usb: error while querying for an remote control event. [ 183.869617][ T3044] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.958581][ T3044] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 183.992798][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 184.009094][ T7] dvb-usb: error while querying for an remote control event. [ 184.033305][ T3044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.104339][ T3044] usb 1-1: Product: syz [ 184.140852][ T3044] usb 1-1: Manufacturer: syz [ 184.190702][ T3044] usb 1-1: SerialNumber: syz [ 184.222691][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 184.229019][ T126] dvb-usb: error while querying for an remote control event. [ 184.432853][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 184.438841][ T7] dvb-usb: error while querying for an remote control event. [ 184.633041][ T7] usb 2-1: USB disconnect, device number 12 [ 184.706306][ T7] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 184.910154][ T6109] device syzkaller0 entered promiscuous mode [ 184.992775][ T6113] tipc: Enabled bearer , priority 0 [ 185.088250][ T6109] tipc: Resetting bearer [ 185.121902][ T6107] tipc: Resetting bearer [ 185.230023][ T3044] usb 1-1: unit 3 not found! [ 185.273023][ T6107] tipc: Disabling bearer [ 185.280605][ T3044] usb 1-1: USB disconnect, device number 15 [ 185.807876][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 185.822729][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.022826][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 186.031473][ T32] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.053397][ T32] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.088095][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.101032][ T32] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.122286][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.142375][ T32] usb 2-1: config 0 descriptor?? [ 186.777769][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 186.792033][ T32] usbhid: probe of 2-1:0.0 failed with error -71 [ 186.849376][ T32] usb 2-1: USB disconnect, device number 13 [ 187.598598][ T6151] device syzkaller0 entered promiscuous mode [ 187.642322][ T6160] tipc: Enabled bearer , priority 0 [ 187.705706][ T6155] tipc: Resetting bearer [ 187.754393][ T6150] tipc: Resetting bearer [ 187.831693][ T6150] tipc: Disabling bearer [ 188.136064][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 188.252788][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.279262][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 188.452338][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.479986][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.519002][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.581832][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.627148][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.694539][ T7] usb 5-1: config 0 descriptor?? [ 189.119684][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 189.130183][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 189.137246][ T14] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 189.149864][ T7] usb 5-1: USB disconnect, device number 19 [ 189.332767][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 189.341926][ T14] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.393103][ T14] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.460321][ T14] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.475773][ T14] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 189.492367][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.517335][ T14] usb 4-1: config 0 descriptor?? [ 190.142717][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 190.161458][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 190.202489][ T14] usb 4-1: USB disconnect, device number 25 [ 190.397710][ T6207] device syzkaller0 entered promiscuous mode [ 190.414946][ T6208] tipc: Enabled bearer , priority 0 [ 190.463262][ T6216] tipc: Resetting bearer [ 190.526629][ T6206] tipc: Resetting bearer [ 190.594857][ T6206] tipc: Disabling bearer [ 190.615269][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 190.773186][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 190.909469][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 190.942658][ T14] usb 4-1: device descriptor read/64, error -71 [ 190.949666][ T6228] ------------[ cut here ]------------ [ 190.955325][ T6228] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 191.025179][ T6228] WARNING: CPU: 1 PID: 6228 at net/sched/cls_u32.c:853 u32_change+0x1da2/0x2740 [ 191.034960][ T6228] Modules linked in: [ 191.039092][ T6228] CPU: 1 PID: 6228 Comm: syz.1.565 Not tainted syzkaller #0 [ 191.046502][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.056783][ T6228] RIP: 0010:u32_change+0x1da2/0x2740 [ 191.062273][ T6228] Code: f9 eb 59 e8 e0 9f 20 f9 c6 05 d6 24 aa 05 01 b9 10 00 00 00 48 c7 c7 00 65 8e 8b 4c 89 fe 48 c7 c2 80 65 8e 8b e8 3e 37 ec f8 <0f> 0b e9 ee ee ff ff e8 b2 9f 20 f9 eb 24 e8 ab 9f 20 f9 c6 05 43 [ 191.082547][ T6228] RSP: 0018:ffffc9001bf5ee60 EFLAGS: 00010246 [ 191.088695][ T6228] RAX: 92599169362f2400 RBX: ffff888019afd600 RCX: 0000000000080000 [ 191.096873][ T6228] RDX: ffffc9000dc5b000 RSI: 00000000000054fe RDI: 00000000000054ff [ 191.105210][ T6228] RBP: ffffc9001bf5eff8 R08: ffffc9001bf5eae7 R09: 1ffff920037ebd5c [ 191.113477][ T6228] R10: dffffc0000000000 R11: fffff520037ebd5d R12: ffff888019afc6e0 [ 191.121519][ T6228] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 191.129735][ T6228] FS: 00007f461089c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 191.139783][ T6228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.146463][ T6228] CR2: 00007f460f9ea540 CR3: 000000002e0b0000 CR4: 00000000003506e0 [ 191.154536][ T6228] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.162782][ T6228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.170826][ T6228] Call Trace: [ 191.174222][ T6228] [ 191.177389][ T6228] ? u32_get+0x370/0x370 [ 191.181721][ T6228] ? u32_get+0x370/0x370 [ 191.186099][ T6228] tc_new_tfilter+0x1165/0x1920 [ 191.191127][ T6228] ? ____kasan_slab_free+0x126/0x1f0 [ 191.196718][ T6228] ? slab_free_freelist_hook+0x133/0x1b0 [ 191.202552][ T6228] ? kmem_cache_free+0xf7/0x2a0 [ 191.207491][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.213882][ T6228] ? rcu_read_unlock+0x8c/0xa0 [ 191.219070][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.225194][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.226432][ T14] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 191.231403][ T6228] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 191.231437][ T6228] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 191.231468][ T6228] ? rtnetlink_bind+0x80/0x80 [ 191.231492][ T6228] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.259471][ T6228] ? lockdep_hardirqs_on+0x94/0x140 [ 191.264799][ T6228] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.270507][ T6228] ? _local_bh_enable+0xa0/0xa0 [ 191.275788][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.281768][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.287260][ T6228] ? __dev_queue_xmit+0x1d84/0x3810 [ 191.292788][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.298065][ T6228] ? ref_tracker_free+0x682/0x830 [ 191.303429][ T6228] ? refcount_inc+0x70/0x70 [ 191.308138][ T6228] ? memcpy+0x3c/0x60 [ 191.312278][ T6228] ? __copy_skb_header+0x3ba/0x4f0 [ 191.317859][ T6228] ? __skb_clone+0x446/0x6c0 [ 191.322651][ T6228] netlink_rcv_skb+0x1ef/0x440 [ 191.327482][ T6228] ? rtnetlink_bind+0x80/0x80 [ 191.332320][ T6228] ? netlink_ack+0x1160/0x1160 [ 191.337212][ T6228] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.342614][ T6228] netlink_unicast+0x7ad/0x920 [ 191.347453][ T6228] netlink_sendmsg+0x8ad/0xbd0 [ 191.352402][ T6228] ? netlink_getsockopt+0x550/0x550 [ 191.358065][ T6228] ? aa_sock_msg_perm+0x94/0x150 [ 191.363194][ T6228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.368551][ T6228] ? security_socket_sendmsg+0x7c/0xa0 [ 191.374214][ T6228] ? netlink_getsockopt+0x550/0x550 [ 191.380053][ T6228] ____sys_sendmsg+0x5ed/0x9a0 [ 191.385001][ T6228] ? __sys_sendmsg_sock+0x30/0x30 [ 191.390092][ T6228] ? __import_iovec+0x306/0x510 [ 191.395058][ T6228] ? import_iovec+0x6f/0xa0 [ 191.399640][ T6228] ___sys_sendmsg+0x2a2/0x360 [ 191.404611][ T6228] ? preempt_schedule+0xbc/0xd0 [ 191.409795][ T6228] ? __sys_sendmsg+0x2a0/0x2a0 [ 191.414702][ T6228] __sys_sendmmsg+0x2c3/0x510 [ 191.419632][ T6228] ? __ia32_sys_sendmsg+0x80/0x80 [ 191.424769][ T6228] ? __ia32_sys_get_robust_list+0x100/0x100 [ 191.430829][ T6228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.437016][ T6228] ? lock_chain_count+0x20/0x20 [ 191.442050][ T6228] __x64_sys_sendmmsg+0x9c/0xb0 [ 191.447098][ T6228] do_syscall_64+0x4c/0xa0 [ 191.451835][ T6228] ? clear_bhb_loop+0x60/0xb0 [ 191.456610][ T6228] ? clear_bhb_loop+0x60/0xb0 [ 191.461357][ T6228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.467449][ T6228] RIP: 0033:0x7f460f99ce59 [ 191.472108][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.492168][ T6228] RSP: 002b:00007f461089c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.500712][ T6228] RAX: ffffffffffffffda RBX: 00007f460fc15fa0 RCX: 00007f460f99ce59 [ 191.508962][ T6228] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 191.517045][ T6228] RBP: 00007f460fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 191.525127][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.533294][ T6228] R13: 00007f460fc16038 R14: 00007f460fc15fa0 R15: 00007ffeaa783df8 [ 191.541521][ T6228] [ 191.544647][ T6228] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.552155][ T6228] CPU: 1 PID: 6228 Comm: syz.1.565 Not tainted syzkaller #0 [ 191.559673][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.570242][ T6228] Call Trace: [ 191.573575][ T6228] [ 191.576567][ T6228] dump_stack_lvl+0x188/0x24e [ 191.582161][ T6228] ? memcpy+0x3c/0x60 [ 191.586641][ T6228] ? show_regs_print_info+0x12/0x12 [ 191.591987][ T6228] ? load_image+0x410/0x410 [ 191.596854][ T6228] panic+0x2d3/0x710 [ 191.601099][ T6228] ? bpf_jit_dump+0xd0/0xd0 [ 191.605935][ T6228] __warn+0x2f8/0x4f0 [ 191.610096][ T6228] ? u32_change+0x1da2/0x2740 [ 191.614836][ T6228] ? u32_change+0x1da2/0x2740 [ 191.619758][ T6228] report_bug+0x2ba/0x4f0 [ 191.624150][ T6228] ? u32_change+0x1da2/0x2740 [ 191.629105][ T6228] handle_bug+0x3a/0x70 [ 191.633489][ T6228] exc_invalid_op+0x16/0x40 [ 191.638584][ T6228] asm_exc_invalid_op+0x16/0x20 [ 191.643490][ T6228] RIP: 0010:u32_change+0x1da2/0x2740 [ 191.648849][ T6228] Code: f9 eb 59 e8 e0 9f 20 f9 c6 05 d6 24 aa 05 01 b9 10 00 00 00 48 c7 c7 00 65 8e 8b 4c 89 fe 48 c7 c2 80 65 8e 8b e8 3e 37 ec f8 <0f> 0b e9 ee ee ff ff e8 b2 9f 20 f9 eb 24 e8 ab 9f 20 f9 c6 05 43 [ 191.669130][ T6228] RSP: 0018:ffffc9001bf5ee60 EFLAGS: 00010246 [ 191.675433][ T6228] RAX: 92599169362f2400 RBX: ffff888019afd600 RCX: 0000000000080000 [ 191.683580][ T6228] RDX: ffffc9000dc5b000 RSI: 00000000000054fe RDI: 00000000000054ff [ 191.691605][ T6228] RBP: ffffc9001bf5eff8 R08: ffffc9001bf5eae7 R09: 1ffff920037ebd5c [ 191.700165][ T6228] R10: dffffc0000000000 R11: fffff520037ebd5d R12: ffff888019afc6e0 [ 191.708198][ T6228] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 191.716264][ T6228] ? u32_get+0x370/0x370 [ 191.720598][ T6228] ? u32_get+0x370/0x370 [ 191.724915][ T6228] tc_new_tfilter+0x1165/0x1920 [ 191.729974][ T6228] ? ____kasan_slab_free+0x126/0x1f0 [ 191.735519][ T6228] ? slab_free_freelist_hook+0x133/0x1b0 [ 191.741400][ T6228] ? kmem_cache_free+0xf7/0x2a0 [ 191.746356][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.752442][ T6228] ? rcu_read_unlock+0x8c/0xa0 [ 191.757357][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.763492][ T6228] ? tcf_proto_signal_destroying+0x240/0x240 [ 191.769693][ T6228] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 191.774955][ T6228] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 191.780211][ T6228] ? rtnetlink_bind+0x80/0x80 [ 191.784937][ T6228] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.791143][ T6228] ? lockdep_hardirqs_on+0x94/0x140 [ 191.796407][ T6228] ? __local_bh_enable_ip+0x136/0x1c0 [ 191.801837][ T6228] ? _local_bh_enable+0xa0/0xa0 [ 191.806846][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.812106][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.817460][ T6228] ? __dev_queue_xmit+0x1d84/0x3810 [ 191.822814][ T6228] ? __dev_queue_xmit+0x281/0x3810 [ 191.827999][ T6228] ? ref_tracker_free+0x682/0x830 [ 191.833179][ T6228] ? refcount_inc+0x70/0x70 [ 191.837827][ T6228] ? memcpy+0x3c/0x60 [ 191.841865][ T6228] ? __copy_skb_header+0x3ba/0x4f0 [ 191.847137][ T6228] ? __skb_clone+0x446/0x6c0 [ 191.852072][ T6228] netlink_rcv_skb+0x1ef/0x440 [ 191.856894][ T6228] ? rtnetlink_bind+0x80/0x80 [ 191.861891][ T6228] ? netlink_ack+0x1160/0x1160 [ 191.866814][ T6228] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.872108][ T6228] netlink_unicast+0x7ad/0x920 [ 191.876935][ T6228] netlink_sendmsg+0x8ad/0xbd0 [ 191.881875][ T6228] ? netlink_getsockopt+0x550/0x550 [ 191.887232][ T6228] ? aa_sock_msg_perm+0x94/0x150 [ 191.892330][ T6228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.897690][ T6228] ? security_socket_sendmsg+0x7c/0xa0 [ 191.903223][ T6228] ? netlink_getsockopt+0x550/0x550 [ 191.908504][ T6228] ____sys_sendmsg+0x5ed/0x9a0 [ 191.913437][ T6228] ? __sys_sendmsg_sock+0x30/0x30 [ 191.918534][ T6228] ? __import_iovec+0x306/0x510 [ 191.923467][ T6228] ? import_iovec+0x6f/0xa0 [ 191.928041][ T6228] ___sys_sendmsg+0x2a2/0x360 [ 191.933110][ T6228] ? preempt_schedule+0xbc/0xd0 [ 191.938308][ T6228] ? __sys_sendmsg+0x2a0/0x2a0 [ 191.943382][ T6228] __sys_sendmmsg+0x2c3/0x510 [ 191.945307][ T14] usb 4-1: device descriptor read/64, error -71 [ 191.954495][ T6228] ? __ia32_sys_sendmsg+0x80/0x80 [ 191.959610][ T6228] ? __ia32_sys_get_robust_list+0x100/0x100 [ 191.965702][ T6228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.971764][ T6228] ? lock_chain_count+0x20/0x20 [ 191.976694][ T6228] __x64_sys_sendmmsg+0x9c/0xb0 [ 191.981616][ T6228] do_syscall_64+0x4c/0xa0 [ 191.986114][ T6228] ? clear_bhb_loop+0x60/0xb0 [ 191.990885][ T6228] ? clear_bhb_loop+0x60/0xb0 [ 191.995623][ T6228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.001773][ T6228] RIP: 0033:0x7f460f99ce59 [ 192.006249][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.026093][ T6228] RSP: 002b:00007f461089c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.034587][ T6228] RAX: ffffffffffffffda RBX: 00007f460fc15fa0 RCX: 00007f460f99ce59 [ 192.042620][ T6228] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 192.050842][ T6228] RBP: 00007f460fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 192.058884][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.067169][ T6228] R13: 00007f460fc16038 R14: 00007f460fc15fa0 R15: 00007ffeaa783df8 [ 192.067851][ T14] usb usb4-port1: attempt power cycle [ 192.081149][ T6228] [ 192.084823][ T6228] Kernel Offset: disabled [ 192.089179][ T6228] Rebooting in 86400 seconds..