last executing test programs: 6.58700251s ago: executing program 2 (id=1002): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xb2, 0x1, 0x0}) 4.896071493s ago: executing program 2 (id=1020): memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) 4.501252229s ago: executing program 1 (id=1025): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x16d, 0x0) 4.220041425s ago: executing program 1 (id=1028): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x40004c0}, 0x44084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x40010) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 4.083522717s ago: executing program 4 (id=1030): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xb2, 0x1, 0x0}) 3.405595723s ago: executing program 3 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.75533118s ago: executing program 1 (id=1034): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) close(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0) 2.681664897s ago: executing program 3 (id=1035): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x6, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{}, 0x6}}}, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x2, [0x0, 0x0]}) 2.379644419s ago: executing program 3 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac00028008000300010000000800010010000000010004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.348974945s ago: executing program 2 (id=1037): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 2.232209447s ago: executing program 1 (id=1039): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.206003057s ago: executing program 3 (id=1040): r0 = socket(0x18, 0x800, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'sit0\x00'}}, 0x1e) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) 2.028726069s ago: executing program 4 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.028142619s ago: executing program 1 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}}, 0x0) 2.02648702s ago: executing program 0 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) 1.880099629s ago: executing program 3 (id=1044): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x40004c0}, 0x44084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x40010) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.875038898s ago: executing program 1 (id=1045): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x800, 0x1, 0x0, &(0x7f0000000a80)}], 0x1}) 1.796211852s ago: executing program 4 (id=1046): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904004003ff016900052406", @ANYRES64], 0x0) 1.774371756s ago: executing program 0 (id=1047): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x40042, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1.283567634s ago: executing program 2 (id=1048): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mlockall(0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x1, 0x26, 0xffffffb9, 0x1b}, 0x9c) 1.17290411s ago: executing program 2 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x880) 712.327653ms ago: executing program 2 (id=1050): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x0, 0x0}], 0x1}) 619.091678ms ago: executing program 3 (id=1051): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xb2, 0x1, 0x0}) 387.384813ms ago: executing program 0 (id=1052): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x2}]}}}}}}}}, 0x0) 368.686634ms ago: executing program 0 (id=1053): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 340.082996ms ago: executing program 4 (id=1054): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 243.560872ms ago: executing program 0 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}}, 0x0) 203.713564ms ago: executing program 0 (id=1056): openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') r4 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 145.7132ms ago: executing program 4 (id=1057): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$rds(0x15, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x841}], 0x1, 0x4c804) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): MTU to 1532 would solve the problem. [ 87.689692][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.722898][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.730054][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.756044][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.780913][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.788108][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.814149][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.831793][ T5853] hsr_slave_0: entered promiscuous mode [ 87.838443][ T5853] hsr_slave_1: entered promiscuous mode [ 87.846011][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.852969][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.879355][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.932983][ T5852] hsr_slave_0: entered promiscuous mode [ 87.939663][ T5852] hsr_slave_1: entered promiscuous mode [ 87.946378][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 87.952166][ T5852] Cannot create hsr debugfs directory [ 88.027034][ T5851] hsr_slave_0: entered promiscuous mode [ 88.033413][ T5851] hsr_slave_1: entered promiscuous mode [ 88.040150][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 88.046592][ T5851] Cannot create hsr debugfs directory [ 88.120576][ T5849] hsr_slave_0: entered promiscuous mode [ 88.127316][ T5849] hsr_slave_1: entered promiscuous mode [ 88.133687][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 88.139614][ T5849] Cannot create hsr debugfs directory [ 88.151342][ T5854] hsr_slave_0: entered promiscuous mode [ 88.158127][ T5854] hsr_slave_1: entered promiscuous mode [ 88.164476][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 88.170214][ T5854] Cannot create hsr debugfs directory [ 88.732051][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.750728][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.769798][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.789891][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.853392][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.872339][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.888472][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.901073][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.999471][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.013224][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.026004][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.042635][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.161840][ T5834] Bluetooth: hci0: command tx timeout [ 89.161853][ T52] Bluetooth: hci3: command tx timeout [ 89.175166][ T5847] Bluetooth: hci4: command tx timeout [ 89.180832][ T5845] Bluetooth: hci1: command tx timeout [ 89.205506][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.230615][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.244126][ T5845] Bluetooth: hci2: command tx timeout [ 89.248142][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.276122][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.350482][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.361732][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.372563][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.384904][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.407362][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.471561][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.484239][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.507382][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.540467][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.547729][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.582406][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.591598][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.598826][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.639546][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.646837][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.660440][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.683126][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.690349][ T3969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.717492][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.724722][ T3969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.766010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.773271][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.815448][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.902387][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.943134][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.959091][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.966330][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.987861][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.995035][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.067894][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.079897][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.099226][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.136887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.144064][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.176505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.183732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.238358][ T5851] veth0_vlan: entered promiscuous mode [ 90.259987][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.299881][ T5851] veth1_vlan: entered promiscuous mode [ 90.362737][ T5853] veth0_vlan: entered promiscuous mode [ 90.392334][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.420110][ T5853] veth1_vlan: entered promiscuous mode [ 90.443251][ T5851] veth0_macvtap: entered promiscuous mode [ 90.480771][ T5851] veth1_macvtap: entered promiscuous mode [ 90.491620][ T5852] veth0_vlan: entered promiscuous mode [ 90.539336][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.550807][ T5852] veth1_vlan: entered promiscuous mode [ 90.579690][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.598098][ T5853] veth0_macvtap: entered promiscuous mode [ 90.608191][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.633074][ T5853] veth1_macvtap: entered promiscuous mode [ 90.650822][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.661141][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.671920][ T5849] veth0_vlan: entered promiscuous mode [ 90.681301][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.691445][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.734138][ T5849] veth1_vlan: entered promiscuous mode [ 90.777102][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.792390][ T5852] veth0_macvtap: entered promiscuous mode [ 90.815833][ T5852] veth1_macvtap: entered promiscuous mode [ 90.835991][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.887036][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.900817][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.926835][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.935706][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.966300][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.979638][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.983042][ T5849] veth0_macvtap: entered promiscuous mode [ 90.993527][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.014378][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.021854][ T5854] veth0_vlan: entered promiscuous mode [ 91.044557][ T5849] veth1_macvtap: entered promiscuous mode [ 91.082785][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093100][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.110593][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121253][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138580][ T5854] veth1_vlan: entered promiscuous mode [ 91.150700][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.161366][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202342][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.234982][ T5834] Bluetooth: hci0: command tx timeout [ 91.235467][ T52] Bluetooth: hci3: command tx timeout [ 91.240512][ T5845] Bluetooth: hci1: command tx timeout [ 91.246312][ T5847] Bluetooth: hci4: command tx timeout [ 91.282251][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.303344][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.319328][ T5847] Bluetooth: hci2: command tx timeout [ 91.341486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.359330][ T2000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.363634][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.409233][ T2000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.429742][ T2000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.504036][ T2000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546465][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.559606][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.586443][ T5854] veth0_macvtap: entered promiscuous mode [ 91.628128][ T5854] veth1_macvtap: entered promiscuous mode [ 91.731347][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.750309][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.785080][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.806606][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.861308][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.913020][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.932433][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.951312][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980634][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.990810][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.018106][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.049081][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.072581][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.122558][ T9] cfg80211: failed to load regulatory.db [ 92.219322][ T5942] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 92.235740][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.257968][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.418490][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.446187][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.462753][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.612579][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.644511][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.779985][ T2000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.818127][ T2000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.152166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.324017][ T52] Bluetooth: hci3: command tx timeout [ 93.325858][ T5834] Bluetooth: hci0: command tx timeout [ 93.329661][ T5847] Bluetooth: hci4: command tx timeout [ 93.340869][ T5845] Bluetooth: hci1: command tx timeout [ 93.394381][ T5834] Bluetooth: hci2: command tx timeout [ 93.569114][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.764323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.814285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.823207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.831916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.840668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.849375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.858129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.866759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.876651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.054327][ T5971] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.707085][ T5976] macvtap1: entered promiscuous mode [ 94.726752][ T5976] macvtap1: entered allmulticast mode [ 94.743502][ T5976] batadv0: entered promiscuous mode [ 94.761013][ T5976] batadv0: entered allmulticast mode [ 94.798118][ T5976] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 94.832872][ T5976] team0: Device macvtap1 failed to register rx_handler [ 94.859189][ T5976] batadv0: left allmulticast mode [ 94.882152][ T5976] batadv0: left promiscuous mode [ 95.071456][ T30] audit: type=1326 audit(1765621616.809:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.179044][ T30] audit: type=1326 audit(1765621616.849:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.275924][ T30] audit: type=1326 audit(1765621616.849:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.405810][ T30] audit: type=1326 audit(1765621616.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.491973][ T30] audit: type=1326 audit(1765621616.849:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.638275][ T30] audit: type=1326 audit(1765621616.849:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.719800][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 95.737341][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25'. [ 95.743552][ T30] audit: type=1326 audit(1765621616.849:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.754257][ T5997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26'. [ 95.826751][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.836193][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.843794][ T30] audit: type=1326 audit(1765621616.849:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.927468][ T30] audit: type=1326 audit(1765621616.849:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 95.934095][ T5836] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.016651][ T30] audit: type=1326 audit(1765621616.849:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 96.167602][ T5836] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.177965][ T5836] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.216657][ T5836] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.262228][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.511699][ T5836] usb 4-1: GET_CAPABILITIES returned 0 [ 96.527080][ T5926] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.542305][ T5836] usbtmc 4-1:16.0: can't read capabilities [ 96.623797][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.793971][ T5926] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.813493][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 96.818824][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.848660][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 96.859478][ T5926] usb 2-1: config 0 descriptor?? [ 96.879131][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.902949][ T9] usb 3-1: Product: syz [ 96.914134][ T9] usb 3-1: Manufacturer: syz [ 96.923523][ T9] usb 3-1: SerialNumber: syz [ 96.942672][ T9] usb 3-1: config 0 descriptor?? [ 96.957269][ T9] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 96.977273][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 96.993951][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.014501][ T9] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 97.033578][ T9] usb 3-1: media controller created [ 97.079013][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.110165][ T6015] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 97.142179][ T939] usb 4-1: USB disconnect, device number 2 [ 97.171393][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 97.191221][ T9] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 97.228147][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 97.267640][ T9] dvb-usb: schedule remote query interval to 50 msecs. [ 97.275824][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 97.283941][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 97.315422][ T9] usb 3-1: USB disconnect, device number 2 [ 97.469126][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 97.611693][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 99.007137][ T939] usb 2-1: USB disconnect, device number 2 [ 99.764618][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 100.165132][ T939] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.363657][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 100.377288][ T939] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 100.398148][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.455012][ T939] usb 2-1: Product: syz [ 100.455054][ T939] usb 2-1: Manufacturer: syz [ 100.455070][ T939] usb 2-1: SerialNumber: syz [ 100.458342][ T939] usb 2-1: config 0 descriptor?? [ 100.913970][ T939] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 100.941839][ T939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.955144][ T6056] Zero length message leads to an empty skb [ 100.972576][ T939] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 100.991876][ T939] usb 2-1: media controller created [ 101.048858][ T939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.253577][ T6071] fuse: Bad value for 'fd' [ 101.665601][ T939] zl10353_read_register: readreg error (reg=127, ret==0) [ 101.687745][ T939] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 101.728926][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 101.779937][ T939] usb 2-1: USB disconnect, device number 3 [ 102.043542][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.116589][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 102.240701][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.273569][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.325540][ T9] usb 1-1: config 0 descriptor?? [ 102.503266][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 102.518177][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 104.145482][ T6112] macvtap1: entered promiscuous mode [ 104.152379][ T6112] macvtap1: entered allmulticast mode [ 104.821242][ T5925] usb 1-1: USB disconnect, device number 2 [ 105.238802][ T939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.394889][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 105.434257][ T939] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 105.445153][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.453312][ T939] usb 5-1: Product: syz [ 105.454338][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 105.475002][ T939] usb 5-1: Manufacturer: syz [ 105.479815][ T939] usb 5-1: SerialNumber: syz [ 105.488113][ T6123] syz_tun: entered allmulticast mode [ 105.510065][ T939] usb 5-1: config 0 descriptor?? [ 105.712647][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 105.880292][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.929483][ T939] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 105.977109][ T939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.008162][ T939] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.043545][ T939] usb 5-1: media controller created [ 106.127364][ T939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.725641][ T939] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.753232][ T939] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.765727][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.790510][ T939] usb 5-1: USB disconnect, device number 2 [ 106.908144][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 107.297130][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 107.331328][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 107.472915][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.816773][ T5901] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.853215][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.894369][ T5901] usb 2-1: config 0 descriptor?? [ 108.312255][ T6178] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.527204][ T6180] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 109.278940][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 109.322026][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 109.380102][ T5925] usb 2-1: USB disconnect, device number 4 [ 111.059555][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 111.059578][ T30] audit: type=1326 audit(1765621632.799:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.169311][ T30] audit: type=1326 audit(1765621632.839:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.256295][ T30] audit: type=1326 audit(1765621632.839:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.337060][ T30] audit: type=1326 audit(1765621632.839:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.403532][ T30] audit: type=1326 audit(1765621632.839:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.455009][ T30] audit: type=1326 audit(1765621632.849:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.493562][ T30] audit: type=1326 audit(1765621632.849:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.516489][ T30] audit: type=1326 audit(1765621632.849:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.539946][ T30] audit: type=1326 audit(1765621632.849:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 111.594926][ T30] audit: type=1326 audit(1765621632.849:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 112.718963][ T939] IPVS: starting estimator thread 0... [ 112.740735][ T6233] IPVS: ip_vs_add_dest(): server weight less than zero [ 112.825591][ T6234] IPVS: using max 21 ests per chain, 50400 per kthread [ 113.463548][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.660737][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 113.673010][ T5921] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 113.731603][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 113.816180][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.867703][ T5921] usb 3-1: Product: syz [ 113.893695][ T5921] usb 3-1: Manufacturer: syz [ 113.903698][ T5921] usb 3-1: SerialNumber: syz [ 113.945187][ T5921] usb 3-1: config 0 descriptor?? [ 113.971012][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 113.996493][ T5921] usb 3-1: setting power ON [ 114.010781][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 114.029495][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.053070][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 114.062303][ T5921] usb 3-1: media controller created [ 114.096782][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.170732][ T6240] dvb-usb: bulk message failed: -22 (3/0) [ 114.177537][ T6240] dvb-usb: bulk message failed: -22 (3/0) [ 114.277002][ T5921] usb 3-1: selecting invalid altsetting 6 [ 114.296215][ T5921] usb 3-1: digital interface selection failed (-22) [ 114.330604][ T6240] dvb-usb: bulk message failed: -22 (3/0) [ 114.343842][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 114.383902][ T5921] usb 3-1: setting power OFF [ 114.389572][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 114.424225][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 114.463482][ T5921] (NULL device *): no alternate interface [ 114.784085][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.069420][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.096228][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 115.111754][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.140240][ T5921] usb 3-1: USB disconnect, device number 3 [ 115.191977][ T24] usb 4-1: config 0 descriptor?? [ 116.520519][ T5921] usb 4-1: USB disconnect, device number 3 [ 116.693522][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.873539][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 116.881872][ T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 116.905021][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 116.923554][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.942337][ T24] usb 1-1: Product: syz [ 116.952317][ T24] usb 1-1: Manufacturer: syz [ 116.962424][ T24] usb 1-1: SerialNumber: syz [ 116.976084][ T24] usb 1-1: config 0 descriptor?? [ 116.996099][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.013562][ T24] usb 1-1: setting power ON [ 117.023670][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 117.061467][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.134749][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.152689][ T24] usb 1-1: media controller created [ 117.209850][ T6296] dvb-usb: bulk message failed: -22 (3/0) [ 117.239931][ T6296] dvb-usb: bulk message failed: -22 (3/0) [ 117.265478][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.281888][ T6296] dvb-usb: bulk message failed: -22 (3/0) [ 117.449774][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'. [ 117.541385][ T24] usb 1-1: selecting invalid altsetting 6 [ 117.569933][ T24] usb 1-1: digital interface selection failed (-22) [ 117.590153][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 117.600470][ T24] usb 1-1: setting power OFF [ 117.614725][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 117.648477][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 117.654182][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 117.667078][ T24] (NULL device *): no alternate interface [ 117.683287][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 117.943108][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 118.022824][ T24] usb 1-1: USB disconnect, device number 3 [ 118.841408][ T6327] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 119.086292][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 119.086313][ T30] audit: type=1326 audit(1765621640.829:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.168270][ T30] audit: type=1326 audit(1765621640.829:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.202048][ T6336] netlink: 136 bytes leftover after parsing attributes in process `syz.0.149'. [ 119.222544][ T6336] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 119.244470][ T30] audit: type=1326 audit(1765621640.829:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.313675][ T30] audit: type=1326 audit(1765621640.829:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.388751][ T30] audit: type=1326 audit(1765621640.829:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.466879][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 119.495294][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 119.498082][ T30] audit: type=1326 audit(1765621640.829:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.610091][ T30] audit: type=1326 audit(1765621640.829:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.684536][ T30] audit: type=1326 audit(1765621640.829:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.743597][ T30] audit: type=1326 audit(1765621640.829:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.823565][ T30] audit: type=1326 audit(1765621640.829:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 119.846514][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.023565][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 120.054055][ T5921] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 120.071426][ T5921] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.223535][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.231955][ T5921] usb 1-1: Product: syz [ 120.238327][ T5921] usb 1-1: Manufacturer: syz [ 120.243925][ T5921] usb 1-1: SerialNumber: syz [ 120.262108][ T5921] usb 1-1: config 0 descriptor?? [ 120.279029][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.333319][ T5921] usb 1-1: setting power ON [ 120.677451][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 120.718051][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.746347][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 120.761620][ T5921] usb 1-1: media controller created [ 120.806798][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.863263][ T5921] usb 1-1: selecting invalid altsetting 6 [ 120.863302][ T5921] usb 1-1: digital interface selection failed (-22) [ 120.863319][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 120.864793][ T5921] usb 1-1: setting power OFF [ 120.864827][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 120.864859][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 120.864875][ T5921] (NULL device *): no alternate interface [ 120.972215][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.133814][ T5921] usb 1-1: USB disconnect, device number 4 [ 121.336396][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.535711][ T5900] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.570112][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.630414][ T5900] usb 2-1: config 0 descriptor?? [ 123.202901][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 123.223874][ T6379] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 123.425048][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 123.788154][ T5921] usb 2-1: USB disconnect, device number 5 [ 124.206304][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 124.207462][ T30] audit: type=1326 audit(1765621645.949:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.247816][ T30] audit: type=1326 audit(1765621645.949:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.296684][ T30] audit: type=1326 audit(1765621645.979:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.369707][ T30] audit: type=1326 audit(1765621645.979:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.414887][ T30] audit: type=1326 audit(1765621645.979:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.473520][ T30] audit: type=1326 audit(1765621645.979:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.523796][ T30] audit: type=1326 audit(1765621645.979:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.572590][ T30] audit: type=1326 audit(1765621645.979:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.606208][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 124.633945][ T30] audit: type=1326 audit(1765621645.979:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.683993][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.723737][ T30] audit: type=1326 audit(1765621645.979:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 124.844222][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 124.864578][ T5921] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 124.906690][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 124.937310][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.956725][ T5921] usb 3-1: Product: syz [ 124.961074][ T5921] usb 3-1: Manufacturer: syz [ 124.987112][ T5921] usb 3-1: SerialNumber: syz [ 125.011456][ T5921] usb 3-1: config 0 descriptor?? [ 125.040998][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 125.079988][ T5921] usb 3-1: setting power ON [ 125.093494][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 125.140863][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.265873][ T6397] dvb-usb: bulk message failed: -22 (3/0) [ 125.272569][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 125.303937][ T6397] dvb-usb: bulk message failed: -22 (3/0) [ 125.315682][ T5921] usb 3-1: media controller created [ 125.339343][ T6397] dvb-usb: bulk message failed: -22 (3/0) [ 125.391448][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.419144][ T6415] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.470507][ T5921] usb 3-1: selecting invalid altsetting 6 [ 125.485881][ T5921] usb 3-1: digital interface selection failed (-22) [ 125.502663][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.573131][ T5921] usb 3-1: setting power OFF [ 125.594060][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 125.629595][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.662520][ T5921] (NULL device *): no alternate interface [ 126.023544][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.213551][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 126.232571][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.300678][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 126.326257][ T5921] usb 3-1: USB disconnect, device number 4 [ 126.364934][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.383601][ T9] usb 4-1: Product: syz [ 126.398184][ T9] usb 4-1: Manufacturer: syz [ 126.413489][ T9] usb 4-1: SerialNumber: syz [ 126.444025][ T9] usb 4-1: config 0 descriptor?? [ 126.884114][ T9] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 126.925752][ T9] usb 4-1: USB disconnect, device number 4 [ 127.623539][ T939] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.755249][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 127.795459][ T939] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 127.824653][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.855460][ T939] usb 3-1: config 0 descriptor?? [ 128.453547][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.644172][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 128.666530][ T5925] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 128.691608][ T5925] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 128.709833][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.761644][ T5925] usb 1-1: Product: syz [ 128.794225][ T6462] process 'syz.4.190' launched '/dev/fd/6' with NULL argv: empty string added [ 128.827141][ T5925] usb 1-1: Manufacturer: syz [ 128.842278][ T5925] usb 1-1: SerialNumber: syz [ 128.856969][ T5925] usb 1-1: config 0 descriptor?? [ 128.871722][ T5925] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 128.907156][ T5925] usb 1-1: setting power ON [ 128.955570][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 128.973270][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.016824][ T5925] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 129.035167][ T5925] usb 1-1: media controller created [ 129.239283][ T6452] dvb-usb: bulk message failed: -22 (3/0) [ 129.247896][ T6452] dvb-usb: bulk message failed: -22 (3/0) [ 129.260909][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.319486][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 129.319509][ T30] audit: type=1326 audit(1765621651.049:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 129.439846][ T5925] usb 1-1: selecting invalid altsetting 6 [ 129.457001][ T5925] usb 1-1: digital interface selection failed (-22) [ 129.475945][ T30] audit: type=1326 audit(1765621651.049:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 129.481369][ T6471] dvb-usb: bulk message failed: -22 (3/0) [ 129.530741][ T5925] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.553971][ T5925] usb 1-1: setting power OFF [ 129.621076][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 129.637180][ T30] audit: type=1326 audit(1765621651.099:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 129.672045][ T30] audit: type=1326 audit(1765621651.099:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 129.721943][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.735142][ T5925] (NULL device *): no alternate interface [ 129.877226][ T30] audit: type=1326 audit(1765621651.099:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 129.990686][ T30] audit: type=1326 audit(1765621651.099:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 130.020907][ T5900] usb 3-1: USB disconnect, device number 5 [ 130.164343][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 130.216549][ T5925] usb 1-1: USB disconnect, device number 5 [ 130.316200][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.483539][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 130.495296][ T5901] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 130.516709][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.543524][ T5901] usb 2-1: Product: syz [ 130.547855][ T5901] usb 2-1: Manufacturer: syz [ 130.557972][ T5901] usb 2-1: SerialNumber: syz [ 130.575622][ T5901] usb 2-1: config 0 descriptor?? [ 130.992044][ T5901] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 131.024308][ T5901] usb 2-1: USB disconnect, device number 6 [ 131.563651][ T939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.723906][ T939] usb 5-1: Using ep0 maxpacket: 8 [ 131.739391][ T939] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 131.774987][ T939] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 131.800155][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.822161][ T939] usb 5-1: Product: syz [ 131.837205][ T939] usb 5-1: Manufacturer: syz [ 131.849746][ T939] usb 5-1: SerialNumber: syz [ 131.886992][ T939] usb 5-1: config 0 descriptor?? [ 132.107620][ T939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 132.116315][ T939] usb 5-1: setting power ON [ 132.120961][ T939] dvb-usb: bulk message failed: -22 (2/0) [ 132.130802][ T939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.141930][ T939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 132.150914][ T939] usb 5-1: media controller created [ 132.178287][ T939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.211202][ T939] usb 5-1: selecting invalid altsetting 6 [ 132.218500][ T939] usb 5-1: digital interface selection failed (-22) [ 132.231690][ T939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 132.242568][ T939] usb 5-1: setting power OFF [ 132.250668][ T939] dvb-usb: bulk message failed: -22 (2/0) [ 132.256874][ T939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 132.266780][ T939] (NULL device *): no alternate interface [ 132.320302][ T6502] dvb-usb: bulk message failed: -22 (3/0) [ 132.338069][ T6502] dvb-usb: bulk message failed: -22 (3/0) [ 132.345288][ T939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 132.380851][ T939] usb 5-1: USB disconnect, device number 3 [ 132.683551][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.809206][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 132.845506][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 132.866337][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.908876][ T9] usb 4-1: config 0 descriptor?? [ 133.081428][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.091307][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097096][ T30] audit: type=1326 audit(1765621654.839:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 133.150678][ T30] audit: type=1326 audit(1765621654.869:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 133.200183][ T30] audit: type=1326 audit(1765621654.869:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 133.274181][ T30] audit: type=1326 audit(1765621654.869:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 134.697862][ T5925] usb 4-1: USB disconnect, device number 5 [ 136.975814][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 136.975835][ T30] audit: type=1326 audit(1765621658.719:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6580 comm="syz.4.234" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x0 [ 137.706928][ T6595] macvtap1: entered promiscuous mode [ 137.712482][ T6595] macvtap1: entered allmulticast mode [ 138.913613][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.347975][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 139.608566][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.630229][ T9] usb 2-1: config 0 descriptor?? [ 140.544502][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 141.506704][ T24] usb 2-1: USB disconnect, device number 7 [ 142.904266][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.076151][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 143.100595][ T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 143.120318][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.143883][ T9] usb 5-1: Product: syz [ 143.148129][ T9] usb 5-1: Manufacturer: syz [ 143.168957][ T9] usb 5-1: SerialNumber: syz [ 143.191573][ T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 143.354129][ T5921] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.605580][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.627534][ T5921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 143.678718][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.693173][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 143.693838][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.705464][ T9] usb 5-1: media controller created [ 143.811145][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.822310][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.827361][ T5921] usb 1-1: Product: syz [ 143.852079][ T5921] usb 1-1: Manufacturer: syz [ 143.865131][ T5921] usb 1-1: SerialNumber: syz [ 144.144782][ T6661] netlink: 'syz.0.259': attribute type 13 has an invalid length. [ 144.153921][ T6661] netlink: 'syz.0.259': attribute type 17 has an invalid length. [ 144.198496][ T6662] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 144.479632][ T6661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.496148][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 144.535396][ T9] usb 5-1: USB disconnect, device number 4 [ 145.028041][ T6661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.274932][ T5921] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.312116][ T5921] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 145.340484][ T5921] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 145.557275][ T5921] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 145.608230][ T5921] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 145.674193][ T5921] usb 1-1: USB disconnect, device number 6 [ 145.715962][ T5921] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 145.773527][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.894064][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.067207][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.078303][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.373708][ T5901] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 146.383136][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.383818][ T5925] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.403730][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.416936][ T5901] usb 5-1: config 0 descriptor?? [ 146.507349][ T5925] usb 3-1: config 0 descriptor?? [ 146.893148][ T5901] stadia 0003:18D1:9400.0001: item fetching failed at offset 5/7 [ 146.923307][ T5901] stadia 0003:18D1:9400.0001: parse failed [ 146.938625][ T5901] stadia 0003:18D1:9400.0001: probe with driver stadia failed with error -22 [ 147.032029][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.132264][ T5901] usb 5-1: USB disconnect, device number 5 [ 147.912307][ T5834] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 148.208173][ T24] usb 3-1: USB disconnect, device number 6 [ 151.727175][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 151.961365][ T5834] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 151.971832][ T5834] Bluetooth: hci2: Injecting HCI hardware error event [ 151.989516][ T5845] Bluetooth: hci2: hardware error 0x00 [ 152.556179][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 153.163551][ T939] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.437087][ T939] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 153.473503][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.517642][ T939] usb 4-1: config 0 descriptor?? [ 154.114503][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 154.621087][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 154.737321][ T6795] dummy0: entered promiscuous mode [ 154.748312][ T6794] dummy0: left promiscuous mode [ 155.179258][ T5925] usb 4-1: USB disconnect, device number 6 [ 155.231028][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 155.304746][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 155.332090][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 155.344404][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 155.784085][ T6820] fuse: Bad value for 'fd' [ 156.236997][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 158.001895][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 158.085866][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 158.118048][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 158.185142][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 158.774953][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.943544][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 158.956769][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 158.969248][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.979418][ T5926] usb 3-1: Product: syz [ 158.984991][ T5998] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.992691][ T5926] usb 3-1: Manufacturer: syz [ 159.001228][ T5926] usb 3-1: SerialNumber: syz [ 159.014508][ T5926] usb 3-1: config 0 descriptor?? [ 159.163798][ T5998] usb 4-1: Using ep0 maxpacket: 16 [ 159.172290][ T5998] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 159.192255][ T5998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.220811][ T5998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.236366][ T5998] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.245980][ T5926] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 159.255667][ T5926] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 159.266335][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.276439][ T5998] usb 4-1: Product: syz [ 159.280764][ T5998] usb 4-1: Manufacturer: syz [ 159.289006][ T5926] usb 3-1: USB disconnect, device number 7 [ 159.297237][ T5998] usb 4-1: SerialNumber: syz [ 159.908979][ T5998] usb 4-1: 0:2 : does not exist [ 160.566938][ T5998] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 160.643958][ T5998] usb 4-1: USB disconnect, device number 7 [ 160.935251][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.133634][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 161.141452][ T24] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 161.178213][ T24] usb 1-1: config 0 has no interface number 0 [ 161.277857][ T24] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.291305][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 161.302313][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.310775][ T24] usb 1-1: Product: syz [ 161.316081][ T24] usb 1-1: Manufacturer: syz [ 161.326663][ T24] usb 1-1: SerialNumber: syz [ 161.342560][ T24] usb 1-1: config 0 descriptor?? [ 161.353803][ T6904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.593287][ T6904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.650334][ T6933] loop6: detected capacity change from 0 to 524287999 [ 163.690491][ T5886] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 163.713787][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.717813][ T6936] warning: `syz.2.354' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.722718][ T24] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.763907][ T24] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 163.785509][ T24] asix 1-1:0.188: probe with driver asix failed with error -71 [ 163.858101][ T24] usb 1-1: USB disconnect, device number 7 [ 163.913588][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 163.920807][ T5901] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.962632][ T5901] usb 5-1: config 0 has no interface number 0 [ 164.104154][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.133719][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.153503][ T5901] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.173473][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.203539][ T5901] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.212639][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.240471][ T5901] usb 5-1: config 0 descriptor?? [ 164.260233][ T5901] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.373524][ T5998] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.543895][ T5998] usb 2-1: Using ep0 maxpacket: 8 [ 164.579018][ T5998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.609650][ T5998] usb 2-1: config 2 has an invalid interface number: 184 but max is 0 [ 164.634647][ T5998] usb 2-1: config 2 has no interface number 0 [ 164.640918][ T5998] usb 2-1: config 2 interface 184 altsetting 9 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 164.664715][ T9] usb 5-1: USB disconnect, device number 6 [ 164.675523][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 164.691614][ T5998] usb 2-1: config 2 interface 184 has no altsetting 0 [ 164.716932][ T5998] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=67.c4 [ 164.734266][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.774491][ T5998] usb 2-1: Product: syz [ 164.778725][ T5998] usb 2-1: Manufacturer: syz [ 164.788670][ T5998] usb 2-1: SerialNumber: syz [ 165.029324][ T5998] usbtest 2-1:2.184: couldn't get endpoints, -71 [ 165.058997][ T5998] usbtest 2-1:2.184: probe with driver usbtest failed with error -71 [ 165.100385][ T5998] usb 2-1: USB disconnect, device number 8 [ 167.104783][ T6987] tipc: Started in network mode [ 167.116454][ T6987] tipc: Node identity fc2a, cluster identity 4711 [ 167.137683][ T6987] tipc: Node number set to 64554 [ 167.195070][ T6984] netlink: 'syz.0.378': attribute type 10 has an invalid length. [ 167.205701][ T6984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.485009][ T6990] fuse: Bad value for 'user_id' [ 167.509998][ T6990] fuse: Bad value for 'user_id' [ 168.549276][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 168.605297][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 168.622288][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 168.941392][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 169.025443][ T30] audit: type=1326 audit(1765621690.749:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.113484][ T30] audit: type=1326 audit(1765621690.749:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.203647][ T30] audit: type=1326 audit(1765621690.789:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.293547][ T30] audit: type=1326 audit(1765621690.789:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.406890][ T30] audit: type=1326 audit(1765621690.789:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.533265][ T30] audit: type=1326 audit(1765621690.789:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.623481][ T30] audit: type=1326 audit(1765621690.789:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.733530][ T30] audit: type=1326 audit(1765621690.789:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.784397][ T7033] tipc: Trying to set illegal importance in message [ 169.784826][ T30] audit: type=1326 audit(1765621690.789:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 169.923870][ T30] audit: type=1326 audit(1765621690.789:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 170.627694][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 170.650298][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 170.660552][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 172.183557][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.344641][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 172.363864][ T5926] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.388260][ T5926] usb 3-1: config 0 has no interface number 0 [ 172.413773][ T5926] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 172.443269][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.466392][ T5926] usb 3-1: Product: syz [ 172.479984][ T5926] usb 3-1: Manufacturer: syz [ 172.493533][ T5926] usb 3-1: SerialNumber: syz [ 172.520158][ T5926] usb 3-1: config 0 descriptor?? [ 172.550040][ T5926] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 172.576044][ T5926] usb 3-1: selecting invalid altsetting 1 [ 172.593494][ T5926] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 172.610327][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 172.622921][ T5926] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.659256][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 172.684226][ T5926] usb 3-1: media controller created [ 172.744767][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.020245][ T5926] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 173.038780][ T5926] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.066374][ T5926] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 173.767117][ T5926] usb 3-1: USB disconnect, device number 8 [ 174.033719][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 174.033741][ T30] audit: type=1326 audit(1765621695.769:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.584951][ T30] audit: type=1326 audit(1765621696.329:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.672383][ T30] audit: type=1326 audit(1765621696.329:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.699427][ T30] audit: type=1326 audit(1765621696.399:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.728240][ T30] audit: type=1326 audit(1765621696.399:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.750858][ T30] audit: type=1326 audit(1765621696.399:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 174.756463][ T7109] fuse: Bad value for 'fd' [ 174.801077][ T30] audit: type=1326 audit(1765621696.409:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 175.427839][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.474668][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.703538][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.883621][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 175.899036][ T7124] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 175.912385][ T9] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 175.930169][ T9] usb 2-1: config 0 has no interface number 0 [ 175.936714][ T9] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 175.938109][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 175.957515][ T9] usb 2-1: config 0 interface 96 has no altsetting 0 [ 175.973929][ T9] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8a, bcdDevice=33.74 [ 175.985204][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.003825][ T9] usb 2-1: Product: syz [ 176.013755][ T9] usb 2-1: Manufacturer: syz [ 176.023713][ T9] usb 2-1: SerialNumber: syz [ 176.040694][ T9] usb 2-1: config 0 descriptor?? [ 176.082441][ T9] usbhid 2-1:0.96: couldn't find an input interrupt endpoint [ 176.365768][ T9] usb 2-1: USB disconnect, device number 9 [ 176.657557][ T7142] fuse: Bad value for 'fd' [ 176.713477][ T7144] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 177.206655][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 177.220376][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.433736][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.463741][ T5900] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.583602][ T9] usb 1-1: device descriptor read/64, error -71 [ 177.625979][ T5900] usb 5-1: config 0 has no interfaces? [ 177.637428][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.647300][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.660815][ T5900] usb 5-1: SerialNumber: syz [ 177.669490][ T5900] usb 5-1: config 0 descriptor?? [ 177.823517][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.938950][ T5900] usb 5-1: USB disconnect, device number 7 [ 177.973812][ T9] usb 1-1: device descriptor read/64, error -71 [ 178.092974][ T5836] IPVS: starting estimator thread 0... [ 178.103692][ T7168] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 178.116927][ T9] usb usb1-port1: attempt power cycle [ 178.184157][ T7169] IPVS: using max 27 ests per chain, 64800 per kthread [ 178.483845][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.514383][ T9] usb 1-1: device descriptor read/8, error -71 [ 178.566754][ T30] audit: type=1326 audit(1765621700.299:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.2.446" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 178.764915][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.091304][ T9] usb 1-1: device descriptor read/8, error -71 [ 179.204506][ T9] usb usb1-port1: unable to enumerate USB device [ 180.670234][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.896842][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.909832][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.945099][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 180.973556][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.996688][ T9] usb 4-1: config 0 descriptor?? [ 181.444826][ T7226] capability: warning: `syz.4.462' uses 32-bit capabilities (legacy support in use) [ 181.498309][ T9] chicony 0003:04F2:1123.0004: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.3-1/input0 [ 181.825373][ T106] usb 4-1: USB disconnect, device number 8 [ 183.023486][ T106] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 183.203636][ T106] usb 1-1: device descriptor read/64, error -71 [ 183.543561][ T106] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.673498][ T106] usb 1-1: device descriptor read/64, error -71 [ 183.875370][ T106] usb usb1-port1: attempt power cycle [ 184.313645][ T106] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.343792][ T106] usb 1-1: device descriptor read/8, error -71 [ 184.593798][ T106] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 184.674809][ T106] usb 1-1: device descriptor read/8, error -71 [ 184.901554][ T106] usb usb1-port1: unable to enumerate USB device [ 187.128545][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 189.459849][ T7341] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 190.499487][ T7361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 191.354462][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 192.713596][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.910396][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.927556][ T7402] input: syz0 as /devices/virtual/input/input7 [ 192.943498][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.972056][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.996954][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.011226][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.033167][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.055787][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.076291][ T9] usb 3-1: Product: syz [ 193.080519][ T9] usb 3-1: Manufacturer: syz [ 193.111844][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 193.122617][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 193.123692][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 193.160094][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 193.173554][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 193.344467][ T7395] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 193.378393][ T106] usb 3-1: USB disconnect, device number 9 [ 193.761229][ T7418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 194.319636][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 194.521512][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.529177][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.644974][ T7440] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 196.209500][ T7452] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 196.553220][ T7457] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 196.588627][ T7457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.573721][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 198.743771][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 198.750977][ T7496] mmap: syz.2.559 (7496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.779463][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.793847][ T9] usb 2-1: config 0 has no interface number 0 [ 198.823823][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 198.833148][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.855363][ T9] usb 2-1: Product: syz [ 198.859974][ T9] usb 2-1: Manufacturer: syz [ 198.873596][ T9] usb 2-1: SerialNumber: syz [ 198.890592][ T9] usb 2-1: config 0 descriptor?? [ 198.921743][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 198.956305][ T9] usb 2-1: selecting invalid altsetting 1 [ 198.980758][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 199.007470][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.043749][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 199.052149][ T9] usb 2-1: media controller created [ 199.064137][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.082288][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.234380][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 199.244589][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 199.254538][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.262711][ T5901] usb 1-1: Product: syz [ 199.263578][ T5836] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.268060][ T5901] usb 1-1: Manufacturer: syz [ 199.279703][ T5901] usb 1-1: SerialNumber: syz [ 199.288159][ T5901] usb 1-1: config 0 descriptor?? [ 199.371829][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 199.392224][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 199.404860][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 199.424149][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 199.438639][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.457868][ T5836] usb 4-1: config 0 has no interface number 0 [ 199.479676][ T5836] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 199.509714][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.520864][ T9] usb 2-1: USB disconnect, device number 10 [ 199.528447][ T5901] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 199.538466][ T5901] eb 9a 47 80 9b f8 7a f0 [ 199.544303][ T5901] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 199.547959][ T5836] usb 4-1: Product: syz [ 199.589211][ T7512] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 199.637139][ T5836] usb 4-1: Manufacturer: syz [ 199.641853][ T5836] usb 4-1: SerialNumber: syz [ 199.652548][ T5836] usb 4-1: config 0 descriptor?? [ 199.678552][ T5836] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 199.697997][ T5836] usb 4-1: selecting invalid altsetting 1 [ 200.123474][ T5836] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 200.137108][ T9] usb 1-1: USB disconnect, device number 16 [ 200.163259][ T5836] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.213955][ T5836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 200.239305][ T5836] usb 4-1: media controller created [ 200.272499][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.369026][ T5836] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 200.382784][ T5836] zl10353_read_register: readreg error (reg=127, ret==-71) [ 200.532889][ T5836] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 200.691803][ T5836] usb 4-1: USB disconnect, device number 9 [ 200.809658][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 201.284597][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.423574][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.478332][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 201.507931][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 201.532058][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 201.567391][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 201.580064][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.595797][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 201.618962][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.666877][ T24] usb 5-1: Product: syz [ 201.680250][ T5901] usb 3-1: config 0 has no interface number 0 [ 201.693767][ T24] usb 5-1: Manufacturer: syz [ 201.698582][ T24] usb 5-1: SerialNumber: syz [ 201.719746][ T5901] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 201.744705][ T24] usb 5-1: config 0 descriptor?? [ 201.758282][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.774408][ T7538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.781785][ T7538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.803128][ T5901] usb 3-1: Product: syz [ 201.817062][ T5901] usb 3-1: Manufacturer: syz [ 201.823985][ T5901] usb 3-1: SerialNumber: syz [ 201.853819][ T24] usb 5-1: ucan: probing device on interface #0 [ 201.864681][ T5901] usb 3-1: config 0 descriptor?? [ 201.896942][ T5901] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 201.939922][ T5901] usb 3-1: selecting invalid altsetting 1 [ 201.963467][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 201.996940][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.014815][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 202.023193][ T5901] usb 3-1: media controller created [ 202.108837][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.428114][ T5901] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 202.443526][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 202.459923][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 202.722146][ T5901] usb 3-1: USB disconnect, device number 10 [ 202.769168][ T24] ucan 5-1:0.0 can0: registered device [ 202.786706][ T24] ucan 5-1:0.0 can0: firmware string: unknown [ 202.796818][ T24] usb 5-1: USB disconnect, device number 8 [ 203.404078][ T7568] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 203.443614][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.653779][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 203.668037][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.689489][ T9] usb 3-1: config 0 has no interface number 0 [ 203.735481][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 203.815304][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.823366][ T9] usb 3-1: Product: syz [ 203.848603][ T9] usb 3-1: Manufacturer: syz [ 203.850489][ T5901] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 203.853242][ T9] usb 3-1: SerialNumber: syz [ 203.881875][ T5901] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.947009][ T9] usb 3-1: config 0 descriptor?? [ 203.992130][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 204.016281][ T9] usb 3-1: selecting invalid altsetting 1 [ 204.022205][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 204.084150][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.102217][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 204.112491][ T9] usb 3-1: media controller created [ 204.113512][ T5901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.139551][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.184637][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 204.191963][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 204.200893][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 204.257350][ T9] usb 3-1: USB disconnect, device number 11 [ 204.295701][ T5901] usb 4-1: config 0 has no interfaces? [ 204.324774][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.334543][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.342551][ T5901] usb 4-1: SerialNumber: syz [ 204.351771][ T5901] usb 4-1: config 0 descriptor?? [ 204.699422][ T5901] usb 4-1: USB disconnect, device number 10 [ 205.117586][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 205.145612][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 205.178534][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 205.198844][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 205.199909][ T7597] Invalid argument reading file caps for ./file0 [ 205.460707][ T7605] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 205.484040][ T7603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 205.587289][ T7605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.284175][ T7619] syzkaller0: entered promiscuous mode [ 206.293253][ T7619] syzkaller0: entered allmulticast mode [ 210.563509][ T5836] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.754898][ T5836] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.773843][ T5836] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 210.826652][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.872540][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 210.911802][ T5836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 210.952574][ T5836] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.972438][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.994694][ T5836] usb 3-1: Product: syz [ 210.998918][ T5836] usb 3-1: Manufacturer: syz [ 211.034691][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 211.039933][ T5836] cdc_wdm 3-1:1.0: skipping garbage [ 211.183203][ T5836] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 211.199980][ T5836] cdc_wdm 3-1:1.0: Unknown control protocol [ 211.966683][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 211.972978][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.975341][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 211.979769][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 213.316905][ T5836] usb 3-1: USB disconnect, device number 12 [ 213.364122][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 214.143529][ T5998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.629612][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.641535][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.747309][ T5998] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 214.787091][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.821335][ T5998] usb 3-1: config 0 descriptor?? [ 215.281003][ T5998] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 215.313792][ T5998] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 215.508192][ T5998] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 216.109398][ T7711] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 216.173270][ T5998] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 216.267949][ T5998] usb 3-1: USB disconnect, device number 13 [ 216.823495][ T5998] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 217.013526][ T5998] usb 1-1: device descriptor read/64, error -71 [ 217.283522][ T5998] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 217.474126][ T5998] usb 1-1: device descriptor read/64, error -71 [ 217.510152][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 217.594284][ T5998] usb usb1-port1: attempt power cycle [ 218.003526][ T5998] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 218.029666][ T5998] usb 1-1: device descriptor read/8, error -71 [ 219.834460][ T7783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 220.825491][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 221.194318][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 221.219604][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 221.244325][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 221.481720][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 221.544728][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 221.747099][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 221.841106][ T7816] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 222.129267][ T7819] fuse: Bad value for 'fd' [ 222.189357][ T7821] fuse: Unknown parameter '0x0000000000000003' [ 222.499313][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 223.321879][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 223.327745][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 224.482615][ T7860] fuse: Bad value for 'fd' [ 224.654085][ T7863] fuse: Unknown parameter '0x0000000000000003' [ 225.166395][ T939] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.323520][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 225.341374][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.366482][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.396770][ T939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.410687][ T939] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 225.451595][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.470820][ T939] usb 2-1: config 0 descriptor?? [ 225.537325][ T7884] loop2: detected capacity change from 0 to 7 [ 225.562413][ T7884] Dev loop2: unable to read RDB block 7 [ 225.580331][ T7884] loop2: AHDI p1 p2 p3 [ 225.594951][ T7884] loop2: partition table partially beyond EOD, truncated [ 225.611324][ T7884] loop2: p1 start 1601398130 is beyond EOD, truncated [ 225.622180][ T7884] loop2: p2 start 1702059890 is beyond EOD, truncated [ 225.848860][ T7890] fuse: Unknown parameter 'fd0x0000000000000003' [ 225.904714][ T7870] random: crng reseeded on system resumption [ 225.980774][ T939] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 226.074025][ T939] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 226.087187][ T939] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 226.154561][ T5836] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 226.173221][ T939] usb 2-1: USB disconnect, device number 11 [ 226.184596][ T5836] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.231506][ T5836] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.280149][ T5836] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.504750][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.533886][ T7901] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 226.687190][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.702098][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.650357][ T24] usb 4-1: config 0 descriptor?? [ 228.240879][ T7921] __nla_validate_parse: 5 callbacks suppressed [ 228.240906][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 228.544678][ T7926] fuse: Unknown parameter 'fd0x0000000000000003' [ 228.679710][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 229.032768][ T30] audit: type=1326 audit(1765621750.769:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.4.709" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x0 [ 229.068765][ T7935] fuse: Bad value for 'fd' [ 229.093700][ T9] usb 4-1: USB disconnect, device number 11 [ 229.691931][ T7943] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 230.121822][ T7955] fuse: Unknown parameter 'fd0x0000000000000003' [ 230.416693][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 231.239278][ T7970] fuse: Bad value for 'fd' [ 233.493495][ T5901] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 233.664889][ T5901] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 233.683909][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.697190][ T5901] usb 1-1: config 0 descriptor?? [ 233.728093][ T8003] fuse: Invalid rootmode [ 233.783236][ T8004] syzkaller0: entered promiscuous mode [ 233.794020][ T8004] syzkaller0: entered allmulticast mode [ 235.156467][ T5900] usb 1-1: USB disconnect, device number 21 [ 235.387054][ T8031] fuse: Invalid rootmode [ 236.256023][ T8046] netlink: 'syz.4.749': attribute type 13 has an invalid length. [ 236.684217][ T5926] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 236.817014][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 236.854162][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 236.866797][ T5926] usb 1-1: config 4 has an invalid interface number: 194 but max is 0 [ 236.875567][ T5926] usb 1-1: config 4 has no interface number 0 [ 236.881829][ T5926] usb 1-1: config 4 interface 194 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 236.906796][ T5926] usb 1-1: config 4 interface 194 has no altsetting 0 [ 236.934347][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.bf [ 236.946004][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.992191][ T5926] usb 1-1: Product: syz [ 237.006750][ T5926] usb 1-1: Manufacturer: syz [ 237.021300][ T5926] usb 1-1: SerialNumber: syz [ 237.051120][ T8048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.073283][ T5926] em28xx 1-1:4.194: New device syz syz @ 480 Mbps (2040:6500, interface 194, class 194) [ 237.073323][ T5926] em28xx 1-1:4.194: Video interface 194 found: bulk [ 237.618185][ T8066] fuse: Invalid rootmode [ 237.953005][ T8070] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 237.989270][ T8070] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 238.000232][ T8070] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 238.009000][ T8070] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 238.017588][ T8070] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 238.054070][ T8070] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 238.205142][ T5926] em28xx 1-1:4.194: unknown em28xx chip ID (0) [ 238.345932][ T5926] em28xx 1-1:4.194: reading from i2c device at 0xa0 failed (error=-5) [ 238.357411][ T5926] em28xx 1-1:4.194: board has no eeprom [ 238.423468][ T5926] em28xx 1-1:4.194: Identified as Hauppauge WinTV HVR 900 (card=10) [ 238.453687][ T5926] em28xx 1-1:4.194: analog set to bulk mode. [ 238.469578][ T5998] em28xx 1-1:4.194: Registering V4L2 extension [ 238.663309][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 238.691291][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 238.752227][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 238.828334][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 239.405139][ T5836] usb 1-1: USB disconnect, device number 22 [ 239.411602][ T5998] em28xx 1-1:4.194: reading from i2c device at 0xb8 failed (error=-19) [ 239.421900][ T5836] em28xx 1-1:4.194: Disconnecting em28xx [ 239.931479][ T5998] em28xx 1-1:4.194: Config register raw data: 0xffffffed [ 239.968089][ T5998] em28xx 1-1:4.194: AC97 chip type couldn't be determined [ 239.997833][ T5998] em28xx 1-1:4.194: No AC97 audio processor [ 240.013031][ T5998] em28xx 1-1:4.194: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 240.030551][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'. [ 240.040487][ T5998] em28xx 1-1:4.194: Binding DVB extension [ 240.047578][ T5998] em28xx 1-1:4.194: no endpoint for DVB mode and transfer type 0 [ 240.085096][ T5998] em28xx 1-1:4.194: failed to pre-allocate USB transfer buffers for DVB. [ 240.130926][ T5998] em28xx 1-1:4.194: Registering input extension [ 240.150855][ T5836] em28xx 1-1:4.194: Closing input extension [ 240.287699][ T5836] em28xx 1-1:4.194: Freeing device [ 241.036266][ T8107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 241.868937][ T8114] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 241.911893][ T8114] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 241.923882][ T8114] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 241.934322][ T5834] Bluetooth: hci4: unexpected cc 0x0809 length: 12 > 4 [ 241.941367][ T5834] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 241.949681][ T8114] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 242.026425][ T8123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.034038][ T8123] IPv6: NLM_F_CREATE should be set when creating new route [ 242.267090][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 242.465621][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'. [ 244.429290][ T8154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 245.751898][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.786'. [ 245.762091][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 247.861969][ T5998] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 248.123480][ T5998] usb 3-1: Using ep0 maxpacket: 32 [ 248.131786][ T5998] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.168457][ T5998] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.199526][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.227059][ T5998] usb 3-1: Product: syz [ 248.243498][ T5998] usb 3-1: Manufacturer: syz [ 248.259669][ T5998] usb 3-1: SerialNumber: syz [ 248.295046][ T5998] usb 3-1: config 0 descriptor?? [ 248.301135][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 248.321429][ T8206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.676931][ T8219] netlink: 'syz.2.799': attribute type 13 has an invalid length. [ 249.135046][ T5998] usb 3-1: USB disconnect, device number 14 [ 249.495281][ T8227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 249.918742][ T8233] capability: warning: `syz.3.806' uses deprecated v2 capabilities in a way that may be insecure [ 250.128958][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 250.978883][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 251.591514][ T8267] loop7: detected capacity change from 0 to 7 [ 251.641801][ T8267] Dev loop7: unable to read RDB block 7 [ 251.657855][ T8267] loop7: unable to read partition table [ 251.763956][ T8267] loop7: partition table beyond EOD, truncated [ 251.784415][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 251.794512][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 251.812172][ T8267] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 251.896417][ T8273] syzkaller0: entered promiscuous mode [ 251.902013][ T8273] syzkaller0: entered allmulticast mode [ 252.434117][ T8279] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 254.141881][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 254.171405][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 254.182601][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 254.195134][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 255.120138][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 255.523646][ T5836] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 255.697029][ T5836] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.706896][ T8350] netlink: 'syz.2.846': attribute type 10 has an invalid length. [ 255.743497][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.795989][ T5836] usb 1-1: config 0 descriptor?? [ 255.958728][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973463][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.273462][ T5836] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.543541][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 256.551695][ T5836] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 256.573793][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.585745][ T5836] usb 3-1: config 0 descriptor?? [ 257.505225][ T5900] usb 1-1: USB disconnect, device number 23 [ 257.565316][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'. [ 257.585542][ T8375] netlink: 152 bytes leftover after parsing attributes in process `syz.4.854'. [ 257.918280][ T8383] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 258.123674][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 258.453591][ T5836] pegasus 3-1:0.0: can't locate MII phy, using default [ 258.538950][ T5836] pegasus 3-1:0.0: eth1, D-Link DSB-650TX, da:52:bc:5a:84:79 [ 258.565300][ T5836] usb 3-1: USB disconnect, device number 15 [ 260.689816][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 260.983620][ T44] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 261.773541][ T5900] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 261.964760][ T5900] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 261.999890][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.119573][ T5900] usb 4-1: config 0 descriptor?? [ 262.343554][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 262.513627][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 262.550097][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 262.584344][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.665471][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 262.712029][ T24] pvrusb2: ********** [ 262.738100][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 262.767936][ T24] pvrusb2: Important functionality might not be entirely working. [ 262.797340][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 262.824771][ T24] pvrusb2: ********** [ 262.877919][ T2344] pvrusb2: Invalid write control endpoint [ 263.357174][ T8475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 263.463709][ T2344] pvrusb2: Invalid write control endpoint [ 263.824435][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 263.986594][ T8479] netlink: 'syz.4.878': attribute type 10 has an invalid length. [ 264.138530][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 264.151227][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 264.161728][ T2344] pvrusb2: Device being rendered inoperable [ 264.170289][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 264.177781][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 264.192278][ T5998] usb 1-1: USB disconnect, device number 24 [ 264.230107][ T2344] pvrusb2: Attached sub-driver cx25840 [ 264.252524][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 264.266361][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 264.372094][ T24] usb 4-1: USB disconnect, device number 12 [ 264.695232][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 264.814774][ T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 264.983484][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 264.992647][ T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.005092][ T44] usb 5-1: config 0 has no interface number 0 [ 265.011290][ T44] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.050339][ T44] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.167809][ T44] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 265.206475][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.258113][ T44] usb 5-1: config 0 descriptor?? [ 265.484313][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 265.663498][ T5998] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.833536][ T5998] usb 3-1: Using ep0 maxpacket: 32 [ 265.840657][ T5998] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.856602][ T5998] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.871087][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.903435][ T5998] usb 3-1: Product: syz [ 265.907664][ T5998] usb 3-1: Manufacturer: syz [ 265.919067][ T44] uclogic 0003:28BD:0071.0008: pen parameters not found [ 265.942859][ T5998] usb 3-1: SerialNumber: syz [ 265.963532][ T44] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 265.984952][ T5998] usb 3-1: config 0 descriptor?? [ 266.021387][ T8510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 266.126439][ T5998] usb 5-1: USB disconnect, device number 10 [ 266.373810][ T8519] netlink: 'syz.2.890': attribute type 13 has an invalid length. [ 267.206804][ T44] usb 3-1: USB disconnect, device number 16 [ 268.223552][ T5998] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 268.269561][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 268.393734][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 268.406214][ T5998] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 268.447407][ T5998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.464198][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 268.494056][ T5998] usb 2-1: config 0 descriptor?? [ 268.505086][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 268.534941][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 269.283953][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.330596][ T8567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 269.450662][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 269.460546][ T5893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.469249][ T5893] usb 5-1: config 0 has no interface number 0 [ 270.076849][ T5893] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 270.093978][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.152842][ T5893] usb 5-1: Product: syz [ 270.220002][ T5893] usb 5-1: Manufacturer: syz [ 270.232952][ T5893] usb 5-1: SerialNumber: syz [ 270.238789][ T5900] usb 2-1: USB disconnect, device number 12 [ 270.267487][ T5893] usb 5-1: config 0 descriptor?? [ 270.293691][ T5893] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 270.321645][ T5893] usb 5-1: selecting invalid altsetting 1 [ 270.333420][ T5893] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 270.362957][ T5893] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 270.433753][ T5893] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 270.442069][ T5893] usb 5-1: media controller created [ 270.481741][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.562904][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 270.775612][ T5893] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 270.938356][ T5893] zl10353_read_register: readreg error (reg=127, ret==-71) [ 270.963930][ T5893] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 271.064425][ T5893] usb 5-1: USB disconnect, device number 11 [ 272.544504][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 272.588822][ T8608] fuse: Unknown parameter '00000000000000000003' [ 273.213489][ T5836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 273.393459][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 273.401342][ T5836] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.426929][ T5836] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.437490][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.450810][ T5836] usb 1-1: Product: syz [ 273.456357][ T5836] usb 1-1: Manufacturer: syz [ 273.461214][ T5836] usb 1-1: SerialNumber: syz [ 273.490523][ T5836] usb 1-1: config 0 descriptor?? [ 273.500160][ T8613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.603661][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 273.776624][ T5926] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.787531][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.799538][ T5926] usb 5-1: config 0 descriptor?? [ 273.808174][ T8625] netlink: 'syz.0.927': attribute type 13 has an invalid length. [ 273.980985][ T5926] usb 1-1: USB disconnect, device number 25 [ 274.065705][ T5901] usb 5-1: USB disconnect, device number 12 [ 274.299574][ T8635] netlink: 'syz.1.934': attribute type 13 has an invalid length. [ 274.716149][ T8641] fuse: Unknown parameter '00000000000000000003' [ 276.671905][ T8676] fuse: Unknown parameter '00000000000000000003' [ 277.366085][ T8692] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 277.683531][ T5998] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 277.859072][ T5998] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 277.884786][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.909967][ T5998] usb 5-1: config 0 descriptor?? [ 278.134188][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 278.261328][ T24] usb 5-1: USB disconnect, device number 13 [ 278.387530][ T8707] netlink: 80 bytes leftover after parsing attributes in process `syz.0.960'. [ 278.593674][ T8711] Option ' Pui ' to dns_resolver key: bad/missing value [ 279.050459][ T8715] fuse: Unknown parameter '00000000000000000003' [ 279.356423][ T8719] syzkaller0: entered promiscuous mode [ 279.361955][ T8719] syzkaller0: entered allmulticast mode [ 279.489452][ T8723] netlink: 'syz.0.966': attribute type 10 has an invalid length. [ 279.766461][ T30] audit: type=1326 audit(1765621801.359:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.4.967" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x0 [ 281.711928][ T8749] fuse: Unknown parameter 'fd00000000000000000003' [ 282.370919][ T8759] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 283.053514][ T5900] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 283.213493][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 283.224949][ T5900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.233057][ T5900] usb 1-1: config 0 has no interface number 0 [ 283.266348][ T5900] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 283.298382][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.313563][ T5900] usb 1-1: Product: syz [ 283.317791][ T5900] usb 1-1: Manufacturer: syz [ 283.322506][ T5900] usb 1-1: SerialNumber: syz [ 283.366424][ T5900] usb 1-1: config 0 descriptor?? [ 283.382366][ T5900] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 283.408438][ T5900] usb 1-1: selecting invalid altsetting 1 [ 283.416115][ T5900] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 283.430211][ T5900] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 283.441646][ T5900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 283.453331][ T5900] usb 1-1: media controller created [ 283.495042][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.633550][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 283.770690][ T8779] fuse: Unknown parameter 'fd00000000000000000003' [ 283.807505][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.823510][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.854569][ T9] usb 2-1: config 0 descriptor?? [ 283.979433][ T8782] fuse: Bad value for 'fd' [ 284.002072][ T8782] geneve1: Caught tx_queue_len zero misconfig [ 284.073144][ T5921] usb 2-1: USB disconnect, device number 13 [ 284.593921][ T5900] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 284.603576][ T5900] zl10353_read_register: readreg error (reg=127, ret==-110) [ 284.613780][ T8762] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 284.978512][ T8788] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 285.038015][ T5900] usb 1-1: USB disconnect, device number 26 [ 285.271128][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 285.284843][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 285.316821][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 285.641931][ T8806] fuse: Unknown parameter 'fd00000000000000000003' [ 286.043549][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 286.145721][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'. [ 286.207001][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.229128][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.249244][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 286.269057][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.342187][ T9] usb 3-1: config 0 descriptor?? [ 286.772237][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 286.791385][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.817644][ T9] usb 3-1: USB disconnect, device number 17 [ 287.571987][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 288.546569][ T5901] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 288.785020][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.801615][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.831573][ T5901] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 288.921566][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 288.984318][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.037623][ T5901] usb 5-1: config 0 descriptor?? [ 289.621055][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 289.628297][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.683480][ T5901] usb 5-1: USB disconnect, device number 14 [ 289.711013][ T5834] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 290.382201][ T8910] netlink: 'syz.4.1041': attribute type 10 has an invalid length. [ 290.734749][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 290.783506][ T5998] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 290.893450][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 290.906902][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.944003][ T9] usb 2-1: config 0 has no interface number 0 [ 290.953957][ T5998] usb 5-1: Using ep0 maxpacket: 8 [ 290.963891][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 290.973000][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.981328][ T5998] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 291.003531][ T5998] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.018499][ T9] usb 2-1: Product: syz [ 291.022817][ T9] usb 2-1: Manufacturer: syz [ 291.033440][ T5998] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.040179][ T5998] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 291.049389][ T9] usb 2-1: SerialNumber: syz [ 291.067704][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.076971][ T9] usb 2-1: config 0 descriptor?? [ 291.085964][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 291.102949][ T5998] usb 5-1: config 0 descriptor?? [ 291.113445][ T9] usb 2-1: selecting invalid altsetting 1 [ 291.119242][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 291.130043][ T5998] qmi_wwan 5-1:0.0: bogus CDC Union: master=255, slave=255 [ 291.138184][ T5998] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 291.208066][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.231400][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 291.241187][ T9] usb 2-1: media controller created [ 291.263249][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.381152][ T5998] usb 5-1: USB disconnect, device number 15 [ 291.883527][ T5998] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 291.953683][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 292.033887][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 292.043755][ T5998] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 292.052826][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.061874][ T5998] usb 3-1: Product: syz [ 292.066585][ T5998] usb 3-1: Manufacturer: syz [ 292.071280][ T5998] usb 3-1: SerialNumber: syz [ 292.080347][ T5998] usb 3-1: config 0 descriptor?? [ 292.136485][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.153443][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.163287][ T5926] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 292.186201][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.199849][ T5926] usb 4-1: config 0 descriptor?? [ 292.227213][ T8945] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 292.353847][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 292.368334][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 292.394344][ T8916] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 292.477685][ T9] usb 2-1: USB disconnect, device number 14 [ 292.522828][ T5998] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 292.547478][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.573954][ T5998] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 292.590081][ T5998] usb 3-1: media controller created [ 292.663625][ T8932] ------------[ cut here ]------------ [ 292.669390][ T8932] usb 3-1: BOGUS control dir, pipe 80001280 doesn't match bRequestType c0 [ 292.678158][ T8932] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.3.1051/8932 [ 292.686328][ T8932] Modules linked in: [ 292.690418][ T8932] CPU: 1 UID: 0 PID: 8932 Comm: syz.3.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.701343][ T8932] Tainted: [L]=SOFTLOCKUP [ 292.705762][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.715932][ T8932] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 292.721610][ T8932] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 292.742302][ T8932] RSP: 0018:ffffc90003a7f3a0 EFLAGS: 00010246 [ 292.748438][ T8932] RAX: 0000000000000000 RBX: ffff88802f0a9500 RCX: 0000000080001280 [ 292.756597][ T8932] RDX: ffff888055bc9560 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 292.764688][ T8932] RBP: 1ffff1100ef3b8f4 R08: 00000000000000c0 R09: 0000000000000000 [ 292.772684][ T8932] R10: ffffc90003a7f4a0 R11: fffff5200074fea0 R12: ffff88807cf40100 [ 292.780709][ T8932] R13: ffff8880779dc7a0 R14: 0000000080001280 R15: ffff888055bc9560 [ 292.788954][ T8932] FS: 0000000000000000(0000) GS:ffff888125f3a000(0063) knlGS:00000000f53edb40 [ 292.798170][ T8932] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 292.804936][ T8932] CR2: 0000000080037018 CR3: 0000000077f06000 CR4: 00000000003526f0 [ 292.806281][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.812952][ T8932] Call Trace: [ 292.812985][ T8932] [ 292.813005][ T8932] ? __init_swait_queue_head+0xa9/0x150 [ 292.813046][ T8932] usb_start_wait_urb+0x115/0x4f0 [ 292.813075][ T8932] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 292.844358][ T8932] usb_control_msg+0x232/0x3e0 [ 292.849183][ T8932] dtv5100_i2c_msg+0x231/0x2f0 [ 292.854082][ T8932] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 292.858989][ T8932] __i2c_transfer+0x871/0x2110 [ 292.863859][ T8932] ? __pfx___i2c_transfer+0x10/0x10 [ 292.869109][ T8932] ? kasan_save_track+0x4f/0x80 [ 292.874036][ T8932] __i2c_smbus_xfer+0xf80/0x1e40 [ 292.879023][ T8932] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 292.884493][ T8932] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 292.890435][ T8932] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.896391][ T8932] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.902743][ T8932] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 292.908172][ T8932] i2c_smbus_xfer+0x275/0x3c0 [ 292.912905][ T8932] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 292.918192][ T8932] i2cdev_ioctl_smbus+0x1cd/0x750 [ 292.923236][ T8932] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 292.928847][ T8932] compat_i2cdev_ioctl+0x299/0x5c0 [ 292.933995][ T8932] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 292.939657][ T8932] ? __fget_files+0x3a0/0x420 [ 292.944395][ T8932] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 292.949992][ T8932] __ia32_compat_sys_ioctl+0x543/0x840 [ 292.955520][ T8932] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 292.961504][ T8932] ? __se_sys_futex_time32+0x360/0x3e0 [ 292.967316][ T8932] ? rcu_is_watching+0x15/0xb0 [ 292.972127][ T8932] ? __do_fast_syscall_32+0xbe/0x570 [ 292.977528][ T8932] __do_fast_syscall_32+0x1f7/0x570 [ 292.982766][ T8932] ? lockdep_hardirqs_on+0x98/0x140 [ 292.988063][ T8932] ? do_fast_syscall_32+0x34/0x80 [ 292.993115][ T8932] ? irqentry_exit+0x10f/0x660 [ 292.998431][ T8932] do_fast_syscall_32+0x34/0x80 [ 293.003565][ T8932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.009941][ T8932] RIP: 0023:0xf6ffd539 [ 293.014133][ T8932] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.033831][ T8932] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 293.042456][ T8932] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 293.050503][ T8932] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.058539][ T8932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.066589][ T8932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.074785][ T8932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.082792][ T8932] [ 293.085860][ T8932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 293.093153][ T8932] CPU: 1 UID: 0 PID: 8932 Comm: syz.3.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.104003][ T8932] Tainted: [L]=SOFTLOCKUP [ 293.108321][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.118388][ T8932] Call Trace: [ 293.121669][ T8932] [ 293.124619][ T8932] dump_stack_lvl+0x99/0x250 [ 293.129246][ T8932] ? __asan_memcpy+0x40/0x70 [ 293.133831][ T8932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.139045][ T8932] ? __pfx__printk+0x10/0x10 [ 293.143669][ T8932] vpanic+0x237/0x6d0 [ 293.147673][ T8932] ? __pfx_vpanic+0x10/0x10 [ 293.152196][ T8932] ? is_bpf_text_address+0x292/0x2b0 [ 293.157478][ T8932] ? is_bpf_text_address+0x26/0x2b0 [ 293.162697][ T8932] panic+0xb9/0xc0 [ 293.166422][ T8932] ? __pfx_panic+0x10/0x10 [ 293.170883][ T8932] __warn+0x317/0x4b0 [ 293.174873][ T8932] __report_bug+0x288/0x500 [ 293.179401][ T8932] ? __pfx___report_bug+0x10/0x10 [ 293.184469][ T8932] report_bug_entry+0x16a/0x220 [ 293.189326][ T8932] ? usb_submit_urb+0x111c/0x18d0 [ 293.194355][ T8932] ? usb_submit_urb+0x1121/0x18d0 [ 293.199424][ T8932] handle_bug+0xca/0x200 [ 293.203771][ T8932] exc_invalid_op+0x1a/0x50 [ 293.208304][ T8932] asm_exc_invalid_op+0x1a/0x20 [ 293.213158][ T8932] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 293.218819][ T8932] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 293.238446][ T8932] RSP: 0018:ffffc90003a7f3a0 EFLAGS: 00010246 [ 293.244548][ T8932] RAX: 0000000000000000 RBX: ffff88802f0a9500 RCX: 0000000080001280 [ 293.252536][ T8932] RDX: ffff888055bc9560 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 293.260512][ T8932] RBP: 1ffff1100ef3b8f4 R08: 00000000000000c0 R09: 0000000000000000 [ 293.268581][ T8932] R10: ffffc90003a7f4a0 R11: fffff5200074fea0 R12: ffff88807cf40100 [ 293.276725][ T8932] R13: ffff8880779dc7a0 R14: 0000000080001280 R15: ffff888055bc9560 [ 293.284737][ T8932] ? __init_swait_queue_head+0xa9/0x150 [ 293.290310][ T8932] usb_start_wait_urb+0x115/0x4f0 [ 293.295356][ T8932] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 293.300994][ T8932] usb_control_msg+0x232/0x3e0 [ 293.305786][ T8932] dtv5100_i2c_msg+0x231/0x2f0 [ 293.310561][ T8932] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 293.315436][ T8932] __i2c_transfer+0x871/0x2110 [ 293.320225][ T8932] ? __pfx___i2c_transfer+0x10/0x10 [ 293.325431][ T8932] ? kasan_save_track+0x4f/0x80 [ 293.330305][ T8932] __i2c_smbus_xfer+0xf80/0x1e40 [ 293.335281][ T8932] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 293.340702][ T8932] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.346626][ T8932] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.352548][ T8932] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.358892][ T8932] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 293.364277][ T8932] i2c_smbus_xfer+0x275/0x3c0 [ 293.368975][ T8932] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 293.374277][ T8932] i2cdev_ioctl_smbus+0x1cd/0x750 [ 293.379321][ T8932] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 293.384902][ T8932] compat_i2cdev_ioctl+0x299/0x5c0 [ 293.390031][ T8932] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 293.395676][ T8932] ? __fget_files+0x3a0/0x420 [ 293.400379][ T8932] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 293.405948][ T8932] __ia32_compat_sys_ioctl+0x543/0x840 [ 293.411425][ T8932] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 293.417428][ T8932] ? __se_sys_futex_time32+0x360/0x3e0 [ 293.422900][ T8932] ? rcu_is_watching+0x15/0xb0 [ 293.427682][ T8932] ? __do_fast_syscall_32+0xbe/0x570 [ 293.432978][ T8932] __do_fast_syscall_32+0x1f7/0x570 [ 293.438191][ T8932] ? lockdep_hardirqs_on+0x98/0x140 [ 293.443501][ T8932] ? do_fast_syscall_32+0x34/0x80 [ 293.448558][ T8932] ? irqentry_exit+0x10f/0x660 [ 293.453351][ T8932] do_fast_syscall_32+0x34/0x80 [ 293.458222][ T8932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.464551][ T8932] RIP: 0023:0xf6ffd539 [ 293.468630][ T8932] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.488243][ T8932] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 293.496683][ T8932] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 293.504672][ T8932] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.512644][ T8932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.520629][ T8932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.528611][ T8932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.536612][ T8932] [ 293.539942][ T8932] Kernel Offset: disabled [ 293.544268][ T8932] Rebooting in 86400 seconds..