last executing test programs: 25m50.901471525s ago: executing program 2 (id=622): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x10000, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x11) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) 25m48.63056162s ago: executing program 2 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffe6, 0xb}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25m48.377604049s ago: executing program 2 (id=637): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0}) close(0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e", 0x87, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) 25m46.537688504s ago: executing program 2 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 25m46.132433267s ago: executing program 2 (id=649): syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 25m45.601613905s ago: executing program 2 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x882, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0xd}) io_uring_enter(r2, 0x3516, 0x0, 0x2, 0x0, 0x0) 25m44.675887082s ago: executing program 32 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x882, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0xd}) io_uring_enter(r2, 0x3516, 0x0, 0x2, 0x0, 0x0) 5.892522309s ago: executing program 0 (id=10521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 5.78583431s ago: executing program 1 (id=10523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xffad, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r1, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0xf}, &(0x7f0000000280)=0x8) 5.68168015s ago: executing program 0 (id=10524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, 0x0, 0x0, 0x200000d0) 4.9649259s ago: executing program 5 (id=10532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000001400)={0x1, 0x200, 0x9, 0x1, 0x1, 0x7f}) 4.695274435s ago: executing program 0 (id=10533): socket(0x2a, 0x2, 0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.933682176s ago: executing program 3 (id=10538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x71}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/1, 0x1}], 0x1}, 0x4}], 0x2, 0x40008140, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c000) 3.88062951s ago: executing program 3 (id=10540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 3.57369372s ago: executing program 3 (id=10543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280), 0x0, 0x200000d0) 3.552350665s ago: executing program 4 (id=10544): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x94}}, 0x4040001) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x16000, 0x42) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.432953889s ago: executing program 0 (id=10545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000800)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4001}], 0x1, 0x200000d0) 3.345694254s ago: executing program 4 (id=10546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a3200"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 3.34519351s ago: executing program 4 (id=10547): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.689889996s ago: executing program 1 (id=10548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, 0x0, 0x0) 2.638659145s ago: executing program 3 (id=10549): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2.417682601s ago: executing program 4 (id=10550): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x71}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/1, 0x1}], 0x1}, 0x4}], 0x2, 0x40008140, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c000) 2.305571025s ago: executing program 0 (id=10551): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x88c63, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.047873638s ago: executing program 4 (id=10552): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x41) r0 = socket$kcm(0x21, 0x2, 0x2) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) 1.861792444s ago: executing program 5 (id=10553): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x68d4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0xc000000) 1.776025769s ago: executing program 1 (id=10554): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.665016057s ago: executing program 3 (id=10555): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001300128009000100766c616e000000000c00028006000100000000", @ANYRES32=0x0, @ANYBLOB="517ae3ed05b64a82e2feb1e9abed48b64e35142263fd944164109056432dc9003cc7a51da952f0fde6feded311ed55"], 0x44}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x7f03) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd612, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 1.595459492s ago: executing program 5 (id=10556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000023, 0x0, 0xfffffffffffffffb}]}) 1.550308752s ago: executing program 1 (id=10557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r1, 0x402, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x7a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x638, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) listen(r2, 0xc4d) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 1.549659003s ago: executing program 4 (id=10558): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000700)=0xc6) 1.23761528s ago: executing program 5 (id=10559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 1.233362387s ago: executing program 0 (id=10560): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x1, &(0x7f0000000100)='F'}], 0x1}) 692.23626ms ago: executing program 1 (id=10561): r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents64(r2, 0x0, 0x22) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff010000000000000000000000000001000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e23000005b6fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000000fe8000000000000000000000000000aaff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005008f65a0e2b66020c26176df6717627222f460e6de8da4ee578a85851ff"], 0x190) 493.181002ms ago: executing program 1 (id=10562): sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 381.591021ms ago: executing program 5 (id=10563): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 83.68125ms ago: executing program 3 (id=10564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, 0x0, 0x0) 0s ago: executing program 5 (id=10565): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = fanotify_init(0x20, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = dup(r2) fanotify_mark(r1, 0x201, 0x20, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 431] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1602.047925][T22431] usb 1-1: setting power OFF [ 1602.062112][T22431] dvb-usb: bulk message failed: -22 (2/0) [ 1602.081971][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1602.110224][T22431] (NULL device *): no alternate interface [ 1602.196854][ T30] audit: type=1326 audit(1756867145.891:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3298 comm="syz.3.9461" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 1602.251415][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1602.334564][T22431] usb 1-1: USB disconnect, device number 121 [ 1602.911955][ T3332] sctp: [Deprecated]: syz.4.9475 (pid 3332) Use of int in maxseg socket option. [ 1602.911955][ T3332] Use struct sctp_assoc_value instead [ 1603.443992][ T3331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9474'. [ 1603.910221][T13524] hid_parser_main: 75 callbacks suppressed [ 1603.910243][T13524] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 1603.985102][T13524] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1605.003110][ T3395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9500'. [ 1605.325586][T13524] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1605.492539][T13524] usb 4-1: Using ep0 maxpacket: 16 [ 1605.511548][T13524] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1605.537165][T13524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.555943][T13524] usb 4-1: Product: syz [ 1605.560487][T13524] usb 4-1: Manufacturer: syz [ 1605.571993][T13524] usb 4-1: SerialNumber: syz [ 1605.604652][T13524] usb 4-1: config 0 descriptor?? [ 1606.020391][T13524] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1606.050080][T13524] usb 4-1: USB disconnect, device number 11 [ 1606.382257][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1606.541985][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1606.554454][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.584920][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1606.604979][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1606.624168][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.656461][ T9] usb 2-1: Product: syz [ 1606.660642][ T9] usb 2-1: Manufacturer: syz [ 1606.673595][ T9] usb 2-1: SerialNumber: syz [ 1606.688645][ T9] usb 2-1: config 0 descriptor?? [ 1606.714857][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1606.921797][ T9] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 1606.977067][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1607.072058][T13524] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1607.127833][ T9] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1607.165628][ T9] usb 2-1: USB disconnect, device number 16 [ 1607.285133][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.291463][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.298550][T13524] usb 4-1: Using ep0 maxpacket: 16 [ 1609.093003][ T6014] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1609.262183][ T6014] usb 1-1: Using ep0 maxpacket: 16 [ 1609.272803][ T6014] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1609.282895][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.475260][ T6014] usb 1-1: Product: syz [ 1609.488824][ T6014] usb 1-1: Manufacturer: syz [ 1609.529875][ T6014] usb 1-1: SerialNumber: syz [ 1609.589229][ T6014] usb 1-1: config 0 descriptor?? [ 1610.015492][T13524] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1610.026578][T13524] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1610.038436][ T6014] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1610.047648][T13524] usb 4-1: can't read configurations, error -71 [ 1610.071436][ T6014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1610.103717][ T6014] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1610.120688][ T6014] usb 1-1: media controller created [ 1610.120790][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9540'. [ 1610.168334][ T6014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1610.757195][ T6014] zl10353_read_register: readreg error (reg=127, ret==0) [ 1610.757218][ T3499] dtv5100: wlen = 0, aborting. [ 1610.778759][ T6014] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1610.800218][ T6014] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1610.840185][ T6014] usb 1-1: USB disconnect, device number 122 [ 1610.912558][T22431] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1610.932903][ T6014] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1611.077792][T22431] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1611.097292][T22431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.116705][T22431] usb 2-1: config 0 descriptor?? [ 1611.128761][T22431] cp210x 2-1:0.0: cp210x converter detected [ 1611.542247][T22431] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1611.645412][T22431] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1611.819857][T13438] usb 2-1: USB disconnect, device number 17 [ 1611.873660][T13438] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1611.960923][T13438] cp210x 2-1:0.0: device disconnected [ 1612.904256][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1612.955507][T13524] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1613.051985][ T24] usb 2-1: device descriptor read/64, error -71 [ 1613.096825][ T3573] sctp: [Deprecated]: syz.3.9564 (pid 3573) Use of int in maxseg socket option. [ 1613.096825][ T3573] Use struct sctp_assoc_value instead [ 1613.145244][T13524] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1613.155848][T13524] usb 6-1: config 0 has no interface number 0 [ 1613.176511][T13524] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1613.191626][T13524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.205761][T13524] usb 6-1: Product: syz [ 1613.210412][T13524] usb 6-1: Manufacturer: syz [ 1613.217195][T13524] usb 6-1: SerialNumber: syz [ 1613.248845][T13524] usb 6-1: config 0 descriptor?? [ 1613.312041][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1613.476580][ T24] usb 2-1: device descriptor read/64, error -71 [ 1613.530472][T13524] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1613.586344][T13524] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1613.602575][ T24] usb usb2-port1: attempt power cycle [ 1613.636096][T13524] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1613.672424][T13524] usb 6-1: media controller created [ 1613.740272][T13524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1613.931508][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.947070][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.960941][ T3587] netlink: 'syz.3.9569': attribute type 16 has an invalid length. [ 1613.972263][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1614.005485][ T24] usb 2-1: device descriptor read/8, error -71 [ 1614.197219][T13524] usb 6-1: USB disconnect, device number 19 [ 1614.252405][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1614.282017][ T24] usb 2-1: device descriptor read/8, error -71 [ 1614.392443][ T24] usb usb2-port1: unable to enumerate USB device [ 1614.463684][ T3601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9573'. [ 1614.595034][ T3604] sctp: [Deprecated]: syz.3.9575 (pid 3604) Use of int in maxseg socket option. [ 1614.595034][ T3604] Use struct sctp_assoc_value instead [ 1614.666248][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9576'. [ 1614.682008][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1614.852131][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1614.863195][ T24] usb 5-1: config 8 has an invalid interface number: 11 but max is 0 [ 1614.875383][ T24] usb 5-1: config 8 has no interface number 0 [ 1614.881516][ T24] usb 5-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1614.891422][ T24] usb 5-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1614.911795][ T24] usb 5-1: config 8 interface 11 has no altsetting 0 [ 1614.928679][ T24] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1614.939972][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.954972][ T24] usb 5-1: Product: ࡡ [ 1614.959157][ T24] usb 5-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1614.968226][ T24] usb 5-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1615.595419][ T3629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9585'. [ 1615.631181][ T3629] vlan2: entered promiscuous mode [ 1615.639311][ T3629] team0: entered promiscuous mode [ 1615.646647][ T3629] team_slave_0: entered promiscuous mode [ 1615.655561][ T3629] team_slave_1: entered promiscuous mode [ 1615.879088][ T3633] sctp: [Deprecated]: syz.5.9587 (pid 3633) Use of int in maxseg socket option. [ 1615.879088][ T3633] Use struct sctp_assoc_value instead [ 1616.356475][ T3631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9586'. [ 1616.422029][ T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1616.594071][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1616.627253][ T9] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 1616.649923][ T9] usb 1-1: config 252 has no interface number 0 [ 1616.669127][ T9] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1616.705618][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1616.715060][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.728861][ T9] usb 1-1: Product: syz [ 1616.733528][ T9] usb 1-1: Manufacturer: syz [ 1616.738281][ T9] usb 1-1: SerialNumber: syz [ 1616.767463][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1616.812017][T13438] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1616.905080][T22431] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1616.942164][T13438] usb 6-1: device descriptor read/64, error -71 [ 1616.959362][ T36] usb 1-1: Failed to submit usb control message: -71 [ 1616.959704][ T9] usb 1-1: USB disconnect, device number 123 [ 1616.971283][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 1616.981023][ T36] usb 1-1: unable to get target info from device [ 1616.987631][ T36] usb 1-1: could not get target info (-71) [ 1616.994187][ T36] usb 1-1: could not probe fw (-71) [ 1617.062343][T22431] usb 4-1: Using ep0 maxpacket: 16 [ 1617.074346][T22431] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1617.085462][T22431] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1617.094135][T22431] usb 4-1: Product: syz [ 1617.098320][T22431] usb 4-1: Manufacturer: syz [ 1617.102963][T22431] usb 4-1: SerialNumber: syz [ 1617.109485][T22431] usb 4-1: config 0 descriptor?? [ 1617.182802][T13438] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1617.212987][ T24] usb-storage 5-1:8.11: USB Mass Storage device detected [ 1617.234866][ T24] usb-storage 5-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1617.282322][ T24] usb 5-1: USB disconnect, device number 20 [ 1617.332009][T13438] usb 6-1: device descriptor read/64, error -71 [ 1617.354405][T22431] usb 4-1: USB disconnect, device number 14 [ 1617.442238][T13438] usb usb6-port1: attempt power cycle [ 1617.802045][T13438] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1618.131155][T13438] usb 6-1: device descriptor read/8, error -71 [ 1618.371984][T13438] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1618.412141][T13438] usb 6-1: device descriptor read/8, error -71 [ 1618.554666][T13438] usb usb6-port1: unable to enumerate USB device [ 1618.902529][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1619.072123][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1619.154608][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1619.163747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.171740][ T9] usb 4-1: Product: syz [ 1619.176832][ T9] usb 4-1: Manufacturer: syz [ 1619.181443][ T9] usb 4-1: SerialNumber: syz [ 1619.192967][ T9] usb 4-1: config 0 descriptor?? [ 1619.608723][ T5887] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.617192][ T9] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1619.672343][ T9] usb 4-1: USB disconnect, device number 15 [ 1619.717618][ T3714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9618'. [ 1620.292078][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1620.452064][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1620.459230][ T9] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1620.471451][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1620.480845][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.489308][ T9] usb 1-1: Product: syz [ 1620.493553][ T9] usb 1-1: Manufacturer: syz [ 1620.498144][ T9] usb 1-1: SerialNumber: syz [ 1620.504629][ T9] usb 1-1: config 0 descriptor?? [ 1620.514996][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1620.523139][ T9] usb 1-1: setting power ON [ 1620.527663][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1620.535321][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1620.545257][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1620.545578][T22431] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1620.553835][ T9] usb 1-1: media controller created [ 1620.576102][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1620.594628][ T9] usb 1-1: selecting invalid altsetting 6 [ 1620.600361][ T9] usb 1-1: digital interface selection failed (-22) [ 1620.607008][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1620.618069][ T9] usb 1-1: setting power OFF [ 1620.622741][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1620.628466][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1620.637801][ T9] (NULL device *): no alternate interface [ 1620.661051][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1620.681564][ T30] audit: type=1326 audit(1756867164.381:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.9620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7fc00000 [ 1620.720988][T22431] usb 4-1: device descriptor read/64, error -71 [ 1620.740878][ T24] usb 1-1: USB disconnect, device number 124 [ 1620.975373][T22431] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1621.134790][T22431] usb 4-1: device descriptor read/64, error -71 [ 1621.252393][T22431] usb usb4-port1: attempt power cycle [ 1621.622020][T22431] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1621.622132][T21060] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1621.664428][T22431] usb 4-1: device descriptor read/8, error -71 [ 1621.686384][ T3751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9633'. [ 1621.822125][ T3760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9637'. [ 1621.832546][T21060] usb 1-1: Using ep0 maxpacket: 16 [ 1621.849653][T21060] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1621.858988][T21060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.867564][T21060] usb 1-1: Product: syz [ 1621.871873][T21060] usb 1-1: Manufacturer: syz [ 1621.877279][T21060] usb 1-1: SerialNumber: syz [ 1621.887270][T21060] usb 1-1: config 0 descriptor?? [ 1621.902145][T22431] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1621.945997][T22431] usb 4-1: device descriptor read/8, error -71 [ 1622.006326][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1622.062237][T22431] usb usb4-port1: unable to enumerate USB device [ 1622.178003][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=a5.ed [ 1622.192596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.200823][ T9] usb 6-1: Product: syz [ 1622.205746][ T9] usb 6-1: Manufacturer: syz [ 1622.211396][ T9] usb 6-1: SerialNumber: syz [ 1622.217401][ T3777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9645'. [ 1622.231863][ T9] usb 6-1: config 0 descriptor?? [ 1622.236912][ T3777] vlan2: entered promiscuous mode [ 1622.251534][ T3777] team0: entered promiscuous mode [ 1622.255632][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1622.257266][ T3777] team_slave_0: entered promiscuous mode [ 1622.271509][ T3777] team_slave_1: entered promiscuous mode [ 1622.277997][ T9] ftdi_sio ttyUSB0: unknown device type: 0xa5ed [ 1622.304375][T21060] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1622.366165][T21060] usb 1-1: USB disconnect, device number 125 [ 1622.452141][ T3781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9646'. [ 1624.012072][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1624.202074][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1624.209044][ T24] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 1624.219456][ T24] usb 4-1: config 8 has no interface number 0 [ 1624.226052][ T24] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1624.237016][ T24] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1624.248088][ T24] usb 4-1: config 8 interface 11 has no altsetting 0 [ 1624.256942][ T24] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1624.266200][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.274248][ T24] usb 4-1: Product: ࡡ [ 1624.278405][ T24] usb 4-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1624.286633][ T24] usb 4-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1624.409438][ T30] audit: type=1326 audit(1756867168.101:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3806 comm="syz.1.9657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1624.440980][ T30] audit: type=1326 audit(1756867168.101:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3806 comm="syz.1.9657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1624.812637][ T9] usb 6-1: USB disconnect, device number 24 [ 1624.823573][ T9] ftdi_sio 6-1:0.0: device disconnected [ 1624.892322][T21060] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1625.042433][T21060] usb 1-1: device descriptor read/64, error -71 [ 1625.302025][T21060] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1625.480574][T21060] usb 1-1: device descriptor read/64, error -71 [ 1625.832454][T21060] usb usb1-port1: attempt power cycle [ 1626.182388][T21060] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1626.213110][T21060] usb 1-1: device descriptor read/8, error -71 [ 1626.239155][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9670'. [ 1626.362265][ T3850] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1626.482751][T21060] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1626.502940][T21060] usb 1-1: device descriptor read/8, error -71 [ 1626.553203][ T24] usb-storage 4-1:8.11: USB Mass Storage device detected [ 1626.606963][ T24] usb-storage 4-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1626.630684][T21060] usb usb1-port1: unable to enumerate USB device [ 1626.751793][ T24] usb 4-1: USB disconnect, device number 20 [ 1627.181408][ T3859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9673'. [ 1627.385641][ T3870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9678'. [ 1627.404269][ T3870] vlan2: entered promiscuous mode [ 1627.431305][ T30] audit: type=1326 audit(1756867171.121:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.481992][ T30] audit: type=1326 audit(1756867171.121:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.512813][ T30] audit: type=1326 audit(1756867171.121:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.539336][ T30] audit: type=1326 audit(1756867171.121:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.571548][T13524] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1627.585820][ T30] audit: type=1326 audit(1756867171.121:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.609446][ T30] audit: type=1326 audit(1756867171.121:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.650613][ T30] audit: type=1326 audit(1756867171.121:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.674561][ T3876] netlink: 'syz.5.9681': attribute type 9 has an invalid length. [ 1627.706625][ T30] audit: type=1326 audit(1756867171.131:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.752489][T13524] usb 5-1: Using ep0 maxpacket: 8 [ 1627.761453][T13524] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1627.777854][T13524] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1627.789876][ T30] audit: type=1326 audit(1756867171.131:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.813416][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.821415][T13524] usb 5-1: Product: syz [ 1627.837118][T13524] usb 5-1: Manufacturer: syz [ 1627.841731][T13524] usb 5-1: SerialNumber: syz [ 1627.849474][ T30] audit: type=1326 audit(1756867171.131:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3852 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1627.877306][T13524] usb 5-1: config 0 descriptor?? [ 1627.905282][T13524] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1627.922467][T13524] usb 5-1: setting power ON [ 1627.927020][T13524] dvb-usb: bulk message failed: -22 (2/0) [ 1627.948491][T13524] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1627.982714][T13524] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1627.991183][T13524] usb 5-1: media controller created [ 1628.052766][ T3886] sctp: [Deprecated]: syz.0.9685 (pid 3886) Use of int in maxseg socket option. [ 1628.052766][ T3886] Use struct sctp_assoc_value instead [ 1628.094835][T13524] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.105301][ T3866] dvb-usb: bulk message failed: -22 (3/0) [ 1628.113180][ T3866] dvb-usb: bulk message failed: -22 (3/0) [ 1628.130035][ T3866] dvb-usb: bulk message failed: -22 (3/0) [ 1628.307668][T13524] usb 5-1: selecting invalid altsetting 6 [ 1628.328487][T13524] usb 5-1: digital interface selection failed (-22) [ 1628.343966][T13524] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1628.383180][T13524] usb 5-1: setting power OFF [ 1628.387798][T13524] dvb-usb: bulk message failed: -22 (2/0) [ 1628.402050][T13524] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1628.411341][T13524] (NULL device *): no alternate interface [ 1628.462482][ T3899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9691'. [ 1628.533564][T13524] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1628.576728][T13524] usb 5-1: USB disconnect, device number 21 [ 1628.902098][ T5954] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1628.922120][ T3896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9689'. [ 1629.048695][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1629.271707][ T3916] sctp: [Deprecated]: syz.4.9698 (pid 3916) Use of int in maxseg socket option. [ 1629.271707][ T3916] Use struct sctp_assoc_value instead [ 1629.302051][ T5954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1629.442050][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1629.505210][ T3924] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1629.552408][ T5954] usb usb1-port1: attempt power cycle [ 1629.621696][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1629.739181][ T3928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9704'. [ 1629.912508][ T5954] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1630.164350][ T3947] sctp: [Deprecated]: syz.4.9712 (pid 3947) Use of int in maxseg socket option. [ 1630.164350][ T3947] Use struct sctp_assoc_value instead [ 1630.252005][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1630.492053][ T5954] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1630.532757][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1630.602041][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1630.654420][ T5954] usb usb1-port1: unable to enumerate USB device [ 1630.772067][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1630.784480][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1630.811850][ T24] usb 5-1: config 0 has no interface number 0 [ 1630.828725][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1630.852639][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1630.893469][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1630.941953][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1630.975465][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1631.001184][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.030528][ T24] usb 5-1: config 0 descriptor?? [ 1631.086788][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1631.909008][T12747] usb 5-1: USB disconnect, device number 22 [ 1631.922329][T12747] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1633.403165][T22431] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1633.579064][T22431] usb 2-1: Using ep0 maxpacket: 8 [ 1633.611645][T22431] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1633.635616][T22431] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1633.687894][T22431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.705643][T22431] usb 2-1: Product: syz [ 1633.714630][T22431] usb 2-1: Manufacturer: syz [ 1633.725682][T22431] usb 2-1: SerialNumber: syz [ 1633.772405][T22431] usb 2-1: config 0 descriptor?? [ 1633.805173][T22431] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1633.824050][T22431] usb 2-1: setting power ON [ 1633.828606][T22431] dvb-usb: bulk message failed: -22 (2/0) [ 1634.086557][T22431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1634.125338][T22431] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1634.157862][T22431] usb 2-1: media controller created [ 1634.258207][T22431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1634.696724][T22431] usb 2-1: selecting invalid altsetting 6 [ 1634.752050][T22431] usb 2-1: digital interface selection failed (-22) [ 1634.781965][T22431] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1634.803728][T22431] usb 2-1: setting power OFF [ 1634.808338][T22431] dvb-usb: bulk message failed: -22 (2/0) [ 1634.821946][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1634.851510][T22431] (NULL device *): no alternate interface [ 1634.942717][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1634.991427][T22431] usb 2-1: USB disconnect, device number 22 [ 1635.641741][ T4041] sctp: [Deprecated]: syz.3.9744 (pid 4041) Use of int in maxseg socket option. [ 1635.641741][ T4041] Use struct sctp_assoc_value instead [ 1635.642049][T22431] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1636.022571][T22431] usb 2-1: Using ep0 maxpacket: 8 [ 1636.054985][T22431] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1636.079548][T22431] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1636.090057][T22431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.112151][T22431] usb 2-1: Product: syz [ 1636.116329][T22431] usb 2-1: Manufacturer: syz [ 1636.120920][T22431] usb 2-1: SerialNumber: syz [ 1636.162701][T22431] usb 2-1: config 0 descriptor?? [ 1636.173536][T22431] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1636.185040][T22431] usb 2-1: setting power ON [ 1636.189558][T22431] dvb-usb: bulk message failed: -22 (2/0) [ 1636.206491][T22431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1636.223773][T22431] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1636.240203][T22431] usb 2-1: media controller created [ 1636.434281][ T4033] dvb-usb: bulk message failed: -22 (3/0) [ 1636.460716][T22431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1636.492119][ T4033] dvb-usb: bulk message failed: -22 (3/0) [ 1636.497915][ T4049] dvb-usb: bulk message failed: -22 (3/0) [ 1636.507682][T22431] usb 2-1: selecting invalid altsetting 6 [ 1636.531278][T22431] usb 2-1: digital interface selection failed (-22) [ 1636.548127][T22431] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1636.569166][T22431] usb 2-1: setting power OFF [ 1636.578578][T22431] dvb-usb: bulk message failed: -22 (2/0) [ 1636.594054][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1636.634601][T22431] (NULL device *): no alternate interface [ 1636.694525][T22431] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1636.744657][T22431] usb 2-1: USB disconnect, device number 23 [ 1637.158816][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1637.378900][T12747] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1637.702072][T12747] usb 4-1: Using ep0 maxpacket: 16 [ 1637.708728][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1637.721970][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1637.770619][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1637.781145][T12747] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 1637.789722][T12747] usb 4-1: config 8 has no interface number 0 [ 1637.832455][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1637.845445][T12747] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1637.871983][T12747] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1637.883091][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1637.916177][T12747] usb 4-1: config 8 interface 11 has no altsetting 0 [ 1637.988903][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.054191][T12747] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1638.071421][T12747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.085121][ T24] usb 6-1: config 0 descriptor?? [ 1638.096649][T12747] usb 4-1: Product: ࡡ [ 1638.100912][T12747] usb 4-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1638.109175][T12747] usb 4-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1638.185757][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9758'. [ 1638.346901][ T4082] vlan2: entered promiscuous mode [ 1638.623470][ T24] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1639.178935][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9763'. [ 1639.458689][ T5954] usb 6-1: USB disconnect, device number 25 [ 1639.884938][T12747] usb-storage 4-1:8.11: USB Mass Storage device detected [ 1639.932720][T12747] usb-storage 4-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1639.976740][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9767'. [ 1640.039977][T12747] usb 4-1: USB disconnect, device number 21 [ 1640.047005][ T4110] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1640.214041][ T4117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1642.333966][ T4156] sctp: [Deprecated]: syz.0.9785 (pid 4156) Use of int in maxseg socket option. [ 1642.333966][ T4156] Use struct sctp_assoc_value instead [ 1643.252334][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1643.252354][ T30] audit: type=1326 audit(1756867186.861:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.1.9784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1643.371506][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9787'. [ 1643.567694][ T4178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9791'. [ 1644.606361][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1645.046965][ T30] audit: type=1326 audit(1756867188.731:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4194 comm="syz.1.9799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1645.420698][ T4230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9813'. [ 1645.825514][ T4235] sctp: [Deprecated]: syz.5.9815 (pid 4235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1645.825514][ T4235] Use struct sctp_sack_info instead [ 1646.707329][ T4246] syz.4.9811 (4246): drop_caches: 2 [ 1649.303999][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9840'. [ 1649.380805][ T4312] IPVS: Unknown mcast interface: dvmrp0 [ 1650.119403][ T4326] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1650.156309][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.772238][ T5954] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1651.422221][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1651.435046][ T5954] usb 1-1: config 8 has an invalid interface number: 11 but max is 0 [ 1651.452257][ T5954] usb 1-1: config 8 has no interface number 0 [ 1651.458376][ T5954] usb 1-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1651.491975][ T5954] usb 1-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1651.525573][ T5954] usb 1-1: config 8 interface 11 has no altsetting 0 [ 1651.548360][ T5954] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1651.557887][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.581593][ T5954] usb 1-1: Product: ࡡ [ 1651.612056][ T5954] usb 1-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1651.638411][ T5954] usb 1-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1652.687572][ T4354] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9854'. [ 1653.245733][T21060] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1653.443140][ T5954] usb-storage 1-1:8.11: USB Mass Storage device detected [ 1653.469217][ T5954] usb-storage 1-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1653.477401][T21060] usb 2-1: device descriptor read/64, error -71 [ 1653.643957][ T5954] usb 1-1: USB disconnect, device number 8 [ 1653.732101][T21060] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1653.874196][T21060] usb 2-1: device descriptor read/64, error -71 [ 1653.982228][T21060] usb usb2-port1: attempt power cycle [ 1654.253280][ T4390] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9867'. [ 1654.342169][T21060] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1654.382753][T21060] usb 2-1: device descriptor read/8, error -71 [ 1654.523814][T13438] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1654.652016][T21060] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1654.698896][T13438] usb 6-1: Using ep0 maxpacket: 8 [ 1654.740353][T13438] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1654.752831][T21060] usb 2-1: device descriptor read/8, error -71 [ 1654.779054][T13438] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1654.852444][T13438] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1654.872482][T21060] usb usb2-port1: unable to enumerate USB device [ 1654.886373][T13438] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1654.974778][T13438] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1654.988079][T13438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.052367][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1655.219964][T13438] usb 6-1: usb_control_msg returned -71 [ 1655.226380][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1655.236021][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1655.256753][T13438] usbtmc 6-1:16.0: can't read capabilities [ 1655.280356][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1655.321340][T13438] usb 6-1: USB disconnect, device number 26 [ 1655.342288][ T24] usb 4-1: config 1 has no interface number 1 [ 1655.397000][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1655.431217][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1655.474119][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1655.483804][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.492321][ T24] usb 4-1: Product: syz [ 1655.496637][ T24] usb 4-1: Manufacturer: syz [ 1655.501238][ T24] usb 4-1: SerialNumber: syz [ 1655.750044][ T24] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1655.805598][ T24] usb 4-1: USB disconnect, device number 22 [ 1656.134635][ T4431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9885'. [ 1656.263006][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9887'. [ 1656.642015][ T4453] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1656.656444][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.665593][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.781614][T21060] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1656.942184][T21060] usb 5-1: device descriptor read/64, error -71 [ 1657.212143][T21060] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1657.352271][T21060] usb 5-1: device descriptor read/64, error -71 [ 1657.475418][T21060] usb usb5-port1: attempt power cycle [ 1657.918364][T21060] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1658.323635][T21060] usb 5-1: device descriptor read/8, error -71 [ 1658.466709][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1658.530880][ T4488] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1658.593970][T21060] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1658.654551][T21060] usb 5-1: device descriptor read/8, error -71 [ 1658.780139][T21060] usb usb5-port1: unable to enumerate USB device [ 1659.249368][ T4505] openvswitch: netlink: Flow key attr not present in new flow. [ 1660.232656][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9919'. [ 1660.922146][T13524] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1661.072158][T13524] usb 5-1: Using ep0 maxpacket: 16 [ 1661.095673][T13524] usb 5-1: config 8 has an invalid interface number: 11 but max is 0 [ 1661.108503][T13524] usb 5-1: config 8 has no interface number 0 [ 1661.130346][ T5887] Bluetooth: hci3: command 0x0405 tx timeout [ 1661.141824][T13524] usb 5-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1661.157223][T13524] usb 5-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1661.180017][T13524] usb 5-1: config 8 interface 11 has no altsetting 0 [ 1661.195361][T13524] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1661.207411][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.221404][T13524] usb 5-1: Product: ࡡ [ 1661.228914][T13524] usb 5-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1661.244966][T13524] usb 5-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1662.084881][ T4537] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1662.415989][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9927'. [ 1662.453997][ T4545] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9927'. [ 1662.463232][ T4545] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9927'. [ 1662.732786][ T5954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1663.182104][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1663.189305][ T5954] usb 4-1: no configurations [ 1663.194568][ T5954] usb 4-1: can't read configurations, error -22 [ 1663.352249][ T5954] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1663.475723][T13524] usb-storage 5-1:8.11: USB Mass Storage device detected [ 1663.532095][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1663.554009][ T5954] usb 4-1: no configurations [ 1663.790015][ T5954] usb 4-1: can't read configurations, error -22 [ 1663.809745][T13524] usb-storage 5-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1663.843002][ T5954] usb usb4-port1: attempt power cycle [ 1663.959382][T13524] usb 5-1: USB disconnect, device number 27 [ 1664.130774][ T4575] syzkaller0: entered promiscuous mode [ 1664.152256][ T4575] syzkaller0: entered allmulticast mode [ 1664.181403][ T4577] tipc: Started in network mode [ 1664.189646][ T4577] tipc: Node identity 16c617d44e8a, cluster identity 4711 [ 1664.202385][ T5954] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1664.206451][ T4577] tipc: Enabled bearer , priority 0 [ 1664.244326][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1664.250337][ T5954] usb 4-1: no configurations [ 1664.262032][ T5954] usb 4-1: can't read configurations, error -22 [ 1664.281577][ T4575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1664.322257][T13524] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1664.351671][ T4577] tipc: Resetting bearer [ 1664.372228][ T4574] tipc: Resetting bearer [ 1664.410248][ T4574] tipc: Disabling bearer [ 1664.412392][ T5954] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1664.476509][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1664.494112][ T5954] usb 4-1: no configurations [ 1664.501978][ T5954] usb 4-1: can't read configurations, error -22 [ 1664.509030][ T5954] usb usb4-port1: unable to enumerate USB device [ 1664.522465][T13524] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.552072][T13524] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1664.592202][T13524] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1664.621704][T13524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.676237][T13524] usb 5-1: config 0 descriptor?? [ 1664.704733][T13524] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1664.931578][ T4593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9945'. [ 1666.743032][ T4631] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1666.809109][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1666.829493][T13438] usb 5-1: USB disconnect, device number 28 [ 1666.862007][T13524] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1667.011988][T13524] usb 6-1: Using ep0 maxpacket: 32 [ 1667.022806][T13524] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1667.031157][T13524] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1667.040262][T13524] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1667.049683][T13524] usb 6-1: config 1 has no interface number 0 [ 1667.059241][T13524] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1667.070500][T13524] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1667.083776][T13524] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1667.094436][T13524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.152646][ T5954] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1667.189418][ T30] audit: type=1326 audit(1756867210.811:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.9952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1667.253636][T13524] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1667.326278][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1667.340845][ T5954] usb 2-1: no configurations [ 1667.348399][ T5954] usb 2-1: can't read configurations, error -22 [ 1667.500512][ T5954] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1667.593320][T13438] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1667.605263][T13524] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1667.692220][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1667.702396][ T5954] usb 2-1: no configurations [ 1667.707179][ T5954] usb 2-1: can't read configurations, error -22 [ 1667.722495][ T5954] usb usb2-port1: attempt power cycle [ 1667.752082][T13438] usb 5-1: Using ep0 maxpacket: 32 [ 1667.764100][T13438] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1667.772988][T13438] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1667.781594][T13438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1667.823565][T13438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1667.841979][T13438] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1667.872037][T13438] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1667.895255][T13438] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1667.921989][T13438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.947112][T13438] usb 5-1: config 0 descriptor?? [ 1668.035702][ T24] usb 6-1: USB disconnect, device number 27 [ 1668.043918][ T24] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1668.073096][ T5954] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1668.114467][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1668.120267][ T5954] usb 2-1: no configurations [ 1668.129793][ T5954] usb 2-1: can't read configurations, error -22 [ 1668.180929][T13438] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1668.248991][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9967'. [ 1668.262199][ T5954] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1668.292771][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1668.298645][ T5954] usb 2-1: no configurations [ 1668.304199][ T5954] usb 2-1: can't read configurations, error -22 [ 1668.310942][ T5954] usb usb2-port1: unable to enumerate USB device [ 1668.401259][ T5954] usb 5-1: USB disconnect, device number 29 [ 1668.426706][ T5954] usblp0: removed [ 1668.727461][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.734059][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.371833][ T4664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1669.386893][ T4664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1669.394072][ T6014] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1669.405700][ T4664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1669.426670][ T4664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1669.435433][ T4664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.463176][T23973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.564839][T23973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.575853][ T6014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.587764][ T6014] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1669.606406][ T6014] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1669.635951][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.662968][ T6014] usb 5-1: config 0 descriptor?? [ 1669.683845][ T6014] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1669.720670][T23973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.808638][T23973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.132509][ T6014] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1670.292206][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1670.318104][ T6014] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 1670.335721][ T6014] usb 4-1: config 8 has no interface number 0 [ 1670.344282][ T6014] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1670.365784][ T6014] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1670.390043][ T6014] usb 4-1: config 8 interface 11 has no altsetting 0 [ 1670.421657][ T6014] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1670.446651][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.454984][ T6014] usb 4-1: Product: ࡡ [ 1670.476408][ T6014] usb 4-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1670.486668][ T6014] usb 4-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1670.717921][T23973] bridge0 (unregistering): left allmulticast mode [ 1671.050001][T23973] bond0 (unregistering): Released all slaves [ 1671.185038][ T5954] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1671.222564][T23973] bond1 (unregistering): Released all slaves [ 1671.342317][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1671.352810][ T5954] usb 2-1: no configurations [ 1671.357440][ T5954] usb 2-1: can't read configurations, error -22 [ 1671.396577][T23973] bond2 (unregistering): Released all slaves [ 1671.521079][ T5954] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1671.536884][ T4664] Bluetooth: hci0: command tx timeout [ 1671.600129][T23973] bond3 (unregistering): Released all slaves [ 1671.744843][T23973] bond4 (unregistering): Released all slaves [ 1671.792225][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1671.802583][ T5954] usb 2-1: no configurations [ 1671.807239][ T5954] usb 2-1: can't read configurations, error -22 [ 1671.822453][ T5954] usb usb2-port1: attempt power cycle [ 1671.957158][T23973] bond5 (unregistering): Released all slaves [ 1672.077542][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9984'. [ 1672.124173][T23973] bond6 (unregistering): Released all slaves [ 1672.134506][T13438] usb 5-1: USB disconnect, device number 30 [ 1672.162298][ T5954] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1672.180824][ T4667] chnl_net:caif_netlink_parms(): no params data found [ 1672.235156][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1672.237908][ T4717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9984'. [ 1672.243526][ T5954] usb 2-1: no configurations [ 1672.263679][ T5954] usb 2-1: can't read configurations, error -22 [ 1672.280739][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9985'. [ 1672.302494][T23973] tipc: Left network mode [ 1672.372355][T13524] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1672.422616][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1672.456699][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1672.466220][ T5954] usb 2-1: no configurations [ 1672.477554][ T5954] usb 2-1: can't read configurations, error -22 [ 1672.516187][ T5954] usb usb2-port1: unable to enumerate USB device [ 1672.526043][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.543527][T13524] usb 1-1: Using ep0 maxpacket: 32 [ 1672.543956][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.550697][T13524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1672.560328][ T4667] bridge_slave_0: entered allmulticast mode [ 1672.585410][T13524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1672.592984][ T4667] bridge_slave_0: entered promiscuous mode [ 1672.628811][T13524] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1672.641581][T13524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.658621][T13524] usb 1-1: Product: syz [ 1672.663871][T13524] usb 1-1: Manufacturer: syz [ 1672.668580][T13524] usb 1-1: SerialNumber: syz [ 1672.687407][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.688365][T13524] usb 1-1: config 0 descriptor?? [ 1672.710152][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.722307][ T6014] usb-storage 4-1:8.11: USB Mass Storage device detected [ 1672.742233][ T4667] bridge_slave_1: entered allmulticast mode [ 1672.749930][ T4667] bridge_slave_1: entered promiscuous mode [ 1672.770376][T13524] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1672.824327][ T6014] usb-storage 4-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1672.868226][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.940033][T23973] hsr_slave_0: left promiscuous mode [ 1672.950358][ T6014] usb 4-1: USB disconnect, device number 27 [ 1672.962384][T23973] hsr_slave_1: left promiscuous mode [ 1672.991072][T23969] usb 1-1: Failed to submit usb control message: -71 [ 1672.991385][ T24] usb 1-1: USB disconnect, device number 9 [ 1673.008633][T23969] usb 1-1: unable to send the bmi data to the device: -71 [ 1673.025984][T23969] usb 1-1: unable to get target info from device [ 1673.050888][T23969] usb 1-1: could not get target info (-71) [ 1673.053415][T23973] veth1_macvtap: left promiscuous mode [ 1673.067342][T23969] usb 1-1: could not probe fw (-71) [ 1673.067590][T23973] veth0_macvtap: left promiscuous mode [ 1673.078392][T23973] veth1_vlan: left promiscuous mode [ 1673.085311][T23973] veth0_vlan: left promiscuous mode [ 1673.262011][ T6014] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1673.436725][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1673.446376][ T6014] usb 4-1: no configurations [ 1673.451013][ T6014] usb 4-1: can't read configurations, error -22 [ 1673.593696][ T6014] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1673.602073][ T4664] Bluetooth: hci0: command tx timeout [ 1673.762805][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1673.770362][ T6014] usb 4-1: no configurations [ 1673.777329][ T6014] usb 4-1: can't read configurations, error -22 [ 1673.791490][ T6014] usb usb4-port1: attempt power cycle [ 1674.132728][ T6014] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1674.152623][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1674.158556][ T6014] usb 4-1: no configurations [ 1674.167973][ T6014] usb 4-1: can't read configurations, error -22 [ 1674.283569][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.302263][ T6014] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1674.326258][ T4766] tipc: Started in network mode [ 1674.331472][ T4766] tipc: Node identity 4, cluster identity 4711 [ 1674.337999][ T4766] tipc: Node number set to 4 [ 1674.343719][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1674.351496][ T6014] usb 4-1: no configurations [ 1674.365303][ T6014] usb 4-1: can't read configurations, error -22 [ 1674.375925][ T6014] usb usb4-port1: unable to enumerate USB device [ 1674.387870][ T4667] team0: Port device team_slave_0 added [ 1674.404248][ T4667] team0: Port device team_slave_1 added [ 1674.543879][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.550946][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.606782][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.619891][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.633670][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.666136][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.732254][T12747] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1674.742575][ T6014] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1674.752091][ T4667] hsr_slave_0: entered promiscuous mode [ 1674.758655][ T4667] hsr_slave_1: entered promiscuous mode [ 1674.778990][ T4667] debugfs: 'hsr0' already exists in 'hsr' [ 1674.788606][ T4667] Cannot create hsr debugfs directory [ 1674.885111][T12747] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1674.905383][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 1674.926344][ T6014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1674.928237][T12747] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1674.935681][ T6014] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1674.972042][ T6014] usb 5-1: config 13 has no interface number 0 [ 1674.978645][T12747] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1674.988100][ T6014] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1674.998591][T12747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.008599][ T6014] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1675.030070][T12747] usb 2-1: config 0 descriptor?? [ 1675.031322][ T6014] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1675.047040][T12747] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1675.061589][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.075390][ T6014] usb 5-1: Product: syz [ 1675.079564][ T6014] usb 5-1: Manufacturer: syz [ 1675.101769][ T6014] usb 5-1: SerialNumber: syz [ 1675.123406][ T4772] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1675.352098][ T6014] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1675.371451][ T6014] usb 5-1: MIDIStreaming interface descriptor not found [ 1675.474354][ T6014] usb 5-1: USB disconnect, device number 31 [ 1675.682566][ T4664] Bluetooth: hci0: command tx timeout [ 1675.747117][ T4667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1675.761232][ T4667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1675.775383][ T4667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1675.794538][ T4667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1675.932214][ T5954] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1676.026034][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.105468][ T4667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.112419][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1676.124598][ T5954] usb 1-1: no configurations [ 1676.138084][ T5954] usb 1-1: can't read configurations, error -22 [ 1676.154288][ T4824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10005'. [ 1676.169221][T23969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.176389][T23969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.191226][T23969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.198398][T23969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.293192][ T5954] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1676.391443][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.462143][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1676.469822][ T5954] usb 1-1: no configurations [ 1676.480135][ T5954] usb 1-1: can't read configurations, error -22 [ 1676.486097][ T4667] veth0_vlan: entered promiscuous mode [ 1676.499588][ T5954] usb usb1-port1: attempt power cycle [ 1676.543315][ T4667] veth1_vlan: entered promiscuous mode [ 1676.610301][ T4667] veth0_macvtap: entered promiscuous mode [ 1676.630734][ T4667] veth1_macvtap: entered promiscuous mode [ 1676.669696][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.692773][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.713423][T23973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.741109][T23973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.759007][T23973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.789708][T23973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.862571][ T5954] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1676.894988][T23969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.898709][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1676.918434][ T5954] usb 1-1: no configurations [ 1676.919872][T23969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.938372][ T5954] usb 1-1: can't read configurations, error -22 [ 1676.961601][T23969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.979748][T23969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.084626][ T5954] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1677.100341][ T4852] vivid-000: disconnect [ 1677.109693][ T4849] vivid-000: reconnect [ 1677.122736][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1677.128836][ T5954] usb 1-1: no configurations [ 1677.134237][ T5954] usb 1-1: can't read configurations, error -22 [ 1677.141205][ T5954] usb usb1-port1: unable to enumerate USB device [ 1677.255738][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10012'. [ 1677.312315][ T4728] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1677.482366][ T4728] usb 4-1: Using ep0 maxpacket: 16 [ 1677.499324][ T5954] usb 2-1: USB disconnect, device number 36 [ 1677.521118][ T4728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.556982][ T4728] usb 4-1: config 0 has no interfaces? [ 1677.581180][ T4728] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1677.611591][ T4728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.640843][ T4728] usb 4-1: Product: syz [ 1677.658179][ T4728] usb 4-1: Manufacturer: syz [ 1677.672329][ T4728] usb 4-1: SerialNumber: syz [ 1677.694903][ T4728] usb 4-1: config 0 descriptor?? [ 1677.704766][ T4873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10016'. [ 1677.762988][ T4664] Bluetooth: hci0: command tx timeout [ 1680.288868][ T24] usb 4-1: USB disconnect, device number 32 [ 1681.055766][T31004] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.010782][ T4951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10030'. [ 1682.275091][ T4956] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10038'. [ 1682.382161][T13438] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1682.562181][T13438] usb 6-1: Using ep0 maxpacket: 8 [ 1682.569867][T13438] usb 6-1: no configurations [ 1682.577170][T13438] usb 6-1: can't read configurations, error -22 [ 1682.722979][T13438] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1682.732027][ T4728] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1682.892392][ T4728] usb 5-1: Using ep0 maxpacket: 16 [ 1682.893283][T13438] usb 6-1: Using ep0 maxpacket: 8 [ 1682.912802][T13438] usb 6-1: no configurations [ 1682.917548][T13438] usb 6-1: can't read configurations, error -22 [ 1682.932808][T13438] usb usb6-port1: attempt power cycle [ 1683.000975][ T4728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.011211][ T4728] usb 5-1: config 0 has no interfaces? [ 1683.024889][ T4728] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1683.034399][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.060990][ T4728] usb 5-1: Product: syz [ 1683.071080][ T4728] usb 5-1: Manufacturer: syz [ 1683.075970][ T4728] usb 5-1: SerialNumber: syz [ 1683.093035][ T4728] usb 5-1: config 0 descriptor?? [ 1683.127705][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10046'. [ 1683.292166][T13438] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1683.312828][T13438] usb 6-1: Using ep0 maxpacket: 8 [ 1683.318966][T13438] usb 6-1: no configurations [ 1683.326938][T13438] usb 6-1: can't read configurations, error -22 [ 1683.327079][ T4728] IPVS: starting estimator thread 0... [ 1683.432196][ T4979] IPVS: using max 28 ests per chain, 67200 per kthread [ 1683.482474][T13438] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1683.515374][T13438] usb 6-1: Using ep0 maxpacket: 8 [ 1683.521248][T13438] usb 6-1: no configurations [ 1683.533318][T13438] usb 6-1: can't read configurations, error -22 [ 1683.545271][T13438] usb usb6-port1: unable to enumerate USB device [ 1683.720660][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10053'. [ 1684.922297][T12747] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1685.103432][T12747] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1685.112124][T12747] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1685.123479][T12747] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1685.133272][T12747] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 1685.157211][T12747] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1685.169953][T12747] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1685.178851][T12747] usb 1-1: Product: syz [ 1685.183401][T12747] usb 1-1: Manufacturer: syz [ 1685.204034][T12747] cdc_wdm 1-1:1.0: skipping garbage [ 1685.213785][T12747] cdc_wdm 1-1:1.0: skipping garbage [ 1685.223551][T12747] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1685.229609][T12747] cdc_wdm 1-1:1.0: Unknown control protocol [ 1685.468115][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.474954][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.481382][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.487989][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.494496][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.501096][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.507505][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.514112][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.520406][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.527010][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.533380][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.539982][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.546289][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.552894][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.559183][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1685.565789][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1685.571860][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1685.580621][ T4728] usb 1-1: USB disconnect, device number 14 [ 1685.694341][ T24] usb 5-1: USB disconnect, device number 32 [ 1686.599997][ T30] audit: type=1326 audit(1756867230.291:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1686.622030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.662039][ T30] audit: type=1326 audit(1756867230.291:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1686.732071][ T30] audit: type=1326 audit(1756867230.331:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1686.754082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.792892][ T30] audit: type=1326 audit(1756867230.331:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1686.879794][ T30] audit: type=1326 audit(1756867230.331:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1686.977720][ T30] audit: type=1326 audit(1756867230.331:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1687.001680][ T5056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10076'. [ 1687.037741][ T30] audit: type=1326 audit(1756867230.551:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1687.116839][ T30] audit: type=1326 audit(1756867230.551:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1687.138855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.155364][ T30] audit: type=1326 audit(1756867230.571:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1687.217534][ T30] audit: type=1326 audit(1756867230.571:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.10073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1687.239526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1687.260928][ T5065] netlink: 'syz.5.10078': attribute type 6 has an invalid length. [ 1687.270427][ T5065] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10078'. [ 1687.291660][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10080'. [ 1687.456578][ T5078] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1687.492038][ T4728] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1687.663304][ T4728] usb 5-1: Using ep0 maxpacket: 16 [ 1687.676816][ T4728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.689896][ T4728] usb 5-1: config 0 has no interfaces? [ 1687.701707][ T4728] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1687.716488][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.731105][ T4728] usb 5-1: Product: syz [ 1687.735646][ T4728] usb 5-1: Manufacturer: syz [ 1687.740375][ T4728] usb 5-1: SerialNumber: syz [ 1687.763496][ T4728] usb 5-1: config 0 descriptor?? [ 1687.852122][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1688.034003][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.068078][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.084216][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1688.099179][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1688.113400][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.149690][ T24] usb 2-1: config 0 descriptor?? [ 1688.164139][ T4728] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1688.260654][ T5095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10093'. [ 1688.322137][ T4728] usb 1-1: Using ep0 maxpacket: 16 [ 1688.331408][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1688.334842][ T4728] usb 1-1: config 8 has an invalid interface number: 11 but max is 0 [ 1688.355386][ T4728] usb 1-1: config 8 has no interface number 0 [ 1688.361590][ T4728] usb 1-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1688.373439][ T4728] usb 1-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1688.384766][ T4728] usb 1-1: config 8 interface 11 has no altsetting 0 [ 1688.394338][ T4728] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1688.404896][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.413788][ T4728] usb 1-1: Product: ࡡ [ 1688.418030][ T4728] usb 1-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1688.426498][ T4728] usb 1-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1688.444772][ T4664] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 1688.451629][ T4664] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 1688.578960][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.586737][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.594540][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.601987][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.609400][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.617155][ T24] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 1688.629418][ T24] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1688.752563][ T5954] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1688.848353][ T24] usb 2-1: USB disconnect, device number 37 [ 1688.922300][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1688.929074][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.939535][ T5954] usb 4-1: config 0 has no interfaces? [ 1688.947746][ T5954] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1688.956936][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1688.965139][ T5954] usb 4-1: Product: syz [ 1688.969487][ T5954] usb 4-1: Manufacturer: syz [ 1688.974157][ T5954] usb 4-1: SerialNumber: syz [ 1688.981195][ T5954] usb 4-1: config 0 descriptor?? [ 1689.196443][ T5954] usb 4-1: USB disconnect, device number 33 [ 1689.519312][ T5120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1689.672330][T12747] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1689.833967][T12747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1689.853031][T12747] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1689.865336][T12747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.876490][T12747] usb 2-1: config 0 descriptor?? [ 1689.995264][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1690.167286][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1690.188997][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.212007][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.229938][ T24] usb 4-1: config 0 descriptor?? [ 1690.247259][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1690.287518][ T24] usb 5-1: USB disconnect, device number 33 [ 1690.331629][T12747] uclogic 0003:5543:0522.0064: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 1690.503760][ T5954] usb 2-1: USB disconnect, device number 38 [ 1690.967992][ T4728] usb-storage 1-1:8.11: USB Mass Storage device detected [ 1690.972781][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1691.004000][ T4728] usb-storage 1-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1691.111447][ T4728] usb 1-1: USB disconnect, device number 15 [ 1691.149016][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.193630][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1691.206446][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.255417][ T24] usb 5-1: config 0 descriptor?? [ 1691.693451][ T24] playstation 0003:054C:0BA0.0065: unknown main item tag 0x0 [ 1691.710396][ T24] playstation 0003:054C:0BA0.0065: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 1691.944793][ T24] playstation 0003:054C:0BA0.0065: Failed to retrieve feature with reportID 18: -71 [ 1691.962828][ T24] playstation 0003:054C:0BA0.0065: Failed to retrieve DualShock4 pairing info: -71 [ 1691.980262][ T24] playstation 0003:054C:0BA0.0065: Failed to get MAC address from DualShock4 [ 1691.989615][ T24] playstation 0003:054C:0BA0.0065: Failed to create dualshock4. [ 1692.054911][ T24] playstation 0003:054C:0BA0.0065: probe with driver playstation failed with error -71 [ 1692.075521][ T24] usb 5-1: USB disconnect, device number 34 [ 1692.676785][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10116'. [ 1692.772697][ T6014] usb 4-1: USB disconnect, device number 34 [ 1692.852654][T12747] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1693.002124][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1693.022115][T12747] usb 2-1: Using ep0 maxpacket: 16 [ 1693.201395][T12747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.216018][T12747] usb 2-1: config 0 has no interfaces? [ 1693.239143][T12747] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1693.248381][T12747] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1693.257119][T12747] usb 2-1: Product: syz [ 1693.265684][T12747] usb 2-1: Manufacturer: syz [ 1693.270311][T12747] usb 2-1: SerialNumber: syz [ 1693.279354][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1693.298539][ T24] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1693.307550][T12747] usb 2-1: config 0 descriptor?? [ 1693.316918][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.329409][ T24] usb 5-1: config 220 has no interface number 2 [ 1693.339456][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1693.352028][ T6014] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1693.356473][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1693.368167][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1693.378872][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1693.389441][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1693.408303][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.417284][ T24] usb 5-1: Product: syz [ 1693.421455][ T24] usb 5-1: Manufacturer: syz [ 1693.429248][ T24] usb 5-1: SerialNumber: syz [ 1693.512047][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1693.519117][ T6014] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 1693.531686][ T6014] usb 4-1: config 8 has no interface number 0 [ 1693.539276][ T6014] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1693.566494][ T4728] usb 2-1: USB disconnect, device number 39 [ 1693.588373][ T6014] usb 4-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1693.614488][ T6014] usb 4-1: config 8 interface 11 has no altsetting 0 [ 1693.626292][ T6014] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1693.636239][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.645772][ T6014] usb 4-1: Product: ࡡ [ 1693.653268][ T6014] usb 4-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1693.667506][ T6014] usb 4-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1693.704095][ T24] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1693.710471][ T24] usb 5-1: No valid video chain found. [ 1693.735193][ T24] usb 5-1: selecting invalid altsetting 0 [ 1693.768456][ T24] usb 5-1: selecting invalid altsetting 0 [ 1693.789026][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1693.829391][ T24] usb 5-1: USB disconnect, device number 35 [ 1694.712002][ T5954] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1694.864759][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.915065][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.938163][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1695.265309][ T5954] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1695.294434][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.323863][ T5954] usb 2-1: config 0 descriptor?? [ 1695.779054][ T5954] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1695.961621][ T5954] usb 2-1: USB disconnect, device number 40 [ 1695.990099][ T6014] usb-storage 4-1:8.11: USB Mass Storage device detected [ 1696.039930][ T6014] usb-storage 4-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1696.154065][ T6014] usb 4-1: USB disconnect, device number 35 [ 1696.406304][ T4664] Bluetooth: hci3: command 0x0405 tx timeout [ 1696.442110][T13438] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1696.482213][ T6014] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1696.632541][T13438] usb 1-1: Using ep0 maxpacket: 32 [ 1696.642020][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 1696.657564][ T6014] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.678327][T13438] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 1696.684586][ T6014] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1696.717770][T13438] usb 1-1: config 0 has no interface number 0 [ 1696.728209][ T6014] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1696.740214][T13438] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1696.763104][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1696.781650][T13438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.791494][ T6014] usb 4-1: Product: syz [ 1696.811744][ T6014] usb 4-1: Manufacturer: syz [ 1696.815702][T13438] usb 1-1: Product: syz [ 1696.821842][ T6014] usb 4-1: SerialNumber: syz [ 1696.832762][T13438] usb 1-1: Manufacturer: syz [ 1696.840421][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10140'. [ 1696.853312][ T6014] usb 4-1: config 0 descriptor?? [ 1696.860082][T13438] usb 1-1: SerialNumber: syz [ 1696.887496][T13438] usb 1-1: config 0 descriptor?? [ 1697.110838][T13438] snd-usb-6fire 1-1:0.111: unknown device firmware state received from device: [ 1697.139904][T13438] 67 eb 04 ea 69 e8 4d 89 [ 1697.140970][ T5954] usb 4-1: USB disconnect, device number 36 [ 1697.151016][T13438] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 1697.321438][ T5954] usb 1-1: USB disconnect, device number 16 [ 1698.322088][ T5954] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1698.683067][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 1698.889073][ T5954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.899739][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.007823][ T5954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.037625][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.046411][ T5954] usb 6-1: Product: syz [ 1699.050897][ T5954] usb 6-1: Manufacturer: syz [ 1699.055588][ T5954] usb 6-1: SerialNumber: syz [ 1699.337016][ T5954] usb 6-1: 0:2 : does not exist [ 1699.350666][ T5954] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1699.562250][ T5954] usb 6-1: USB disconnect, device number 32 [ 1699.690503][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.924002][T13524] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1702.954211][T13524] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1703.154562][ T5352] fido_id[5352]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1704.536867][ T5381] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10187'. [ 1704.944638][ T5390] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1706.682950][ T5954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1706.832010][ T4728] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1706.839659][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1706.880010][ T5954] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1706.891240][ T5954] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1706.914073][ T5954] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1706.923341][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.932630][ T5954] usb 1-1: Product: syz [ 1706.936913][ T5954] usb 1-1: Manufacturer: syz [ 1706.943207][ T5954] usb 1-1: SerialNumber: syz [ 1706.951825][ T5954] usb 1-1: config 0 descriptor?? [ 1707.022736][ T4728] usb 2-1: Using ep0 maxpacket: 16 [ 1707.036559][ T4728] usb 2-1: config 8 has an invalid interface number: 11 but max is 0 [ 1707.049578][ T4728] usb 2-1: config 8 has no interface number 0 [ 1707.053058][ T5440] netlink: 'syz.3.10211': attribute type 1 has an invalid length. [ 1707.066226][ T4728] usb 2-1: config 8 interface 11 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1707.078162][ T4728] usb 2-1: config 8 interface 11 altsetting 2 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 1707.101652][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10212'. [ 1707.151504][ T5444] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1707.151964][ T4728] usb 2-1: config 8 interface 11 has no altsetting 0 [ 1707.200841][ T5954] usb 1-1: USB disconnect, device number 17 [ 1707.259161][ T4728] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1707.289318][ T4728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.301494][ T4728] usb 2-1: Product: ࡡ [ 1707.313091][ T4728] usb 2-1: Manufacturer: 㽵댏卦咂哿意뎃㘂픴賡秊痗뛷 [ 1707.331638][ T4728] usb 2-1: SerialNumber: ⎡劤곬ꌧ鮕ꍧ笨ң㴉࿩얜趬싃誨⍹ƨ焬呎롯ꖑᢰ䑴䥃륥⪝ꑟ兂ᢡ⹺ᠤ㍀ꔽ匧朴ሂ [ 1707.662044][ T6014] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1707.874053][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.891056][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.958553][ T6014] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1708.077226][ T6014] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1708.192427][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.211199][ T6014] usb 4-1: config 0 descriptor?? [ 1708.478494][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10225'. [ 1708.668566][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.692671][ T5954] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1708.712098][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.729856][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.757216][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.775386][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.793230][ T6014] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 1708.827032][ T6014] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1708.872352][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1708.881192][ T6014] usb 4-1: USB disconnect, device number 37 [ 1708.900244][ T5954] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1708.936587][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1708.977076][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1709.002451][ T5954] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1709.011158][ T5484] fido_id[5484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1709.032114][ T5954] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1709.041380][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.302410][ T5954] usb 1-1: GET_CAPABILITIES returned 0 [ 1709.307995][ T5954] usbtmc 1-1:16.0: can't read capabilities [ 1709.340264][ T4728] usb-storage 2-1:8.11: USB Mass Storage device detected [ 1709.376238][ T4728] usb-storage 2-1:8.11: Quirks match for vid 174c pid 55aa: 400000 [ 1709.532032][ T4728] usb 2-1: USB disconnect, device number 41 [ 1709.571050][ T24] usb 1-1: USB disconnect, device number 18 [ 1709.782562][T13438] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1709.906512][ T5501] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1709.929774][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1710.056766][T13438] usb 4-1: Using ep0 maxpacket: 8 [ 1710.074895][T13438] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1710.089627][T13438] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1710.111997][T13438] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1710.158719][T13438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.180178][T13438] usb 4-1: Product: syz [ 1710.191966][T13438] usb 4-1: Manufacturer: syz [ 1710.200179][T13438] usb 4-1: SerialNumber: syz [ 1710.258813][T13438] usb 4-1: config 0 descriptor?? [ 1710.279343][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10234'. [ 1710.466106][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10236'. [ 1710.480437][T13438] usb 4-1: USB disconnect, device number 38 [ 1711.326496][ T5528] binder: 5527:5528 ioctl c0306201 80000600 returned -22 [ 1711.386076][ T5539] bridge_slave_0: left allmulticast mode [ 1711.406288][ T5539] bridge_slave_0: left promiscuous mode [ 1711.422273][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.473309][ T5539] bridge_slave_1: left allmulticast mode [ 1711.479192][ T5544] netlink: 'syz.0.10244': attribute type 10 has an invalid length. [ 1711.494154][ T5539] bridge_slave_1: left promiscuous mode [ 1711.499958][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.516189][ T5539] bond0: (slave bond_slave_0): Releasing backup interface [ 1711.557732][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10244'. [ 1711.584510][ T5539] bond0: (slave bond_slave_1): Releasing backup interface [ 1711.611709][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10249'. [ 1711.645689][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10250'. [ 1711.657575][ T5539] team_slave_0: left promiscuous mode [ 1711.697634][ T5539] team0: Port device team_slave_0 removed [ 1711.705400][ T5539] team_slave_1: left promiscuous mode [ 1711.737306][ T5539] team0: Port device team_slave_1 removed [ 1711.810471][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1711.854940][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.875770][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.883288][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.979870][ T5544] bond0: entered promiscuous mode [ 1711.994404][ T5544] team0: Port device bond0 added [ 1712.413186][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1712.632000][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1712.671593][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1712.686030][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1712.706433][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.723026][ T24] usb 5-1: Product: syz [ 1712.727218][ T24] usb 5-1: Manufacturer: syz [ 1712.731814][ T24] usb 5-1: SerialNumber: syz [ 1712.754787][ T24] usb 5-1: config 0 descriptor?? [ 1712.771547][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1712.792122][ T24] usb 5-1: setting power ON [ 1712.796648][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1712.808341][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1712.827953][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1712.836852][ T24] usb 5-1: media controller created [ 1712.887692][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1712.949492][ T24] usb 5-1: selecting invalid altsetting 6 [ 1712.958796][ T24] usb 5-1: digital interface selection failed (-22) [ 1712.967822][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1712.998530][ T5547] bond0: left promiscuous mode [ 1713.015243][ T24] usb 5-1: setting power OFF [ 1713.019849][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1713.023289][ T5547] team0 (unregistering): Port device bond0 removed [ 1713.025814][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1713.041377][ T24] (NULL device *): no alternate interface [ 1713.108722][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1713.192913][ T24] usb 5-1: USB disconnect, device number 36 [ 1713.515274][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10262'. [ 1713.795462][ T5597] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1714.200401][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1714.212287][ T2628] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1714.373579][ T2628] usb 1-1: Using ep0 maxpacket: 8 [ 1714.387855][ T2628] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1714.408081][ T2628] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1714.425053][ T2628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.434511][ T2628] usb 1-1: Product: syz [ 1714.437465][ T5628] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1714.449901][ T2628] usb 1-1: Manufacturer: syz [ 1714.455000][ T2628] usb 1-1: SerialNumber: syz [ 1714.463761][ T2628] usb 1-1: config 0 descriptor?? [ 1714.516412][ T2628] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1714.524802][ T2628] usb 1-1: setting power ON [ 1714.529386][ T2628] dvb-usb: bulk message failed: -22 (2/0) [ 1714.540914][ T2628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1714.566137][ T2628] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1714.599159][ T2628] usb 1-1: media controller created [ 1714.648408][ T2628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1714.678640][ T2628] usb 1-1: selecting invalid altsetting 6 [ 1714.685821][ T2628] usb 1-1: digital interface selection failed (-22) [ 1714.692900][ T2628] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1714.702863][ T2628] usb 1-1: setting power OFF [ 1714.717715][ T2628] dvb-usb: bulk message failed: -22 (2/0) [ 1714.735839][ T2628] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1714.745751][ T2628] (NULL device *): no alternate interface [ 1714.832184][ T2628] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1714.893844][ T2628] usb 1-1: USB disconnect, device number 19 [ 1714.921995][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1714.922011][ T30] audit: type=1326 audit(1756867258.611:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.5.10277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7fc00000 [ 1715.708942][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10292'. [ 1716.081227][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10296'. [ 1716.162024][ T5667] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1716.775015][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10301'. [ 1717.121092][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10304'. [ 1717.181983][ T5954] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1717.216406][ T5696] vxlan0: entered promiscuous mode [ 1717.291563][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.327856][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.362925][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 1717.378667][ T5954] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1717.397029][ T5954] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1717.404545][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.418039][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.421962][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.456002][ T5954] usb 6-1: Product: syz [ 1717.474045][ T5954] usb 6-1: Manufacturer: syz [ 1717.478656][ T5954] usb 6-1: SerialNumber: syz [ 1717.486465][ T5954] usb 6-1: config 0 descriptor?? [ 1717.498195][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1717.507007][ T5954] usb 6-1: setting power ON [ 1717.522122][ T30] audit: type=1326 audit(1756867261.211:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.1.10300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1717.559176][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 1717.590911][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1717.606816][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1717.663486][ T5954] usb 6-1: media controller created [ 1717.735918][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1717.801028][ T5954] usb 6-1: selecting invalid altsetting 6 [ 1717.824886][ T5954] usb 6-1: digital interface selection failed (-22) [ 1717.831649][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1717.877748][ T5954] usb 6-1: setting power OFF [ 1717.922184][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 1717.928460][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1717.958777][ T5954] (NULL device *): no alternate interface [ 1718.072598][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1718.084213][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10313'. [ 1718.116966][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10312'. [ 1718.169301][ T5954] usb 6-1: USB disconnect, device number 33 [ 1718.560086][ T5717] team_slave_0: left promiscuous mode [ 1718.646453][ T5717] team0 (unregistering): Port device team_slave_0 removed [ 1718.656554][ T5717] team_slave_1: left promiscuous mode [ 1718.695034][ T5717] team0 (unregistering): Port device team_slave_1 removed [ 1718.702445][ T5954] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1718.872690][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 1718.885966][ T5954] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1718.905690][ T5954] usb 6-1: config 0 has no interface number 0 [ 1718.915227][ T5954] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1718.935893][ T5954] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1718.961197][ T5954] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1718.975120][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1718.983513][ T5954] usb 6-1: Product: syz [ 1718.993565][ T5954] usb 6-1: SerialNumber: syz [ 1719.018530][ T5954] usb 6-1: config 0 descriptor?? [ 1719.049729][ T5954] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1719.066587][ T5954] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input126 [ 1719.281915][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.289417][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.296676][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.303863][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.311077][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.318270][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.325492][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.332682][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.339873][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.346962][ T6014] usb 6-1: USB disconnect, device number 34 [ 1719.347043][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1719.359873][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1719.380094][ T6014] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1719.505814][ T4728] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1719.646262][ T5755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1719.682351][ T4728] usb 5-1: Using ep0 maxpacket: 8 [ 1719.692921][ T4728] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1719.716882][ T4728] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1719.736644][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.758273][ T4728] usb 5-1: Product: syz [ 1719.780942][ T4728] usb 5-1: Manufacturer: syz [ 1719.791223][ T4728] usb 5-1: SerialNumber: syz [ 1719.809277][ T4728] usb 5-1: config 0 descriptor?? [ 1719.824605][ T4728] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1719.842116][ T4728] usb 5-1: setting power ON [ 1719.851272][ T4728] dvb-usb: bulk message failed: -22 (2/0) [ 1719.892886][ T4728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1719.943761][ T4728] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1719.971993][ T4728] usb 5-1: media controller created [ 1720.039454][ T5744] dvb-usb: bulk message failed: -22 (3/0) [ 1720.049332][ T4728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1720.064852][ T5744] dvb-usb: bulk message failed: -22 (3/0) [ 1720.117581][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10337'. [ 1720.145634][ T4728] usb 5-1: selecting invalid altsetting 6 [ 1720.153780][ T4728] usb 5-1: digital interface selection failed (-22) [ 1720.160790][ T4728] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1720.172371][ T4728] usb 5-1: setting power OFF [ 1720.176981][ T4728] dvb-usb: bulk message failed: -22 (2/0) [ 1720.187079][ T4728] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1720.200257][ T4728] (NULL device *): no alternate interface [ 1720.268026][ T5773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10339'. [ 1720.275037][ T4728] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1720.377763][ T4728] usb 5-1: USB disconnect, device number 37 [ 1720.732085][ T5769] team0 (unregistering): Port device team_slave_0 removed [ 1720.804929][ T5769] team0 (unregistering): Port device team_slave_1 removed [ 1721.088669][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1721.204089][ T4664] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 1722.596392][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10353'. [ 1722.925443][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10350'. [ 1723.035331][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10355'. [ 1723.102915][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10356'. [ 1723.155056][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10356'. [ 1723.444267][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 1723.472594][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 1723.594065][ T4728] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1723.782157][ T4728] usb 6-1: Using ep0 maxpacket: 8 [ 1723.802883][ T4728] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1723.825259][ T4728] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1723.848436][ T4728] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1723.876531][ T4728] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1723.909327][ T4728] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1723.920423][ T4728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.219185][ T4728] usb 6-1: GET_CAPABILITIES returned 0 [ 1724.227725][ T4728] usbtmc 6-1:16.0: can't read capabilities [ 1724.426301][ T9] usb 6-1: USB disconnect, device number 35 [ 1724.552724][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10373'. [ 1724.579953][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10373'. [ 1724.732250][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10374'. [ 1725.204912][ T30] audit: type=1326 audit(1756867268.901:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.1.10371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1725.227326][ T2628] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1725.406925][ T2628] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1725.416930][ T2628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.443551][ T2628] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1725.465532][ T2628] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1725.473593][ T2628] usb 1-1: Manufacturer: syz [ 1725.500171][ T2628] usb 1-1: config 0 descriptor?? [ 1725.690482][ T2628] rc_core: IR keymap rc-hauppauge not found [ 1725.704853][ T2628] Registered IR keymap rc-empty [ 1725.735894][ T2628] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1725.785440][ T2628] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input127 [ 1725.847655][ T2628] usb 1-1: USB disconnect, device number 20 [ 1725.863138][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10385'. [ 1727.499579][ T30] audit: type=1326 audit(1756867271.191:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.5.10393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7fc00000 [ 1727.652470][ T5954] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1727.818207][ T5950] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10404'. [ 1727.824330][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.841006][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1727.850554][ T5954] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1727.860193][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.873854][ T5954] usb 2-1: config 0 descriptor?? [ 1727.891831][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1727.903003][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 1727.917049][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1727.936380][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1727.965159][ T5954] usb 2-1: media controller created [ 1727.976351][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1727.995983][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 1728.009764][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1728.031464][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input128 [ 1728.064884][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 1728.081598][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1728.092856][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.110964][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.150405][ T5954] usb 2-1: USB disconnect, device number 42 [ 1728.208326][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1729.682011][ T30] audit: type=1326 audit(1756867273.371:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.10415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7fc00000 [ 1729.919207][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1729.939693][ T5991] bridge_slave_0: left allmulticast mode [ 1730.036679][ T5991] bridge_slave_0: left promiscuous mode [ 1730.044578][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10420'. [ 1730.078046][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.151440][ T5991] bridge_slave_1: left allmulticast mode [ 1730.177795][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.192297][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.259210][ T5991] bridge_slave_1: left promiscuous mode [ 1730.302255][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.395533][ T5991] bond0: (slave bond_slave_0): Releasing backup interface [ 1730.440466][ T5991] bond0: (slave bond_slave_1): Releasing backup interface [ 1730.542260][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1730.573824][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.609167][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1730.682352][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.736583][ T5991] bond1: (slave ip6gretap1): Releasing backup interface [ 1731.213288][ T6021] lo: entered allmulticast mode [ 1731.242928][ T6019] lo: left allmulticast mode [ 1731.860725][ T6040] batman_adv: batadv0: Adding interface: dummy0 [ 1731.867032][ T6040] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1731.915361][ T6040] batman_adv: batadv0: Interface activated: dummy0 [ 1733.987873][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10458'. [ 1737.957305][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10472'. [ 1739.316090][ T30] audit: type=1326 audit(1756867283.011:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 1739.933478][ T4728] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1740.105234][ T4728] usb 6-1: Using ep0 maxpacket: 8 [ 1740.121778][ T4728] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1740.141185][ T4728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.174520][ T4728] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1740.192931][ T4728] pvrusb2: ********** [ 1740.199189][ T4728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1740.231278][ T4728] pvrusb2: Important functionality might not be entirely working. [ 1740.254723][ T4728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1740.283799][ T4728] pvrusb2: ********** [ 1740.391242][ T2347] pvrusb2: Invalid write control endpoint [ 1740.567904][ T2347] pvrusb2: Invalid write control endpoint [ 1740.601433][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1740.643616][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1740.651182][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1740.681701][ T2347] pvrusb2: Device being rendered inoperable [ 1740.700209][ T6168] pvrusb2: Attempted to execute control transfer when device not ok [ 1740.716582][ T9] usb 6-1: USB disconnect, device number 36 [ 1740.735985][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1740.747332][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1740.765364][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1740.771787][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1740.786114][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1741.872008][ T2628] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1742.076305][ T2628] usb 5-1: Using ep0 maxpacket: 16 [ 1742.097473][ T2628] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1742.146372][ T2628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.171943][ T2628] usb 5-1: Product: syz [ 1742.185498][ T2628] usb 5-1: Manufacturer: syz [ 1742.203413][ T2628] usb 5-1: SerialNumber: syz [ 1742.235153][ T2628] usb 5-1: config 0 descriptor?? [ 1742.876812][ T2628] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1742.886446][ T30] audit: type=1326 audit(1756867286.571:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.0.10496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000 [ 1742.950713][ T2628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1742.973430][ T2628] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1742.993689][ T2628] usb 5-1: media controller created [ 1743.029829][ T2628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1743.154499][ T2628] zl10353_read_register: readreg error (reg=127, ret==0) [ 1743.185598][ T2628] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1743.203732][ T2628] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1743.255687][ T2628] usb 5-1: USB disconnect, device number 38 [ 1743.443338][ T2628] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1743.713412][ T9] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1743.878524][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1743.903722][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1743.932109][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1743.966241][ T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1743.998480][ T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1744.028817][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1744.067828][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1744.085394][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1744.095076][ T9] usb 6-1: Product: syz [ 1744.111971][ T9] usb 6-1: Manufacturer: syz [ 1744.122383][ T9] usb 6-1: SerialNumber: syz [ 1744.151325][ T9] usb 6-1: config 0 descriptor?? [ 1744.181820][ T6215] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1744.205136][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10503'. [ 1744.221082][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1744.241216][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1744.718930][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-1) [ 1744.725998][ T9] usb 6-1: USB disconnect, device number 37 [ 1744.757262][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1745.238896][ T30] audit: type=1326 audit(1756867288.931:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.10507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7fc00000 [ 1745.622263][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10516'. [ 1747.641989][ T5954] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1747.813914][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.842318][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1747.865473][ T5954] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1747.874847][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.892830][ T5954] usb 6-1: config 0 descriptor?? [ 1747.913083][ T5954] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1750.430295][ T2628] usb 6-1: USB disconnect, device number 38 [ 1751.112494][ T5954] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1751.282150][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 1751.297883][ T5954] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1751.320071][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.342043][ T5954] usb 5-1: Product: syz [ 1751.351722][ T5954] usb 5-1: Manufacturer: syz [ 1751.362104][ T5954] usb 5-1: SerialNumber: syz [ 1751.378049][ T5954] usb 5-1: config 0 descriptor?? [ 1751.422245][T13438] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1751.652314][T13438] usb 1-1: Using ep0 maxpacket: 8 [ 1751.665442][T13438] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1751.679000][T13438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.781399][T13438] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1751.797818][T13438] pvrusb2: ********** [ 1751.803868][T13438] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1751.825920][T13438] pvrusb2: Important functionality might not be entirely working. [ 1751.838471][T13438] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1751.855258][ T5954] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1751.864786][T13438] pvrusb2: ********** [ 1751.881385][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1751.912236][ T5954] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1751.972180][ T5954] usb 5-1: media controller created [ 1751.992101][ T2347] pvrusb2: Invalid write control endpoint [ 1752.084764][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1752.136364][ T2347] pvrusb2: Invalid write control endpoint [ 1752.155802][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1752.165811][ T5954] zl10353_read_register: readreg error (reg=127, ret==0) [ 1752.179929][ T5954] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1752.202452][ T6376] ------------[ cut here ]------------ [ 1752.207921][ T6376] usb 5-1: BOGUS control dir, pipe 80002780 doesn't match bRequestType c0 [ 1752.231985][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1752.239538][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1752.265998][ T5954] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1752.303275][ T6376] WARNING: CPU: 1 PID: 6376 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 1752.313551][ T6376] Modules linked in: [ 1752.317777][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.0.10560 Not tainted syzkaller #0 PREEMPT(full) [ 1752.327854][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1752.328310][ T5954] usb 5-1: USB disconnect, device number 39 [ 1752.338508][ T6376] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 1752.350433][ T6376] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 76 63 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 1752.352162][ T2347] pvrusb2: Device being rendered inoperable [ 1752.370402][ T6376] RSP: 0018:ffffc90004f0f670 EFLAGS: 00010246 [ 1752.382294][ T6376] RAX: 3138952296fd9e00 RBX: ffff888029213c00 RCX: 0000000000080000 [ 1752.390276][ T6376] RDX: ffffc9000ed41000 RSI: 0000000000005560 RDI: 0000000000005561 [ 1752.398329][ T6376] RBP: 1ffff1100531c390 R08: 0000000000000003 R09: 0000000000000004 [ 1752.406549][ T6376] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 1752.414566][ T6376] R13: ffff8880298e1c80 R14: 0000000080002780 R15: ffff88807afff7e0 [ 1752.422594][ T6376] FS: 0000000000000000(0000) GS:ffff888125d18000(0063) knlGS:00000000f54feb40 [ 1752.431533][ T6376] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1752.438213][ T6376] CR2: 00007ffd8d96dc24 CR3: 000000004a07e000 CR4: 00000000003526f0 [ 1752.446231][ T6376] Call Trace: [ 1752.449520][ T6376] [ 1752.452532][ T6376] usb_start_wait_urb+0x114/0x4c0 [ 1752.457581][ T6376] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1752.463217][ T6376] usb_control_msg+0x232/0x3e0 [ 1752.465278][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1752.467997][ T6376] dtv5100_i2c_msg+0x250/0x330 [ 1752.479842][ T6376] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1752.484818][ T6376] __i2c_transfer+0x874/0x2170 [ 1752.489598][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.494876][ T6376] ? __pfx___i2c_transfer+0x10/0x10 [ 1752.500087][ T6376] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1752.505507][ T6376] ? i2c_transfer+0x11d/0x3a0 [ 1752.510200][ T6376] i2c_transfer+0x25b/0x3a0 [ 1752.514800][ T6376] ? __pfx_i2c_transfer+0x10/0x10 [ 1752.519814][ T6376] ? _copy_from_user+0x94/0xb0 [ 1752.524592][ T6376] i2cdev_ioctl_rdwr+0x460/0x740 [ 1752.529517][ T6376] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1752.534637][ T6376] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1752.540250][ T6376] ? __fget_files+0x3a0/0x420 [ 1752.544941][ T6376] ? __fget_files+0x2a/0x420 [ 1752.549511][ T6376] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1752.555060][ T6376] __ia32_compat_sys_ioctl+0x540/0x840 [ 1752.560506][ T6376] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1752.566518][ T6376] ? __se_sys_futex_time32+0x360/0x3e0 [ 1752.572013][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.577220][ T6376] __do_fast_syscall_32+0xb6/0x2b0 [ 1752.582368][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.587598][ T6376] do_fast_syscall_32+0x34/0x80 [ 1752.592509][ T6376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1752.598843][ T6376] RIP: 0023:0xf710e539 [ 1752.603118][ T6376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1752.622768][ T6376] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1752.631192][ T6376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1752.639189][ T6376] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.647180][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.655179][ T6376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1752.663729][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.671698][ T6376] [ 1752.674750][ T6376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1752.682017][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.0.10560 Not tainted syzkaller #0 PREEMPT(full) [ 1752.691361][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1752.701417][ T6376] Call Trace: [ 1752.704680][ T6376] [ 1752.707592][ T6376] dump_stack_lvl+0x99/0x250 [ 1752.712165][ T6376] ? __asan_memcpy+0x40/0x70 [ 1752.716737][ T6376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1752.721921][ T6376] ? __pfx__printk+0x10/0x10 [ 1752.726531][ T6376] vpanic+0x281/0x750 [ 1752.730496][ T6376] ? __pfx__printk+0x10/0x10 [ 1752.735071][ T6376] ? __pfx_vpanic+0x10/0x10 [ 1752.739557][ T6376] ? is_bpf_text_address+0x292/0x2b0 [ 1752.744833][ T6376] panic+0xb9/0xc0 [ 1752.748541][ T6376] ? __pfx_panic+0x10/0x10 [ 1752.752947][ T6376] __warn+0x31b/0x4b0 [ 1752.756906][ T6376] ? usb_submit_urb+0x112b/0x1830 [ 1752.761913][ T6376] ? usb_submit_urb+0x112b/0x1830 [ 1752.766930][ T6376] report_bug+0x2be/0x4f0 [ 1752.771242][ T6376] ? usb_submit_urb+0x112b/0x1830 [ 1752.776250][ T6376] ? usb_submit_urb+0x112b/0x1830 [ 1752.781254][ T6376] ? usb_submit_urb+0x112d/0x1830 [ 1752.786264][ T6376] handle_bug+0x84/0x160 [ 1752.790487][ T6376] exc_invalid_op+0x1a/0x50 [ 1752.794969][ T6376] asm_exc_invalid_op+0x1a/0x20 [ 1752.799801][ T6376] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 1752.805414][ T6376] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 76 63 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 1752.825007][ T6376] RSP: 0018:ffffc90004f0f670 EFLAGS: 00010246 [ 1752.831060][ T6376] RAX: 3138952296fd9e00 RBX: ffff888029213c00 RCX: 0000000000080000 [ 1752.839013][ T6376] RDX: ffffc9000ed41000 RSI: 0000000000005560 RDI: 0000000000005561 [ 1752.846965][ T6376] RBP: 1ffff1100531c390 R08: 0000000000000003 R09: 0000000000000004 [ 1752.854915][ T6376] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 1752.862865][ T6376] R13: ffff8880298e1c80 R14: 0000000080002780 R15: ffff88807afff7e0 [ 1752.870836][ T6376] usb_start_wait_urb+0x114/0x4c0 [ 1752.875854][ T6376] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1752.881390][ T6376] usb_control_msg+0x232/0x3e0 [ 1752.886138][ T6376] dtv5100_i2c_msg+0x250/0x330 [ 1752.890890][ T6376] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1752.895725][ T6376] __i2c_transfer+0x874/0x2170 [ 1752.900475][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.905672][ T6376] ? __pfx___i2c_transfer+0x10/0x10 [ 1752.910851][ T6376] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1752.916207][ T6376] ? i2c_transfer+0x11d/0x3a0 [ 1752.920868][ T6376] i2c_transfer+0x25b/0x3a0 [ 1752.925359][ T6376] ? __pfx_i2c_transfer+0x10/0x10 [ 1752.930379][ T6376] ? _copy_from_user+0x94/0xb0 [ 1752.935130][ T6376] i2cdev_ioctl_rdwr+0x460/0x740 [ 1752.940056][ T6376] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1752.945149][ T6376] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1752.950760][ T6376] ? __fget_files+0x3a0/0x420 [ 1752.955415][ T6376] ? __fget_files+0x2a/0x420 [ 1752.959983][ T6376] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1752.965512][ T6376] __ia32_compat_sys_ioctl+0x540/0x840 [ 1752.970954][ T6376] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1752.976920][ T6376] ? __se_sys_futex_time32+0x360/0x3e0 [ 1752.982375][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.987562][ T6376] __do_fast_syscall_32+0xb6/0x2b0 [ 1752.992651][ T6376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.997837][ T6376] do_fast_syscall_32+0x34/0x80 [ 1753.002670][ T6376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1753.008978][ T6376] RIP: 0023:0xf710e539 [ 1753.013030][ T6376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1753.032637][ T6376] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1753.041033][ T6376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1753.048983][ T6376] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.056932][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.064885][ T6376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1753.072837][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.080794][ T6376] [ 1753.084029][ T6376] Kernel Offset: disabled [ 1753.088338][ T6376] Rebooting in 86400 seconds..