last executing test programs: 4.267203536s ago: executing program 3 (id=5455): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xb635, 0x2}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x6d93, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 3.639934643s ago: executing program 3 (id=5456): unshare(0x2000680) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x13) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 3.4417578s ago: executing program 3 (id=5460): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(r0, 0x0, 0x0) 3.419075236s ago: executing program 2 (id=5461): r0 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2000, @fd=r0, 0x1, &(0x7f0000000980)=[{0x0}, {0x0}], 0x2, 0x31, 0x1}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.266642489s ago: executing program 2 (id=5463): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x2, 0x80, 0x0, 0xfffffffffffffffe}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 3.146061239s ago: executing program 0 (id=5464): syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="e38f6cc55385", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @empty, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x2}]}}}}}}}}, 0x0) 3.030557694s ago: executing program 3 (id=5466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x7c, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.97938404s ago: executing program 0 (id=5467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000580)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.978310297s ago: executing program 1 (id=5468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000e0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 2.876957519s ago: executing program 1 (id=5470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone3(0x0, 0x0) 2.722200511s ago: executing program 3 (id=5473): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.587089036s ago: executing program 4 (id=5474): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000000)='./file0\x00', 0x4) 2.416064564s ago: executing program 4 (id=5475): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 2.362531756s ago: executing program 3 (id=5476): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, 0x0, 0x0, 0x200088d0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000004c0)={0x20, 0xf}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), 0x0}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x0, &(0x7f00000006c0)}], 0x1}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x34be00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) io_uring_setup(0x3534, 0x0) 2.178018036s ago: executing program 2 (id=5477): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r0, &(0x7f0000000680)=""/148, 0x94) 2.049798075s ago: executing program 2 (id=5478): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLERRORu(r0, 0x0, 0x0) 1.826317374s ago: executing program 2 (id=5479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000003f001215edce000000000000027c00000400fe800800018004004e8050a88ca6418b5910d8674c309054da4700d7334db6e8035806b43580175d79109a6df367781d0c31"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 1.623131047s ago: executing program 1 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.32377894s ago: executing program 4 (id=5481): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000013afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1.183127295s ago: executing program 4 (id=5482): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0xb, &(0x7f0000000700)={0x3, 0x0, 0x3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xe1}]}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0xbb0, 0x0, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r4, &(0x7f0000008180)={0x2020}, 0xfffffdfc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 1.158124937s ago: executing program 1 (id=5483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000a40)={r1, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x3}, 0x90) 914.165097ms ago: executing program 0 (id=5484): socketpair(0x1, 0x100000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 867.01701ms ago: executing program 4 (id=5485): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000000)='./file0\x00', 0x4) 646.481146ms ago: executing program 4 (id=5486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) exit(0xffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc) shutdown(r0, 0x1) 498.419537ms ago: executing program 2 (id=5487): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000280)=[{0x2, 0x1, 0x1, &(0x7f0000000100)='a'}], 0x1}) 282.075297ms ago: executing program 0 (id=5488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c650000"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 228.823411ms ago: executing program 1 (id=5489): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 162.274787ms ago: executing program 0 (id=5490): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x1a4}], 0x1) 36.452616ms ago: executing program 0 (id=5491): r0 = syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x437d, 0x0, &(0x7f0000000240), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x40, 0x30, 0x3, "41768d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 0s ago: executing program 1 (id=5492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) kernel console output (not intermixed with test programs): sb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 524.106337][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.115969][ T42] usb 5-1: Product: syz [ 524.126794][ T42] usb 5-1: Manufacturer: syz [ 524.131448][ T42] usb 5-1: SerialNumber: syz [ 524.169711][ T42] usb 5-1: config 0 descriptor?? [ 524.186469][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 524.186680][ T5967] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 524.358465][ T5967] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.374925][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.397426][ T5967] usb 2-1: config 0 has no interface number 0 [ 524.404551][ T5967] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.417058][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.456407][ T5967] usb 2-1: config 0 descriptor?? [ 524.471969][ T5967] ldusb 2-1:0.55: Interrupt in endpoint not found [ 524.584785][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'. [ 524.678444][ T42] usb 2-1: USB disconnect, device number 37 [ 524.891607][T17463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 525.981022][T17521] binder: 17520:17521 ioctl 4018620d 0 returned -22 [ 525.992074][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4336'. [ 526.001567][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4336'. [ 526.373483][T17521] bond0: entered promiscuous mode [ 526.429260][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 526.456703][T17521] bond_slave_0: entered promiscuous mode [ 526.471984][T17521] bond_slave_1: entered promiscuous mode [ 526.499986][T17521] bond0: left promiscuous mode [ 526.505601][T17521] bond_slave_0: left promiscuous mode [ 526.546848][ T42] usb 5-1: USB disconnect, device number 50 [ 526.567609][T17521] bond_slave_1: left promiscuous mode [ 526.973974][T17535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4340'. [ 527.071019][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4340'. [ 527.476246][ T5967] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 527.528450][T17559] netlink: 'syz.0.4351': attribute type 17 has an invalid length. [ 527.538523][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4351'. [ 527.549169][T17559] bond0: option all_slaves_active: invalid value (97) [ 527.642374][ T5967] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.656248][ T5967] usb 2-1: config 0 has no interface number 0 [ 527.662484][ T5967] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 527.696352][ T5967] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.725459][ T5967] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.777118][ T24] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 527.796803][ T5967] usb 2-1: config 0 interface 1 has no altsetting 0 [ 527.803668][ T5967] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 527.832798][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.881591][ T5967] usb 2-1: config 0 descriptor?? [ 527.958539][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 527.989433][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 528.037420][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 528.072670][ T24] usb 4-1: string descriptor 0 read error: -22 [ 528.090115][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 528.117715][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.178717][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.368972][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.387775][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.401309][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.413517][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.427776][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.451215][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.470534][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 528.496743][ T5915] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 528.521573][ T5967] uclogic 0003:145F:0212.0025: pen parameters not found [ 528.539629][ T24] usb 4-1: USB disconnect, device number 54 [ 528.546712][ T5967] uclogic 0003:145F:0212.0025: interface is invalid, ignoring [ 528.669350][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 528.680692][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.698555][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.727138][ T5914] usb 2-1: USB disconnect, device number 38 [ 528.738503][ T5915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.757702][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.772731][ T5915] usb 3-1: Product: syz [ 528.780226][ T5915] usb 3-1: Manufacturer: syz [ 528.784983][ T5915] usb 3-1: SerialNumber: syz [ 528.991540][T17588] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4365'. [ 529.005149][ T5915] usb 3-1: 0:2 : does not exist [ 529.039958][ T5915] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 529.143319][ T5915] usb 3-1: USB disconnect, device number 44 [ 529.225344][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.306270][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 529.838353][T17615] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4377'. [ 530.266479][ T5967] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 530.423153][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 530.445052][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.470328][ T5967] usb 4-1: config 0 has no interfaces? [ 530.483356][ T5967] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 530.513482][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.542480][ T5967] usb 4-1: Product: syz [ 530.549638][ T5967] usb 4-1: Manufacturer: syz [ 530.559768][ T5967] usb 4-1: SerialNumber: syz [ 530.598498][ T5967] usb 4-1: config 0 descriptor?? [ 530.838336][ T5967] usb 4-1: USB disconnect, device number 55 [ 531.078956][T17640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4388'. [ 532.026646][T17673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4401'. [ 532.280179][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4405'. [ 532.536381][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4406'. [ 532.996364][T17696] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4410'. [ 534.212770][ T5914] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 534.388156][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 534.408955][ T5914] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 534.426200][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.453982][ T5914] usb 3-1: Product: syz [ 534.459597][ T5914] usb 3-1: Manufacturer: syz [ 534.464312][ T5914] usb 3-1: SerialNumber: syz [ 534.489213][ T5914] usb 3-1: config 0 descriptor?? [ 534.511851][ T5914] hub 3-1:0.0: bad descriptor, ignoring hub [ 534.530005][ T5914] hub 3-1:0.0: probe with driver hub failed with error -5 [ 534.557876][ T5914] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 534.588949][ T5915] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 534.756223][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 534.777440][ T5915] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 534.798127][ T5915] usb 4-1: config 1 has no interface number 0 [ 534.804303][ T5915] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.837143][ T5915] usb 4-1: config 1 interface 19 has no altsetting 0 [ 534.853750][ T5915] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 534.866850][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.875068][ T5915] usb 4-1: Product: syz [ 534.886734][ T5915] usb 4-1: Manufacturer: syz [ 534.891391][ T5915] usb 4-1: SerialNumber: syz [ 534.966857][ T5915] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.163692][ T5915] usb 4-1: USB disconnect, device number 56 [ 535.172941][ T49] usb 4-1: Failed to submit usb control message: -71 [ 535.194843][ T49] usb 4-1: unable to send the bmi data to the device: -71 [ 535.210652][ T49] usb 4-1: unable to get target info from device [ 535.222278][ T49] usb 4-1: could not get target info (-71) [ 535.232011][ T49] usb 4-1: could not probe fw (-71) [ 535.403435][T17750] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 535.418389][T17750] bond3 (unregistering): Released all slaves [ 536.466215][T17787] IPVS: length: 528 != 8 [ 536.556248][ T42] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 536.721023][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.746770][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.759419][ T42] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 536.771420][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.781360][ T42] usb 2-1: Product: syz [ 536.785631][ T42] usb 2-1: Manufacturer: syz [ 536.794044][ T42] usb 2-1: SerialNumber: syz [ 537.024345][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 537.032318][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 537.041114][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 537.065955][ T42] usb 2-1: 0:1 : does not exist [ 537.094985][ T42] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 537.109678][ T42] usb 2-1: unit 0 not found! [ 537.170863][ T42] usb 2-1: USB disconnect, device number 39 [ 537.218399][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.122462][ T5967] usb 3-1: USB disconnect, device number 45 [ 539.536755][ T5834] Bluetooth: hci1: command 0x206a tx timeout [ 540.077649][T17839] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 541.267724][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 541.279100][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 543.245636][T17902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4486'. [ 543.281573][T17902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4486'. [ 544.300848][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 544.658679][T17929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4498'. [ 544.694268][T17929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4498'. [ 545.145242][ T29] audit: type=1326 audit(1774009729.810:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.193967][ T29] audit: type=1326 audit(1774009729.810:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.230693][ T29] audit: type=1326 audit(1774009729.840:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.318124][ T29] audit: type=1326 audit(1774009729.840:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.371572][ T29] audit: type=1326 audit(1774009729.850:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.408934][ T29] audit: type=1326 audit(1774009729.860:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.431666][ T29] audit: type=1326 audit(1774009729.860:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 545.478667][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 545.515981][ T29] audit: type=1326 audit(1774009729.860:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.560036][T17958] netlink: 'syz.0.4504': attribute type 10 has an invalid length. [ 545.569294][ T29] audit: type=1326 audit(1774009729.890:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.593632][ T29] audit: type=1326 audit(1774009729.890:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.1.4503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=155 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 545.609122][T17958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4504'. [ 545.670171][T17958] batadv0: entered promiscuous mode [ 545.756283][T17958] batadv0: entered allmulticast mode [ 545.762864][T17958] bridge0: port 3(batadv0) entered blocking state [ 545.770107][T17958] bridge0: port 3(batadv0) entered disabled state [ 545.819179][T17967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4511'. [ 545.907366][T17958] bridge0: port 3(batadv0) entered blocking state [ 545.914032][T17958] bridge0: port 3(batadv0) entered forwarding state [ 546.216752][T11523] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 546.226074][T11523] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 546.306496][ T5915] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 546.481145][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.503820][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 546.558158][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.593206][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 546.656161][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 546.687569][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.696947][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.711366][ T5915] usb 4-1: Product: syz [ 546.721317][ T5915] usb 4-1: Manufacturer: syz [ 546.758196][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 546.763744][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 546.772274][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 546.788470][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 546.837600][T17986] __nla_validate_parse: 1 callbacks suppressed [ 546.837621][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'. [ 547.013578][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4521'. [ 547.315462][T17998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4523'. [ 547.386702][T17998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4523'. [ 547.918238][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4524'. [ 548.238493][T18020] netlink: 'syz.4.4530': attribute type 16 has an invalid length. [ 548.280843][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 548.807788][T18030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4535'. [ 548.857909][T18030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4535'. [ 549.070797][ T24] usb 4-1: USB disconnect, device number 57 [ 549.452204][ T5914] IPVS: starting estimator thread 0... [ 549.558256][T18040] IPVS: using max 35 ests per chain, 84000 per kthread [ 549.633960][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4542'. [ 549.646857][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4542'. [ 549.662424][T18050] netlink: 'syz.0.4544': attribute type 16 has an invalid length. [ 549.766224][ T42] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 549.944068][ T42] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 549.957684][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 549.972820][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 549.985961][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 549.996923][ T5967] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 550.008549][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 550.027618][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 550.051072][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 550.063228][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 550.107407][ T42] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 550.120916][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 550.131732][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.152552][ T42] pwc: Logitech QuickCam detected (reserved ID). [ 550.163161][ T42] pwc: Warning: more than 1 configuration available. [ 550.173240][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 550.190321][ T5967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.207573][ T5967] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.222053][ T5967] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.235952][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.254566][ T5967] usb 3-1: Product: syz [ 550.266543][ T5967] usb 3-1: Manufacturer: syz [ 550.275101][ T5915] IPVS: starting estimator thread 0... [ 550.277318][ T5967] usb 3-1: SerialNumber: syz [ 550.355532][ T42] pwc: Failed to set LED on/off time (-71) [ 550.366309][T18072] IPVS: using max 31 ests per chain, 74400 per kthread [ 550.374953][ T42] pwc: send_video_command error -71 [ 550.401354][ T42] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 550.419741][ T42] Philips webcam 5-1:250.0: probe with driver Philips webcam failed with error -71 [ 550.461552][ T42] usb 5-1: USB disconnect, device number 51 [ 550.518717][ T5967] usb 3-1: 0:2 : does not exist [ 550.559207][ T5967] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 550.639116][T18078] bond0: entered promiscuous mode [ 550.644609][T18078] bond_slave_0: entered promiscuous mode [ 550.652211][ T5967] usb 3-1: USB disconnect, device number 46 [ 550.680943][T18078] bond_slave_1: entered promiscuous mode [ 550.695318][T18078] bond0: left promiscuous mode [ 550.702760][T18080] netlink: 'syz.3.4557': attribute type 16 has an invalid length. [ 550.707594][T18078] bond_slave_0: left promiscuous mode [ 550.719251][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.737331][T18078] bond_slave_1: left promiscuous mode [ 550.762079][T18080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.036290][ T42] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 551.198137][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 551.210926][ T42] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.211272][ T5914] IPVS: starting estimator thread 0... [ 551.256666][ T42] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.286524][ T42] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.316675][T18098] IPVS: using max 29 ests per chain, 69600 per kthread [ 551.320444][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.331265][ T42] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 551.340653][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.427341][ T42] usb 1-1: config 0 descriptor?? [ 551.464215][T18104] fuse: Bad value for 'fd' [ 551.859066][T18082] __nla_validate_parse: 6 callbacks suppressed [ 551.859090][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4558'. [ 551.908177][ T42] hid_parser_main: 434 callbacks suppressed [ 551.908204][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 551.933206][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 551.949299][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 551.968582][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 551.985985][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.005166][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.015309][ T42] uclogic 0003:5543:0003.0026: reserved main item tag 0xe [ 552.036751][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.054253][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.084720][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.136365][ T42] uclogic 0003:5543:0003.0026: unknown main item tag 0x0 [ 552.186982][ T42] uclogic 0003:5543:0003.0026: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 552.254878][ T42] usb 1-1: USB disconnect, device number 40 [ 552.679287][T18116] fido_id[18116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 553.924122][ T42] IPVS: starting estimator thread 0... [ 554.033231][T18133] IPVS: using max 27 ests per chain, 64800 per kthread [ 554.455424][T18148] loop5: detected capacity change from 0 to 7 [ 554.465202][T18148] Dev loop5: unable to read RDB block 7 [ 554.471617][T18148] loop5: unable to read partition table [ 554.479266][T18148] loop5: partition table beyond EOD, truncated [ 554.492988][T18148] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 555.337396][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4595'. [ 555.348259][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4595'. [ 555.496271][ T42] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 555.639073][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4601'. [ 555.648758][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4601'. [ 555.664197][T18192] netlink: 'syz.0.4602': attribute type 16 has an invalid length. [ 555.668508][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.677804][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'. [ 555.686344][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 555.727332][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.759365][ T42] usb 3-1: config 0 descriptor?? [ 555.775824][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 556.292375][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 556.506972][ T42] pwc: recv_control_msg error -71 req 02 val 2c00 [ 556.528849][ T42] pwc: recv_control_msg error -71 req 04 val 1000 [ 556.742824][ T42] pwc: recv_control_msg error -71 req 04 val 1300 [ 556.828971][ T42] pwc: recv_control_msg error -71 req 04 val 1400 [ 556.916478][ T42] pwc: recv_control_msg error -71 req 02 val 2000 [ 556.923703][ T42] pwc: recv_control_msg error -71 req 02 val 2100 [ 557.137247][ T42] pwc: recv_control_msg error -71 req 04 val 1500 [ 557.182499][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 557.190574][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 557.315729][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 557.335052][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 557.419178][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 557.483791][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 557.520464][T18226] netlink: 'syz.0.4613': attribute type 16 has an invalid length. [ 557.529189][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 557.536430][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 557.537026][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'. [ 557.660316][ T42] pwc: Registered as video103. [ 557.668946][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 557.696703][ T42] usb 3-1: USB disconnect, device number 47 [ 558.596473][ T3096] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 558.763640][ T3096] usb 3-1: unable to get BOS descriptor or descriptor too short [ 558.774833][ T3096] usb 3-1: not running at top speed; connect to a high speed hub [ 558.794745][ T3096] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.816802][ T3096] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 558.830620][ T3096] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 558.840375][ T3096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.856584][ T3096] usb 3-1: Product: syz [ 558.864451][ T3096] usb 3-1: Manufacturer: syz [ 558.873498][ T3096] usb 3-1: SerialNumber: syz [ 558.957655][ T51] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 559.057691][T18267] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4628'. [ 559.397559][ T3096] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 559.414768][ T3096] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 559.455369][ T3096] usb 3-1: USB disconnect, device number 48 [ 559.943692][T18278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4630'. [ 560.488067][T18295] team0: Port device team_slave_0 removed [ 561.556199][ T3096] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 561.718537][ T3096] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.729178][ T3096] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 561.738845][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.766986][ T3096] usb 3-1: config 0 descriptor?? [ 561.791393][ T3096] pwc: Askey VC010 type 2 USB webcam detected. [ 562.197337][ T3096] pwc: recv_control_msg error -32 req 02 val 2b00 [ 562.425318][ T3096] pwc: recv_control_msg error -71 req 02 val 2c00 [ 562.442700][ T3096] pwc: recv_control_msg error -71 req 04 val 1000 [ 562.466840][ T3096] pwc: recv_control_msg error -71 req 04 val 1300 [ 562.485392][ T3096] pwc: recv_control_msg error -71 req 04 val 1400 [ 562.495222][ T3096] pwc: recv_control_msg error -71 req 02 val 2000 [ 562.515545][ T3096] pwc: recv_control_msg error -71 req 02 val 2100 [ 562.525809][ T3096] pwc: recv_control_msg error -71 req 04 val 1500 [ 562.545919][ T3096] pwc: recv_control_msg error -71 req 02 val 2500 [ 562.566856][ T3096] pwc: recv_control_msg error -71 req 02 val 2400 [ 562.576356][ T3096] pwc: recv_control_msg error -71 req 02 val 2600 [ 562.583529][ T3096] pwc: recv_control_msg error -71 req 02 val 2900 [ 562.596667][ T3096] pwc: recv_control_msg error -71 req 02 val 2800 [ 562.614685][ T3096] pwc: recv_control_msg error -71 req 04 val 1100 [ 562.630517][ T3096] pwc: recv_control_msg error -71 req 04 val 1200 [ 562.652488][ T3096] pwc: Registered as video103. [ 562.683551][ T3096] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 562.713955][ T3096] usb 3-1: USB disconnect, device number 49 [ 562.872779][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'. [ 563.060791][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.067522][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.029759][T18370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4666'. [ 564.096129][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.103974][T18367] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.265834][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.287960][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.462355][T11527] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.474614][T11527] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.485146][T11527] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.517531][T11523] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.599834][ T5824] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 564.766234][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 564.778260][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.788981][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.819735][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 564.832626][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.850112][ T5824] usb 3-1: Product: syz [ 564.861818][ T5824] usb 3-1: Manufacturer: syz [ 564.880850][ T5824] usb 3-1: SerialNumber: syz [ 564.900844][ T5824] usb 3-1: config 0 descriptor?? [ 564.925125][ T5824] appledisplay 3-1:0.0: Could not find int-in endpoint [ 564.951063][ T5824] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 565.117869][ T5915] usb 3-1: USB disconnect, device number 50 [ 565.894884][T18409] loop5: detected capacity change from 0 to 7 [ 565.928450][T18409] Dev loop5: unable to read RDB block 7 [ 565.954473][T18409] loop5: unable to read partition table [ 565.988326][T18409] loop5: partition table beyond EOD, truncated [ 565.996315][T18409] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 566.212571][T18417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4684'. [ 566.610190][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4690'. [ 566.629033][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4690'. [ 566.686344][T18435] input: syz1 as /devices/virtual/input/input24 [ 567.746801][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4694'. [ 567.862342][T18448] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 567.938079][T18448] bond3 (unregistering): Released all slaves [ 568.402599][ T55] bridge0: port 2(batadv0) entered disabled state [ 568.443000][ T55] bridge_slave_0: left allmulticast mode [ 568.450353][ T55] bridge_slave_0: left promiscuous mode [ 568.472158][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.025144][ T55] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 569.420421][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 569.669560][ T55] bond1 (unregistering): (slave bridge1): Releasing active interface [ 570.010743][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.199394][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.277324][ T55] bond0 (unregistering): Released all slaves [ 570.291786][ T55] bond1 (unregistering): Released all slaves [ 570.321133][ T55] bond2 (unregistering): Released all slaves [ 570.546510][ T55] tipc: Left network mode [ 571.467910][ T55] hsr_slave_0: left promiscuous mode [ 571.520522][ T55] hsr_slave_1: left promiscuous mode [ 571.542365][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.592752][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.651293][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.710292][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.779148][ T55] veth1_macvtap: left promiscuous mode [ 571.788826][ T55] veth0_macvtap: left promiscuous mode [ 572.308279][ T55] team0 (unregistering): Port device team_slave_1 removed [ 572.332948][ T55] team0 (unregistering): Port device team_slave_0 removed [ 572.836583][T18551] netlink: 'syz.3.4731': attribute type 2 has an invalid length. [ 572.934045][ T55] IPVS: stop unused estimator thread 0... [ 573.102213][T18563] netlink: 'syz.4.4737': attribute type 16 has an invalid length. [ 573.111396][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'. [ 573.148908][T18563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.410387][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4740'. [ 573.699447][T18578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4743'. [ 573.798567][T18579] random: crng reseeded on system resumption [ 575.182001][T18612] input: syz0 as /devices/virtual/input/input25 [ 575.310266][T18614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.346367][T18619] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 575.562175][T18627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4761'. [ 575.686206][ T5824] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 575.897540][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 575.907723][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 575.983461][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 575.994969][T18637] netlink: 'syz.0.4762': attribute type 10 has an invalid length. [ 576.003049][T18637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4762'. [ 576.012374][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 576.027464][ T5824] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 576.041168][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.065526][ T5824] usb 2-1: Product: syz [ 576.085351][ T5824] usb 2-1: Manufacturer: syz [ 576.113528][ T5824] usb 2-1: SerialNumber: syz [ 576.154227][ T5824] usb 2-1: config 0 descriptor?? [ 576.175950][ T5824] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 576.290485][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4769'. [ 576.458474][ T5824] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 576.615244][ T5824] usb 2-1: USB disconnect, device number 40 [ 576.747654][T18650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.755695][T18654] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 576.779491][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4774'. [ 576.819520][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4774'. [ 577.706201][ T3096] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 577.853258][T18687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.920592][ T3096] usb 3-1: Using ep0 maxpacket: 32 [ 577.926893][T18691] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 577.938250][ T3096] usb 3-1: config 0 has no interfaces? [ 577.944124][ T3096] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 577.970119][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.991994][ T3096] usb 3-1: config 0 descriptor?? [ 578.073371][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4788'. [ 578.083072][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4788'. [ 578.121913][T18695] bond0: entered promiscuous mode [ 578.162383][T18695] bond_slave_0: entered promiscuous mode [ 578.179452][T18695] bond_slave_1: entered promiscuous mode [ 578.225137][ T3096] usb 3-1: USB disconnect, device number 51 [ 578.260327][T18695] bond0: left promiscuous mode [ 578.267418][T18695] bond_slave_0: left promiscuous mode [ 578.285853][T18695] bond_slave_1: left promiscuous mode [ 578.446349][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4781'. [ 578.473752][ T5824] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 578.736418][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 579.042517][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.053242][ T5824] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.066423][ T5824] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 579.075941][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.256570][T18707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4793'. [ 579.284900][ T5824] usb 2-1: Product: syz [ 579.299994][ T5824] usb 2-1: Manufacturer: syz [ 579.304757][ T5824] usb 2-1: SerialNumber: syz [ 579.328163][ T5824] usb 2-1: config 0 descriptor?? [ 579.471811][T18713] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 579.544654][ T5824] usb 2-1: USB disconnect, device number 41 [ 579.680251][ T51] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 580.026424][ T5824] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 580.056246][ T3096] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 580.228133][ T5824] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.233607][ T3096] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 580.237600][ T5824] usb 3-1: config 0 has no interface number 0 [ 580.255066][ T3096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.279631][ T5824] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 580.301583][ T3096] usb 1-1: config 0 has no interfaces? [ 580.303915][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.318338][ T3096] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 580.341471][ T5824] usb 3-1: Product: syz [ 580.350898][ T3096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.355662][ T5824] usb 3-1: Manufacturer: syz [ 580.370597][ T5824] usb 3-1: SerialNumber: syz [ 580.382354][ T3096] usb 1-1: config 0 descriptor?? [ 580.399165][ T5824] usb 3-1: config 0 descriptor?? [ 580.502065][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 580.502088][ T29] audit: type=1326 audit(1774009765.160:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18735 comm="syz.1.4804" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x0 [ 580.638321][ T5824] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 580.679493][ T5824] usb 3-1: USB disconnect, device number 52 [ 581.590697][ T29] audit: type=1326 audit(1774009766.260:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.639331][T18756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4811'. [ 581.666570][ T29] audit: type=1326 audit(1774009766.260:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.746219][ T29] audit: type=1326 audit(1774009766.300:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.783439][ T29] audit: type=1326 audit(1774009766.300:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.806391][ T29] audit: type=1326 audit(1774009766.300:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.902466][ T29] audit: type=1326 audit(1774009766.300:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 581.941239][ T29] audit: type=1326 audit(1774009766.300:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 582.026419][ T29] audit: type=1326 audit(1774009766.320:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 582.070524][ T29] audit: type=1326 audit(1774009766.330:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 582.383439][T18769] bridge_slave_0 (unregistering): left allmulticast mode [ 582.406934][T18769] bridge_slave_0 (unregistering): left promiscuous mode [ 582.414291][T18769] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.492772][T18778] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.502030][T18778] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.848828][T18778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.879104][ T3096] usb 1-1: USB disconnect, device number 41 [ 582.946380][T18778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.468952][ T78] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.542300][ T78] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.596374][ T78] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.639365][ T78] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.688601][T18798] binder: 18796:18798 ioctl c0306201 0 returned -14 [ 584.497386][T18811] binder: 18796:18811 ioctl c0306201 0 returned -14 [ 587.576335][ T5915] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 587.745830][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.762331][ T5915] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 587.782250][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.810137][ T5915] usb 3-1: config 0 descriptor?? [ 587.829694][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 587.944705][ T51] Bluetooth: hci3: Malformed Event: 0x13 [ 588.258310][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 588.265820][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.275433][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 588.287106][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 588.297309][ T5915] pwc: recv_control_msg error -32 req 04 val 1300 [ 588.304819][ T5915] pwc: recv_control_msg error -32 req 04 val 1400 [ 588.324299][ T5915] pwc: recv_control_msg error -32 req 02 val 2000 [ 588.331930][ T5915] pwc: recv_control_msg error -32 req 02 val 2100 [ 588.345763][ T5915] pwc: recv_control_msg error -32 req 04 val 1500 [ 588.355242][ T5915] pwc: recv_control_msg error -32 req 02 val 2500 [ 588.363717][ T5915] pwc: recv_control_msg error -32 req 02 val 2400 [ 588.398084][ T51] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 588.446349][ T5824] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 588.572569][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.582088][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.776574][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.783738][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.796241][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 588.806572][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.841686][ T5824] usb 1-1: config 0 has no interfaces? [ 588.846470][ T5915] pwc: Registered as video103. [ 588.860231][ T5824] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.878546][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 588.878934][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.014262][ T5824] usb 1-1: Product: syz [ 589.031028][ T5824] usb 1-1: Manufacturer: syz [ 589.040232][ T5824] usb 1-1: SerialNumber: syz [ 589.040339][ T5915] usb 3-1: USB disconnect, device number 53 [ 589.058561][ T5824] usb 1-1: config 0 descriptor?? [ 589.388071][ T5824] usb 1-1: USB disconnect, device number 42 [ 590.705936][T18915] syzkaller0: entered promiscuous mode [ 590.721788][T18915] syzkaller0: entered allmulticast mode [ 590.936224][ T42] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 591.507763][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 591.538479][ T42] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 591.548750][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.555230][T18927] tipc: Enabled bearer , priority 0 [ 591.566200][ T42] usb 5-1: Product: syz [ 591.576430][ T42] usb 5-1: Manufacturer: syz [ 591.576794][T18927] syzkaller0: entered promiscuous mode [ 591.586136][ T42] usb 5-1: SerialNumber: syz [ 591.608607][ T42] usb 5-1: config 0 descriptor?? [ 591.615500][T18927] syzkaller0: entered allmulticast mode [ 591.636455][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 591.644187][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 591.666390][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 591.689377][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 591.689668][T18927] tipc: Resetting bearer [ 591.695219][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 591.716595][T18927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.725213][T18927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.752264][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 591.783324][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 591.796054][T18926] tipc: Resetting bearer [ 591.803204][ T42] usb 5-1: media controller created [ 591.834323][T18916] dvb-usb: bulk message failed: -22 (7/0) [ 591.845861][T18916] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 591.868199][T18926] tipc: Disabling bearer [ 591.871996][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.893028][T18916] ttusb2: i2c transfer failed. [ 591.961827][ T42] usb 5-1: selecting invalid altsetting 3 [ 591.986203][ T42] ttusb2: set interface to alts=3 failed [ 592.070429][ T42] DVB: Unable to find symbol tda10086_attach() [ 592.085220][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 592.113391][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 592.126818][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 592.153557][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 592.584990][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 592.694861][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 592.770840][ T42] usb 5-1: USB disconnect, device number 52 [ 592.913411][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 592.966972][T18951] Set syz1 is full, maxelem 2 reached [ 593.243499][T18955] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 594.093994][T18969] netlink: 'syz.3.4887': attribute type 62 has an invalid length. [ 594.885972][ T5915] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 595.066503][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 595.546258][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.577320][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.598947][ T5915] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 595.631018][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.668028][ T5915] usb 4-1: config 0 descriptor?? [ 596.134507][ T5915] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 596.487937][ T5915] usb 4-1: USB disconnect, device number 58 [ 596.592677][T18993] fido_id[18993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 597.221521][ T42] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 597.366612][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4899'. [ 597.454480][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.520651][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.551343][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.577830][T19013] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 597.598222][ T42] usb 3-1: config 0 descriptor?? [ 597.614524][T19013] bond4 (unregistering): Released all slaves [ 597.642800][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 598.139722][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 598.161843][T19026] input: syz1 as /devices/virtual/input/input27 [ 598.351995][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 598.360703][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 598.368468][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 598.375779][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 598.384128][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 598.392407][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 598.399835][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 598.407799][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 598.641433][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 598.848917][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 598.856832][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 598.866335][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 598.899409][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 598.968551][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 598.985102][ T42] pwc: Registered as video103. [ 599.001304][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 599.059074][ T42] usb 3-1: USB disconnect, device number 54 [ 599.764640][T19040] tc_dump_action: action bad kind [ 600.426596][ T5824] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 600.599207][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.616169][ T5824] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 600.630401][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.685122][ T5824] usb 2-1: config 0 descriptor?? [ 600.694158][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 600.940812][T19062] netlink: 'syz.0.4918': attribute type 16 has an invalid length. [ 600.964079][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4918'. [ 601.295834][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 601.343310][ T5824] pwc: recv_control_msg error -32 req 02 val 2700 [ 601.557637][ T5824] pwc: recv_control_msg error -71 req 04 val 1000 [ 601.565434][ T5824] pwc: recv_control_msg error -71 req 04 val 1300 [ 601.584165][ T5824] pwc: recv_control_msg error -71 req 04 val 1400 [ 601.619074][ T5824] pwc: recv_control_msg error -71 req 02 val 2000 [ 601.659487][ T5824] pwc: recv_control_msg error -71 req 02 val 2100 [ 601.677665][ T5824] pwc: recv_control_msg error -71 req 04 val 1500 [ 601.692398][ T5824] pwc: recv_control_msg error -71 req 02 val 2500 [ 601.720559][ T5824] pwc: recv_control_msg error -71 req 02 val 2400 [ 601.740094][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 601.876776][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 601.904378][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 601.915106][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 601.922772][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 601.942793][ T5824] pwc: Registered as video103. [ 601.959726][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 601.986247][ T42] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 602.004356][ T5824] usb 2-1: USB disconnect, device number 42 [ 602.168086][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 602.182463][ T42] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 602.202255][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.236308][ T42] usb 4-1: Product: syz [ 602.250909][ T42] usb 4-1: Manufacturer: syz [ 602.269331][ T42] usb 4-1: SerialNumber: syz [ 602.284869][ T42] usb 4-1: config 0 descriptor?? [ 602.314926][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 602.323084][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 602.336294][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 602.370085][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 602.778317][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 603.207260][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.217621][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 603.236725][ T42] usb 4-1: media controller created [ 603.303285][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.395213][ T42] usb 4-1: selecting invalid altsetting 3 [ 603.436602][ T42] ttusb2: set interface to alts=3 failed [ 603.658500][ T42] DVB: Unable to find symbol tda10086_attach() [ 603.665015][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 603.707754][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 603.729672][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 603.772551][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 603.791414][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 603.833789][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 603.885946][ T42] usb 4-1: USB disconnect, device number 59 [ 604.072029][T19101] netlink: 'syz.1.4931': attribute type 16 has an invalid length. [ 604.080080][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 604.138582][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 604.289597][ T51] Bluetooth: hci1: unexpected event for opcode 0x203d [ 605.746320][ T42] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 605.948041][ T42] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 605.956648][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.976517][ T42] usb 4-1: config 0 has no interface number 0 [ 606.043859][ T42] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 606.063440][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.090199][ T42] usb 4-1: config 0 descriptor?? [ 606.114984][ T42] ldusb 4-1:0.55: Interrupt in endpoint not found [ 606.372638][ T42] usb 4-1: USB disconnect, device number 60 [ 606.646324][ T3096] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 606.906261][ T3096] usb 5-1: Using ep0 maxpacket: 32 [ 606.929827][ T3096] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 606.939412][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.947806][ T3096] usb 5-1: Product: syz [ 606.952106][ T3096] usb 5-1: Manufacturer: syz [ 606.964503][ T3096] usb 5-1: SerialNumber: syz [ 607.014337][ T3096] usb 5-1: config 0 descriptor?? [ 607.028692][ T3096] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 607.057318][ T3096] dvb-usb: bulk message failed: -22 (4/0) [ 607.063221][ T3096] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.074518][ T3096] dvb-usb: bulk message failed: -22 (5/0) [ 607.081274][ T3096] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.124182][ T3096] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.160783][ T3096] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 607.242136][ T3096] usb 5-1: media controller created [ 607.335850][ T3096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.376299][ T5915] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 607.423176][ T3096] usb 5-1: selecting invalid altsetting 3 [ 607.436822][ T3096] ttusb2: set interface to alts=3 failed [ 607.483422][ T3096] DVB: Unable to find symbol tda10086_attach() [ 607.497972][ T3096] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 607.508261][ T3096] dvb-usb: bulk message failed: -22 (4/0) [ 607.514176][ T3096] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.533072][ T3096] dvb-usb: bulk message failed: -22 (5/0) [ 607.543291][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 607.549575][ T3096] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.562631][ T5915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.573819][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 607.583794][ T5915] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 607.596277][ T3096] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 607.605327][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.622742][ T5915] usb 2-1: config 0 descriptor?? [ 607.628790][ T3096] usb 5-1: USB disconnect, device number 53 [ 607.727784][ T3096] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 608.338136][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 608.351463][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 608.361085][ T5834] Bluetooth: hci1: hardware error 0x00 [ 608.379285][ T5915] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 608.736287][ T5915] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 608.804383][ T3096] usb 2-1: USB disconnect, device number 43 [ 608.901601][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 608.913997][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.929302][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.941462][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 608.955723][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.985381][ T5915] usb 3-1: config 0 descriptor?? [ 609.011743][ T5915] hub 3-1:0.0: USB hub found [ 609.105561][T19162] bridge0: port 1(vlan2) entered blocking state [ 609.122431][T19162] bridge0: port 1(vlan2) entered disabled state [ 609.137635][T19162] vlan2: entered allmulticast mode [ 609.146785][T19162] geneve0: entered allmulticast mode [ 609.165579][T19162] vlan2: entered promiscuous mode [ 609.173570][T19162] geneve0: entered promiscuous mode [ 609.221716][ T5915] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 609.650625][ T5915] hid-generic 0003:046D:C31C.0029: unknown main item tag 0x0 [ 609.697477][ T5915] hid-generic 0003:046D:C31C.0029: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 610.076206][ T42] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 610.265710][ T42] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 610.287968][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.310222][T19157] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 610.320892][ T42] usb 2-1: config 0 has no interface number 0 [ 610.340298][ T29] audit: type=1326 audit(1774009795.010:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19175 comm="syz.4.4958" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x0 [ 610.346485][ T42] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 610.410919][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.461895][ T42] usb 2-1: config 0 descriptor?? [ 610.490616][ T42] ldusb 2-1:0.55: Interrupt in endpoint not found [ 610.497246][ T5834] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 610.532497][T19157] usb 3-1: device firmware changed [ 610.549538][ T5915] usb 3-1: USB disconnect, device number 55 [ 610.716400][ T5915] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 610.739908][ T5967] usb 2-1: USB disconnect, device number 44 [ 610.876495][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 610.888076][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.912058][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.936222][ T5915] usb 3-1: New USB device found, idVendor=6172, idProduct=2377, bcdDevice= 0.00 [ 610.955672][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.975819][ T5915] usb 3-1: config 0 descriptor?? [ 610.987541][ T5915] hub 3-1:0.0: USB hub found [ 611.016377][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4963'. [ 611.026037][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4963'. [ 611.189865][ T5915] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 611.215974][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 611.224874][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 611.261149][ T5915] usb 3-1: USB disconnect, device number 56 [ 611.908278][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4968'. [ 612.584852][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4972'. [ 613.074940][ T5834] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 613.120140][T19233] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4980'. [ 613.152082][T19233] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4980'. [ 613.206221][ T5967] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 613.384236][ T5967] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 613.397422][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.621009][ T5967] usb 3-1: config 0 has no interface number 0 [ 613.636311][ T5967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 613.645506][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.680790][ T5967] usb 3-1: config 0 descriptor?? [ 613.707315][ T5967] ldusb 3-1:0.55: Interrupt in endpoint not found [ 613.929664][ T5967] usb 3-1: USB disconnect, device number 57 [ 614.364219][T19264] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4993'. [ 614.376229][ T5967] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 614.407934][T19264] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4993'. [ 614.535289][ T5967] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 614.554930][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.563913][ T5967] usb 4-1: Product: syz [ 614.568992][ T5967] usb 4-1: Manufacturer: syz [ 614.574191][ T5967] usb 4-1: SerialNumber: syz [ 614.587571][ T5967] usb 4-1: config 0 descriptor?? [ 615.027327][ T5967] usb 4-1: Firmware: major: 12, minor: 0, hardware type: ATUSB (0) [ 615.156256][ T42] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 615.323853][ T5967] usb 4-1: failed to fetch extended address, random address set [ 615.403755][ T5967] usb 4-1: USB disconnect, device number 61 [ 615.417391][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 615.443085][ T42] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 615.456759][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.502138][ T42] usb 3-1: Product: syz [ 615.529458][ T42] usb 3-1: Manufacturer: syz [ 615.563745][ T42] usb 3-1: SerialNumber: syz [ 615.660183][ T42] usb 3-1: config 0 descriptor?? [ 615.740872][ T42] gspca_main: se401-2.14.0 probing 047d:5003 [ 616.185706][T19298] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5006'. [ 616.211138][T19298] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5006'. [ 616.455542][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5004'. [ 616.480381][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5004'. [ 616.886797][ T3096] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 617.091784][ T3096] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 617.097888][ T42] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 617.100545][ T3096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.144800][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 617.150969][ T3096] usb 1-1: config 0 has no interface number 0 [ 617.156504][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 617.160860][ T3096] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 617.168831][ T5834] Bluetooth: hci4: hardware error 0x00 [ 617.201918][ T3096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.286905][ T29] audit: type=1800 audit(1774009801.950:367): pid=19312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5007" name="/" dev="fuse" ino=4 res=0 errno=0 [ 617.308973][ T3096] usb 1-1: config 0 descriptor?? [ 617.328834][ T3096] ldusb 1-1:0.55: Interrupt in endpoint not found [ 617.356204][ T5967] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 617.469839][ T42] usb 3-1: device descriptor read/64, error -32 [ 617.510341][ T5967] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 617.523739][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.540480][ T5967] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 617.550281][ T5967] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 617.560530][ T3096] usb 1-1: USB disconnect, device number 43 [ 617.568433][ T5967] usb 4-1: Manufacturer: syz [ 617.592910][ T5967] usb 4-1: config 0 descriptor?? [ 617.672161][T19331] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5018'. [ 617.687198][T19331] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5018'. [ 617.706988][ T5967] rc_core: IR keymap rc-hauppauge not found [ 617.715440][ T5967] Registered IR keymap rc-empty [ 617.726247][ T42] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 617.742540][ T5967] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 617.777834][ T5967] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 617.812654][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 617.819805][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 617.854807][ T5967] usb 4-1: USB disconnect, device number 62 [ 617.886230][ T42] usb 3-1: device descriptor read/64, error -32 [ 618.460047][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5023'. [ 618.676268][T19346] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 618.718842][T19346] bond2 (unregistering): Released all slaves [ 618.858124][ T42] gspca_se401: read req failed req 0x06 error -19 [ 618.888785][ T42] usb 3-1: USB disconnect, device number 58 [ 619.296591][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 619.324782][T19362] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5029'. [ 619.357977][T19362] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5029'. [ 619.510352][T19369] tipc: Enabling of bearer rejected, already enabled [ 619.524488][T19369] tipc: Enabling of bearer rejected, already enabled [ 619.839944][ T5914] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 620.029280][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 620.043207][ T5914] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 620.052608][ T5914] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.061483][ T5914] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.071432][ T5914] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.288985][ T5914] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 620.306197][ T5914] usb 1-1: config 0 has no interface number 0 [ 620.312561][ T5914] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 620.415547][ T5914] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 620.436596][ T5914] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.457593][ T5914] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.475676][ T5914] usb 1-1: config 0 interface 125 has no altsetting 0 [ 620.483103][ T5914] usb 1-1: config 0 interface 125 has no altsetting 2 [ 620.517632][ T5914] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 620.530425][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.679193][ T5914] usb 1-1: Product: syz [ 620.706156][ T5914] usb 1-1: Manufacturer: syz [ 620.724163][ T5914] usb 1-1: SerialNumber: syz [ 620.748850][ T5914] usb 1-1: config 0 descriptor?? [ 620.768759][ T5914] usb 1-1: selecting invalid altsetting 2 [ 621.315457][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5036'. [ 621.330450][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5036'. [ 621.340265][T19391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5037'. [ 621.378820][T19371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.391182][T19371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.649247][T19371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.691115][T19371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.730222][T19371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.765762][T19371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.894257][T19399] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5041'. [ 621.908480][ T5914] get_1284_register timeout [ 621.913291][ C0] usb 1-1: async_complete: urb error -104 [ 621.919163][ C0] usb 1-1: async_complete: urb error -104 [ 621.969832][ T24] usb 1-1: USB disconnect, device number 44 [ 621.970110][T19399] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5041'. [ 622.267607][T19414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.378308][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 622.395239][T19416] tipc: Enabling of bearer rejected, already enabled [ 623.048719][ T42] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 623.264856][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 623.295201][ T42] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 623.305106][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.313882][ T42] usb 1-1: Product: syz [ 623.318740][ T42] usb 1-1: Manufacturer: syz [ 623.323513][ T42] usb 1-1: SerialNumber: syz [ 623.875195][ T42] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 623.938223][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 624.065645][ T42] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 624.151344][ T42] usb 1-1: media controller created [ 624.418778][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.500983][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.510284][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.531368][ T42] zl10353_read_register: readreg error (reg=127, ret==-71) [ 624.771785][ T42] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 624.847317][ T42] usb 1-1: USB disconnect, device number 45 [ 624.933935][T19445] lo: entered allmulticast mode [ 624.961766][T19443] lo: left allmulticast mode [ 625.206221][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 625.214162][ T42] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 625.366387][ T24] usb 4-1: device descriptor read/64, error -71 [ 625.516184][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 625.586935][ T42] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 625.595308][ T42] usb 1-1: config 0 has no interface number 0 [ 625.624603][ T42] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.642614][ T42] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 625.652754][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 625.661050][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.680834][ T42] usb 1-1: Product: syz [ 625.690754][ T42] usb 1-1: Manufacturer: syz [ 625.700022][ T42] usb 1-1: SerialNumber: syz [ 625.713587][ T42] usb 1-1: config 0 descriptor?? [ 625.742589][ T42] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 625.761330][ T42] em28xx 1-1:0.132: Video interface 132 found: [ 625.976231][ T24] usb 4-1: device descriptor read/64, error -71 [ 626.088985][ T24] usb usb4-port1: attempt power cycle [ 626.239848][ T42] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 626.453384][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 626.513671][ T24] usb 4-1: device descriptor read/8, error -71 [ 626.658259][ T42] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 626.686215][ T42] em28xx 1-1:0.132: board has no eeprom [ 626.766324][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 626.774117][ T42] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 626.801939][ T42] em28xx 1-1:0.132: analog set to bulk mode. [ 626.819816][ T5824] em28xx 1-1:0.132: Registering V4L2 extension [ 626.836203][ T24] usb 4-1: device descriptor read/8, error -71 [ 626.853014][ T42] usb 1-1: USB disconnect, device number 46 [ 626.881166][ T42] em28xx 1-1:0.132: Disconnecting em28xx [ 626.966701][ T24] usb usb4-port1: unable to enumerate USB device [ 627.630689][T19476] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 627.817372][ T5824] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 627.829304][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5070'. [ 627.835125][ T5824] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 627.933846][ T5824] em28xx 1-1:0.132: No AC97 audio processor [ 627.959755][T19480] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 628.011282][T19480] bond3 (unregistering): Released all slaves [ 628.035209][ T5824] usb 1-1: Decoder not found [ 628.089214][ T5824] em28xx 1-1:0.132: failed to create media graph [ 628.106305][ T5824] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 628.292627][ T5824] em28xx 1-1:0.132: Remote control support is not available for this card. [ 628.339167][ T42] em28xx 1-1:0.132: Closing input extension [ 628.413216][ T42] em28xx 1-1:0.132: Freeing device [ 629.166561][ T42] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 629.337702][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 629.344825][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 629.391060][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 629.406211][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.421510][ T42] usb 4-1: Product: syz [ 629.431886][ T42] usb 4-1: Manufacturer: syz [ 629.442014][ T42] usb 4-1: SerialNumber: syz [ 629.455499][ T42] usb 4-1: config 0 descriptor?? [ 629.490952][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 629.522636][ T42] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 629.637447][T19514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5083'. [ 629.705541][T19514] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 629.738495][T19514] bond2 (unregistering): Released all slaves [ 630.034499][T19523] ptrace attach of "./syz-executor exec"[19525] was attempted by "./syz-executor exec"[19523] [ 630.090193][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 630.508603][ T42] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 630.536323][ T42] em28xx 4-1:0.0: board has no eeprom [ 630.689983][T19543] netlink: 'syz.2.5096': attribute type 16 has an invalid length. [ 630.716372][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5096'. [ 630.750375][T19543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.628379][T19499] em28xx 4-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 631.676953][ T42] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 631.711568][ T42] em28xx 4-1:0.0: dvb set to bulk mode. [ 631.738843][ T5824] em28xx 4-1:0.0: Binding DVB extension [ 631.796268][ T42] usb 4-1: USB disconnect, device number 67 [ 631.875263][ T42] em28xx 4-1:0.0: Disconnecting em28xx [ 632.162799][ T5824] em28xx 4-1:0.0: Registering input extension [ 632.199023][ T42] em28xx 4-1:0.0: Closing input extension [ 632.234748][ T42] em28xx 4-1:0.0: Freeing device [ 633.909632][T19579] netlink: 'syz.1.5108': attribute type 17 has an invalid length. [ 633.942520][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5108'. [ 634.134237][T19580] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 634.292445][T19580] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 634.325848][T19580] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 638.149880][T19627] input: syz1 as /devices/virtual/input/input32 [ 639.266585][ T5872] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 639.441437][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 639.452992][ T5872] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 639.494278][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.525795][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.565312][ T5872] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 639.589148][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.617910][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.664344][ T5872] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 639.685821][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.704184][T19646] netlink: set zone limit has 4 unknown bytes [ 639.715459][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.751674][ T5872] usb 1-1: string descriptor 0 read error: -22 [ 639.759772][ T5872] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 639.785959][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.843964][ T5872] adutux 1-1:168.0: interrupt endpoints not found [ 639.926477][T19582] Set syz1 is full, maxelem 65536 reached [ 640.064674][ T5914] usb 1-1: USB disconnect, device number 47 [ 640.239828][T19654] loop6: detected capacity change from 0 to 2640 [ 640.258703][T19654] buffer_io_error: 10 callbacks suppressed [ 640.258723][T19654] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.286308][T19654] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.305003][T19654] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.335023][T19654] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.384910][T19654] Buffer I/O error on dev loop6, logical block 1, async page read [ 640.407102][T19654] loop6: unable to read partition table [ 640.430617][T19657] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 640.443078][T19659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5138'. [ 640.453236][T19654] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 640.456924][T19657] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 640.471470][T19657] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 640.506245][ T5872] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 640.508776][T19657] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 640.543882][T19657] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 640.703487][ T5872] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 640.728933][ T5872] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 640.764797][ T5872] usb 5-1: Product: syz [ 640.769121][ T5872] usb 5-1: Manufacturer: syz [ 640.773771][ T5872] usb 5-1: SerialNumber: syz [ 640.804003][ T5872] usb 5-1: config 0 descriptor?? [ 640.823335][ T5872] ch341 5-1:0.0: ch341-uart converter detected [ 640.980382][T19678] netlink: 'syz.2.5146': attribute type 17 has an invalid length. [ 640.988462][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5146'. [ 641.671852][T19686] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5149'. [ 641.682997][T19686] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5149'. [ 641.816446][T19690] block device autoloading is deprecated and will be removed. [ 641.870861][ T5872] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 642.056522][ T5872] usb 5-1: USB disconnect, device number 54 [ 642.112110][ T5872] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 642.165393][ T5872] ch341 5-1:0.0: device disconnected [ 643.441204][T19712] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 643.441204][T19712] program syz.4.5157 not setting count and/or reply_len properly [ 643.578084][T19719] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5160'. [ 643.588450][T19719] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5160'. [ 643.810057][T19724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5162'. [ 643.857906][T19724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5162'. [ 644.851222][T19737] ALSA: seq fatal error: cannot create timer (-16) [ 646.013066][T19759] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5172'. [ 646.037554][T19759] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5172'. [ 646.565852][T19768] netlink: 'syz.3.5175': attribute type 17 has an invalid length. [ 646.587220][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'. [ 647.316215][ T5967] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 647.467765][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 647.477119][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5181'. [ 647.506380][ T5967] usb 5-1: no configurations [ 647.511163][ T5967] usb 5-1: can't read configurations, error -22 [ 647.590311][T19785] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 647.620138][T19785] bond4 (unregistering): Released all slaves [ 647.666206][ T5967] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 647.826448][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 647.832534][ T5967] usb 5-1: no configurations [ 647.839035][ T5967] usb 5-1: can't read configurations, error -22 [ 647.863689][ T5967] usb usb5-port1: attempt power cycle [ 648.046763][T19791] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5184'. [ 648.069081][T19791] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5184'. [ 648.226557][ T5967] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 648.267015][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 648.273108][ T5967] usb 5-1: no configurations [ 648.277934][ T5967] usb 5-1: can't read configurations, error -22 [ 648.316304][T19800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5187'. [ 648.426274][ T5967] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 648.468091][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 648.549108][ T5967] usb 5-1: no configurations [ 648.558939][ T5967] usb 5-1: can't read configurations, error -22 [ 648.569468][ T5967] usb usb5-port1: unable to enumerate USB device [ 649.626233][ T5967] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 649.782664][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.806239][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.806297][ T5967] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 649.806323][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.880425][ T5967] usb 2-1: config 0 descriptor?? [ 650.308669][ T5967] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x2 [ 650.347705][ T5967] pyra 0003:1E7D:2CF6.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 651.511852][ T5967] pyra 0003:1E7D:2CF6.002A: couldn't init struct pyra_device [ 651.522997][ T5967] pyra 0003:1E7D:2CF6.002A: couldn't install mouse [ 651.538713][ T5967] pyra 0003:1E7D:2CF6.002A: probe with driver pyra failed with error -71 [ 651.554362][ T5967] usb 2-1: USB disconnect, device number 45 [ 651.578798][T19834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5201'. [ 651.591421][T19834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5201'. [ 651.945202][ T5834] Bluetooth: Wrong link type (-71) [ 652.261327][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.269029][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.376258][ T5914] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 652.443905][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.467697][T19856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.546181][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 652.553583][ T5914] usb 5-1: no configurations [ 652.559675][ T5914] usb 5-1: can't read configurations, error -22 [ 652.696216][ T5914] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 652.715360][ T55] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.728087][ T55] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.738944][ T55] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.748130][ T55] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.856228][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 652.867677][ T5914] usb 5-1: no configurations [ 652.886167][ T5914] usb 5-1: can't read configurations, error -22 [ 652.916246][ T5914] usb usb5-port1: attempt power cycle [ 653.070765][T19871] netlink: 'syz.0.5211': attribute type 21 has an invalid length. [ 653.218284][ T55] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.231900][ T55] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.242480][ T55] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.254526][ T55] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.282920][T19870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5214'. [ 653.292264][T19870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5214'. [ 653.302041][ T5914] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 653.317582][T19870] team0: entered promiscuous mode [ 653.334911][T19870] team_slave_1: entered promiscuous mode [ 653.342004][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 653.349063][ T5914] usb 5-1: no configurations [ 653.353705][ T5914] usb 5-1: can't read configurations, error -22 [ 653.395106][T19870] bond0: entered promiscuous mode [ 653.422847][T19870] bond_slave_0: entered promiscuous mode [ 653.449621][T19870] bond_slave_1: entered promiscuous mode [ 653.457200][T19870] debugfs: 'hsr1' already exists in 'hsr' [ 653.463406][T19870] Cannot create hsr debugfs directory [ 653.469734][T19870] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 653.480158][T19870] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 653.496308][T19870] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 653.506252][ T5914] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 653.538460][T19873] tipc: Enabling of bearer rejected, failed to enable media [ 653.547471][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 653.557208][ T5914] usb 5-1: no configurations [ 653.568904][ T5914] usb 5-1: can't read configurations, error -22 [ 653.580409][ T5914] usb usb5-port1: unable to enumerate USB device [ 655.899623][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 656.836158][ T5914] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 656.996135][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 657.003511][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 657.018470][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 657.038090][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.066145][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.096143][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.115558][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.346486][ T5914] usb 1-1: GET_CAPABILITIES returned 0 [ 657.353355][ T5914] usbtmc 1-1:16.0: can't read capabilities [ 657.591964][ T5914] usb 1-1: USB disconnect, device number 48 [ 658.066564][ T5914] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 658.227514][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 658.249225][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.263301][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.296275][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 658.322488][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 658.345450][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.367230][ T5914] usb 4-1: config 0 descriptor?? [ 658.561522][T19969] tipc: Enabling of bearer rejected, already enabled [ 658.833916][ T5914] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.002B/input/input33 [ 659.170166][ T5914] appleir 0003:05AC:8241.002B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 659.238923][ T5914] usb 4-1: USB disconnect, device number 68 [ 659.416335][T19980] fido_id[19980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 660.464633][T19997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5264'. [ 660.627448][T19997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5264'. [ 660.727566][T19997] team0: entered promiscuous mode [ 660.759398][T19997] team_slave_0: entered promiscuous mode [ 660.775181][T19997] team_slave_1: entered promiscuous mode [ 660.786993][T20003] netlink: 308 bytes leftover after parsing attributes in process `syz.1.5267'. [ 660.799800][T19997] bond0: entered promiscuous mode [ 660.816312][T19997] bond_slave_0: entered promiscuous mode [ 660.824418][T20003] netlink: 308 bytes leftover after parsing attributes in process `syz.1.5267'. [ 660.856738][T19997] bond_slave_1: entered promiscuous mode [ 660.863975][T19997] debugfs: 'hsr1' already exists in 'hsr' [ 661.035657][T19997] Cannot create hsr debugfs directory [ 661.056853][T19997] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 661.453941][T20015] tipc: Enabling of bearer rejected, already enabled [ 661.616821][ T42] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 661.766183][ T42] usb 4-1: device descriptor read/64, error -71 [ 662.007447][ T42] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 662.241411][ T42] usb 4-1: device descriptor read/64, error -71 [ 662.356659][ T42] usb usb4-port1: attempt power cycle [ 662.716181][ T42] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 662.737209][ T42] usb 4-1: device descriptor read/8, error -71 [ 662.976791][ T42] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 663.020414][ T42] usb 4-1: device descriptor read/8, error -71 [ 663.147458][ T42] usb usb4-port1: unable to enumerate USB device [ 664.589755][T20047] netlink: 'syz.4.5281': attribute type 10 has an invalid length. [ 664.612306][T20047] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 664.623538][T20047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 664.720522][T20047] bond0: (slave wlan1): Releasing backup interface [ 664.741074][T20047] mac80211_hwsim hwsim14 wlan1 (unregistering): left promiscuous mode [ 665.043877][T20061] tipc: Enabling of bearer rejected, already enabled [ 665.155176][ T29] audit: type=1326 audit(1774009849.820:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.220985][ T29] audit: type=1326 audit(1774009849.820:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.269096][ T29] audit: type=1326 audit(1774009849.820:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.367453][ T29] audit: type=1326 audit(1774009849.820:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.428374][ T29] audit: type=1326 audit(1774009849.820:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.574599][ T29] audit: type=1326 audit(1774009849.820:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.637402][ T29] audit: type=1326 audit(1774009849.820:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.699766][ T29] audit: type=1326 audit(1774009849.820:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 665.971593][ T29] audit: type=1326 audit(1774009849.820:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 666.018849][ T29] audit: type=1326 audit(1774009849.820:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.1.5285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 666.240594][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5294'. [ 666.256885][ T3096] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 666.271038][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5294'. [ 666.418151][ T3096] usb 3-1: device descriptor read/64, error -71 [ 666.656337][ T3096] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 666.807879][ T3096] usb 3-1: device descriptor read/64, error -71 [ 666.917446][ T3096] usb usb3-port1: attempt power cycle [ 667.446152][ T3096] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 667.576788][ T3096] usb 3-1: device descriptor read/8, error -71 [ 667.816226][ T3096] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 667.847528][ T3096] usb 3-1: device descriptor read/8, error -71 [ 667.980283][ T3096] usb usb3-port1: unable to enumerate USB device [ 668.097106][T20115] tipc: Enabling of bearer rejected, already enabled [ 669.027309][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 669.217887][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 669.224329][ T24] usb 4-1: no configurations [ 669.235643][ T24] usb 4-1: can't read configurations, error -22 [ 669.496243][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 669.656425][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 669.726731][ T24] usb 4-1: no configurations [ 669.731539][ T24] usb 4-1: can't read configurations, error -22 [ 669.745389][ T24] usb usb4-port1: attempt power cycle [ 670.286254][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 670.326666][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 670.333822][ T24] usb 4-1: no configurations [ 670.343597][ T24] usb 4-1: can't read configurations, error -22 [ 670.497141][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 670.527224][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 670.534311][ T24] usb 4-1: no configurations [ 670.544060][ T24] usb 4-1: can't read configurations, error -22 [ 670.566505][ T24] usb usb4-port1: unable to enumerate USB device [ 670.665748][T20164] tipc: Enabling of bearer rejected, already enabled [ 670.731944][ T3096] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 670.877703][T20167] netlink: 'syz.2.5326': attribute type 1 has an invalid length. [ 670.906981][ T3096] usb 2-1: no configurations [ 670.914186][ T3096] usb 2-1: can't read configurations, error -22 [ 670.956600][T20167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.993196][T20171] bond4: entered allmulticast mode [ 671.066253][ T3096] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 671.166392][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5329'. [ 671.254140][ T3096] usb 2-1: no configurations [ 671.260703][ T3096] usb 2-1: can't read configurations, error -22 [ 671.269812][ T3096] usb usb2-port1: attempt power cycle [ 671.480412][T20182] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 671.636192][ T3096] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 671.657786][ T3096] usb 2-1: no configurations [ 671.662449][ T3096] usb 2-1: can't read configurations, error -22 [ 671.819602][ T3096] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 671.847850][ T3096] usb 2-1: no configurations [ 671.852740][ T3096] usb 2-1: can't read configurations, error -22 [ 671.861974][ T3096] usb usb2-port1: unable to enumerate USB device [ 672.176384][ T3096] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 672.279864][T20208] netlink: 'syz.3.5344': attribute type 10 has an invalid length. [ 672.300164][T20208] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 672.328616][ T3096] usb 3-1: Using ep0 maxpacket: 32 [ 672.338239][ T3096] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.357027][ T3096] usb 3-1: config 0 has no interfaces? [ 672.365626][ T3096] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 672.375381][ T3096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.392614][T20208] bond0: (slave wlan1): Releasing backup interface [ 672.394099][ T3096] usb 3-1: Product: syz [ 672.403993][ T3096] usb 3-1: Manufacturer: syz [ 672.409158][ T3096] usb 3-1: SerialNumber: syz [ 672.421631][ T3096] usb 3-1: config 0 descriptor?? [ 672.539927][T20216] loop6: detected capacity change from 0 to 2640 [ 672.550567][T20216] buffer_io_error: 325 callbacks suppressed [ 672.550589][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.648725][T20219] tipc: Enabling of bearer rejected, already enabled [ 672.666586][ T24] usb 3-1: USB disconnect, device number 63 [ 672.681448][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.929088][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.944659][T20220] loop6: detected capacity change from 2640 to 524287999 [ 672.953460][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.996352][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.042102][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.057171][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.066232][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.074440][T20216] ldm_validate_partition_table(): Disk read failed. [ 673.081262][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.089340][T20216] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.097880][T20216] Dev loop6: unable to read RDB block 0 [ 673.104032][T20216] loop6: unable to read partition table [ 673.111851][T20216] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 673.656352][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 673.701225][T20234] netlink: 'syz.1.5358': attribute type 1 has an invalid length. [ 673.740706][T20234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.772290][T20234] bond4: entered allmulticast mode [ 673.846136][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 673.859436][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.941272][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.982541][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 674.084283][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.137093][ T24] usb 4-1: config 0 descriptor?? [ 674.486716][ T5967] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 674.561723][ T24] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 674.573030][ T24] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 674.637049][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 674.645088][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.657538][ T5967] usb 3-1: config 0 has no interfaces? [ 674.689446][ T5967] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 674.699164][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.711917][ T5967] usb 3-1: Product: syz [ 674.724677][ T5967] usb 3-1: Manufacturer: syz [ 674.748628][ T24] ft260 0003:0403:6030.002C: chip code: 0000 0000 [ 674.763824][ T5967] usb 3-1: SerialNumber: syz [ 674.962896][ T24] ft260 0003:0403:6030.002C: failed to retrieve system status [ 674.997594][ T24] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -71 [ 675.020246][ T24] usb 4-1: USB disconnect, device number 77 [ 675.255536][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5364'. [ 675.265025][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5364'. [ 675.342719][ T5967] usb 3-1: config 0 descriptor?? [ 675.374561][T20262] netlink: 'syz.4.5364': attribute type 4 has an invalid length. [ 675.390707][T20262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5364'. [ 675.463200][T20262] .`: renamed from bond0 [ 675.599518][ T3096] usb 3-1: USB disconnect, device number 64 [ 675.793019][T20272] tipc: Enabling of bearer rejected, already enabled [ 675.970596][T20276] netlink: 'syz.1.5370': attribute type 1 has an invalid length. [ 676.184167][T20276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.226337][T20278] bond5: entered allmulticast mode [ 676.676174][ T5872] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 676.847127][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 676.856220][ T5872] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 676.864351][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 677.043194][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 677.116256][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.142694][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.170825][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 677.183523][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 677.208153][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 677.230889][T20295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 677.279665][ T5872] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 677.293468][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 677.309452][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 677.324203][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.337498][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.352431][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 677.413028][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 677.474138][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 677.485768][ T5872] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 677.485799][ T5872] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 677.485829][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 677.485847][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.485867][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.485883][ T5872] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 677.485900][ T5872] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 677.485917][ T5872] usb 2-1: config 168 interface 0 has no altsetting 0 [ 677.489410][ T5872] usb 2-1: string descriptor 0 read error: -22 [ 677.489622][ T5872] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 677.489668][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.497414][ T5872] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 677.774558][T20285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.775018][T20285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.822307][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 677.843918][T20303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.020430][T20308] bond4: entered promiscuous mode [ 678.029502][T20308] bond4: entered allmulticast mode [ 678.045697][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.046345][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.049644][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.050104][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.052703][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.053165][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.461209][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.472394][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.503612][T20319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5384'. [ 678.516879][T20319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5384'. [ 678.556347][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 678.591295][ T51] Bluetooth: hci5: hardware error 0x48 [ 678.604157][T20321] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 678.645786][T20321] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 678.665298][T20321] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 678.674311][T20321] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 678.693293][T20321] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 678.707146][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 678.712425][T20321] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 678.714249][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.733967][T20321] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 678.746580][T20321] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 678.758081][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.769769][T20321] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 678.778503][T20321] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 678.790491][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 678.803079][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.812770][ T24] usb 1-1: Product: syz [ 678.818827][ T24] usb 1-1: Manufacturer: syz [ 678.836724][ T24] usb 1-1: SerialNumber: syz [ 678.850865][ T24] usb 1-1: config 0 descriptor?? [ 678.918521][T20331] tipc: Enabling of bearer rejected, already enabled [ 679.085149][ T5872] usb 1-1: USB disconnect, device number 49 [ 679.592567][ T5967] usb 2-1: USB disconnect, device number 50 [ 680.044419][T20352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5398'. [ 680.085452][T20352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5398'. [ 680.488950][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5408'. [ 680.606568][ T5872] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 680.656178][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 680.776363][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 680.778702][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.796169][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 680.809014][ T5872] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 680.809050][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.809073][ T5872] usb 5-1: Product: syz [ 680.809089][ T5872] usb 5-1: Manufacturer: syz [ 680.809105][ T5872] usb 5-1: SerialNumber: syz [ 680.824276][ T5872] usb 5-1: config 0 descriptor?? [ 680.984078][T20382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5412'. [ 681.017989][ T5967] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 681.029151][T20382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5412'. [ 681.076028][ T24] usb 5-1: USB disconnect, device number 63 [ 681.192342][ T5967] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 681.222400][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.247523][ T5967] usb 4-1: config 0 descriptor?? [ 681.279465][ T5967] pwc: Samsung MPC-C10 USB webcam detected. [ 681.354228][T20391] tipc: Enabling of bearer rejected, failed to enable media [ 681.491259][ T5967] pwc: send_video_command error -71 [ 681.599074][ T5967] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 681.688491][ T5967] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 681.794166][ T5967] usb 4-1: USB disconnect, device number 78 [ 682.076005][ T5872] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 682.268921][ T5872] usb 1-1: config 0 has no interfaces? [ 682.275396][ T5872] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 682.289727][ T5872] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 682.308913][ T5872] usb 1-1: Manufacturer: syz [ 682.335873][ T5872] usb 1-1: config 0 descriptor?? [ 682.554619][T20407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5424'. [ 682.565957][T20407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5424'. [ 682.611586][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 682.799141][T20412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 684.029403][T20440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5435'. [ 684.089321][T20441] tipc: Enabling of bearer rejected, already enabled [ 684.523847][ T5872] usb 1-1: USB disconnect, device number 50 [ 684.747700][T20450] kvm: user requested TSC rate below hardware speed [ 685.207778][ T5872] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 685.394193][ T5872] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.426247][ T5872] usb 4-1: config 0 has no interface number 0 [ 685.435556][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5446'. [ 685.466212][ T5872] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 685.486385][ T5872] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 685.514400][ T5872] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.529156][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.577702][ T5872] usb 4-1: config 0 descriptor?? [ 685.593809][T20456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.639602][ T5872] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 685.929405][ T5872] usb 4-1: USB disconnect, device number 79 [ 685.935609][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 685.959098][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.968925][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.278456][T20486] tipc: Enabling of bearer rejected, already enabled [ 688.408858][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 688.408880][ T29] audit: type=1326 audit(1774009873.080:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.447717][ T5872] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 688.470838][ T29] audit: type=1326 audit(1774009873.080:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.501633][ T29] audit: type=1326 audit(1774009873.110:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.544957][ T29] audit: type=1326 audit(1774009873.110:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.570450][T20535] usb usb8: usbfs: process 20535 (syz.3.5473) did not claim interface 0 before use [ 688.584536][ T29] audit: type=1326 audit(1774009873.110:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.611437][ T29] audit: type=1326 audit(1774009873.110:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.638611][ T5872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.638932][ T29] audit: type=1326 audit(1774009873.110:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.654639][ T5872] usb 1-1: config 0 has no interface number 0 [ 688.708760][ T5872] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 688.725995][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.739345][ T5872] usb 1-1: Product: syz [ 688.743899][ T5872] usb 1-1: Manufacturer: syz [ 688.749374][ T5872] usb 1-1: SerialNumber: syz [ 688.757584][ T5872] usb 1-1: config 0 descriptor?? [ 688.767992][ T29] audit: type=1326 audit(1774009873.110:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 688.882645][ T29] audit: type=1326 audit(1774009873.110:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20530 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 689.005833][ T5872] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 689.031033][ T5872] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 689.047556][ T5872] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 689.066742][ T5872] usb 1-1: media controller created [ 689.093649][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.236521][ T5967] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 689.439619][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 689.462132][ T5967] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 689.499186][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.509177][ T5824] usb 1-1: USB disconnect, device number 51 [ 689.524646][ T5967] usb 4-1: Product: syz [ 689.536173][ T5967] usb 4-1: Manufacturer: syz [ 689.549853][ T5967] usb 4-1: SerialNumber: syz [ 689.573244][ T5967] usb 4-1: config 0 descriptor?? [ 689.604717][T20552] tipc: Enabling of bearer rejected, failed to enable media [ 689.621544][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 690.084687][ T5967] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 690.094453][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.111294][ T5967] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 690.132617][ T5967] usb 4-1: media controller created [ 690.175926][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.370119][ T5967] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 690.386308][ T5967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 690.824460][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5488'. [ 690.862566][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5488'. [ 690.918831][ T5967] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 691.078422][ T5967] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.090239][ T5967] usb 3-1: config 0 has no interface number 0 [ 691.099889][ T5967] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 691.110121][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.118573][ T5967] usb 3-1: Product: syz [ 691.123954][ T5967] usb 3-1: Manufacturer: syz [ 691.130623][ T5967] usb 3-1: SerialNumber: syz [ 691.139998][ T5967] usb 3-1: config 0 descriptor?? [ 691.152123][ T5967] usb 3-1: selecting invalid altsetting 1 [ 691.160621][ T5967] dvb_ttusb_budget: ttusb_init_controller: error [ 691.169769][ T5967] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 691.223974][ T5967] DVB: Unable to find symbol stv0299_attach() [ 691.255570][ T5967] DVB: Unable to find symbol tda8083_attach() [ 691.261821][ T5967] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 691.316229][ T5872] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 691.386318][T20570] ------------[ cut here ]------------ [ 691.391952][T20570] usb 4-1: BOGUS control dir, pipe 80005080 doesn't match bRequestType c0 [ 691.400931][T20570] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.2.5487/20570 [ 691.411394][T20570] Modules linked in: [ 691.415640][T20570] CPU: 1 UID: 0 PID: 20570 Comm: syz.2.5487 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.427064][T20570] Tainted: [L]=SOFTLOCKUP [ 691.431429][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.441672][T20570] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 691.448053][T20570] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 691.468297][T20570] RSP: 0000:ffffc90003517748 EFLAGS: 00010246 [ 691.474391][T20570] RAX: 0000000000000000 RBX: ffff888032dc9d00 RCX: 0000000080005080 [ 691.482854][T20570] RDX: ffff888029d4e380 RSI: ffffffff8c7f1720 RDI: ffffffff901edfa0 [ 691.491184][T20570] RBP: 1ffff110067b9d48 R08: 00000000000000c0 R09: 0000000000000000 [ 691.499591][T20570] R10: ffffc90003517840 R11: fffff520006a2f14 R12: ffff88807de31100 [ 691.507881][T20570] R13: ffff888033dcea40 R14: 0000000080005080 R15: ffff888029d4e380 [ 691.516177][T20570] FS: 0000000000000000(0000) GS:ffff88812555d000(0063) knlGS:00000000f545db40 [ 691.525649][T20570] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 691.532413][T20570] CR2: 00007ff8f43bee9c CR3: 000000005b84a000 CR4: 00000000003526f0 [ 691.540812][T20570] Call Trace: [ 691.544126][T20570] [ 691.547192][T20570] ? __init_swait_queue_head+0xa9/0x150 [ 691.552837][T20570] usb_start_wait_urb+0x13f/0x5b0 [ 691.556129][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 691.558101][T20570] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 691.568107][ T5872] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 691.568908][T20570] usb_control_msg+0x234/0x3e0 [ 691.578518][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.582833][T20570] dtv5100_i2c_msg+0x231/0x2f0 [ 691.582889][T20570] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 691.591826][ T5872] usb 1-1: Product: syz [ 691.596265][T20570] __i2c_transfer+0x79a/0x2020 [ 691.596299][T20570] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 691.596328][T20570] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.596352][T20570] ? i2c_transfer+0xc8/0x2d0 [ 691.596378][T20570] i2c_transfer+0x1cc/0x2d0 [ 691.596404][T20570] i2cdev_ioctl_rdwr+0x460/0x740 [ 691.596439][T20570] compat_i2cdev_ioctl+0x59f/0x5c0 [ 691.601513][ T5872] usb 1-1: Manufacturer: syz [ 691.605614][T20570] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 691.605646][T20570] ? __fget_files+0x3a0/0x420 [ 691.605678][T20570] ? __fget_files+0x2a/0x420 [ 691.605714][T20570] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 691.610774][ T5872] usb 1-1: SerialNumber: syz [ 691.616463][T20570] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 691.616501][T20570] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 691.616528][T20570] ? kmem_cache_free+0x187/0x630 [ 691.616563][T20570] ? __se_sys_futex_time32+0x3ab/0x440 [ 691.616612][T20570] ? rcu_is_watching+0x15/0xb0 [ 691.616656][T20570] __do_fast_syscall_32+0x20d/0x640 [ 691.704641][T20570] ? do_fast_syscall_32+0x33/0x70 [ 691.709756][T20570] ? asm_int80_emulation+0x1a/0x20 [ 691.714878][T20570] ? do_int80_emulation+0x274/0x4d0 [ 691.720274][T20570] ? trace_irq_disable+0x3b/0x150 [ 691.725340][T20570] do_fast_syscall_32+0x33/0x70 [ 691.730250][T20570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.736831][T20570] RIP: 0023:0xf706ef6c [ 691.741115][T20570] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 691.760948][T20570] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 691.769567][T20570] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 691.777806][T20570] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.785962][T20570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 691.794076][T20570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 691.802093][T20570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.810353][T20570] [ 691.813386][T20570] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 691.820668][T20570] CPU: 1 UID: 0 PID: 20570 Comm: syz.2.5487 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.831698][T20570] Tainted: [L]=SOFTLOCKUP [ 691.836029][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.846184][T20570] Call Trace: [ 691.849549][T20570] [ 691.852563][T20570] vpanic+0x56c/0xa60 [ 691.856607][T20570] ? __pfx__printk+0x10/0x10 [ 691.861302][T20570] ? __pfx_vpanic+0x10/0x10 [ 691.866070][T20570] ? is_bpf_text_address+0x292/0x2b0 [ 691.871375][T20570] ? is_bpf_text_address+0x26/0x2b0 [ 691.876604][T20570] panic+0xc5/0xd0 [ 691.880358][T20570] ? __pfx_panic+0x10/0x10 [ 691.884885][T20570] __warn+0x315/0x4f0 [ 691.888870][T20570] ? usb_submit_urb+0x1052/0x18b0 [ 691.893997][T20570] ? usb_submit_urb+0x1052/0x18b0 [ 691.899027][T20570] __report_bug+0x29a/0x540 [ 691.903806][T20570] ? unwind_get_return_address+0x4d/0x90 [ 691.909724][T20570] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 691.915882][T20570] ? usb_submit_urb+0x1052/0x18b0 [ 691.920909][T20570] ? __pfx___report_bug+0x10/0x10 [ 691.925935][T20570] ? __pfx_stack_trace_save+0x10/0x10 [ 691.931340][T20570] ? stack_depot_save_flags+0x33/0x810 [ 691.936893][T20570] report_bug_entry+0x19a/0x290 [ 691.941747][T20570] ? usb_submit_urb+0x1114/0x18b0 [ 691.946765][T20570] ? usb_submit_urb+0x1119/0x18b0 [ 691.951965][T20570] handle_bug+0xce/0x200 [ 691.956219][T20570] exc_invalid_op+0x1a/0x50 [ 691.960739][T20570] asm_exc_invalid_op+0x1a/0x20 [ 691.965583][T20570] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 691.971302][T20570] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 691.991258][T20570] RSP: 0000:ffffc90003517748 EFLAGS: 00010246 [ 691.997339][T20570] RAX: 0000000000000000 RBX: ffff888032dc9d00 RCX: 0000000080005080 [ 692.005409][T20570] RDX: ffff888029d4e380 RSI: ffffffff8c7f1720 RDI: ffffffff901edfa0 [ 692.013487][T20570] RBP: 1ffff110067b9d48 R08: 00000000000000c0 R09: 0000000000000000 [ 692.021939][T20570] R10: ffffc90003517840 R11: fffff520006a2f14 R12: ffff88807de31100 [ 692.029914][T20570] R13: ffff888033dcea40 R14: 0000000080005080 R15: ffff888029d4e380 [ 692.038133][T20570] ? usb_submit_urb+0x10a3/0x18b0 [ 692.043181][T20570] ? __init_swait_queue_head+0xa9/0x150 [ 692.048735][T20570] usb_start_wait_urb+0x13f/0x5b0 [ 692.054028][T20570] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 692.059672][T20570] usb_control_msg+0x234/0x3e0 [ 692.064458][T20570] dtv5100_i2c_msg+0x231/0x2f0 [ 692.069233][T20570] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 692.074195][T20570] __i2c_transfer+0x79a/0x2020 [ 692.079137][T20570] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 692.085039][T20570] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 692.090845][T20570] ? i2c_transfer+0xc8/0x2d0 [ 692.095431][T20570] i2c_transfer+0x1cc/0x2d0 [ 692.100015][T20570] i2cdev_ioctl_rdwr+0x460/0x740 [ 692.105053][T20570] compat_i2cdev_ioctl+0x59f/0x5c0 [ 692.110164][T20570] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 692.115889][T20570] ? __fget_files+0x3a0/0x420 [ 692.120670][T20570] ? __fget_files+0x2a/0x420 [ 692.125289][T20570] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 692.130852][T20570] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 692.136347][T20570] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 692.142345][T20570] ? kmem_cache_free+0x187/0x630 [ 692.147283][T20570] ? __se_sys_futex_time32+0x3ab/0x440 [ 692.152750][T20570] ? rcu_is_watching+0x15/0xb0 [ 692.157534][T20570] __do_fast_syscall_32+0x20d/0x640 [ 692.162827][T20570] ? do_fast_syscall_32+0x33/0x70 [ 692.168298][T20570] ? asm_int80_emulation+0x1a/0x20 [ 692.173509][T20570] ? do_int80_emulation+0x274/0x4d0 [ 692.178709][T20570] ? trace_irq_disable+0x3b/0x150 [ 692.183851][T20570] do_fast_syscall_32+0x33/0x70 [ 692.188909][T20570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.195354][T20570] RIP: 0023:0xf706ef6c [ 692.199415][T20570] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 692.219286][T20570] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 692.227795][T20570] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 692.235807][T20570] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.243780][T20570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.251919][T20570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 692.260078][T20570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.268164][T20570] [ 692.271346][T20570] Kernel Offset: disabled [ 692.275675][T20570] Rebooting in 86400 seconds..