last executing test programs: 2m17.211633499s ago: executing program 0 (id=669): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 2m17.132016748s ago: executing program 0 (id=670): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ppoll(&(0x7f0000002180)=[{r0, 0x2044}], 0x1, &(0x7f00000024c0)={0x0, 0x3938700}, &(0x7f0000003640)={[0x1]}, 0x8) 2m17.076224104s ago: executing program 0 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) shutdown(r0, 0x1) 2m16.909555401s ago: executing program 0 (id=672): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) 2m13.662877027s ago: executing program 0 (id=688): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m10.53630142s ago: executing program 0 (id=708): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x101081, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 1m55.503686456s ago: executing program 32 (id=708): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x101081, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 5.252843568s ago: executing program 4 (id=1358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) write$nbd(r2, &(0x7f0000000080)={0x67446698, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.171491661s ago: executing program 3 (id=1359): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x99fe681834aac99b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.029889216s ago: executing program 4 (id=1360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x80000003) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x1}], 0xfa, 0x0, &(0x7f0000000280)="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"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 4.912189763s ago: executing program 4 (id=1361): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 4.90940998s ago: executing program 4 (id=1362): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 4.242813403s ago: executing program 3 (id=1363): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x500, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x1}) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 4.208490863s ago: executing program 3 (id=1364): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x422083, 0x0) flock(r5, 0xf) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getitimer(0x2, 0x0) write$FUSE_ENTRY(r7, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x8000, 0x302c, 0x1, 0x1ff, {0x4, 0x0, 0xfffffffffffffff7, 0x9, 0x7, 0x5, 0xfffffffb, 0xb90, 0x8, 0x2000, 0xdd1, 0xee01, r8, 0x7fff, 0x6}}}, 0x90) 3.148277603s ago: executing program 3 (id=1365): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xd, 0x3, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x40010) 3.147029085s ago: executing program 3 (id=1366): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b76659", 0x51}], 0x2) 2.565528365s ago: executing program 2 (id=1367): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001) sendto$inet6(r0, &(0x7f0000000100)="0f", 0x1, 0x48000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) 2.518821722s ago: executing program 2 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000002180)=[{r0, 0x2044}], 0x1, 0x0, &(0x7f0000003640)={[0x1]}, 0x8) 2.428079432s ago: executing program 2 (id=1369): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') mount$fuseblk(0x0, 0x0, 0x0, 0x2025, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 2.084691061s ago: executing program 1 (id=1371): fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x1}) 1.804115622s ago: executing program 4 (id=1372): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x99fe681834aac99b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.486180642s ago: executing program 1 (id=1373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x8}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x200, 0x0, r3}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)) 1.129613589s ago: executing program 1 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x9, 0xa, 0x80, 0x0, 0x9, 0x2, 0x1, 0x1, 0x0, 0x0, 0x2, 0xf9, 0x0, 0x5, 0x4, 0x8, 0x8, 0x5, 0x3, '\x00', 0xe8, 0x8}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f00000000c0)) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 553.224837ms ago: executing program 4 (id=1375): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x0, 0x4d, &(0x7f0000000440)="d1596137019028b4e6973edf1911fbfc4c57a136ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827504ccfccbaca50d6089edf0b48722fa0da7"}], 0x1}) 433.747371ms ago: executing program 2 (id=1376): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001) sendto$inet6(r0, &(0x7f0000000100)="0f", 0x1, 0x48000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="25a4be9c0ce89cbf9f6699e37603e1b74587b94298ccf0bf22e83e142bea0dfdb0f130961206c868fd9ad415d70013932fd13ff87593d15015e5643df1aa3d4d9ac4d8b4095417d99b967dd587d8891c594bf0aa6949c1eb6f418eec14bdf7c0d9d73e789e7d7b12926bf14c10ae3c8a4e8e002c3370d1d229ad2647c10126e77b6645aa687743473311af671d69128b0181cdb8e68f8e501d020837bf8828c6e01e05e92b31ff8cc07e778ab39c9d4d878000f3730d6272df8070c8b90046c6b152a6c8aec4d04c996a5293d436b35ef0ef516605cf3c9405b322adeafeaa826d3b0aa14d37baa57b5062acfe1176e56269e125eb3225ab80aeaf2b7ade327e144dbfcec7dacff5c74e04ce85d200b2a8ae09cc6f804c73c3db742f204f80b4d3e68ea22de44918490b09fa1f50cf59fad253f6b29a7d98d3909a32820c93aa93dd90127ed3f6c5bb1fc092b4aa73162a095db772e6ce346c66177b482fa24e00027d13696a563bf055916fe34ce24466163da4343ea07b397ce41b3ce145e7f72e2b9072253b3e8be8b921411853284cd70123ac5ab40dae387efd12fb1b0b995329e69c0b9e2268ed6c2639f75ccc4a32e5377078bbd9a4119a1f6bd0752791faf2cac84df0c42e43106819a3a624f3f3995f7a4d892622dda277192f58e948af6a95fad17685f9fe1dc8c5dfb4adee234d7fd18c8b2f29b34a66d2120a1d0f7f0a774247abd9fa595c736750f183761fbd9b029f6601d199ba12734a59be5efaac2b66ba564b65683763e33cc93b1cf125956a5f704b325e1d131e13df01c2eff2a29e65ab02cba302020b5e5f763f15bd9348ac127213822f8ee4021b99bbe8a569a00ea66d9b06498e7e29e6e7d5ba4515e0592a78232e69bc59f049923597ad50abfda79e160e91bb1b4f7574b83727a02343755124ef25abcc7f66eeed248c0b77c33350a42c0e06d69c18745789fe922f5df70e64f6da80e430b836a389ab83b5ec8b4d44965eabcea85bc3b69126263a9a201a72558ad26a3f8b228b389e01d6bd94bc37d145c0e12bba5a6a15685125882193870235dd50eda594cbf40d79b0d0184baea13dfe03705f929e0f727d84a4b98a596a211674ae16a3d61ce76c60d3eb006c232c8e4826a84aadaf60b1fba24e5bfe881622628dbe3776269373cc2405eb9c940b1b2595f8426aa314ded4c3102bb07ace7de03edd73c3fee3846e17a2dac01850b560e5b4c447c4b415e9ed81694810356addfedeb9ce645c73f9297274842d29880d294a4364898d5fea28957a2fb14114c8affa08524949a67419093070e482da553f9690f74bdbfef145f8a0b6bca7573578ea1877d49c67fd8598e763f565bdccc6741e4ce12de0c25568c4c929b19a8d138f52f2e122994c76d9ac032b76cbeabe68d7f98c5c4a5b8bcb43f5b6ce57bbfc3653ae94fc045cc3aa8981f3296ed5adbaf0c7b02c7df26ba9bd5d49c1a9cf7897f08d91d93bcb7568e8cd6ad33bba1bd30a97707c62b9eafa0edd0e9a45bda10ff1f918445a82712848591c50dc01163aad5bc4a564ff57542e9ee6fadd2d30b208c1751b57257f9c0b850dee36ced2c25393819ae623d41873737b2ac3ffb9a412bef3f01acf4038e7d1807419a6a73afaabf4f9c7d36a75a4d2a140479bed2a0c32572c2bc4962a611d31b34d722725391d10dc9152868c1db3a07266dc71d951789db47c0d97b293a6004a26811c5fbfd3bce97dc127febc16ccb2bfae1658aab5fa31d8de69f47ed35be4cdea02884889198245dcc1c7fd9c29d7424b50ac56fb8597d30e8fdc6f6f04bca4f4d3718eddac272b6153d10e805b740d9e8ee35e797334e16a7db9ee53bcf48f512a3b4e82b4b814d5ec90da3d583c3d7b453d5e433572531f4ea632df22ce7c7178fc7a07616969e2a305af4b8efaa1c9a6ab06a1683e563518a303d0dce5fd4d8dc3501734f3a0fbdf0af675a72362e4e47599707bedfbb90fd585969f0973e9a80351c21ea4ebbd1e9b376fe8a2d6a765deb1203e67c6ecd8561138ddbd65dc942f95b0473500efd5c2dbdbecaf948b4f9be93800944aa8f4604d350355d24c913520152db29e698e01fba4dc6b27245fd62d23302fe3a6339c82e93f55bfe8f959bd3443591c0074e32330146fad7ce40bda92d2c0f65fe6f237e21e032c82e1e1a3a1d7848919062f932b175bf21ddeece862791424b1fa3a3504e61840d313ad303fa654f637d2428317055682a2e17d2d2fa44d048baf989306b32427fce31c37eb9f80cedfeb919ce9ae7a8a78a8ccab0f0365c52d8d2d86a274fdd04e849672b7cde631c1ded5014c9186b576e57d50e2f16fbe1564c7d76149e2dd7db7ef0c0aeddda7e5b31db39331e5c715f999fd6a0679275de566f554c0c4a3ece2123976c6a2671d4107f5f833baeb968f9cf10acb9e5a808ce047e8ca227d674ea32e6ad2e7b81fc168d3c85fc6548cf0a4f413064782dea276d27c18f512ce5f5a81211df7024d1cd76e242a87f0ac13068c14606f1eb22bd50155e461e2d4a21e28ea6e64127ceb04a5d85485e09e5b32594156549121cc9ad693763ddc0e7c9ec0a54cf7d54cafb75001b6a5c7562cbe632a717e325f2b5115defcd340842a2a0747b2ea2ac552ad34bdddf66f78a83a18bc83728e5dbb5b00a0a5536e5ee936a958362fc719ff9cade216819b5e32e20fe6ebaf51ae7bcd29bd4121d7e0b13300049a0545aaa63f042f9d865d22bb1632427c40fdf58ce6fdd662ad56401174a05ed3705bca6294b2844e628e4a98e8b4a2b41cd77fc144d7d1de31087859e0b425fd6b9a398a8256ee0c2c0762dde714a958cea0c8f547fe73d1d3b0fc90426613b8f105a07ad9e6bb1fee9c77ad107bbf89e3e4dba32d104be1906485dca8b6d449615ef47507b1ed0479ed316f8b56297fb90c07dd3839a82d27d171d37c4886f3f5bd2022c73eb2ff9d623ce4aac1f0d42f9e09e832a19056758ec0b0eaf2a6848e7fa6434f82294ea950258f05bcd907a84911b88a8f52c00a7951594cdbef410c8b958d4f8618fb98704d4ad298236c5be0c25434a093fb5755af0b6322b63ae2e623f0fee42f14c3c4b95ddf63a5529e90f4433a45b853c483413ef201d1c24a20e88628cfac50ec26ff0cbc83a4c3999ee9f8e93726811fb013e10aa08289e6deb655c391695793a8edf5a9c2a595bb81fe0162e39fd0e9aabf51eaf10186ffb354e5a8da2f5999e8a9958dac6d8cdf4feb07702ea67fc3db7f8ae7874162f00125e298254406cc26f322cdb28273a4e1ead4bcf07b1081e03bd59df5291037d9ce6fb101996f81b4c216c88f4ece75d35f97f54457a8116cc19666ccdfe8d77dbae05656cb184722a1c73dfe5215a241ab7c45a4668a307df243b8f02b3e1a2535155d62e4d8a0a8d583b38d3243d32e573063e3fd55d7a6edeb0a77e51a42a79079a4355739c2ae826d6e8e94356c42127406dce0025448efe36427158f7d64e3a178f723afc33d2b7b56af844350a8db4387c874ffbf4a1035b615bad38bb29d85a5cc4ea81d7de3f5f1f18c31da9459837e80d38a2f735920f6ae5caada66273d059181262e0c66d5832c6e4183f43f3ae37e3dddb0d9fa1e36ec7fdee8aab17fb9f47d080e0d73673f8a3c5d3a70c36aba6a04760e447fd3d6f3afee0dde6c6d2babfca717e3be22e9474df7b1ffcf156e24d36c1f7d45057cdb4840d4164e397db1634544891ad2112655c2cdb321e8f1a2385b7ccdff4a7d1148b47496b6b22d33a9e07761ed7d9ae16fe54b22026e4f068f0ca9127c51cc39812701f3511f6f16e29ab7138b97adfb4c15b94b90c21b358cccc7835e6c5f151222b5138661f62f2b8a527ad7f4a03e2fbed98e1c6d31cbb82e291496775746f091cfe6362aca9fc40d700d95e2ced98115b34d07d12639c7a5fdcc894618a72b6e18fe855768ad94964ee9d039839c01fa3bcfaa6283bee546a96f4a58d654eeb9616c7b67098fcf2a03afe6b6a1dab0197cd1a29bb7e0769cb921ef7e08c113223bf0c586fc23c2971efb3a29957b896b6f0bdfce51ca7be552d734a814eacd4cab06e577f09e7e6c54c913d3b1ea67278fbf1ebe6824312621c3130159528845c4f296ba0e35a8048270efccfd0084ec965f6b72a2a8432ac0b2378b73c3f2a7be1992b36fe87511c06c2844e11a08f7fb618a4764c6bef30779aaf1638ce32492732ce619e74dd4ef694a9c6ab22ab563608fcb065dba5b0844bd90e4cb7c4ae30fa37ad015a359d6fe984904898ac3bf27169a0dc7f59bb35df8a059b3f4c4bc43c7ac077d7289537f39f7d4acdc98b02a728b3449afe9df3dcd3561992b7e5e1e712259a66ea883d5eaa1075a983f613daf02307e8f8f7513e59ccc5bad3bcc1a5747670588941a9d17e06f94f3eeb694744306cfaef10a781c31d7f12664d29749e560d3f1aaf1b8acb8d4822c5141ea40c8f62d7b2e454ee74abf31c850d1413fd7b3e52d3f34942b528b95b0c2b6875d502412abb6490144c6c0adee91ca02cd961d9e505b0e7fd520d2c0bba4a78e2f00d84255958f0571a51f295adc0d4a9a08f8c70b037c214bbb17b94fb0d7b45b1d895243caa1eeb3c7adb2669f4c1913bcffb03d32bdf5c2587254b0c76ce67df28060214d6b524f648385b18cb7114785b0f062acaf3ff4a59ba6c9ad0f4c06e2e1944a390cb2eb990de7cf92ab378c69bb5fd30263b7326d739057050d7b8ca2ed11d497bd194c41e8f8eb6825976879a2f48bff9c0af6b3764d706188d3ec7e812fab8660a3e330889b020bec3cecddf19b66fddadbb1a0cdd9ec61337cf9cca346199b193c11830cc33b8ebdbc524a58c6577fdd2b0589256f4b452274dcf6b72a81e661231333149eb7ecb37b0e5a74e6a9cab2832ad9424a185e9da9d11e619984a3334327ea0aa00d66aa8c06209f57afaa5ea3d8238f8750e99b2b09022c29ee2cc79022a50ea0ff13a36d6e69533156c53a91bbb0c8329ffcfeb78cb66542dafee5f481351b64fb6fe1ff9aeddbf671e2b99497307e8b7daced4258ab4b6fe369255a3158327fca5b213c3320ca2f693aa3564e564b379c32f23b0293c775badb4621471739f0db3b14b1f55db8906aab95556351cb72bcab8f3c32764097903f5c95ab50676a122da5507ff4fcf3b8fe059a9bb8dd6533b3365fc82126a184453aa7101339f9574b80a59f537211ee9d7003de19dea4029dcc6dbe83c8e756cc93c3c8d2e4d3ab175f7abb44fc40be9b83780483c8078d6e8128bf152922d8b442cfb402cb68aeebf6e68e31f15343765be0fbfb6c37f24e51eb55fc4e1b85f5f946ed985558d8222ada03bce8596823c1f3e2ae3abf63b59b01be937bffe8a0c67e587c5eb7c46affcb4ea954b59ee97dba1454f5d708a2fd1100732f308b01e72b39b759d9688af6884a50735773608a71154911812fa2107c59bd720df90a28571efc09b1d7e84c06f8014305a777d10879b96be9b8482192a476bdd9ddd6fee5b9e6d77cfe73bcd6c2e266a243407f513a46f63018217aab326088462dc5b1f133a89facf7dfeac3c98380f9a3e8fc6d1584a491fe64c70d478d6547a9abb7bc45c612ca0d283534e6617754e6f3d789763e20553433ea4bf83d74a7c61f3f67a88c1ecb1379aa6d05b0b0901fb38ff46f81dbb8cae168f0b232780bee5cb26d6308bfa8c5b00ba435adc3a59a6321ffcf1307a09dfa9607d1bbe66a3fca47d527f74df2ab1730a95b327a25c99b23f1589ac676", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) 366.66733ms ago: executing program 2 (id=1377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0xfffffffffffffff9, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x42, 0x7f, 0xfffffffffffffffc, 0x40000, 0x2, 0x7f, 0x0, 0x978, 0x1, 0x1002], 0x1, 0x3a2987}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000430000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 312.150052ms ago: executing program 1 (id=1378): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x1906) 295.500424ms ago: executing program 1 (id=1379): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x500, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 249.346434ms ago: executing program 1 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007300004000000000ff"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 201.546956ms ago: executing program 2 (id=1381): ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x8001}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0xf0, 0x80000001, 0xb, 0xbdb], 0xeeee8000, 0x3c4210}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00000200000000000000020000"]) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000880)=[@code={0x1, 0x41, {"b9800000c00f3235000800000f30440f793492470f01d53e450f06f3406d260faef3c4437148f7de6540f40fe7280f08"}}], 0x41}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1382): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x4, 0x2000000, 0x0, 0x2004cb, 0x0, 0x10a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): dpoint 0x1 has invalid maxpacket 0 [ 255.843743][ T3097] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.884256][ T3097] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.908672][ T3097] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.936874][ T3097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.954241][ T3097] usb 1-1: Product: syz [ 255.964748][ T3097] usb 1-1: Manufacturer: syz [ 255.969576][ T3097] usb 1-1: SerialNumber: syz [ 256.213952][ T3097] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 258.412502][ T24] usb 1-1: USB disconnect, device number 14 [ 258.445174][ T24] usblp0: removed [ 258.485278][ T8147] sctp: [Deprecated]: syz.2.707 (pid 8147) Use of int in max_burst socket option. [ 258.485278][ T8147] Use struct sctp_assoc_value instead [ 258.516362][ T8151] random: crng reseeded on system resumption [ 259.744281][ T3097] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 259.807271][ T8166] netlink: 'syz.1.715': attribute type 29 has an invalid length. [ 259.826760][ T8166] netlink: 'syz.1.715': attribute type 29 has an invalid length. [ 259.901139][ T3097] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.924945][ T8171] loop6: detected capacity change from 0 to 7 [ 259.933967][ T3097] usb 3-1: not running at top speed; connect to a high speed hub [ 259.940467][ T8171] Dev loop6: unable to read RDB block 7 [ 259.955938][ T3097] usb 3-1: config 188 has an invalid interface number: 9 but max is 0 [ 259.965846][ T3097] usb 3-1: config 188 has no interface number 0 [ 259.968500][ T8171] loop6: unable to read partition table [ 259.972246][ T3097] usb 3-1: config 188 interface 9 has no altsetting 0 [ 259.989483][ T8171] loop6: partition table beyond EOD, truncated [ 259.999049][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 259.999068][ T30] audit: type=1326 audit(1758043550.947:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.1.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x0 [ 259.999962][ T8171] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.033855][ T3097] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 260.064274][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.072491][ T3097] usb 3-1: Product: syz [ 260.078938][ T3097] usb 3-1: Manufacturer: syz [ 260.089343][ T3097] usb 3-1: SerialNumber: syz [ 260.252942][ T8178] ALSA: mixer_oss: invalid OSS volume '' [ 260.269132][ T8178] fuse: Unknown parameter '00000000000000000000016' [ 260.316443][ T8162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.390205][ T3097] usb 3-1: USB disconnect, device number 13 [ 261.047646][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.058437][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.227034][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 262.645057][ T3097] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 262.819170][ T3097] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 262.828591][ T3097] usb 3-1: config 128 has no interface number 0 [ 262.835105][ T3097] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 262.845238][ T3097] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 262.856815][ T3097] usb 3-1: config 128 interface 148 has no altsetting 0 [ 262.868998][ T3097] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 262.878295][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.888930][ T3097] usb 3-1: Product: syz [ 262.893302][ T3097] usb 3-1: Manufacturer: syz [ 262.898127][ T3097] usb 3-1: SerialNumber: syz [ 263.131571][ T3097] usb 3-1: USB disconnect, device number 14 [ 263.241482][ T8207] netlink: 15 bytes leftover after parsing attributes in process `syz.1.731'. [ 263.306098][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 263.614372][ T3097] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 263.764271][ T3097] usb 3-1: Using ep0 maxpacket: 8 [ 263.771863][ T3097] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 263.782723][ T3097] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.792704][ T3097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.803136][ T3097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 263.813779][ T3097] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.827780][ T3097] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.836972][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.915997][ T8224] kvm: pic: non byte write [ 263.922993][ T8224] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 263.935114][ T8224] kvm: pic: non byte write [ 264.060559][ T3097] usb 3-1: usb_control_msg returned -32 [ 264.066336][ T3097] usbtmc 3-1:16.0: can't read capabilities [ 264.639354][ T30] audit: type=1326 audit(1758043555.597:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 264.662739][ T30] audit: type=1326 audit(1758043555.597:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 264.693645][ T30] audit: type=1326 audit(1758043555.597:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 264.720018][ T30] audit: type=1326 audit(1758043555.597:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 265.302214][ T8256] binder: 8246:8256 ioctl c0306201 200000000080 returned -14 [ 265.820903][ T3097] usb 3-1: USB disconnect, device number 15 [ 266.597421][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 266.607587][ T8274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.758'. [ 268.323948][ T8292] netlink: 'syz.1.765': attribute type 11 has an invalid length. [ 268.474270][ T5866] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.499389][ T8299] wlan0 speed is unknown, defaulting to 1000 [ 268.644242][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 268.651750][ T5866] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 268.674681][ T5866] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 268.696585][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.706444][ T5866] usb 3-1: Product: syz [ 268.710792][ T5866] usb 3-1: Manufacturer: syz [ 268.720122][ T5866] usb 3-1: SerialNumber: syz [ 268.739033][ T5866] usb 3-1: config 0 descriptor?? [ 268.759937][ T5866] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 268.773185][ T5866] usb 3-1: setting power ON [ 268.784238][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 268.801624][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.811948][ T5866] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 268.829926][ T5866] usb 3-1: media controller created [ 268.868862][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.895728][ T5866] usb 3-1: selecting invalid altsetting 6 [ 268.903777][ T5866] usb 3-1: digital interface selection failed (-22) [ 268.910930][ T5866] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 268.921008][ T5866] usb 3-1: setting power OFF [ 268.926349][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 268.933687][ T5866] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 268.948082][ T5866] (NULL device *): no alternate interface [ 269.008990][ T5866] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 269.030714][ T5866] usb 3-1: USB disconnect, device number 16 [ 270.804332][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 270.956784][ T24] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 270.966458][ T24] usb 3-1: config 128 has no interface number 0 [ 270.972804][ T24] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.982922][ T24] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 270.994591][ T24] usb 3-1: config 128 interface 148 has no altsetting 0 [ 271.003788][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 271.012960][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.022069][ T24] usb 3-1: Product: syz [ 271.026381][ T24] usb 3-1: Manufacturer: syz [ 271.031099][ T24] usb 3-1: SerialNumber: syz [ 271.260588][ T24] usb 3-1: USB disconnect, device number 17 [ 271.684409][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 271.834381][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 271.842950][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 271.851426][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.861804][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.871675][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 271.881954][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.895453][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.904716][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.118237][ T24] usb 3-1: usb_control_msg returned -32 [ 272.123935][ T24] usbtmc 3-1:16.0: can't read capabilities [ 273.332987][ T8349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.785'. [ 273.911824][ T5866] usb 3-1: USB disconnect, device number 18 [ 274.124768][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.135226][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.143823][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.153424][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.164950][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.330685][ T8375] wlan0 speed is unknown, defaulting to 1000 [ 275.260719][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 275.339600][ T929] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 275.526281][ T929] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 275.538462][ T929] usb 3-1: config 128 has no interface number 0 [ 275.554915][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 275.567529][ T929] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 275.598568][ T929] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 275.616279][ T929] usb 3-1: config 128 interface 148 has no altsetting 0 [ 275.622729][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.636852][ T929] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 275.649439][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.657940][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.659994][ T929] usb 3-1: Product: syz [ 275.665787][ T8375] bridge_slave_0: entered allmulticast mode [ 275.683677][ T929] usb 3-1: Manufacturer: syz [ 275.685421][ T8375] bridge_slave_0: entered promiscuous mode [ 275.690870][ T929] usb 3-1: SerialNumber: syz [ 275.700809][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.709554][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.717396][ T8375] bridge_slave_1: entered allmulticast mode [ 275.728585][ T8375] bridge_slave_1: entered promiscuous mode [ 275.886091][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.917390][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.972533][ T929] usb 3-1: USB disconnect, device number 19 [ 276.112419][ T8375] team0: Port device team_slave_0 added [ 276.161745][ T8375] team0: Port device team_slave_1 added [ 276.227786][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.241769][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.245410][ T5183] Bluetooth: hci4: command tx timeout [ 276.277456][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.290797][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.297932][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.324513][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.415817][ T8375] hsr_slave_0: entered promiscuous mode [ 276.422735][ T8375] hsr_slave_1: entered promiscuous mode [ 276.429767][ T8375] debugfs: 'hsr0' already exists in 'hsr' [ 276.437253][ T8375] Cannot create hsr debugfs directory [ 276.495706][ T929] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 276.654248][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 276.663961][ T929] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 276.679246][ T929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.690350][ T929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.703717][ T929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 276.743558][ T929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.759155][ T929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.768870][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.947352][ T8375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.976252][ T8430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 276.996888][ T929] usb 3-1: usb_control_msg returned -32 [ 277.002777][ T929] usbtmc 3-1:16.0: can't read capabilities [ 277.014697][ T8375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.029638][ T8430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.069862][ T8375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.100114][ T8375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.209131][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.232635][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.246199][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.253543][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.276145][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.283298][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.669327][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.324954][ T5183] Bluetooth: hci4: command tx timeout [ 278.378312][ T8375] veth0_vlan: entered promiscuous mode [ 278.396512][ T8375] veth1_vlan: entered promiscuous mode [ 278.477191][ T8375] veth0_macvtap: entered promiscuous mode [ 278.529882][ T8375] veth1_macvtap: entered promiscuous mode [ 278.609226][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.630165][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.675557][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.718116][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.771746][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.792704][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.915661][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.923537][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.924691][ T30] audit: type=1326 audit(1758043569.877:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 278.972282][ T30] audit: type=1326 audit(1758043569.907:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.007411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.016689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.036265][ T30] audit: type=1326 audit(1758043569.907:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.090591][ T30] audit: type=1326 audit(1758043569.907:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.175587][ T30] audit: type=1326 audit(1758043569.907:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.237749][ T30] audit: type=1326 audit(1758043569.917:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.302971][ T30] audit: type=1326 audit(1758043569.917:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.403251][ T30] audit: type=1326 audit(1758043569.917:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.440902][ T30] audit: type=1326 audit(1758043569.917:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 279.510689][ T30] audit: type=1326 audit(1758043569.917:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd756f8eba9 code=0x7ffc0000 [ 280.415025][ T5183] Bluetooth: hci4: command tx timeout [ 280.894395][ T3097] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 281.284289][ T3097] usb 5-1: Using ep0 maxpacket: 8 [ 281.291654][ T3097] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 281.357704][ T3097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.399153][ T3097] pvrusb2: Hardware description: Terratec Grabster AV400 [ 281.418484][ T3097] pvrusb2: ********** [ 281.428665][ T3097] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 281.443638][ T3097] pvrusb2: Important functionality might not be entirely working. [ 281.463443][ T3097] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 281.478334][ T3097] pvrusb2: ********** [ 281.598510][ T2346] pvrusb2: Invalid write control endpoint [ 281.737091][ T2346] pvrusb2: Invalid write control endpoint [ 281.746207][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 281.783697][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 281.791438][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 281.811999][ T2346] pvrusb2: Device being rendered inoperable [ 281.825407][ T8510] pvrusb2: Attempted to execute control transfer when device not ok [ 281.835581][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 281.842963][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 281.865175][ T3097] usb 5-1: USB disconnect, device number 2 [ 281.898168][ T2346] pvrusb2: Attached sub-driver cx25840 [ 281.905708][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 281.922851][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 282.409348][ T8526] binder: 8523:8526 ioctl c0306201 200000000480 returned -14 [ 282.417654][ T8439] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 282.451825][ T929] usb 3-1: USB disconnect, device number 20 [ 282.494653][ T5183] Bluetooth: hci4: command tx timeout [ 283.134441][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 283.294324][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 283.301259][ T5866] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.310739][ T5866] usb 3-1: config 0 has no interface number 0 [ 283.323022][ T5866] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.332383][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 283.340104][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.348468][ T5866] usb 3-1: Product: syz [ 283.353204][ T5866] usb 3-1: Manufacturer: syz [ 283.357953][ T5866] usb 3-1: SerialNumber: syz [ 283.366185][ T5866] usb 3-1: config 0 descriptor?? [ 283.375121][ T5866] smsc95xx v2.0.0 [ 283.378909][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 283.389508][ T5866] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 283.495792][ T5916] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 283.504364][ T5916] usb 5-1: config 128 has no interface number 0 [ 283.511988][ T5916] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 283.522240][ T5916] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 283.534118][ T5916] usb 5-1: config 128 interface 148 has no altsetting 0 [ 283.555658][ T5916] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 283.565832][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.574015][ T5916] usb 5-1: Product: syz [ 283.578383][ T5916] usb 5-1: Manufacturer: syz [ 283.583092][ T5916] usb 5-1: SerialNumber: syz [ 283.731702][ T3097] usb 3-1: USB disconnect, device number 21 [ 283.837174][ T5916] usb 5-1: USB disconnect, device number 3 [ 283.876198][ T8556] kvm: pic: non byte write [ 284.223221][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 284.264468][ T5916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.424388][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 284.433492][ T5916] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 284.442013][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.453006][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.463276][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 284.473288][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.486379][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 284.495611][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.554497][ T929] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 284.706276][ T929] usb 3-1: config 0 has no interfaces? [ 284.709307][ T5916] usb 5-1: usb_control_msg returned -32 [ 284.711933][ T929] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 284.717794][ T5916] usbtmc 5-1:16.0: can't read capabilities [ 284.736601][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.757903][ T929] usb 3-1: config 0 descriptor?? [ 284.984384][ T929] usb 3-1: USB disconnect, device number 22 [ 285.825115][ T8581] kvm: pic: non byte write [ 286.334896][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.484730][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 286.494948][ T5916] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.505140][ T5916] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.515369][ T5916] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.528510][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 286.540296][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 286.549769][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.557894][ T5916] usb 3-1: Product: syz [ 286.562081][ T5916] usb 3-1: Manufacturer: syz [ 286.566788][ T5916] usb 3-1: SerialNumber: syz [ 286.787204][ T5916] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 287.375847][ T8595] program syz.1.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.697618][ T8602] kvm: pic: non byte write [ 290.096763][ T8573] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 290.125734][ T9] usb 5-1: USB disconnect, device number 4 [ 290.160071][ T24] usb 3-1: USB disconnect, device number 23 [ 290.188086][ T24] usblp1: removed [ 290.575869][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 290.744421][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 290.751775][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.760383][ T24] usb 3-1: config 0 has no interface number 0 [ 290.770004][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 290.783719][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 290.810685][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 290.834651][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.849700][ T24] usb 3-1: Product: syz [ 290.854052][ T24] usb 3-1: Manufacturer: syz [ 290.859339][ T24] usb 3-1: SerialNumber: syz [ 290.871372][ T24] usb 3-1: config 0 descriptor?? [ 290.902969][ T8626] kvm: pic: non byte write [ 291.107217][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 291.118538][ T24] cx231xx 3-1:0.1: Failed to read PCB config [ 291.128440][ T24] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 291.151314][ T24] usb 3-1: USB disconnect, device number 24 [ 291.614406][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 291.773308][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 291.783121][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.796032][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.806876][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 291.816060][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.829147][ T24] usb 3-1: config 0 descriptor?? [ 291.984265][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 292.136786][ T5916] usb 5-1: config 0 has no interfaces? [ 292.142320][ T5916] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 292.152131][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.162671][ T5916] usb 5-1: config 0 descriptor?? [ 292.348742][ T8638] sctp: [Deprecated]: syz.3.894 (pid 8638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.348742][ T8638] Use struct sctp_sack_info instead [ 292.388707][ T5916] usb 5-1: USB disconnect, device number 5 [ 292.749356][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.759257][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.194300][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 293.324392][ T5916] usb 5-1: device descriptor read/64, error -71 [ 293.566940][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 293.704271][ T5916] usb 5-1: device descriptor read/64, error -71 [ 293.793787][ T5997] usb 3-1: USB disconnect, device number 25 [ 293.815568][ T5916] usb usb5-port1: attempt power cycle [ 293.842147][ T24] wlan0 speed is unknown, defaulting to 1000 [ 293.854165][ T24] s: Port: 1 Link DOWN [ 294.164484][ T5916] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.185039][ T5916] usb 5-1: device descriptor read/8, error -71 [ 294.217249][ T5997] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.374447][ T5997] usb 3-1: Using ep0 maxpacket: 8 [ 294.383181][ T5997] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 294.392462][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.407689][ T5997] pvrusb2: Hardware description: Terratec Grabster AV400 [ 294.415096][ T5997] pvrusb2: ********** [ 294.419206][ T5997] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 294.429492][ T5997] pvrusb2: Important functionality might not be entirely working. [ 294.437437][ T5997] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 294.449645][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 294.449937][ T5997] pvrusb2: ********** [ 294.486707][ T5916] usb 5-1: device descriptor read/8, error -71 [ 294.596270][ T5916] usb usb5-port1: unable to enumerate USB device [ 294.610290][ T2346] pvrusb2: Invalid write control endpoint [ 294.660588][ T2346] pvrusb2: Invalid write control endpoint [ 294.669179][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 294.681645][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 294.690701][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 294.700979][ T2346] pvrusb2: Device being rendered inoperable [ 294.707034][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 294.714337][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 294.724256][ T2346] pvrusb2: Attached sub-driver cx25840 [ 294.730375][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 294.740914][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 294.834594][ T8648] pvrusb2: Attempted to execute control transfer when device not ok [ 294.850039][ T5997] usb 3-1: USB disconnect, device number 26 [ 294.940529][ T8653] kvm: pic: non byte write [ 295.694977][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 295.884465][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 295.901082][ T24] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 295.915536][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.927742][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.944547][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.971492][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.985596][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.997656][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.022294][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.064592][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.081069][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 296.091411][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 296.099602][ T24] usb 3-1: SerialNumber: syz [ 296.114853][ T24] usb 3-1: config 0 descriptor?? [ 296.129882][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 296.268803][ T8673] syzkaller1: entered promiscuous mode [ 296.275428][ T8673] syzkaller1: entered allmulticast mode [ 296.344526][ T5218] bcm5974 3-1:0.0: could not read from device [ 296.363485][ T5218] bcm5974 3-1:0.0: could not read from device [ 296.382201][ T24] usb 3-1: USB disconnect, device number 27 [ 296.411662][ T5916] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.572109][ T5916] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 296.599440][ T5916] usb 5-1: config 128 has no interface number 0 [ 296.607204][ T5916] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 296.620815][ T5916] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 296.636431][ T5916] usb 5-1: config 128 interface 148 has no altsetting 0 [ 296.647240][ T5916] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 296.675549][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.683619][ T5916] usb 5-1: Product: syz [ 296.689321][ T5916] usb 5-1: Manufacturer: syz [ 296.693964][ T5916] usb 5-1: SerialNumber: syz [ 296.809671][ T8683] kvm: pic: non byte write [ 296.895977][ T5932] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 296.901534][ T5952] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 296.917150][ T5932] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 296.961979][ T5932] usb 2-1: USB disconnect, device number 13 [ 296.967236][ T5916] usb 5-1: USB disconnect, device number 10 [ 296.991543][ T5952] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 297.021852][ T5952] usb 4-1: USB disconnect, device number 8 [ 297.294310][ T5932] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 297.384585][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.464295][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 297.464359][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 297.481150][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.491871][ T5932] usb 2-1: config 0 has no interfaces? [ 297.497631][ T5932] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 297.507025][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.524977][ T5932] usb 2-1: config 0 descriptor?? [ 297.525765][ T9] usb 3-1: device descriptor read/64, error -71 [ 297.571561][ T6145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.624505][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 297.632936][ T5916] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 297.642370][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.657564][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.667721][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 297.694244][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.707113][ T6145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.714248][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.748739][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.795071][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 297.828755][ T6145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.938505][ T9] usb 3-1: device descriptor read/64, error -71 [ 297.962737][ T6145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.983622][ T5916] usb 5-1: usb_control_msg returned -32 [ 297.991566][ T5916] usbtmc 5-1:16.0: can't read capabilities [ 298.056706][ T9] usb usb3-port1: attempt power cycle [ 298.202597][ T8697] ptrace attach of "./syz-executor exec"[7156] was attempted by "./syz-executor exec"[8697] [ 298.214117][ T8697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.917'. [ 298.315617][ T6145] bridge_slave_1: left allmulticast mode [ 298.323390][ T6145] bridge_slave_1: left promiscuous mode [ 298.331383][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.412354][ T6145] bridge_slave_0: left allmulticast mode [ 298.412415][ T8698] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 298.424257][ T6145] bridge_slave_0: left promiscuous mode [ 298.431410][ T24] usb 5-1: USB disconnect, device number 11 [ 298.443125][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.444299][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 298.529209][ T9] usb 3-1: device descriptor read/8, error -71 [ 298.803177][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 298.848826][ T9] usb 3-1: device descriptor read/8, error -71 [ 298.956156][ T9] usb usb3-port1: unable to enumerate USB device [ 299.133386][ T5916] usb 2-1: USB disconnect, device number 14 [ 299.596245][ T5916] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 299.605037][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.628175][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.642489][ T6145] bond0 (unregistering): Released all slaves [ 299.785970][ T5997] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 299.794766][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 299.802280][ T5916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 299.819659][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.846758][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.881110][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.923373][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.950431][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.982761][ T5997] usb 4-1: Using ep0 maxpacket: 16 [ 300.001022][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.017831][ T5997] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.030352][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.051904][ T5997] usb 4-1: Product: syz [ 300.059553][ T5997] usb 4-1: Manufacturer: syz [ 300.069677][ T5997] usb 4-1: SerialNumber: syz [ 300.105530][ T5997] usb 4-1: config 0 descriptor?? [ 300.128035][ T5997] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.184457][ T5997] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 300.192080][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.240088][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.285120][ T5916] usb 2-1: GET_CAPABILITIES returned 0 [ 300.312983][ T5916] usbtmc 2-1:16.0: can't read capabilities [ 300.331817][ T6145] hsr_slave_0: left promiscuous mode [ 300.371905][ T6145] hsr_slave_1: left promiscuous mode [ 300.387067][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.416690][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.435101][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.445993][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.481962][ T6145] veth1_macvtap: left promiscuous mode [ 300.495965][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 300.514379][ T6145] veth0_macvtap: left promiscuous mode [ 300.520183][ T6145] veth1_vlan: left promiscuous mode [ 300.520478][ T5916] usb 2-1: USB disconnect, device number 15 [ 300.531748][ T6145] veth0_vlan: left promiscuous mode [ 300.732143][ T5997] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 300.924324][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 300.948676][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 301.115329][ T5866] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 301.119171][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 301.132394][ T5866] usb 3-1: config 128 has no interface number 0 [ 301.142111][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.153716][ T24] usb 5-1: config 0 has no interfaces? [ 301.159762][ T5866] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.173780][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 301.186038][ T5866] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 301.198563][ T5997] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 301.202974][ T5866] usb 3-1: config 128 interface 148 has no altsetting 0 [ 301.220373][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.232316][ T5997] em28xx 4-1:0.0: board has no eeprom [ 301.259132][ T24] usb 5-1: config 0 descriptor?? [ 301.265108][ T5866] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 301.282983][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.317783][ T5866] usb 3-1: Product: syz [ 301.322023][ T5866] usb 3-1: Manufacturer: syz [ 301.328781][ T5997] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 301.328795][ T5866] usb 3-1: SerialNumber: syz [ 301.348228][ T5997] em28xx 4-1:0.0: dvb set to bulk mode. [ 301.356270][ T24] em28xx 4-1:0.0: Binding DVB extension [ 301.404873][ T5997] usb 4-1: USB disconnect, device number 9 [ 301.436732][ T5997] em28xx 4-1:0.0: Disconnecting em28xx [ 301.558784][ T24] em28xx 4-1:0.0: Registering input extension [ 301.575125][ T5997] em28xx 4-1:0.0: Closing input extension [ 301.599573][ T5866] usb 3-1: USB disconnect, device number 32 [ 301.629543][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 301.633059][ T5997] em28xx 4-1:0.0: Freeing device [ 301.793686][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 302.128901][ T5866] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 302.194342][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 302.308867][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 302.319787][ T5866] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 302.324358][ T24] usb 2-1: device descriptor read/64, error -71 [ 302.328478][ T5952] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.344411][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.355233][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.365803][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 302.376017][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.390698][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.400391][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.569613][ T5952] usb 4-1: config 0 has no interfaces? [ 302.584509][ T5952] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.584552][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 302.607357][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.625523][ T5866] usb 3-1: usb_control_msg returned -32 [ 302.633157][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 302.642428][ T5952] usb 4-1: config 0 descriptor?? [ 302.744845][ T24] usb 2-1: device descriptor read/64, error -71 [ 302.854660][ T24] usb usb2-port1: attempt power cycle [ 302.872689][ T5866] usb 4-1: USB disconnect, device number 10 [ 302.983790][ T8766] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 303.003228][ T5997] usb 3-1: USB disconnect, device number 33 [ 303.195111][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 303.227250][ T24] usb 2-1: device descriptor read/8, error -71 [ 303.484258][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.505842][ T24] usb 2-1: device descriptor read/8, error -71 [ 303.627865][ T24] usb usb2-port1: unable to enumerate USB device [ 303.759279][ T5952] usb 5-1: USB disconnect, device number 12 [ 303.954572][ T8800] program syz.2.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.244351][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 304.384631][ T5997] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.764285][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 304.772348][ T24] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 304.783536][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.805666][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.825685][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.845664][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.858145][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.870933][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.893744][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.918992][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.936402][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 304.954427][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 304.963346][ T5997] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 304.984253][ T5997] usb 5-1: config 128 has no interface number 0 [ 304.990741][ T5997] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 305.006612][ T24] usb 4-1: SerialNumber: syz [ 305.032133][ T24] usb 4-1: config 0 descriptor?? [ 305.049310][ T5997] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 305.082803][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 305.101420][ T5997] usb 5-1: config 128 interface 148 has no altsetting 0 [ 305.134795][ T5997] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 305.144712][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.152924][ T5997] usb 5-1: Product: syz [ 305.157710][ T5997] usb 5-1: Manufacturer: syz [ 305.162434][ T5997] usb 5-1: SerialNumber: syz [ 305.301015][ T5218] bcm5974 4-1:0.0: could not read from device [ 305.338529][ T5218] bcm5974 4-1:0.0: could not read from device [ 305.357843][ T24] usb 4-1: USB disconnect, device number 11 [ 305.384943][ T5218] bcm5974 4-1:0.0: could not read from device [ 305.453837][ T5997] usb 5-1: USB disconnect, device number 13 [ 305.656360][ T5916] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 305.824237][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 305.842393][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.857788][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.881984][ T5916] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 305.900083][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.915441][ T5916] usb 3-1: config 0 descriptor?? [ 305.954408][ T5997] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 306.114425][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 306.130587][ T5997] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 306.141199][ T5997] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.154017][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.167477][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 306.180267][ T5997] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.198802][ T5997] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 306.208248][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.254292][ T983] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 306.394456][ T983] usb 4-1: device descriptor read/64, error -71 [ 306.430469][ T5997] usb 5-1: usb_control_msg returned -32 [ 306.436958][ T5997] usbtmc 5-1:16.0: can't read capabilities [ 306.664413][ T983] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 306.794409][ T983] usb 4-1: device descriptor read/64, error -71 [ 306.802543][ T8854] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 306.815590][ T24] usb 5-1: USB disconnect, device number 14 [ 306.904918][ T983] usb usb4-port1: attempt power cycle [ 307.264434][ T983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.337092][ T983] usb 4-1: device descriptor read/8, error -71 [ 307.575623][ T983] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 307.605023][ T983] usb 4-1: device descriptor read/8, error -71 [ 307.696728][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 307.724820][ T983] usb usb4-port1: unable to enumerate USB device [ 307.854385][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 307.863770][ T5866] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 307.882982][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.899239][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.911028][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.922658][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.934943][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.947156][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.959894][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.971677][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.986566][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 308.003187][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 308.016783][ T5866] usb 5-1: SerialNumber: syz [ 308.036227][ T5866] usb 5-1: config 0 descriptor?? [ 308.049414][ T5866] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 308.251612][ T5218] bcm5974 5-1:0.0: could not read from device [ 308.268603][ T5218] bcm5974 5-1:0.0: could not read from device [ 308.338012][ T5866] usb 5-1: USB disconnect, device number 15 [ 308.350429][ T5218] bcm5974 5-1:0.0: could not read from device [ 308.416098][ T5952] usb 3-1: USB disconnect, device number 34 [ 308.919273][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 308.919288][ T30] audit: type=1326 audit(1758043599.877:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.042741][ T30] audit: type=1326 audit(1758043599.937:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.636060][ T30] audit: type=1326 audit(1758043599.937:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.730499][ T30] audit: type=1326 audit(1758043599.937:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.824073][ T30] audit: type=1326 audit(1758043599.937:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.878973][ T30] audit: type=1326 audit(1758043599.947:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.947100][ T30] audit: type=1326 audit(1758043599.947:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 309.983237][ T30] audit: type=1326 audit(1758043599.947:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 310.014662][ T5952] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.016973][ T30] audit: type=1326 audit(1758043599.977:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 310.053520][ T30] audit: type=1326 audit(1758043599.977:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8b8eba9 code=0x7ffc0000 [ 310.226122][ T5952] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 310.243461][ T5952] usb 4-1: config 128 has no interface number 0 [ 310.250688][ T5952] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 310.254447][ T983] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 310.261105][ T5952] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 310.281088][ T5952] usb 4-1: config 128 interface 148 has no altsetting 0 [ 310.293773][ T5952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 310.303568][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.317779][ T5952] usb 4-1: Product: syz [ 310.325153][ T5952] usb 4-1: Manufacturer: syz [ 310.338899][ T5952] usb 4-1: SerialNumber: syz [ 310.434249][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 310.443286][ T983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.460694][ T983] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.470234][ T983] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 310.482634][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.497206][ T983] usb 5-1: config 0 descriptor?? [ 310.556240][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'. [ 310.595055][ T5952] usb 4-1: USB disconnect, device number 16 [ 310.904272][ T983] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 311.055497][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 311.061576][ T983] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 311.073209][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.084441][ T5952] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 311.085631][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.106406][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.118790][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.131074][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.143333][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.155756][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.168480][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.180950][ T983] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 311.190696][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 311.199371][ T983] usb 2-1: SerialNumber: syz [ 311.208037][ T983] usb 2-1: config 0 descriptor?? [ 311.228137][ T983] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 311.264865][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 311.282233][ T5952] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 311.309967][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.339463][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.363300][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 311.384209][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.401056][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.411553][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.435767][ T983] usb 2-1: USB disconnect, device number 20 [ 311.442806][ T5218] bcm5974 2-1:0.0: could not read from device [ 311.457063][ T7641] bcm5974 2-1:0.0: could not read from device [ 312.210608][ T8916] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 312.218513][ T24] usb 4-1: USB disconnect, device number 17 [ 312.354304][ T5952] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 312.485239][ T5952] usb 2-1: device descriptor read/64, error -71 [ 312.748409][ T5952] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.888029][ T8918] kvm: pic: non byte write [ 312.896569][ T5952] usb 2-1: device descriptor read/64, error -71 [ 312.911743][ T8918] kvm: pic: non byte write [ 313.025988][ T5952] usb usb2-port1: attempt power cycle [ 313.051517][ T24] usb 5-1: USB disconnect, device number 16 [ 313.384252][ T5952] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 313.404980][ T5952] usb 2-1: device descriptor read/8, error -71 [ 313.474448][ T5997] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 313.634274][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 313.640265][ T5997] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 313.649489][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.654420][ T5952] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.663447][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.679353][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.691024][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.701908][ T5952] usb 2-1: device descriptor read/8, error -71 [ 313.703200][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.720635][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.732954][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.745670][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.757554][ T5997] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 313.768194][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 313.776540][ T5997] usb 3-1: SerialNumber: syz [ 313.783565][ T5997] usb 3-1: config 0 descriptor?? [ 313.797080][ T5997] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 313.818592][ T5952] usb usb2-port1: unable to enumerate USB device [ 314.006610][ T5218] bcm5974 3-1:0.0: could not read from device [ 314.014626][ T5218] bcm5974 3-1:0.0: could not read from device [ 314.027712][ T5218] bcm5974 3-1:0.0: could not read from device [ 314.030047][ T5997] usb 3-1: USB disconnect, device number 35 [ 314.394339][ T5952] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 314.568528][ T5952] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 314.577113][ T5952] usb 5-1: config 128 has no interface number 0 [ 314.583457][ T5952] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 314.593677][ T5952] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 314.605677][ T5952] usb 5-1: config 128 interface 148 has no altsetting 0 [ 314.616442][ T5952] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 314.626028][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.636188][ T5952] usb 5-1: Product: syz [ 314.642132][ T5952] usb 5-1: Manufacturer: syz [ 314.647247][ T5952] usb 5-1: SerialNumber: syz [ 314.873604][ T5952] usb 5-1: USB disconnect, device number 17 [ 315.044353][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 315.204340][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 315.212895][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.244399][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.270162][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.306385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.324626][ T5997] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.328066][ T9] usb 3-1: config 0 descriptor?? [ 315.406840][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.997'. [ 315.540233][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 315.547721][ T5997] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 315.558424][ T5997] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.575358][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.585760][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 315.596150][ T5997] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.604742][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.609910][ T5997] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.628472][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.714445][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 315.795046][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 315.816265][ T5916] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 315.825644][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.860354][ T5916] pvrusb2: Hardware description: Terratec Grabster AV400 [ 315.873898][ T5916] pvrusb2: ********** [ 315.883023][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 315.900890][ T5916] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.912230][ T9] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 315.929235][ T5916] pvrusb2: Important functionality might not be entirely working. [ 315.938700][ T5916] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.951972][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.962605][ T5916] pvrusb2: ********** [ 315.971358][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.990322][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.004064][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.026931][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.038686][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.051340][ T2346] pvrusb2: Invalid write control endpoint [ 316.068074][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.091962][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.104347][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 316.113602][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 316.123023][ T9] usb 2-1: SerialNumber: syz [ 316.131869][ T9] usb 2-1: config 0 descriptor?? [ 316.151825][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 316.156594][ T2346] pvrusb2: Invalid write control endpoint [ 316.170662][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 316.181163][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 316.192374][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 316.202752][ T2346] pvrusb2: Device being rendered inoperable [ 316.210002][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 316.218334][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 316.229147][ T2346] pvrusb2: Attached sub-driver cx25840 [ 316.238195][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.248712][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 316.256476][ T8955] pvrusb2: Attempted to execute control transfer when device not ok [ 316.268221][ T983] usb 4-1: USB disconnect, device number 18 [ 316.353493][ T5218] bcm5974 2-1:0.0: could not read from device [ 316.366028][ T5218] bcm5974 2-1:0.0: could not read from device [ 316.376081][ T5218] bcm5974 2-1:0.0: could not read from device [ 316.378053][ T9] usb 2-1: USB disconnect, device number 25 [ 316.392454][ T5218] bcm5974 2-1:0.0: could not read from device [ 316.411862][ T8975] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 316.428707][ T5866] usb 5-1: USB disconnect, device number 18 [ 317.252099][ T8992] wlan0 speed is unknown, defaulting to 1000 [ 317.285488][ T5866] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.455124][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 317.461310][ T5866] usb 4-1: no configurations [ 317.468876][ T5866] usb 4-1: can't read configurations, error -22 [ 317.476600][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 317.637324][ T5866] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 317.648947][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.900661][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.914280][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.924626][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.936365][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.950078][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.959842][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.968323][ T9] usb 5-1: Product: syz [ 317.972522][ T9] usb 5-1: Manufacturer: syz [ 317.979661][ T5997] usb 3-1: USB disconnect, device number 36 [ 318.015451][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 318.053577][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 318.074666][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 318.082600][ T5866] usb 4-1: no configurations [ 318.112849][ T5866] usb 4-1: can't read configurations, error -22 [ 318.138127][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 318.181616][ T5866] usb usb4-port1: attempt power cycle [ 318.201758][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 318.226588][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.323052][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.584647][ T5866] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 318.615330][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 318.622141][ T5866] usb 4-1: no configurations [ 318.629619][ T5866] usb 4-1: can't read configurations, error -22 [ 318.701253][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 318.702814][ T24] usb 5-1: USB disconnect, device number 19 [ 318.709847][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.720726][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.726934][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 318.794842][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 318.805975][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 318.836105][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 318.849372][ T5866] usb 4-1: no configurations [ 318.856024][ T5866] usb 4-1: can't read configurations, error -22 [ 318.862950][ T5866] usb usb4-port1: unable to enumerate USB device [ 318.977039][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 318.991760][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.007519][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 319.018012][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.034671][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.052073][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.081965][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.094331][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 319.094351][ T30] audit: type=1326 audit(1758043610.047:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.135342][ T9] usb 2-1: invalid MIDI out EP 0 [ 319.174686][ T30] audit: type=1326 audit(1758043610.047:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.244440][ T30] audit: type=1326 audit(1758043610.047:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.323364][ T30] audit: type=1326 audit(1758043610.047:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.361105][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 319.368724][ T30] audit: type=1326 audit(1758043610.047:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.390679][ T9] usb 2-1: USB disconnect, device number 26 [ 319.410694][ T30] audit: type=1326 audit(1758043610.047:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.474205][ T30] audit: type=1326 audit(1758043610.047:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.498854][ T30] audit: type=1326 audit(1758043610.047:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.548475][ T30] audit: type=1326 audit(1758043610.047:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.584732][ T5997] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 319.613097][ T30] audit: type=1326 audit(1758043610.047:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d7b8eba9 code=0x7fc00000 [ 319.754289][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 319.761216][ T5997] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 319.782797][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.800607][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.813402][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.828257][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.840028][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.855831][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.868552][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.880016][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.891715][ T5997] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 319.901528][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 319.913293][ T5997] usb 3-1: SerialNumber: syz [ 319.940191][ T5997] usb 3-1: config 0 descriptor?? [ 319.964987][ T5997] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 320.178900][ T5218] bcm5974 3-1:0.0: could not read from device [ 320.245967][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.577050][ T5218] bcm5974 3-1:0.0: could not read from device [ 320.588016][ T5997] usb 3-1: USB disconnect, device number 37 [ 320.645047][ T5866] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 320.806530][ T5866] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 320.815834][ T5866] usb 2-1: config 128 has no interface number 0 [ 320.828181][ T5866] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 320.866693][ T5866] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 320.880086][ T5866] usb 2-1: config 128 interface 148 has no altsetting 0 [ 320.904595][ T5866] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 320.917962][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.927615][ T5866] usb 2-1: Product: syz [ 320.933219][ T5866] usb 2-1: Manufacturer: syz [ 320.938353][ T5866] usb 2-1: SerialNumber: syz [ 321.302024][ T5866] usb 2-1: USB disconnect, device number 27 [ 321.644301][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 321.724256][ T5866] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.919303][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 322.013087][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.132701][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 322.426265][ T5866] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 322.485269][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 322.561137][ T5866] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.653956][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.661909][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.728784][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.814383][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.854262][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 322.865227][ T9] usb 3-1: config 0 descriptor?? [ 322.934710][ T5866] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.951265][ T5866] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.961809][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.167514][ T5866] usb 2-1: usb_control_msg returned -71 [ 323.173515][ T5866] usbtmc 2-1:16.0: can't read capabilities [ 323.231024][ T5866] usb 2-1: USB disconnect, device number 28 [ 323.705432][ T3097] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 323.884300][ T3097] usb 5-1: Using ep0 maxpacket: 16 [ 323.893774][ T3097] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 323.907795][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.920645][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.933844][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.948353][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.966413][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.978821][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.990986][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.003017][ T3097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.015344][ T3097] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 324.025785][ T3097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 324.034706][ T3097] usb 5-1: SerialNumber: syz [ 324.047876][ T3097] usb 5-1: config 0 descriptor?? [ 324.068135][ T3097] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 324.087418][ T5997] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 324.264516][ T5997] usb 4-1: Using ep0 maxpacket: 8 [ 324.272020][ T5218] bcm5974 5-1:0.0: could not read from device [ 324.272671][ T3097] usb 5-1: USB disconnect, device number 20 [ 324.286308][ T5997] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.297306][ T5218] bcm5974 5-1:0.0: could not read from device [ 324.307233][ T7641] bcm5974 5-1:0.0: could not read from device [ 324.308470][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 324.321610][ T5997] usb 4-1: config 42 has an invalid interface number: 238 but max is 0 [ 324.330179][ T5997] usb 4-1: config 42 has no interface number 0 [ 324.336832][ T5997] usb 4-1: config 42 interface 238 has no altsetting 0 [ 324.348905][ T5997] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=12.b3 [ 324.358388][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.367393][ T5997] usb 4-1: Product: syz [ 324.371689][ T5997] usb 4-1: Manufacturer: syz [ 324.376638][ T5997] usb 4-1: SerialNumber: syz [ 324.508819][ T24] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 324.517805][ T24] usb 2-1: config 128 has no interface number 0 [ 324.525111][ T24] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 324.535881][ T24] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 324.548245][ T24] usb 2-1: config 128 interface 148 has no altsetting 0 [ 324.559282][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 324.569070][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.578401][ T24] usb 2-1: Product: syz [ 324.582731][ T24] usb 2-1: Manufacturer: syz [ 324.587950][ T24] usb 2-1: SerialNumber: syz [ 324.590254][ T3097] usb 3-1: USB disconnect, device number 38 [ 324.839781][ T24] usb 2-1: USB disconnect, device number 29 [ 324.957498][ T3097] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 325.097108][ T3097] usb 3-1: device descriptor read/64, error -71 [ 325.127943][ T5997] usb 4-1: unknown interface protocol 0x16, assuming v1 [ 325.152280][ T5997] usb 4-1: cannot find UAC_HEADER [ 325.201211][ T5997] snd-usb-audio 4-1:42.238: probe with driver snd-usb-audio failed with error -22 [ 325.243152][ T5997] usb 4-1: USB disconnect, device number 23 [ 325.295303][ T7346] udevd[7346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:42.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.336208][ T3097] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 325.499026][ T3097] usb 3-1: device descriptor read/64, error -71 [ 325.615314][ T3097] usb usb3-port1: attempt power cycle [ 325.667591][ T9132] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 325.678783][ T9132] netlink: 'syz.1.1040': attribute type 2 has an invalid length. [ 325.744380][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 325.774307][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 325.904917][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 325.912374][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.921810][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 325.931222][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 325.936562][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.945908][ T5866] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 325.958511][ T9] usb 4-1: config 0 descriptor?? [ 325.965181][ T3097] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 325.973681][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.993011][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.006640][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.017294][ T3097] usb 3-1: device descriptor read/8, error -71 [ 326.028467][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.040372][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.054674][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.066870][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.079159][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.091951][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 326.102222][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 326.112108][ T5866] usb 5-1: SerialNumber: syz [ 326.119558][ T5866] usb 5-1: config 0 descriptor?? [ 326.130862][ T5866] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 326.264330][ T3097] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 326.285015][ T3097] usb 3-1: device descriptor read/8, error -71 [ 326.342314][ T5218] bcm5974 5-1:0.0: could not read from device [ 326.352095][ T5218] bcm5974 5-1:0.0: could not read from device [ 326.363006][ T5218] bcm5974 5-1:0.0: could not read from device [ 326.364599][ T5866] usb 5-1: USB disconnect, device number 21 [ 326.378658][ T5218] bcm5974 5-1:0.0: could not read from device [ 326.395775][ T3097] usb usb3-port1: unable to enumerate USB device [ 326.454576][ T5997] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 326.624568][ T5997] usb 2-1: Using ep0 maxpacket: 8 [ 326.632410][ T5997] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 326.643618][ T5997] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 326.653193][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.661854][ T5997] usb 2-1: Product: syz [ 326.666837][ T5997] usb 2-1: Manufacturer: syz [ 326.672073][ T5997] usb 2-1: SerialNumber: syz [ 326.679905][ T5997] usb 2-1: config 0 descriptor?? [ 326.691892][ T5997] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 326.701470][ T5997] usb 2-1: setting power ON [ 326.706316][ T5997] dvb-usb: bulk message failed: -22 (2/0) [ 326.714894][ T5997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.726366][ T5997] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 326.735749][ T5997] usb 2-1: media controller created [ 326.756526][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.775838][ T5997] usb 2-1: selecting invalid altsetting 6 [ 326.781744][ T5997] usb 2-1: digital interface selection failed (-22) [ 326.788721][ T5997] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 326.797983][ T5997] usb 2-1: setting power OFF [ 326.802666][ T5997] dvb-usb: bulk message failed: -22 (2/0) [ 326.809495][ T5997] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 326.821653][ T5997] (NULL device *): no alternate interface [ 326.851500][ T5997] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 326.916167][ T5997] usb 2-1: USB disconnect, device number 30 [ 327.473045][ T9150] loop3: detected capacity change from 0 to 1 [ 327.486260][ T9150] Dev loop3: unable to read RDB block 1 [ 327.492224][ T9150] loop3: unable to read partition table [ 327.500105][ T9150] loop3: partition table beyond EOD, truncated [ 327.507989][ T9150] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 327.584809][ T5997] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 327.776805][ T5997] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 327.790008][ T5997] usb 5-1: config 128 has no interface number 0 [ 327.796540][ T5997] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 327.810774][ T5997] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 327.823917][ T5997] usb 5-1: config 128 interface 148 has no altsetting 0 [ 327.854315][ T5997] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 327.865017][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.873128][ T5997] usb 5-1: Product: syz [ 327.879871][ T5997] usb 5-1: Manufacturer: syz [ 327.886922][ T5997] usb 5-1: SerialNumber: syz [ 327.914315][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 328.127694][ T5997] usb 5-1: USB disconnect, device number 22 [ 328.174630][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 328.191986][ T5866] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 328.264037][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.278120][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.296043][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.312003][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.328598][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.342122][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.355826][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.369202][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.381781][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 328.391637][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 328.400303][ T5866] usb 2-1: SerialNumber: syz [ 328.416550][ T5866] usb 2-1: config 0 descriptor?? [ 328.434874][ T5866] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 328.588052][ T9] usb 4-1: USB disconnect, device number 24 [ 328.645935][ T5218] bcm5974 2-1:0.0: could not read from device [ 328.679333][ T5218] bcm5974 2-1:0.0: could not read from device [ 328.687757][ T5866] usb 2-1: USB disconnect, device number 31 [ 328.711699][ T5218] bcm5974 2-1:0.0: could not read from device [ 328.741900][ T5218] bcm5974 2-1:0.0: could not read from device [ 329.114638][ T5997] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 329.315600][ T5997] usb 4-1: Using ep0 maxpacket: 16 [ 329.359243][ T5997] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 329.378064][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.408649][ T5997] usb 4-1: config 0 descriptor?? [ 329.428101][ T5997] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 329.440890][ T9180] bridge0: entered allmulticast mode [ 329.460974][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 329.471261][ T9180] team0: left allmulticast mode [ 329.476984][ T9180] team_slave_0: left allmulticast mode [ 329.483104][ T9180] team_slave_1: left allmulticast mode [ 329.490820][ T9180] team0: left promiscuous mode [ 329.496409][ T9180] team_slave_0: left promiscuous mode [ 329.502421][ T9180] team_slave_1: left promiscuous mode [ 329.509322][ T9180] bridge0: port 3(team0) entered disabled state [ 329.523410][ T9180] bridge_slave_1: left allmulticast mode [ 329.529702][ T9180] bridge_slave_1: left promiscuous mode [ 329.536791][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.553711][ T9180] bridge_slave_0: left allmulticast mode [ 329.564050][ T9180] bridge_slave_0: left promiscuous mode [ 329.570232][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.621436][ T9180] bridge0 (unregistering): left allmulticast mode [ 329.654565][ T5997] usb 4-1: Detected FT232A [ 329.676918][ T5997] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 329.716282][ T5997] usb 4-1: USB disconnect, device number 25 [ 329.757496][ T5997] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.777337][ T5997] ftdi_sio 4-1:0.0: device disconnected [ 330.044240][ T5952] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 330.194417][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 330.224616][ T5952] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.247784][ T5952] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 330.291672][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.332660][ T5952] usb 5-1: config 0 descriptor?? [ 330.457985][ T9198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1064'. [ 330.530305][ T9200] vivid-002: disconnect [ 330.564365][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 330.564998][ T9199] vivid-002: reconnect [ 330.614861][ T5997] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 330.727255][ T24] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 330.736269][ T24] usb 4-1: config 128 has no interface number 0 [ 330.742929][ T24] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 330.758500][ T24] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 330.772232][ T24] usb 4-1: config 128 interface 148 has no altsetting 0 [ 330.780515][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 330.787793][ T5997] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 330.798621][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 330.809390][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.819249][ T24] usb 4-1: Product: syz [ 330.824035][ T24] usb 4-1: Manufacturer: syz [ 330.829112][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.840685][ T24] usb 4-1: SerialNumber: syz [ 330.846930][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.860875][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.880147][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.892680][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.906094][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.921916][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.935440][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.948167][ T5997] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 330.958137][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 330.967465][ T5997] usb 3-1: SerialNumber: syz [ 330.983367][ T5997] usb 3-1: config 0 descriptor?? [ 331.003034][ T5997] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 331.102205][ T24] usb 4-1: USB disconnect, device number 26 [ 331.219710][ T5218] bcm5974 3-1:0.0: could not read from device [ 331.241940][ T5218] bcm5974 3-1:0.0: could not read from device [ 331.256248][ T5997] usb 3-1: USB disconnect, device number 43 [ 331.267092][ T5218] bcm5974 3-1:0.0: could not read from device [ 331.281381][ T5218] bcm5974 3-1:0.0: could not read from device [ 331.937544][ T5952] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 332.427155][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.465079][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.477612][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 332.488310][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.503147][ T5952] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.526496][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.550168][ T5952] usb 2-1: config 0 descriptor?? [ 332.887734][ T3097] usb 5-1: USB disconnect, device number 23 [ 333.082517][ T5952] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 333.293640][ T5952] usb 2-1: USB disconnect, device number 32 [ 333.714464][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 333.714464][ T3097] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 333.841364][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 333.841385][ T30] audit: type=1326 audit(1758043624.797:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 333.872642][ T30] audit: type=1326 audit(1758043624.797:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 333.875437][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 333.913611][ T30] audit: type=1326 audit(1758043624.797:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 333.932044][ T24] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 333.952767][ T3097] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 333.954335][ T30] audit: type=1326 audit(1758043624.797:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 333.963757][ T3097] usb 5-1: config 128 has no interface number 0 [ 333.985959][ T30] audit: type=1326 audit(1758043624.797:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 333.997618][ T3097] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.026163][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.036502][ T3097] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 334.036541][ T3097] usb 5-1: config 128 interface 148 has no altsetting 0 [ 334.038948][ T30] audit: type=1326 audit(1758043624.797:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 334.080758][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.096474][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.103467][ T3097] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 334.107893][ T30] audit: type=1326 audit(1758043624.797:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 334.141124][ T30] audit: type=1326 audit(1758043624.837:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.1.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 334.154353][ T3097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.163827][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.187287][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.209907][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.225688][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.227670][ T3097] usb 5-1: Product: syz [ 334.243584][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.250906][ T3097] usb 5-1: Manufacturer: syz [ 334.258962][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 334.262776][ T3097] usb 5-1: SerialNumber: syz [ 334.269663][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 334.282359][ T24] usb 4-1: SerialNumber: syz [ 334.295306][ T24] usb 4-1: config 0 descriptor?? [ 334.325563][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 334.444292][ T5952] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 334.497075][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.508827][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.529109][ T5218] bcm5974 4-1:0.0: could not read from device [ 334.546936][ T3097] usb 5-1: USB disconnect, device number 24 [ 334.559911][ T5218] bcm5974 4-1:0.0: could not read from device [ 334.570378][ T5218] bcm5974 4-1:0.0: could not read from device [ 334.578725][ T24] usb 4-1: USB disconnect, device number 27 [ 334.585770][ T5218] bcm5974 4-1:0.0: could not read from device [ 334.616774][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 334.628715][ T5952] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 334.648941][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.693683][ T5952] usb 2-1: config 0 descriptor?? [ 334.936298][ T5952] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 334.952914][ T5952] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 334.962730][ T5952] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 335.374254][ T3097] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 335.536747][ T3097] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.586213][ T3097] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.662257][ T3097] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.710285][ T3097] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 335.781864][ T3097] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 335.807772][ T3097] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.825979][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.929321][ T3097] usb 3-1: Product: syz [ 335.933653][ T3097] usb 3-1: Manufacturer: syz [ 335.958391][ T3097] cdc_wdm 3-1:1.0: skipping garbage [ 335.966823][ T3097] cdc_wdm 3-1:1.0: skipping garbage [ 335.989345][ T3097] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 336.013324][ T3097] cdc_wdm 3-1:1.0: Unknown control protocol [ 336.669605][ T983] usb 3-1: USB disconnect, device number 44 [ 337.214279][ T983] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 337.366850][ T983] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 337.376111][ T983] usb 3-1: config 128 has no interface number 0 [ 337.382952][ T983] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 337.394345][ T983] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 337.417138][ T983] usb 3-1: config 128 interface 148 has no altsetting 0 [ 337.439512][ T983] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 337.460143][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.468487][ T983] usb 3-1: Product: syz [ 337.472844][ T983] usb 3-1: Manufacturer: syz [ 337.479011][ T983] usb 3-1: SerialNumber: syz [ 337.544262][ T3097] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 337.715084][ T3097] usb 4-1: Using ep0 maxpacket: 32 [ 337.723472][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.726810][ T3097] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 337.738154][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.762020][ T3097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.800384][ T983] usb 3-1: USB disconnect, device number 45 [ 337.808315][ T3097] usb 4-1: config 0 descriptor?? [ 338.020698][ T3097] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 338.058567][ T9291] kvm: pic: non byte write [ 338.066097][ T9291] kvm: pic: non byte write [ 339.053444][ T9320] syz_tun: entered allmulticast mode [ 339.061159][ T9319] syz_tun: left allmulticast mode [ 339.224690][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 339.405811][ T5916] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 339.405837][ T5916] usb 3-1: config 128 has no interface number 0 [ 339.405867][ T5916] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 339.405886][ T5916] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 339.405905][ T5916] usb 3-1: config 128 interface 148 has no altsetting 0 [ 339.407804][ T5916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 339.407827][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.407843][ T5916] usb 3-1: Product: syz [ 339.407854][ T5916] usb 3-1: Manufacturer: syz [ 339.407866][ T5916] usb 3-1: SerialNumber: syz [ 339.555643][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 339.618738][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.633382][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.704439][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 339.730399][ T5916] usb 3-1: USB disconnect, device number 46 [ 339.747719][ T30] audit: type=1326 audit(1758043630.707:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 339.779398][ T24] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 339.782042][ T30] audit: type=1326 audit(1758043630.707:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.037289][ T30] audit: type=1326 audit(1758043630.707:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.071648][ T24] usb 5-1: config 0 has no interface number 0 [ 340.133192][ T30] audit: type=1326 audit(1758043630.707:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.212031][ T30] audit: type=1326 audit(1758043630.707:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.248102][ T30] audit: type=1326 audit(1758043630.717:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.310870][ T30] audit: type=1326 audit(1758043630.717:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.348775][ T24] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 340.360812][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.369387][ T24] usb 5-1: Product: syz [ 340.373624][ T24] usb 5-1: Manufacturer: syz [ 340.378651][ T24] usb 5-1: SerialNumber: syz [ 340.424908][ T30] audit: type=1326 audit(1758043630.717:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.451903][ T24] usb 5-1: config 0 descriptor?? [ 340.470920][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 340.473624][ T30] audit: type=1326 audit(1758043630.717:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.680478][ T30] audit: type=1326 audit(1758043630.717:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 340.709720][ T9335] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.764230][ T9335] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 340.777085][ T9335] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 340.792905][ T9335] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 342.314454][ T24] gspca_topro: reg_r err -110 [ 342.319252][ T24] gspca_topro: Sensor soi763a [ 342.974319][ T5866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 343.124353][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 343.133095][ T5866] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 343.141618][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.151771][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.161895][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 343.182230][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 343.205175][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.232798][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.244027][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.272108][ T5866] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 343.868221][ T24] usb 5-1: USB disconnect, device number 25 [ 344.546394][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 344.734335][ T5932] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.894257][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 344.901182][ T5932] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 344.910596][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.922888][ T5932] usb 5-1: config 0 descriptor?? [ 345.138693][ T5932] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 345.624824][ T5997] usb 3-1: USB disconnect, device number 47 [ 345.795619][ T9406] tipc: Started in network mode [ 345.800696][ T9406] tipc: Node identity 0a3068473cc6, cluster identity 4711 [ 345.809151][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 345.821899][ T9406] tipc: Enabled bearer , priority 0 [ 345.838121][ T9406] syzkaller0: entered promiscuous mode [ 345.843937][ T9406] syzkaller0: entered allmulticast mode [ 345.857320][ T9406] tipc: Resetting bearer [ 345.902339][ T9405] tipc: Resetting bearer [ 345.938205][ T9405] tipc: Disabling bearer [ 346.224471][ T5997] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 346.384317][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 346.390328][ T5997] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 346.401583][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.413085][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.428646][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.439965][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.452960][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.467314][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.478938][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.493927][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.506067][ T5997] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 346.515401][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 346.523719][ T5997] usb 3-1: SerialNumber: syz [ 346.532041][ T5997] usb 3-1: config 0 descriptor?? [ 346.548001][ T5997] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 346.755807][ T5218] bcm5974 3-1:0.0: could not read from device [ 346.768653][ T5218] bcm5974 3-1:0.0: could not read from device [ 346.778983][ T5997] usb 3-1: USB disconnect, device number 48 [ 346.788368][ T5218] bcm5974 3-1:0.0: could not read from device [ 347.745066][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'. [ 347.893966][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'. [ 347.904852][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 348.212928][ T9456] @: renamed from vlan0 (while UP) [ 348.294855][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 348.444388][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 348.450334][ T9] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 348.461178][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.475441][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.488287][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.502875][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.515529][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.528216][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.541771][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.555734][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.567484][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 348.576740][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 348.585020][ T9] usb 3-1: SerialNumber: syz [ 348.596182][ T9] usb 3-1: config 0 descriptor?? [ 348.614726][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 348.823292][ T5218] bcm5974 3-1:0.0: could not read from device [ 348.849132][ T5218] bcm5974 3-1:0.0: could not read from device [ 348.860704][ T5218] bcm5974 3-1:0.0: could not read from device [ 348.862452][ T9] usb 3-1: USB disconnect, device number 49 [ 348.875531][ T5218] bcm5974 3-1:0.0: could not read from device [ 349.260945][ T9475] fuse: Unknown parameter '”Ÿ0x0000000000000003' [ 349.323360][ T9478] program syz.4.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.627221][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 349.639075][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 350.361250][ T9514] loop6: detected capacity change from 0 to 63 [ 350.383769][ T9514] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.397725][ T9514] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.406282][ T9514] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.416331][ T9514] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.424656][ T7346] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.438208][ T9515] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.448484][ T9514] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.461626][ T9513] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.470237][ T9513] Buffer I/O error on dev loop6, logical block 0, async page read [ 350.482480][ T7346] Buffer I/O error on dev loop6, logical block 0, async page read [ 351.582973][ T9529] kvm: pic: non byte write [ 355.594361][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 355.756081][ T24] usb 3-1: config 0 has no interfaces? [ 355.763189][ T24] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 355.783126][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.815681][ T24] usb 3-1: config 0 descriptor?? [ 356.034770][ T24] usb 3-1: USB disconnect, device number 50 [ 357.606765][ T9591] ucma_write: process 836 (syz.2.1214) changed security contexts after opening file descriptor, this is not allowed. [ 357.838164][ T9597] kvm: pic: non byte write [ 359.104320][ T929] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 359.254273][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 359.261431][ T929] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 359.272790][ T929] usb 3-1: config 0 has no interface number 0 [ 359.279631][ T929] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.292949][ T929] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 359.305074][ T929] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.316757][ T929] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.332277][ T929] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.343245][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.356627][ T9631] kvm: pic: non byte write [ 359.358374][ T929] usb 3-1: config 0 descriptor?? [ 359.378943][ T929] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 359.644462][ T24] usb 3-1: USB disconnect, device number 51 [ 359.657872][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 360.564420][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 360.744395][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 360.752042][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 360.761470][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.772484][ T24] usb 3-1: config 0 descriptor?? [ 361.207634][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 361.399257][ T9654] kvm: pic: non byte write [ 362.583686][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 362.583714][ T30] audit: type=1326 audit(1758043653.537:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.617106][ T30] audit: type=1326 audit(1758043653.577:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.641360][ T30] audit: type=1326 audit(1758043653.577:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.679483][ T30] audit: type=1326 audit(1758043653.577:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.711503][ T30] audit: type=1326 audit(1758043653.577:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.738230][ T30] audit: type=1326 audit(1758043653.577:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.771575][ T30] audit: type=1326 audit(1758043653.587:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.809988][ T30] audit: type=1326 audit(1758043653.587:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.836105][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 362.862567][ T30] audit: type=1326 audit(1758043653.587:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 362.887870][ T30] audit: type=1326 audit(1758043653.607:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9f4c58eba9 code=0x7ffc0000 [ 364.894755][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 364.904098][ T9683] tipc: Started in network mode [ 364.909554][ T9683] tipc: Node identity 7, cluster identity 4711 [ 364.919105][ T9683] tipc: Node number set to 7 [ 365.143877][ T9687] kvm: pic: non byte write [ 369.352036][ T9752] netlink: 'syz.1.1278': attribute type 2 has an invalid length. [ 371.428525][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1285'. [ 371.596443][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1287'. [ 374.906096][ T9796] kvm: pic: non byte write [ 375.477427][ T9808] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 376.376507][ T9844] kvm: pic: non byte write [ 378.153883][ T9854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.025785][ T9874] kvm: pic: non byte write [ 380.017402][ T9885] warning: `syz.4.1334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 380.162991][ T9] IPVS: starting estimator thread 0... [ 380.255347][ T9890] IPVS: using max 24 ests per chain, 57600 per kthread [ 380.477259][ T9900] kvm: pic: non byte write [ 381.359650][ T9906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.976351][ T9933] input: syz0 as /devices/virtual/input/input34 [ 383.883848][ T9954] kvm: pic: non byte write [ 383.939407][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.945912][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.953768][ T9958] binder: BINDER_SET_CONTEXT_MGR already set [ 383.959938][ T9958] binder: 9957:9958 ioctl 4018620d 200000000200 returned -16 [ 383.970012][ T9958] binder_alloc: 9957: binder_alloc_buf, no vma [ 387.271280][ T9990] kvm: pic: non byte write [ 388.816832][T10012] kvm: kvm [10011]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x11e) = 0xbe702911 [ 388.840914][T10012] kvm: kvm [10011]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x186) = 0x800 [ 388.864455][T10012] kvm: kvm [10011]: vcpu0, guest rIP: 0x9c Unhandled WRMSR(0x187) = 0x800 [ 389.055193][ C1] ------------[ cut here ]------------ [ 389.061387][ C1] ODEBUG: free active (active state 0) object: ffff88804b465090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 389.061547][T10017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.076237][ C1] WARNING: lib/debugobjects.c:615 at debug_print_object+0x16b/0x1e0, CPU#1: syz.1.1380/10009 [ 389.095186][ C1] Modules linked in: [ 389.099666][ C1] CPU: 1 UID: 0 PID: 10009 Comm: syz.1.1380 Not tainted syzkaller #0 PREEMPT(full) [ 389.109182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.119379][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 389.125320][ C1] Code: 4c 89 ff e8 f7 ce 47 fd 4d 8b 0f 48 c7 c7 a0 0d 05 8c 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a dc a6 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 87 ab 08 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 389.145286][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 389.151505][ C1] RAX: 48a53e9ff9c87300 RBX: dffffc0000000000 RCX: ffff888026fe5ac0 [ 389.160174][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 389.168290][ C1] RBP: 0000000000000000 R08: ffffffff8fe53a37 R09: 1ffffffff1fca746 [ 389.176498][ C1] R10: dffffc0000000000 R11: fffffbfff1fca747 R12: ffffffff8a7e3430 [ 389.184921][ C1] R13: ffffffff8c050f20 R14: ffff88804b465090 R15: ffffffff8bacdfe0 [ 389.193223][ C1] FS: 0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 389.202333][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.209185][ C1] CR2: 0000001b34115ff8 CR3: 00000000618c2000 CR4: 00000000003526f0 [ 389.217642][ C1] Call Trace: [ 389.221552][ C1] [ 389.224695][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 389.230849][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 389.236099][ C1] kfree+0x117/0x6d0 [ 389.240365][ C1] rose_timer_expiry+0x4cb/0x600 [ 389.245577][ C1] ? call_timer_fn+0x155/0x5f0 [ 389.250707][ C1] call_timer_fn+0x17e/0x5f0 [ 389.255495][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 389.261040][ C1] ? call_timer_fn+0xbe/0x5f0 [ 389.265979][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 389.271427][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.276754][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.282043][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 389.287806][ C1] __run_timer_base+0x61a/0x860 [ 389.293067][ C1] ? ktime_get+0x3e/0x1f0 [ 389.298083][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 389.305140][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 389.311639][ C1] run_timer_softirq+0xb7/0x180 [ 389.317437][ C1] handle_softirqs+0x286/0x870 [ 389.322571][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 389.327562][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 389.333213][ C1] __irq_exit_rcu+0xca/0x1f0 [ 389.337959][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 389.343330][ C1] irq_exit_rcu+0x9/0x30 [ 389.347697][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 389.353501][ C1] [ 389.356653][ C1] [ 389.359655][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.366217][ C1] RIP: 0010:folios_put_refs+0x162/0x670 [ 389.372020][ C1] Code: 4f 8b 2c fc 48 83 7c 24 38 00 0f 84 d3 00 00 00 e8 33 5a c4 ff 48 8b 44 24 28 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3d 03 00 00 <48> 8b 44 24 38 46 8b 64 b8 fc 4d 85 ed 0f 84 ba 00 00 00 e8 06 5a [ 389.393135][ C1] RSP: 0018:ffffc9000b0273c0 EFLAGS: 00000297 [ 389.399671][ C1] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffc9000b027603 [ 389.408679][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 000000000000001f [ 389.417030][ C1] RBP: ffffc9000b0274b0 R08: ffffea0001d72177 R09: 1ffffd40003ae42e [ 389.425932][ C1] R10: dffffc0000000000 R11: fffff940003ae42f R12: ffffc9000b027520 [ 389.434966][ C1] R13: ffffea0001d72180 R14: 000000000000001e R15: 000000000000001f [ 389.443320][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 389.448787][ C1] ? free_swap_cache+0x9b/0x300 [ 389.453993][ C1] free_pages_and_swap_cache+0x277/0x520 [ 389.459971][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 389.466513][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 389.471948][ C1] ? tlb_table_flush+0x36d/0x410 [ 389.477689][ C1] tlb_flush_mmu+0x3a0/0x680 [ 389.483618][ C1] ? __pfx_down_write+0x10/0x10 [ 389.488690][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 389.493608][ C1] exit_mmap+0x444/0xb40 [ 389.498172][ C1] ? uprobe_clear_state+0x20f/0x290 [ 389.503748][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 389.509177][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 389.515511][ C1] ? __pfx_exit_aio+0x10/0x10 [ 389.520410][ C1] ? uprobe_clear_state+0x27c/0x290 [ 389.525794][ C1] __mmput+0x118/0x430 [ 389.530126][ C1] exit_mm+0x1da/0x2c0 [ 389.534800][ C1] ? __pfx_exit_mm+0x10/0x10 [ 389.540354][ C1] ? rcu_is_watching+0x15/0xb0 [ 389.545375][ C1] do_exit+0x648/0x2300 [ 389.549809][ C1] ? do_raw_spin_lock+0x21f/0x290 [ 389.555210][ C1] ? __pfx_do_exit+0x10/0x10 [ 389.560136][ C1] ? preempt_schedule_common+0x83/0xd0 [ 389.566285][ C1] ? preempt_schedule+0xae/0xc0 [ 389.571287][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 389.577370][ C1] do_group_exit+0x21c/0x2d0 [ 389.582545][ C1] get_signal+0x1286/0x1340 [ 389.587497][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 389.593507][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.600007][ C1] ? schedule+0x16f/0x360 [ 389.604945][ C1] exit_to_user_mode_loop+0x75/0x130 [ 389.610664][ C1] do_syscall_64+0x2bd/0xfa0 [ 389.615570][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.620948][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.627427][ C1] ? clear_bhb_loop+0x60/0xb0 [ 389.632189][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.639150][ C1] RIP: 0033:0x7f9f4c58eba9 [ 389.644201][ C1] Code: Unable to access opcode bytes at 0x7f9f4c58eb7f. [ 389.651444][ C1] RSP: 002b:00007f9f4d4c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 389.660147][ C1] RAX: fffffffffffffe00 RBX: 00007f9f4c7d5fa8 RCX: 00007f9f4c58eba9 [ 389.668579][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f4c7d5fa8 [ 389.676777][ C1] RBP: 00007f9f4c7d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 389.685747][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.694250][ C1] R13: 00007f9f4c7d6038 R14: 00007ffce23d63b0 R15: 00007ffce23d6498 [ 389.702907][ C1] [ 389.706100][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.713514][ C1] CPU: 1 UID: 0 PID: 10009 Comm: syz.1.1380 Not tainted syzkaller #0 PREEMPT(full) [ 389.723306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.733744][ C1] Call Trace: [ 389.737165][ C1] [ 389.740241][ C1] dump_stack_lvl+0x99/0x250 [ 389.744999][ C1] ? __asan_memcpy+0x40/0x70 [ 389.749630][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.755451][ C1] ? __pfx__printk+0x10/0x10 [ 389.760750][ C1] vpanic+0x237/0x6d0 [ 389.765110][ C1] ? __pfx_vpanic+0x10/0x10 [ 389.769698][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 389.775142][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 389.780613][ C1] panic+0xb9/0xc0 [ 389.784461][ C1] ? __pfx_panic+0x10/0x10 [ 389.789102][ C1] __warn+0x334/0x4c0 [ 389.793312][ C1] ? debug_print_object+0x16b/0x1e0 [ 389.799078][ C1] ? debug_print_object+0x16b/0x1e0 [ 389.804512][ C1] report_bug+0x2be/0x4f0 [ 389.809435][ C1] ? debug_print_object+0x16b/0x1e0 [ 389.814851][ C1] ? debug_print_object+0x16b/0x1e0 [ 389.820801][ C1] ? debug_print_object+0x16d/0x1e0 [ 389.826438][ C1] handle_bug+0x84/0x160 [ 389.830803][ C1] exc_invalid_op+0x1a/0x50 [ 389.835512][ C1] asm_exc_invalid_op+0x1a/0x20 [ 389.840740][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 389.846670][ C1] Code: 4c 89 ff e8 f7 ce 47 fd 4d 8b 0f 48 c7 c7 a0 0d 05 8c 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a dc a6 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 87 ab 08 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 389.867342][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 389.873436][ C1] RAX: 48a53e9ff9c87300 RBX: dffffc0000000000 RCX: ffff888026fe5ac0 [ 389.881723][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 389.889918][ C1] RBP: 0000000000000000 R08: ffffffff8fe53a37 R09: 1ffffffff1fca746 [ 389.897942][ C1] R10: dffffc0000000000 R11: fffffbfff1fca747 R12: ffffffff8a7e3430 [ 389.906075][ C1] R13: ffffffff8c050f20 R14: ffff88804b465090 R15: ffffffff8bacdfe0 [ 389.914498][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 389.920540][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 389.926413][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 389.931590][ C1] kfree+0x117/0x6d0 [ 389.935611][ C1] rose_timer_expiry+0x4cb/0x600 [ 389.940582][ C1] ? call_timer_fn+0x155/0x5f0 [ 389.945568][ C1] call_timer_fn+0x17e/0x5f0 [ 389.950617][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 389.956289][ C1] ? call_timer_fn+0xbe/0x5f0 [ 389.961119][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 389.966463][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.971807][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.977122][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 389.982614][ C1] __run_timer_base+0x61a/0x860 [ 389.987545][ C1] ? ktime_get+0x3e/0x1f0 [ 389.992179][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 389.997633][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 390.004560][ C1] run_timer_softirq+0xb7/0x180 [ 390.009619][ C1] handle_softirqs+0x286/0x870 [ 390.014809][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 390.019833][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 390.025434][ C1] __irq_exit_rcu+0xca/0x1f0 [ 390.030094][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 390.035834][ C1] irq_exit_rcu+0x9/0x30 [ 390.040334][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 390.046007][ C1] [ 390.049134][ C1] [ 390.052883][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.059699][ C1] RIP: 0010:folios_put_refs+0x162/0x670 [ 390.065986][ C1] Code: 4f 8b 2c fc 48 83 7c 24 38 00 0f 84 d3 00 00 00 e8 33 5a c4 ff 48 8b 44 24 28 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3d 03 00 00 <48> 8b 44 24 38 46 8b 64 b8 fc 4d 85 ed 0f 84 ba 00 00 00 e8 06 5a [ 390.086830][ C1] RSP: 0018:ffffc9000b0273c0 EFLAGS: 00000297 [ 390.092925][ C1] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffc9000b027603 [ 390.101261][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 000000000000001f [ 390.109493][ C1] RBP: ffffc9000b0274b0 R08: ffffea0001d72177 R09: 1ffffd40003ae42e [ 390.117931][ C1] R10: dffffc0000000000 R11: fffff940003ae42f R12: ffffc9000b027520 [ 390.126147][ C1] R13: ffffea0001d72180 R14: 000000000000001e R15: 000000000000001f [ 390.134389][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 390.139819][ C1] ? free_swap_cache+0x9b/0x300 [ 390.144918][ C1] free_pages_and_swap_cache+0x277/0x520 [ 390.150965][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 390.157401][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 390.163527][ C1] ? tlb_table_flush+0x36d/0x410 [ 390.168874][ C1] tlb_flush_mmu+0x3a0/0x680 [ 390.173519][ C1] ? __pfx_down_write+0x10/0x10 [ 390.179068][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 390.184064][ C1] exit_mmap+0x444/0xb40 [ 390.188539][ C1] ? uprobe_clear_state+0x20f/0x290 [ 390.194059][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 390.199522][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 390.205229][ C1] ? __pfx_exit_aio+0x10/0x10 [ 390.210222][ C1] ? uprobe_clear_state+0x27c/0x290 [ 390.216216][ C1] __mmput+0x118/0x430 [ 390.220650][ C1] exit_mm+0x1da/0x2c0 [ 390.225836][ C1] ? __pfx_exit_mm+0x10/0x10 [ 390.231443][ C1] ? rcu_is_watching+0x15/0xb0 [ 390.236569][ C1] do_exit+0x648/0x2300 [ 390.240868][ C1] ? do_raw_spin_lock+0x21f/0x290 [ 390.246462][ C1] ? __pfx_do_exit+0x10/0x10 [ 390.251380][ C1] ? preempt_schedule_common+0x83/0xd0 [ 390.257163][ C1] ? preempt_schedule+0xae/0xc0 [ 390.262293][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 390.267838][ C1] do_group_exit+0x21c/0x2d0 [ 390.272632][ C1] get_signal+0x1286/0x1340 [ 390.277982][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 390.283744][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 390.289936][ C1] ? schedule+0x16f/0x360 [ 390.294304][ C1] exit_to_user_mode_loop+0x75/0x130 [ 390.299806][ C1] do_syscall_64+0x2bd/0xfa0 [ 390.304536][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.309813][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.315904][ C1] ? clear_bhb_loop+0x60/0xb0 [ 390.321189][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.327163][ C1] RIP: 0033:0x7f9f4c58eba9 [ 390.331887][ C1] Code: Unable to access opcode bytes at 0x7f9f4c58eb7f. [ 390.339010][ C1] RSP: 002b:00007f9f4d4c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.347550][ C1] RAX: fffffffffffffe00 RBX: 00007f9f4c7d5fa8 RCX: 00007f9f4c58eba9 [ 390.355840][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f4c7d5fa8 [ 390.363993][ C1] RBP: 00007f9f4c7d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 390.372250][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.380915][ C1] R13: 00007f9f4c7d6038 R14: 00007ffce23d63b0 R15: 00007ffce23d6498 [ 390.389295][ C1] [ 390.392869][ C1] Kernel Offset: disabled [ 390.397432][ C1] Rebooting in 86400 seconds..