last executing test programs: 20.605030689s ago: executing program 0 (id=5895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) openat$nvme_fabrics(0xffffff9c, 0x0, 0x200100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 20.155960167s ago: executing program 0 (id=5897): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x8811}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 18.353934227s ago: executing program 0 (id=5901): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xf, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480)="b19ccccf", 0x4) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0x3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 17.940354191s ago: executing program 0 (id=5905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1f000000"], 0x1c}}, 0x4044814) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000002540)={&(0x7f0000002100)={{@hyper, 0x8}, {@host, 0x7}, 0x400, "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"}, 0x418}) 15.163354637s ago: executing program 4 (id=5910): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a3000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x800) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff7) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x107b000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 13.875483731s ago: executing program 2 (id=5913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="041c85ca4bc16d77becd09bcdc3a90f5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c33a05e8b3f10925"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6ed18822287b57133f9e0b341e9927b24b6565a5bd64f4f7"}]}]}, 0x5c}}, 0x0) 12.622011174s ago: executing program 2 (id=5917): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10.397866945s ago: executing program 0 (id=5920): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10.051365859s ago: executing program 4 (id=5921): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}]}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) 9.936807797s ago: executing program 1 (id=5922): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fc020000000000000000000000000000000004d33c00000000000000000000000000000000000000000000000035005306"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 9.690261278s ago: executing program 1 (id=5923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)={0x30, 0x29, 0x1, {0x7fd0, [{{0x0, 0x0, 0x4}, 0x1008, 0xfe, 0xd, './file0/file0'}]}}, 0x30) 9.144170155s ago: executing program 2 (id=5924): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'geneve0\x00', 0x2a34}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 8.979355416s ago: executing program 1 (id=5925): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r2, 0x0, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 8.864960111s ago: executing program 2 (id=5926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) openat$nvme_fabrics(0xffffff9c, 0x0, 0x200100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.225302852s ago: executing program 0 (id=5927): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x807, 0x3, 0x9d]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x8, 0xab9, 0x75, 0x3, 0x348, 0x8, 0x3ff}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 6.599603062s ago: executing program 3 (id=5929): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8], 0x20}}, 0x0) 6.399026537s ago: executing program 1 (id=5930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1f000000"], 0x1c}}, 0x4044814) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000002540)={&(0x7f0000002100)={{@hyper, 0x8}, {@host, 0x7}, 0x400, "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"}, 0x418}) 5.874108066s ago: executing program 3 (id=5931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a3000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x800) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff7) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x107b000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 5.471024149s ago: executing program 4 (id=5932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x30000041, &(0x7f00000003c0)={0xa, 0x4ea4, 0x44, @remote}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000200)="2e0fc7b26dc70f06642e2e0f7843f36426d1e666b9a90800000f320f01c8ba4000ec66b9e602000066b84100000066ba000000000f30660f2a4faa66b9c009000066b80c00000066ba000000000f30", 0x4f}], 0x1, 0xa, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000001c0)={r8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x8da, 0x9, 0xfb, 0x9, 0x5, 0x4, 0x81, 0x8, 0x9, 0x77, 0x0, 0x316}, {0x81, 0x3, 0x10, 0xfe, 0x2, 0x7, 0x3, 0x9e, 0x7, 0x3b, 0xa6, 0xfe, 0x10000000}, {0x1c38, 0x9, 0x80, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x8, 0x4, 0x0, 0x68d}], 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.759228656s ago: executing program 2 (id=5933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.268350892s ago: executing program 3 (id=5934): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x84, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x102}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.267300488s ago: executing program 4 (id=5935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)={0x30, 0x29, 0x1, {0x7fd0, [{{0x0, 0x0, 0x4}, 0x1008, 0xfe, 0xd, './file0/file0'}]}}, 0x30) 2.066876494s ago: executing program 1 (id=5937): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=[@rights={{0x10}}], 0x10, 0x20000080}}], 0x1, 0xc001) accept4(r2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xfe46) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xfe}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0x22, 0x47, {0x47, 0x11, "05eacf25b6a0a7274ce18f3aeb7ee657c4a34d08044bec7cfe7748c5e028fab74dd5deac007ce98a96b545786c55baa51eaa770482107c02d85c7927a879194cfac0ef6774"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x0, 0x2a, 0x77, "8f72e19028d0e027ec786ac5285791ca88b3a6f104fc5870f7f33a5e91a3c1edaf635a2fa792d42ca833f616f215e8f6e58dea2cfe5faa5277043eda8466d111d7ea1424381fcc4b808aa5b826b4868f7c67e662b07c00dcfffeec11d8ccb9eaab3b7c52643ef6eccefad57aa3ab71e7b09da7fddd1a2e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x3}, 0x0, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "33f05b8bc37fed510601559dd0c3d58ea47d17ebda9696b8f20e12aca7252864cb4c214caef21fd48446d0ee031478"}}) 1.949347963s ago: executing program 3 (id=5938): socket$netlink(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018012500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) 470.393958ms ago: executing program 4 (id=5939): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x18b) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x1}, {@local}, 0x400, "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"}, 0x418}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 401.40694ms ago: executing program 3 (id=5940): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f00000009c0)=""/4090, 0xffa) 279.482237ms ago: executing program 1 (id=5941): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 252.679848ms ago: executing program 2 (id=5942): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(0x0, &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b400000000008000a40000000020900010073797a30000000001400110001000000000000"], 0xa4}}, 0x0) 181.185496ms ago: executing program 3 (id=5943): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 4 (id=5944): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a3000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x800) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff7) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x107b000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ase check. [ 1519.351915][ T1815] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1519.364432][T23542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.364965][T23542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.387534][T23536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1519.495719][ T1815] usb 1-1: Using ep0 maxpacket: 16 [ 1519.499842][ T1815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.499861][ T1815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.499874][ T1815] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1519.499888][ T1815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1519.499906][ T1815] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1519.499919][ T1815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.503478][ T1815] usb 1-1: config 0 descriptor?? [ 1520.018607][ T1815] hid (null): unknown global tag 0xe [ 1520.025757][ T5844] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1520.035814][T13649] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1520.177898][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 1520.185908][T13649] usb 3-1: Using ep0 maxpacket: 32 [ 1520.213819][ T5844] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1520.213846][ T5844] usb 4-1: config 0 has no interface number 0 [ 1520.220719][ T5846] usb 1-1: USB disconnect, device number 64 [ 1520.241633][ T5844] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1520.241720][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.241741][ T5844] usb 4-1: Product: syz [ 1520.241756][ T5844] usb 4-1: Manufacturer: syz [ 1520.241770][ T5844] usb 4-1: SerialNumber: syz [ 1520.265805][T13649] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.299825][T13649] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1520.299855][T13649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.299870][T13649] usb 3-1: Product: syz [ 1520.299878][T13649] usb 3-1: Manufacturer: syz [ 1520.299886][T13649] usb 3-1: SerialNumber: syz [ 1520.390355][T13649] usb 3-1: config 0 descriptor?? [ 1520.393313][ T5844] usb 4-1: config 0 descriptor?? [ 1520.477543][T23551] netlink: 'syz.1.5380': attribute type 1 has an invalid length. [ 1520.527943][ T5844] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1520.876575][T13649] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1520.954005][T23553] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1520.957617][ T43] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1521.077456][T13649] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1521.078722][T13649] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1521.177070][ T43] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1521.289190][T13649] usb 3-1: USB disconnect, device number 56 [ 1521.417233][T23554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1524.431402][ T5844] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1524.431602][ T5844] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1524.470126][ T5844] usb 4-1: USB disconnect, device number 56 [ 1524.570572][T23590] netlink: 'syz.3.5390': attribute type 1 has an invalid length. [ 1525.179751][T23596] tipc: Enabled bearer , priority 0 [ 1525.180656][T23596] syzkaller0: entered promiscuous mode [ 1525.180682][T23596] syzkaller0: entered allmulticast mode [ 1525.306145][T23596] tipc: Resetting bearer [ 1525.406014][T23594] tipc: Resetting bearer [ 1525.493687][T23604] netlink: 'syz.0.5396': attribute type 11 has an invalid length. [ 1525.833268][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1525.854444][T23594] tipc: Disabling bearer [ 1526.290884][T23612] syzkaller0: entered promiscuous mode [ 1526.290916][T23612] syzkaller0: entered allmulticast mode [ 1527.477060][T23634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5400'. [ 1527.510580][T23637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.520869][T23637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.455805][ T5846] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1528.689904][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1528.691183][ T5846] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1528.691220][ T5846] usb 3-1: can't read configurations, error -71 [ 1528.776695][T23643] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 1529.222471][T16017] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1529.377809][T16017] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1529.377825][T16017] usb 5-1: config 0 has no interface number 0 [ 1529.377854][T16017] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1529.377866][T16017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.382391][T16017] usb 5-1: config 0 descriptor?? [ 1529.392534][T16017] usb 5-1: selecting invalid altsetting 1 [ 1529.395105][T16017] dvb_ttusb_budget: ttusb_init_controller: error [ 1529.395125][T16017] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1530.155064][T16017] DVB: Unable to find symbol cx22700_attach() [ 1530.244713][T16017] DVB: Unable to find symbol tda10046_attach() [ 1530.244728][T16017] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1530.292377][T16017] usb 5-1: USB disconnect, device number 39 [ 1530.629948][T23671] tipc: Enabled bearer , priority 0 [ 1530.633779][T23671] syzkaller0: entered promiscuous mode [ 1530.633809][T23671] syzkaller0: entered allmulticast mode [ 1530.704521][T23671] tipc: Resetting bearer [ 1530.752132][T23670] tipc: Resetting bearer [ 1531.053298][T23670] tipc: Disabling bearer [ 1531.597304][T23683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5413'. [ 1531.884369][T23693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1532.062332][T23690] syzkaller0: entered promiscuous mode [ 1532.062363][T23690] syzkaller0: entered allmulticast mode [ 1532.645981][ T5844] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1532.860922][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1532.862646][ T5844] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 1532.862672][ T5844] usb 3-1: config 127 has no interface number 0 [ 1532.862705][ T5844] usb 3-1: config 127 interface 238 has no altsetting 0 [ 1532.865542][ T5844] usb 3-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 1532.908245][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.908272][ T5844] usb 3-1: Product: syz [ 1532.908288][ T5844] usb 3-1: Manufacturer: syz [ 1532.908304][ T5844] usb 3-1: SerialNumber: syz [ 1533.092808][T16017] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1533.188187][ T5844] usb 3-1: USB disconnect, device number 59 [ 1533.248766][T16017] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.248792][T16017] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1533.250254][T16017] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1533.250281][T16017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1533.250309][T16017] usb 5-1: SerialNumber: syz [ 1533.523365][T16017] usb 5-1: 0:2 : does not exist [ 1533.884422][T16017] usb 5-1: USB disconnect, device number 40 [ 1534.034300][T23716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1534.144910][T23718] bond_slave_0: entered promiscuous mode [ 1534.148635][T23718] bond_slave_1: entered promiscuous mode [ 1534.165425][T23718] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1534.179173][T23718] bond5: (slave macvlan3): Enslaving as a backup interface with an up link [ 1534.357556][T22954] udevd[22954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.384075][ T5844] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1534.558519][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.558552][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.559904][ T5844] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1534.559933][ T5844] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1534.559952][ T5844] usb 3-1: Manufacturer: syz [ 1534.616429][ T5844] usb 3-1: config 0 descriptor?? [ 1534.666197][ T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1534.739675][T23729] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1534.818807][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1534.832635][ T31] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 1534.832651][ T31] usb 4-1: config 2 has no interface number 0 [ 1534.832670][ T31] usb 4-1: config 2 interface 1 has no altsetting 0 [ 1534.858456][ T31] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 1534.858474][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.858486][ T31] usb 4-1: Product: syz [ 1534.858493][ T31] usb 4-1: Manufacturer: syz [ 1534.858501][ T31] usb 4-1: SerialNumber: syz [ 1535.198966][T23738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5429'. [ 1535.243843][T23737] syzkaller0: entered promiscuous mode [ 1535.243872][T23737] syzkaller0: entered allmulticast mode [ 1535.303174][ T31] snd-usb-audio 4-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 1535.325408][ T31] snd-usb-us122l 4-1:2.1: usb_set_interface error [ 1535.393406][ T31] snd-usb-us122l 4-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 1535.414454][ T31] usb 4-1: USB disconnect, device number 57 [ 1535.438116][ T5844] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 1535.438179][ T5844] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 1535.438197][ T5844] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 1535.438249][ T5844] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 1535.438386][ T5844] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 1535.494536][ T5844] usb 3-1: USB disconnect, device number 60 [ 1535.633365][T22954] udevd[22954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1535.956064][T23751] tipc: Enabled bearer , priority 0 [ 1535.966826][T23748] syzkaller0: entered promiscuous mode [ 1535.966854][T23748] syzkaller0: entered allmulticast mode [ 1536.117021][T23755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1536.326041][T23747] tipc: Resetting bearer [ 1536.531011][T23747] tipc: Disabling bearer [ 1536.642070][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1536.788938][T23774] tipc: Enabled bearer , priority 0 [ 1536.819953][T23765] tipc: Resetting bearer [ 1536.959945][T23776] syzkaller0: entered promiscuous mode [ 1536.959974][T23776] syzkaller0: entered allmulticast mode [ 1537.016464][T23763] tipc: Resetting bearer [ 1537.223216][T23763] tipc: Disabling bearer [ 1537.512218][T23788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1537.955742][ T7050] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1538.116903][ T7050] usb 1-1: Using ep0 maxpacket: 8 [ 1538.118657][ T7050] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1538.118693][ T7050] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1538.118705][ T7050] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1538.118718][ T7050] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1538.118731][ T7050] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.118754][ T7050] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1538.118766][ T7050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.472903][T23801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1538.918414][T23813] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 1538.923287][ T5844] usb 1-1: USB disconnect, device number 65 [ 1539.472775][T23822] tipc: Enabled bearer , priority 0 [ 1539.493977][T23822] syzkaller0: entered promiscuous mode [ 1539.494012][T23822] syzkaller0: entered allmulticast mode [ 1539.736595][T23821] tipc: Resetting bearer [ 1539.960401][T23821] tipc: Disabling bearer [ 1540.236120][T23835] tipc: Enabled bearer , priority 0 [ 1540.241863][T23833] tipc: Resetting bearer [ 1540.352939][T23836] syzkaller0: entered promiscuous mode [ 1540.352971][T23836] syzkaller0: entered allmulticast mode [ 1540.368050][T23849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1540.477922][T23832] tipc: Resetting bearer [ 1540.619097][T23832] tipc: Disabling bearer [ 1540.665862][ T5844] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1540.852715][ T5844] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1540.852748][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.852769][ T5844] usb 4-1: Product: syz [ 1540.852783][ T5844] usb 4-1: Manufacturer: syz [ 1540.852798][ T5844] usb 4-1: SerialNumber: syz [ 1540.875396][ T5844] usb 4-1: config 0 descriptor?? [ 1540.986670][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5460'. [ 1541.116522][ T5844] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1541.722621][ T37] audit: type=1800 audit(1759162903.607:31): pid=23872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5463" name="memory.events" dev="tmpfs" ino=3058 res=0 errno=0 [ 1542.920026][ T5844] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1542.920267][ T5844] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1542.920297][ T5844] usb 4-1: media controller created [ 1542.922975][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1543.166750][T23892] tipc: Enabled bearer , priority 0 [ 1543.168043][T23892] syzkaller0: entered promiscuous mode [ 1543.168060][T23892] syzkaller0: entered allmulticast mode [ 1543.487138][ T5844] i2c i2c-1: Added multiplexed i2c bus 2 [ 1543.487162][ T5844] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1543.491665][ T5844] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1543.492699][ T5844] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1543.586698][T23891] tipc: Resetting bearer [ 1543.662159][ T5844] DVB: Unable to find symbol r820t_attach() [ 1543.899263][T23891] tipc: Disabling bearer [ 1544.392626][T23900] tipc: Enabled bearer , priority 0 [ 1544.393446][T23900] syzkaller0: entered promiscuous mode [ 1544.393462][T23900] syzkaller0: entered allmulticast mode [ 1544.568725][T23900] tipc: Resetting bearer [ 1544.725956][T23899] tipc: Resetting bearer [ 1544.874383][ T1815] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1544.887825][T16017] usb 4-1: USB disconnect, device number 58 [ 1545.070654][ T1815] usb 3-1: Using ep0 maxpacket: 32 [ 1545.103114][ T1815] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1545.103142][ T1815] usb 3-1: config 0 has no interface number 0 [ 1545.110826][ T1815] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1545.110855][ T1815] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1545.110875][ T1815] usb 3-1: Product: syz [ 1545.110890][ T1815] usb 3-1: Manufacturer: syz [ 1545.169749][ T1815] usb 3-1: config 0 descriptor?? [ 1545.206346][T23899] tipc: Disabling bearer [ 1545.465819][ T5844] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1545.621410][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1545.625510][ T5844] usb 4-1: config 127 has an invalid interface number: 238 but max is 0 [ 1545.625537][ T5844] usb 4-1: config 127 has no interface number 0 [ 1545.626437][ T5844] usb 4-1: config 127 interface 238 has no altsetting 0 [ 1545.629850][ T5844] usb 4-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 1545.629877][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.629897][ T5844] usb 4-1: Product: syz [ 1545.629911][ T5844] usb 4-1: Manufacturer: syz [ 1545.629926][ T5844] usb 4-1: SerialNumber: syz [ 1545.825288][T23914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.847724][T23914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.853547][T23914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.898958][T23914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.916446][T23914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.925016][ T5844] usb 4-1: USB disconnect, device number 59 [ 1546.107858][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.107932][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.610899][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1546.686026][ T1815] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1546.958174][ T1815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.958209][ T1815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.962413][ T1815] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1546.962449][ T1815] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1546.962470][ T1815] usb 1-1: Manufacturer: syz [ 1547.022726][ T1815] usb 1-1: config 0 descriptor?? [ 1547.834368][T23913] chnl_net:caif_netlink_parms(): no params data found [ 1547.872194][ T1815] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 1547.872256][ T1815] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 1547.872273][ T1815] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 1547.872325][ T1815] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 1547.872442][ T1815] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 1547.922953][ T1815] usb 1-1: USB disconnect, device number 66 [ 1548.016604][ T5851] Bluetooth: hci2: command tx timeout [ 1548.161632][T23938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.162194][T23938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.095866][ T1815] usb 3-1: USB disconnect, device number 61 [ 1549.126118][ T5846] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1549.609029][T23953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5481'. [ 1549.649033][ T5846] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1549.649064][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.649085][ T5846] usb 4-1: Product: syz [ 1549.649100][ T5846] usb 4-1: Manufacturer: syz [ 1549.649114][ T5846] usb 4-1: SerialNumber: syz [ 1549.718053][ T5846] usb 4-1: config 0 descriptor?? [ 1549.933266][T23913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.933569][T23913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.933917][T23913] bridge_slave_0: entered allmulticast mode [ 1549.988363][T23913] bridge_slave_0: entered promiscuous mode [ 1550.009125][ T5846] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1550.038656][T23913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.039290][T23913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.070029][T23913] bridge_slave_1: entered allmulticast mode [ 1550.085763][T23913] bridge_slave_1: entered promiscuous mode [ 1550.096231][ T5851] Bluetooth: hci2: command tx timeout [ 1550.517547][T23913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.538764][T23913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.977350][T23913] team0: Port device team_slave_0 added [ 1551.008753][T23913] team0: Port device team_slave_1 added [ 1551.709251][ T5846] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1551.709673][ T5846] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1551.709722][ T5846] usb 4-1: media controller created [ 1551.767299][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1551.934116][T23964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.934630][T23964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.091490][ T5846] i2c i2c-1: Added multiplexed i2c bus 2 [ 1552.091506][ T5846] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1552.096944][ T5846] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1552.097204][ T5846] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1552.107897][T23913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.107912][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.107938][T23913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.126081][T23913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.126097][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.126122][T23913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.175827][ T5851] Bluetooth: hci2: command tx timeout [ 1552.306530][ T5846] DVB: Unable to find symbol r820t_attach() [ 1553.005047][T23913] hsr_slave_0: entered promiscuous mode [ 1553.008648][T23913] hsr_slave_1: entered promiscuous mode [ 1553.025669][T23913] debugfs: 'hsr0' already exists in 'hsr' [ 1553.025698][T23913] Cannot create hsr debugfs directory [ 1553.635419][ T5846] usb 4-1: USB disconnect, device number 60 [ 1553.745858][ T31] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1553.900314][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.900335][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.901408][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1553.901425][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1553.901436][ T31] usb 1-1: Manufacturer: syz [ 1553.904736][ T31] usb 1-1: config 0 descriptor?? [ 1554.255868][ T5851] Bluetooth: hci2: command tx timeout [ 1554.465943][T13636] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1554.635835][T13636] usb 4-1: Using ep0 maxpacket: 32 [ 1554.647009][T13636] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1554.650967][T13636] usb 4-1: config 0 has no interface number 0 [ 1554.699012][T13636] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1554.699098][T13636] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1554.699119][T13636] usb 4-1: Product: syz [ 1554.699134][T13636] usb 4-1: Manufacturer: syz [ 1554.743935][T13636] usb 4-1: config 0 descriptor?? [ 1554.812401][ T31] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 1554.812462][ T31] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 1554.812478][ T31] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 1554.812528][ T31] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 1554.812632][ T31] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 1554.895364][ T31] usb 1-1: USB disconnect, device number 67 [ 1556.137309][T23913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.249300][T23995] tipc: Enabling of bearer rejected, failed to enable media [ 1556.664118][T24011] netlink: 'syz.1.5495': attribute type 11 has an invalid length. [ 1556.688634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.866343][T23913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.205126][T24015] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5497'. [ 1557.348882][T23913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.753788][T24023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.771143][T24023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.803854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.878737][T23913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.895797][ T5846] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1558.045912][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 1558.048884][ T5846] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.048917][ T5846] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.048941][ T5846] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1558.048968][ T5846] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1558.049058][ T5846] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1558.049082][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.091267][ T5846] usb 1-1: config 0 descriptor?? [ 1558.111119][ T1815] usb 4-1: USB disconnect, device number 61 [ 1558.441656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.609639][ T5846] hid (null): unknown global tag 0xe [ 1558.632668][ T37] audit: type=1800 audit(1759162920.747:32): pid=24029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5501" name="file1" dev="tmpfs" ino=676 res=0 errno=0 [ 1558.830994][ T5846] usb 1-1: USB disconnect, device number 68 [ 1559.166916][T24034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.172520][T24034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.795381][T23913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1559.875138][T23913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1559.974616][T24040] tipc: Enabling of bearer rejected, failed to enable media [ 1559.988429][T23913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1560.126451][T23913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1560.476023][ T6370] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1560.581781][T23913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.685957][ T6370] usb 1-1: Using ep0 maxpacket: 32 [ 1560.691270][ T6370] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1560.691297][ T6370] usb 1-1: config 0 has no interface number 0 [ 1560.738518][T23913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.745367][ T6370] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1560.745386][ T6370] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1560.745397][ T6370] usb 1-1: Product: syz [ 1560.745405][ T6370] usb 1-1: Manufacturer: syz [ 1560.806518][ T6370] usb 1-1: config 0 descriptor?? [ 1560.888573][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.889581][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1560.894500][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.894646][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.042303][T24046] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.042331][T24046] binder: 24041:24046 ioctl 4018620d 200000000040 returned -16 [ 1561.623206][T24076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.623800][T24076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.042268][T23913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.931576][T16017] usb 1-1: USB disconnect, device number 69 [ 1564.155833][ T6370] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1564.382980][T23913] veth0_vlan: entered promiscuous mode [ 1564.430782][T23913] veth1_vlan: entered promiscuous mode [ 1564.461222][T24100] mmap: syz.0.5513 (24100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1564.788008][ T6370] usb 3-1: Using ep0 maxpacket: 32 [ 1564.806265][ T6370] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1564.806283][ T6370] usb 3-1: config 0 has no interface number 0 [ 1564.830748][ T6370] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1564.830767][ T6370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.830778][ T6370] usb 3-1: Product: syz [ 1564.830786][ T6370] usb 3-1: Manufacturer: syz [ 1564.830794][ T6370] usb 3-1: SerialNumber: syz [ 1564.837461][ T6370] usb 3-1: config 0 descriptor?? [ 1564.849136][ T6370] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1565.253807][T24100] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1565.253919][T24100] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1565.290399][T23913] veth0_macvtap: entered promiscuous mode [ 1565.301244][T23913] veth1_macvtap: entered promiscuous mode [ 1566.569982][T23913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.860718][T23913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.936667][T23029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.936992][T23029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.937032][T23029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.937065][T23029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.291992][T24115] tipc: Enabling of bearer rejected, failed to enable media [ 1568.366845][T10592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.366862][T10592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.274120][T10593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.274142][T10593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.851296][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 1569.859778][ T6370] usb 3-1: qt2_attach - failed to power on unit: -110 [ 1569.860044][ T6370] quatech2 3-1:0.51: probe with driver quatech2 failed with error -110 [ 1569.966202][T24133] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1570.775217][T16017] usb 3-1: USB disconnect, device number 62 [ 1570.898832][ T7050] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1571.131347][ T7050] usb 4-1: Using ep0 maxpacket: 32 [ 1571.145707][ T7050] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1571.145736][ T7050] usb 4-1: config 0 has no interface number 0 [ 1571.198968][ T7050] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1571.199001][ T7050] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1571.199019][ T7050] usb 4-1: Product: syz [ 1571.199033][ T7050] usb 4-1: Manufacturer: syz [ 1571.289145][ T7050] usb 4-1: config 0 descriptor?? [ 1571.335778][ T5844] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1571.573255][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 1571.586554][ T5844] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1571.586574][ T5844] usb 1-1: config 0 has no interface number 0 [ 1571.616015][ T5844] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1571.616035][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1571.616046][ T5844] usb 1-1: Product: syz [ 1571.616053][ T5844] usb 1-1: Manufacturer: syz [ 1571.644027][ T5844] usb 1-1: config 0 descriptor?? [ 1571.875970][T24153] binder: BINDER_SET_CONTEXT_MGR already set [ 1571.875988][T24153] binder: 24147:24153 ioctl 4018620d 200000000040 returned -16 [ 1571.990122][ T5844] chaoskey 1-1:0.247: Unable to register with hwrng [ 1573.072002][T24163] tipc: Enabled bearer , priority 0 [ 1573.072654][T24163] syzkaller0: entered promiscuous mode [ 1573.072670][T24163] syzkaller0: entered allmulticast mode [ 1573.077737][T24163] tipc: Resetting bearer [ 1573.336106][T24162] tipc: Resetting bearer [ 1573.609655][T24162] tipc: Disabling bearer [ 1573.996664][T24165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1574.726260][ T5844] usb 1-1: USB disconnect, device number 70 [ 1574.729563][ T7050] usb 4-1: USB disconnect, device number 62 [ 1574.769345][T24177] netlink: 'syz.1.5532': attribute type 1 has an invalid length. [ 1574.987768][T24182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1575.204944][T24185] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1575.339778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.347813][T24194] netlink: 'syz.0.5535': attribute type 10 has an invalid length. [ 1575.737240][T24194] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1576.088992][T24197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1576.102056][T24199] bond_slave_0: entered promiscuous mode [ 1576.102114][T24199] bond_slave_1: entered promiscuous mode [ 1576.105192][T24199] syz_tun: entered promiscuous mode [ 1576.106329][T24199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1576.107326][T24199] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 1576.107348][T24199] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1576.110142][ T5844] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1576.110508][T24199] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1576.279003][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.279036][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.281182][ T5844] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1576.281205][ T5844] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1576.281225][ T5844] usb 3-1: Manufacturer: syz [ 1576.285016][ T5844] usb 3-1: config 0 descriptor?? [ 1576.725919][T24210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5539'. [ 1576.970069][T24217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.977041][T24217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.196376][ T5844] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #100: -71 [ 1577.196414][ T5844] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 1577.196423][ T5844] uclogic 0003:256C:006D.001C: failed probing pen v1 parameters: -71 [ 1577.196451][ T5844] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 1577.196513][ T5844] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 1577.333402][ T5844] usb 3-1: USB disconnect, device number 63 [ 1577.776204][ T6370] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1577.920433][T24224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5542'. [ 1578.285744][ T6370] usb 1-1: Using ep0 maxpacket: 32 [ 1578.305338][ T6370] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1578.305356][ T6370] usb 1-1: config 0 has no interface number 0 [ 1578.349828][ T6370] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1578.349846][ T6370] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1578.349857][ T6370] usb 1-1: Product: syz [ 1578.349865][ T6370] usb 1-1: Manufacturer: syz [ 1578.355330][ T6370] usb 1-1: config 0 descriptor?? [ 1579.517727][T24233] netlink: 'syz.3.5546': attribute type 1 has an invalid length. [ 1580.124172][T24243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1580.296034][ T7050] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1580.465687][ T7050] usb 4-1: Using ep0 maxpacket: 32 [ 1580.470493][ T7050] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1580.470522][ T7050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.487841][ T7050] usb 4-1: config 0 descriptor?? [ 1580.517007][ T7050] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1580.737870][ T7050] gspca_sq930x: reg_r 001f failed -32 [ 1580.737946][ T7050] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 1580.767277][ T7050] usb 4-1: USB disconnect, device number 63 [ 1581.111890][ T6370] usb 1-1: USB disconnect, device number 71 [ 1583.807121][T24285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1583.993397][T24287] syzkaller0: entered promiscuous mode [ 1583.993429][T24287] syzkaller0: entered allmulticast mode [ 1584.465733][ T5844] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1584.615697][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 1584.622783][ T5844] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1584.622802][ T5844] usb 1-1: config 0 has no interface number 0 [ 1584.625477][ T5844] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1584.625505][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1584.625525][ T5844] usb 1-1: Product: syz [ 1584.625539][ T5844] usb 1-1: Manufacturer: syz [ 1584.658750][ T5844] usb 1-1: config 0 descriptor?? [ 1585.584727][ T37] audit: type=1800 audit(1759162947.717:33): pid=24302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5566" name="file1" dev="tmpfs" ino=66 res=0 errno=0 [ 1586.946861][T24313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.954953][T24313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.345865][ T6370] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1587.518865][ T6370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.518882][ T6370] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1587.518904][ T6370] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1587.518917][ T6370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.525456][ T6370] usb 3-1: config 0 descriptor?? [ 1587.917294][ T5844] usb 3-1: USB disconnect, device number 64 [ 1588.339336][ T5844] usb 1-1: USB disconnect, device number 72 [ 1588.916079][T24330] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1590.155782][ T5846] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1590.314773][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.314790][ T5846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1590.314812][ T5846] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1590.314824][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.359001][ T5846] usb 4-1: config 0 descriptor?? [ 1590.586418][ T5846] usb 4-1: USB disconnect, device number 64 [ 1591.905845][ T6370] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1592.208541][ T6370] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1592.208572][ T6370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.215331][ T6370] usb 3-1: config 0 descriptor?? [ 1592.650660][ T6370] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1592.927647][ T6370] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1592.927664][ T6370] [drm] Initialized udl on minor 2 [ 1593.059794][ T6370] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1593.095245][ T6370] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1595.255861][ T5846] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1595.325819][ T5846] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1595.326812][ T5846] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1595.329528][ T5846] usb 3-1: USB disconnect, device number 65 [ 1595.595890][ T5844] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1595.797211][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 1595.818113][ T5844] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1595.818141][ T5844] usb 1-1: config 0 has no interface number 0 [ 1595.844755][ T5844] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1595.844794][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1595.844814][ T5844] usb 1-1: Product: syz [ 1595.844828][ T5844] usb 1-1: Manufacturer: syz [ 1595.932362][ T5844] usb 1-1: config 0 descriptor?? [ 1596.535728][ T6009] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1596.705894][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 1596.780139][ T6009] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1596.780166][ T6009] usb 4-1: config 0 has no interface number 0 [ 1596.910009][ T6009] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1596.910041][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.910060][ T6009] usb 4-1: Product: syz [ 1596.910070][ T6009] usb 4-1: Manufacturer: syz [ 1596.910078][ T6009] usb 4-1: SerialNumber: syz [ 1596.913934][ T6009] usb 4-1: config 0 descriptor?? [ 1596.958631][ T6009] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1598.422936][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1600.064628][T24381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1601.016152][ T5844] usb 1-1: USB disconnect, device number 73 [ 1602.016248][ T6009] usb 4-1: qt2_attach - failed to power on unit: -110 [ 1602.016526][ T6009] quatech2 4-1:0.51: probe with driver quatech2 failed with error -110 [ 1602.366039][ T6009] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1602.375771][ T7050] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1602.451514][ T5846] usb 4-1: USB disconnect, device number 65 [ 1602.526077][ T6009] usb 1-1: Using ep0 maxpacket: 8 [ 1602.528762][ T6009] usb 1-1: config 36 has an invalid interface number: 44 but max is 0 [ 1602.528788][ T6009] usb 1-1: config 36 has no interface number 0 [ 1602.528820][ T6009] usb 1-1: config 36 interface 44 has no altsetting 0 [ 1602.530311][ T7050] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.530335][ T7050] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1602.531686][ T6009] usb 1-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea [ 1602.531701][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.531713][ T6009] usb 1-1: Product: syz [ 1602.531727][ T6009] usb 1-1: Manufacturer: syz [ 1602.531741][ T6009] usb 1-1: SerialNumber: syz [ 1602.534070][ T7050] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1602.534097][ T7050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1602.534117][ T7050] usb 5-1: SerialNumber: syz [ 1602.575789][ T5844] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1602.725761][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 1602.728614][ T5844] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1602.728639][ T5844] usb 3-1: config 179 has no interface number 0 [ 1602.728735][ T5844] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1602.728763][ T5844] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1602.728791][ T5844] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1602.728818][ T5844] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1602.728882][ T5844] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1602.728904][ T5844] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1602.728938][ T5844] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1602.728962][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.918683][ T7050] usb 5-1: 0:2 : does not exist [ 1602.979946][ T5844] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input95 [ 1603.048012][ T5190] input input95: unable to receive magic message: -110 [ 1603.088238][ T7050] usb 5-1: USB disconnect, device number 41 [ 1603.319947][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1603.320084][ T5190] input input95: unable to receive magic message: -32 [ 1603.329370][ T5846] usb 3-1: USB disconnect, device number 66 [ 1603.329370][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1603.329435][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1603.385729][ T6009] sisusb 1-1:36.44: Invalid USB2VGA device [ 1603.385766][ T6009] sisusb 1-1:36.44: probe with driver sisusb failed with error -22 [ 1603.593247][ T6009] usb 1-1: USB disconnect, device number 74 [ 1603.728996][T22954] udevd[22954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1604.002422][T24416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5593'. [ 1604.802029][T24428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.802352][T24428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.275802][ T5846] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1605.441076][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 1605.443829][ T5846] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1605.443860][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1605.443883][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1605.443906][ T5846] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.443947][ T5846] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1605.443970][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.678531][ T5846] usb 3-1: GET_CAPABILITIES returned 0 [ 1605.678578][ T5846] usbtmc 3-1:16.0: can't read capabilities [ 1605.886346][ T5844] usb 3-1: USB disconnect, device number 67 [ 1606.127806][T24446] netlink: 'syz.4.5601': attribute type 10 has an invalid length. [ 1606.347423][T24446] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1606.422623][T24447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1606.500307][T24448] bond_slave_0: entered promiscuous mode [ 1606.500346][T24448] bond_slave_1: entered promiscuous mode [ 1606.500374][T24448] syz_tun: entered promiscuous mode [ 1606.504233][T24448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1606.504728][T24448] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1606.545755][T24448] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1607.307199][ T7050] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1607.460713][ T7050] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.460729][ T7050] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1607.460751][ T7050] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1607.460763][ T7050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.463780][ T7050] usb 3-1: config 0 descriptor?? [ 1607.566469][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.566546][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.655749][ T5844] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1607.829525][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.829545][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1607.858771][ T5844] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1607.858790][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1607.858801][ T5844] usb 4-1: SerialNumber: syz [ 1608.110791][ T5844] usb 4-1: 0:2 : does not exist [ 1608.210259][ T5844] usb 4-1: USB disconnect, device number 66 [ 1608.342418][ T37] audit: type=1800 audit(1759162970.477:34): pid=24465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5606" name="file1" dev="tmpfs" ino=118 res=0 errno=0 [ 1608.371917][T22954] udevd[22954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1608.497238][T24467] netlink: 'syz.0.5607': attribute type 1 has an invalid length. [ 1608.851333][T24476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.851986][T24476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.859426][T24469] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1609.260637][T24483] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5610'. [ 1609.685954][ T6009] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1609.821461][T24489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5616'. [ 1609.822934][T24489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5616'. [ 1609.822949][T24489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5616'. [ 1609.837475][ T6009] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1609.837490][ T6009] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1609.837500][ T6009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1609.837535][ T6009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1609.837549][ T6009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1609.839103][ T6009] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1609.839118][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1609.839129][ T6009] usb 4-1: Product: syz [ 1609.839137][ T6009] usb 4-1: Manufacturer: syz [ 1609.937990][ T6009] cdc_wdm 4-1:1.0: skipping garbage [ 1609.938009][ T6009] cdc_wdm 4-1:1.0: skipping garbage [ 1609.959283][ T6009] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1609.959312][ T6009] cdc_wdm 4-1:1.0: Unknown control protocol [ 1610.147411][ T37] audit: type=1326 audit(1759162972.287:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24485 comm="syz.3.5614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48255deec9 code=0x0 [ 1610.397389][T24494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1610.925201][ T6009] usb 3-1: USB disconnect, device number 68 [ 1611.672091][T24506] netlink: 'syz.1.5621': attribute type 1 has an invalid length. [ 1611.949410][T24514] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5624'. [ 1612.226313][T24518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.456317][T24520] tipc: Enabled bearer , priority 0 [ 1612.456673][T16016] usb 4-1: USB disconnect, device number 67 [ 1612.460252][T24520] syzkaller0: entered promiscuous mode [ 1612.460291][T24520] syzkaller0: entered allmulticast mode [ 1612.683540][T24521] tipc: Resetting bearer [ 1612.792135][T24519] tipc: Resetting bearer [ 1613.011176][T24529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.017118][T24529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.183635][T24519] tipc: Disabling bearer [ 1614.132564][ T5846] tipc: Node number set to 1336819306 [ 1614.617846][ T7050] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1614.805283][ T7050] usb 5-1: config 0 has no interfaces? [ 1614.851044][ T7050] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1614.851076][ T7050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.851096][ T7050] usb 5-1: Product: syz [ 1614.851111][ T7050] usb 5-1: Manufacturer: syz [ 1614.851126][ T7050] usb 5-1: SerialNumber: syz [ 1614.855423][ T7050] usb 5-1: config 0 descriptor?? [ 1615.088524][ T7050] usb 5-1: USB disconnect, device number 42 [ 1615.535981][T24553] netlink: 'syz.2.5639': attribute type 1 has an invalid length. [ 1615.629389][T24555] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1615.735392][T24553] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1615.806518][T24553] bond1 (unregistering): Released all slaves [ 1616.204123][T24563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.204668][T24563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.408442][T24581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.423148][T24581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.118005][ T5844] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1618.156238][ T7050] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1618.266292][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 1618.269435][ T5844] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1618.269462][ T5844] usb 5-1: config 0 has no interface number 0 [ 1618.269517][ T5844] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1618.269545][ T5844] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.269572][ T5844] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1618.269594][ T5844] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1618.272678][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1618.272704][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.272722][ T5844] usb 5-1: Product: syz [ 1618.272734][ T5844] usb 5-1: Manufacturer: syz [ 1618.272747][ T5844] usb 5-1: SerialNumber: syz [ 1618.398684][ T7050] usb 1-1: config 0 has no interfaces? [ 1618.401940][ T7050] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1618.401975][ T7050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.401994][ T7050] usb 1-1: Product: syz [ 1618.402006][ T7050] usb 1-1: Manufacturer: syz [ 1618.402020][ T7050] usb 1-1: SerialNumber: syz [ 1618.567885][ T5844] usb 5-1: config 0 descriptor?? [ 1618.595015][ T7050] usb 1-1: config 0 descriptor?? [ 1618.761229][T24596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.923808][T24596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.943979][ T5844] appletouch 5-1:0.85: Failed to read mode from device. [ 1619.944201][ T5844] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1620.137434][T24601] netlink: 'syz.2.5654': attribute type 1 has an invalid length. [ 1620.275254][ T5844] usb 5-1: USB disconnect, device number 43 [ 1620.608113][T24604] bond1 (unregistering): Released all slaves [ 1622.502343][ T6370] usb 1-1: USB disconnect, device number 75 [ 1623.145928][ T6370] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1623.266220][ T1815] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1623.309096][ T6370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.309122][ T6370] usb 4-1: config 0 has no interfaces? [ 1623.309153][ T6370] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1623.309176][ T6370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.322172][ T6370] usb 4-1: config 0 descriptor?? [ 1623.335736][T13649] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1623.415806][ T1815] usb 5-1: Using ep0 maxpacket: 8 [ 1623.418270][ T1815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1623.418303][ T1815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1623.418328][ T1815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1623.418352][ T1815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.418394][ T1815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1623.418418][ T1815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.528373][T24637] netlink: 'syz.3.5665': attribute type 1 has an invalid length. [ 1623.665632][T13649] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.665658][T13649] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1623.665695][T13649] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1623.665719][T13649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.677989][ T1815] usb 5-1: GET_CAPABILITIES returned 0 [ 1623.678036][ T1815] usbtmc 5-1:16.0: can't read capabilities [ 1623.750276][T13649] usb 1-1: config 0 descriptor?? [ 1623.984602][ T1815] usb 5-1: USB disconnect, device number 44 [ 1624.292692][ T5844] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1624.495655][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 1624.498836][ T5844] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1624.498863][ T5844] usb 3-1: config 0 has no interface number 0 [ 1624.498913][ T5844] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1624.498942][ T5844] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1624.498969][ T5844] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1624.498992][ T5844] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1624.505431][ T5844] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1624.505460][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.505480][ T5844] usb 3-1: Product: syz [ 1624.505496][ T5844] usb 3-1: Manufacturer: syz [ 1624.505510][ T5844] usb 3-1: SerialNumber: syz [ 1624.658697][ T5844] usb 3-1: config 0 descriptor?? [ 1624.721727][T24637] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1624.831312][ T1815] usb 4-1: USB disconnect, device number 68 [ 1625.193509][ T5844] appletouch 3-1:0.85: Failed to read mode from device. [ 1625.196818][ T5844] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1626.426765][ T5844] usb 3-1: USB disconnect, device number 69 [ 1626.489945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.858050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.876616][T24662] tipc: Started in network mode [ 1626.876646][T24662] tipc: Node identity 5231d5f9413d, cluster identity 4711 [ 1626.876856][T24662] tipc: Enabled bearer , priority 0 [ 1627.010626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.045322][T24672] tipc: Resetting bearer [ 1627.127426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.227568][T24658] tipc: Disabling bearer [ 1627.525803][ T5844] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1627.677920][ T5844] usb 3-1: config 0 has no interfaces? [ 1627.680891][ T5844] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1627.680908][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.680918][ T5844] usb 3-1: Product: syz [ 1627.680926][ T5844] usb 3-1: Manufacturer: syz [ 1627.680933][ T5844] usb 3-1: SerialNumber: syz [ 1627.734085][ T5844] usb 3-1: config 0 descriptor?? [ 1628.088062][ T7050] usb 1-1: USB disconnect, device number 76 [ 1628.554798][T24692] dvmrp0: left allmulticast mode [ 1628.573757][T24696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1629.062470][T13649] usb 3-1: USB disconnect, device number 70 [ 1629.382047][T24703] syzkaller0: entered promiscuous mode [ 1629.382065][T24703] syzkaller0: entered allmulticast mode [ 1629.777986][ T6370] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1629.808813][T24713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.809372][T24713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.925934][ T6370] usb 4-1: Using ep0 maxpacket: 32 [ 1629.928376][ T6370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.928408][ T6370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.928449][ T6370] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1629.928473][ T6370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.988727][ T6370] usb 4-1: config 0 descriptor?? [ 1630.012575][ T6370] hub 4-1:0.0: USB hub found [ 1630.923803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.943013][ T6370] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1631.337422][T24721] tipc: Enabled bearer , priority 0 [ 1631.340310][T24722] syzkaller0: entered promiscuous mode [ 1631.340339][T24722] syzkaller0: entered allmulticast mode [ 1631.368954][ T6370] usbhid 4-1:0.0: can't add hid device: -71 [ 1631.369074][ T6370] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1631.421935][ T6370] usb 4-1: USB disconnect, device number 69 [ 1631.653020][T24722] tipc: Resetting bearer [ 1631.706473][T24716] tipc: Resetting bearer [ 1631.837169][T24716] tipc: Disabling bearer [ 1632.219442][T24734] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 1632.323257][T24734] bond1 (unregistering): Released all slaves [ 1632.416056][T13649] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1632.520956][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5690'. [ 1632.700820][T13649] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1632.700845][T13649] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1632.700855][T13649] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1632.700888][T13649] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1632.700902][T13649] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1632.702645][T13649] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1632.702662][T13649] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1632.702672][T13649] usb 4-1: Product: syz [ 1632.702680][T13649] usb 4-1: Manufacturer: syz [ 1632.857616][T13649] cdc_wdm 4-1:1.0: skipping garbage [ 1632.858087][T13649] cdc_wdm 4-1:1.0: skipping garbage [ 1632.874878][T13649] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1632.874900][T13649] cdc_wdm 4-1:1.0: Unknown control protocol [ 1633.073059][ T37] audit: type=1326 audit(1759162995.207:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24731 comm="syz.3.5688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48255deec9 code=0x0 [ 1635.330576][ T5846] usb 4-1: USB disconnect, device number 70 [ 1636.958700][T24775] tipc: Enabled bearer , priority 0 [ 1636.959557][T24775] syzkaller0: entered promiscuous mode [ 1636.959583][T24775] syzkaller0: entered allmulticast mode [ 1637.184373][T24778] tipc: Resetting bearer [ 1637.276172][T24774] tipc: Resetting bearer [ 1637.699588][ T37] audit: type=1800 audit(1759162999.827:37): pid=24794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5703" name="file1" dev="tmpfs" ino=214 res=0 errno=0 [ 1637.745093][T24787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.748164][T24787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.967456][T24774] tipc: Disabling bearer [ 1637.980119][ T1815] tipc: Node number set to 1023571449 [ 1638.829409][ T7050] IPVS: starting estimator thread 0... [ 1638.966823][T24808] IPVS: using max 8 ests per chain, 19200 per kthread [ 1639.141468][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1639.947313][T24823] usb usb8: usbfs: process 24823 (syz.3.5710) did not claim interface 0 before use [ 1642.660636][ T37] audit: type=1800 audit(1759163004.797:38): pid=24844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5718" name="file1" dev="tmpfs" ino=851 res=0 errno=0 [ 1642.696328][T24840] tipc: Enabled bearer , priority 0 [ 1642.697192][T24840] syzkaller0: entered promiscuous mode [ 1642.697218][T24840] syzkaller0: entered allmulticast mode [ 1642.960468][T24847] tipc: Resetting bearer [ 1643.026358][T24839] tipc: Resetting bearer [ 1643.217847][T24856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.224685][T24856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.596785][T24839] tipc: Disabling bearer [ 1644.597871][ T7050] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1644.877819][ T7050] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1644.877837][ T7050] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1644.877847][ T7050] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1644.877884][ T7050] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1644.877898][ T7050] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1644.881902][ T7050] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1644.881918][ T7050] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1644.881929][ T7050] usb 5-1: Product: syz [ 1644.881937][ T7050] usb 5-1: Manufacturer: syz [ 1644.888717][ T7050] cdc_wdm 5-1:1.0: skipping garbage [ 1644.888730][ T7050] cdc_wdm 5-1:1.0: skipping garbage [ 1644.896898][ T7050] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1644.896918][ T7050] cdc_wdm 5-1:1.0: Unknown control protocol [ 1645.100172][ T37] audit: type=1326 audit(1759163007.237:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24865 comm="syz.4.5725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac97eec9 code=0x0 [ 1646.358375][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5727'. [ 1647.366735][ T1815] usb 5-1: USB disconnect, device number 45 [ 1647.685791][ T7050] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1647.725040][ T37] audit: type=1800 audit(1759163009.857:40): pid=24890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5732" name="file1" dev="tmpfs" ino=235 res=0 errno=0 [ 1647.838499][ T7050] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 1647.838528][ T7050] usb 3-1: config 0 has no interface number 0 [ 1647.861187][ T7050] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1647.861216][ T7050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.861235][ T7050] usb 3-1: Product: syz [ 1647.861249][ T7050] usb 3-1: Manufacturer: syz [ 1647.861264][ T7050] usb 3-1: SerialNumber: syz [ 1647.966938][ T7050] usb 3-1: config 0 descriptor?? [ 1647.969864][ T7050] hub 3-1:0.217: bad descriptor, ignoring hub [ 1647.969902][ T7050] hub 3-1:0.217: probe with driver hub failed with error -5 [ 1648.171951][ T7050] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1648.175885][T13649] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1648.201135][ T7050] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1648.201951][ T7050] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1648.202009][ T7050] usb 3-1: media controller created [ 1648.294246][ T7050] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1648.305737][ T5846] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1648.345689][T13649] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.345714][T13649] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1648.345750][T13649] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1648.345771][T13649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.351117][T13649] usb 4-1: config 0 descriptor?? [ 1648.549281][ T5846] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1648.549300][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.549311][ T5846] usb 1-1: Product: syz [ 1648.549319][ T5846] usb 1-1: Manufacturer: syz [ 1648.549326][ T5846] usb 1-1: SerialNumber: syz [ 1648.552378][ T5846] usb 1-1: config 0 descriptor?? [ 1648.764285][ T5846] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1648.811844][ T7050] DVB: Unable to find symbol dib7000p_attach() [ 1648.811857][ T7050] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1649.043801][ T1167] bridge_slave_1: left allmulticast mode [ 1649.043834][ T1167] bridge_slave_1: left promiscuous mode [ 1649.044107][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.228670][ T7050] rc_core: IR keymap rc-dib0700-rc5 not found [ 1649.228692][ T7050] Registered IR keymap rc-empty [ 1649.229101][ T7050] dvb-usb: could not initialize remote control. [ 1649.229108][ T7050] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1649.266375][ T7050] usb 3-1: USB disconnect, device number 71 [ 1649.275121][ T1167] bridge_slave_0: left allmulticast mode [ 1649.291434][ T1167] bridge_slave_0: left promiscuous mode [ 1649.291798][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.448430][ T7050] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1649.787619][ T7050] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1649.925739][T16016] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1649.969765][ T7050] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1649.969795][ T7050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.969814][ T7050] usb 3-1: Product: syz [ 1649.969826][ T7050] usb 3-1: Manufacturer: syz [ 1649.969839][ T7050] usb 3-1: SerialNumber: syz [ 1650.023648][ T7050] usb 3-1: config 0 descriptor?? [ 1650.076054][T16016] usb 5-1: Using ep0 maxpacket: 16 [ 1650.081439][T16016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.081755][T16016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.082134][T16016] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1650.082160][T16016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.169417][T16016] usb 5-1: config 0 descriptor?? [ 1650.400046][ T7050] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1650.632422][T24912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.633244][T24912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.747969][T16016] hid (null): bogus close delimiter [ 1650.748011][T16016] hid (null): unknown global tag 0xc [ 1650.748028][T16016] hid (null): invalid report_count -776623640 [ 1650.750122][T16016] hid (null): invalid report_count -606263203 [ 1650.750155][T16016] hid (null): invalid report_size 16434 [ 1650.750170][T16016] hid (null): bogus close delimiter [ 1650.750250][T16016] hid (null): invalid report_size 1457780112 [ 1650.750279][T16016] hid (null): unknown global tag 0xd [ 1650.868048][T16016] hid_parser_main: 1260 callbacks suppressed [ 1650.868073][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868105][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868190][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868218][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868245][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868272][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868356][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868385][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868412][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.868439][T16016] topre 0003:0853:0148.001D: unknown main item tag 0x0 [ 1650.955223][T16016] topre 0003:0853:0148.001D: unexpected long global item [ 1650.969440][T16016] topre 0003:0853:0148.001D: probe with driver topre failed with error -22 [ 1651.028208][ T5846] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1651.042377][ T5846] usb 1-1: USB disconnect, device number 77 [ 1651.057852][T16016] usb 5-1: USB disconnect, device number 46 [ 1652.449328][ T7050] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1652.471697][ T7050] usb 3-1: USB disconnect, device number 72 [ 1654.486668][T16016] usb 4-1: USB disconnect, device number 71 [ 1654.856672][T24932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'. [ 1655.155814][T16016] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1655.318328][T16016] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1655.318347][T16016] usb 4-1: config 0 has no interface number 0 [ 1655.320495][T16016] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1655.320512][T16016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.320523][T16016] usb 4-1: Product: syz [ 1655.320531][T16016] usb 4-1: Manufacturer: syz [ 1655.320539][T16016] usb 4-1: SerialNumber: syz [ 1655.378670][T16016] usb 4-1: config 0 descriptor?? [ 1655.385094][T16016] hub 4-1:0.217: bad descriptor, ignoring hub [ 1655.385117][T16016] hub 4-1:0.217: probe with driver hub failed with error -5 [ 1655.589934][T16016] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1655.592335][T16016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1655.613446][T16016] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1655.613484][T16016] usb 4-1: media controller created [ 1655.691006][T16016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1656.025874][T16016] DVB: Unable to find symbol dib7000p_attach() [ 1656.025890][T16016] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1656.177070][ T1167] dvmrp0 (unregistering): left allmulticast mode [ 1656.236606][T16016] rc_core: IR keymap rc-dib0700-rc5 not found [ 1656.236619][T16016] Registered IR keymap rc-empty [ 1656.236791][T16016] dvb-usb: could not initialize remote control. [ 1656.236796][T16016] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1656.266243][T16016] usb 4-1: USB disconnect, device number 72 [ 1656.390741][T16016] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1657.308859][T24952] netlink: 'syz.0.5751': attribute type 1 has an invalid length. [ 1657.382723][T24955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5750'. [ 1658.180072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.367529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.477796][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.556553][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.581227][ T1167] bond0 (unregistering): Released all slaves [ 1658.987309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.154809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.490358][ T1167] bond1 (unregistering): Released all slaves [ 1659.611373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.689146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.866624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.023212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.202328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.489458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.550608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.592180][ T1167] bond2 (unregistering): Released all slaves [ 1660.736620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.744680][T24938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1660.782420][T24939] bond_slave_0: entered promiscuous mode [ 1660.782480][T24939] bond_slave_1: entered promiscuous mode [ 1660.783202][T24939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1660.796715][T24939] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1660.832779][T24952] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1660.868176][T24954] vlan2: entered allmulticast mode [ 1660.868191][T24954] ip6gretap0: entered allmulticast mode [ 1661.028610][ T1167] tipc: Left network mode [ 1661.054288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.115772][T16017] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1661.148414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.317137][T16017] usb 5-1: Using ep0 maxpacket: 32 [ 1661.339146][T16017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.339176][T16017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.339215][T16017] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1661.339238][T16017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.350767][T16017] usb 5-1: config 0 descriptor?? [ 1661.392322][T16017] hub 5-1:0.0: USB hub found [ 1661.619860][T16017] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 1662.045221][T16017] usbhid 5-1:0.0: can't add hid device: -71 [ 1662.045349][T16017] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1662.153795][T16017] usb 5-1: USB disconnect, device number 47 [ 1662.255915][ T6009] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1662.410962][ T6009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.410979][ T6009] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1662.411001][ T6009] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1662.411013][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.423336][ T6009] usb 4-1: config 0 descriptor?? [ 1662.504489][T24975] syz_tun: entered allmulticast mode [ 1662.530588][T24976] dvmrp1: entered allmulticast mode [ 1662.666244][T24975] syz_tun: left allmulticast mode [ 1663.385790][T16017] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1663.588124][T16017] usb 5-1: Using ep0 maxpacket: 16 [ 1663.693751][T16017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1663.693794][T16017] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1663.693815][T16017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.727726][T16017] usb 5-1: config 0 descriptor?? [ 1664.128084][ T1167] hsr_slave_0: left promiscuous mode [ 1664.230577][ T1167] hsr_slave_1: left promiscuous mode [ 1664.231865][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.231894][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.287783][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.287816][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.337798][T16017] hid_parser_main: 180 callbacks suppressed [ 1664.337813][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337833][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337849][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337864][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337880][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337896][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337911][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337927][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337942][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.337957][T16017] hid-generic 0003:0DFC:0101.001E: unknown main item tag 0x0 [ 1664.585928][ T6009] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1664.604064][T16017] hid-generic 0003:0DFC:0101.001E: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.4-1/input0 [ 1664.630872][T16017] usb 5-1: USB disconnect, device number 48 [ 1664.742166][ T6009] usb 3-1: Using ep0 maxpacket: 32 [ 1664.743844][ T6009] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1664.743860][ T6009] usb 3-1: config 0 has no interface number 0 [ 1664.743886][ T6009] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1664.781648][ T6009] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1664.781666][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.781677][ T6009] usb 3-1: Product: syz [ 1664.781685][ T6009] usb 3-1: Manufacturer: syz [ 1664.781693][ T6009] usb 3-1: SerialNumber: syz [ 1664.785014][ T6009] usb 3-1: config 0 descriptor?? [ 1664.839507][T24990] fido_id[24990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1664.872918][ T1167] veth1_macvtap: left promiscuous mode [ 1664.872994][ T1167] veth0_macvtap: left promiscuous mode [ 1664.873219][ T1167] veth1_vlan: left promiscuous mode [ 1664.873344][ T1167] veth0_vlan: left promiscuous mode [ 1665.388543][T24994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.390584][T24994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.133891][ T5844] usb 4-1: USB disconnect, device number 73 [ 1666.186428][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5761'. [ 1667.694966][T13649] usb 3-1: USB disconnect, device number 73 [ 1668.411570][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.427655][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.485768][T16016] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1668.674488][T16016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.674514][T16016] usb 5-1: config 0 has no interfaces? [ 1668.674545][T16016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1668.674568][T16016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.725718][T16016] usb 5-1: config 0 descriptor?? [ 1668.980787][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.980890][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.119001][T25018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.119674][T25018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.356443][T25019] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 1670.141529][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 1670.417095][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 1671.069670][T23914] Bluetooth: hci2: command 0x0406 tx timeout [ 1673.404501][T25011] bond1: option mode: unable to set because the bond device has slaves [ 1673.439665][T25012] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1673.581783][T25019] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1673.618352][T25020] vlan2: entered allmulticast mode [ 1673.618367][T25020] bridge0: entered allmulticast mode [ 1673.737833][ T37] audit: type=1800 audit(1759163035.877:41): pid=25033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5770" name="file1" dev="tmpfs" ino=922 res=0 errno=0 [ 1673.828922][ T5846] usb 5-1: USB disconnect, device number 49 [ 1673.912358][T25037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1674.032577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.145892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.286037][ T5846] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1674.445759][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 1674.463949][ T5846] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1674.463977][ T5846] usb 5-1: config 0 has no interface number 0 [ 1674.464026][ T5846] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1674.498730][ T5846] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1674.498762][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.498784][ T5846] usb 5-1: Product: syz [ 1674.498799][ T5846] usb 5-1: Manufacturer: syz [ 1674.498814][ T5846] usb 5-1: SerialNumber: syz [ 1674.529603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.621602][ T5846] usb 5-1: config 0 descriptor?? [ 1675.033132][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5775'. [ 1675.356019][T16016] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1675.521994][T16016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.522021][T16016] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1675.522054][T16016] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1675.522066][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.526111][T16016] usb 4-1: config 0 descriptor?? [ 1675.793770][T16016] usb 4-1: USB disconnect, device number 74 [ 1676.461487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1677.052969][ T1167] IPVS: stop unused estimator thread 0... [ 1677.447361][T16016] usb 5-1: USB disconnect, device number 50 [ 1678.198728][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.290937][T25075] tipc: Enabled bearer , priority 0 [ 1678.438382][T25073] tipc: Resetting bearer [ 1678.515595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.612092][T25078] syzkaller0: entered promiscuous mode [ 1678.612125][T25078] syzkaller0: entered allmulticast mode [ 1678.614449][T25085] syz_tun: entered allmulticast mode [ 1678.769279][T25072] tipc: Resetting bearer [ 1678.908774][T25072] tipc: Disabling bearer [ 1679.385816][T16016] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1679.442903][T25083] syz_tun: left allmulticast mode [ 1679.561015][T16016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.561041][T16016] usb 4-1: config 0 has no interfaces? [ 1679.561072][T16016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1679.561097][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.565115][T16016] usb 4-1: config 0 descriptor?? [ 1679.667230][ T5851] Bluetooth: Frame is too long (len 16, expected len 4) [ 1680.122041][T25093] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 1680.201427][T25093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1680.780068][T13649] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1680.852378][T25109] loop6: detected capacity change from 0 to 7 [ 1680.883273][T25109] Dev loop6: unable to read RDB block 7 [ 1680.883304][T25109] loop6: unable to read partition table [ 1680.883455][T25109] loop6: partition table beyond EOD, truncated [ 1680.883482][T25109] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1680.926588][T13649] usb 5-1: device descriptor read/64, error -71 [ 1681.335745][T13649] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1681.465797][T13649] usb 5-1: device descriptor read/64, error -71 [ 1681.576232][T13649] usb usb5-port1: attempt power cycle [ 1681.915899][T13649] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1681.936943][T13649] usb 5-1: device descriptor read/8, error -71 [ 1682.025951][ T5846] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1682.082598][ T6009] usb 4-1: USB disconnect, device number 75 [ 1682.155819][T16017] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1682.175712][T13649] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1682.195393][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1682.209910][T13649] usb 5-1: device descriptor read/8, error -71 [ 1682.217495][ T5846] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1682.217524][ T5846] usb 3-1: config 0 has no interface number 0 [ 1682.230756][ T5846] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1682.230785][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1682.230805][ T5846] usb 3-1: Product: syz [ 1682.230818][ T5846] usb 3-1: Manufacturer: syz [ 1682.315860][ T5846] usb 3-1: config 0 descriptor?? [ 1682.316153][T13649] usb usb5-port1: unable to enumerate USB device [ 1682.324978][T16017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.325005][T16017] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1682.325042][T16017] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1682.325066][T16017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.330505][T16017] usb 1-1: config 0 descriptor?? [ 1682.634913][ T7050] usb 1-1: USB disconnect, device number 78 [ 1684.618397][T16016] usb 3-1: USB disconnect, device number 74 [ 1684.835784][ T7050] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1684.894991][T25135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1684.985834][ T7050] usb 5-1: Using ep0 maxpacket: 32 [ 1684.988431][ T7050] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1684.988458][ T7050] usb 5-1: config 0 has no interface number 0 [ 1684.988505][ T7050] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1684.988530][ T7050] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1684.991702][ T7050] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1684.991728][ T7050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.991748][ T7050] usb 5-1: Product: syz [ 1684.991762][ T7050] usb 5-1: Manufacturer: syz [ 1684.991776][ T7050] usb 5-1: SerialNumber: syz [ 1685.068830][ T7050] usb 5-1: config 0 descriptor?? [ 1685.069531][T25133] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1685.889972][ T7050] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 1685.890176][ T7050] ipheth 5-1:0.196: probe with driver ipheth failed with error -110 [ 1686.462842][T25146] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0 [ 1686.745937][ T7050] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1686.896331][ T7050] usb 4-1: Using ep0 maxpacket: 32 [ 1686.897984][ T7050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.898002][ T7050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.898024][ T7050] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1686.898036][ T7050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.901668][ T7050] usb 4-1: config 0 descriptor?? [ 1687.350168][ T7050] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1687.392102][T25152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.392741][T25152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.412194][T25152] netlink: 'syz.1.5805': attribute type 1 has an invalid length. [ 1687.515864][ T7050] usb 4-1: USB disconnect, device number 76 [ 1687.589478][T25152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1687.630434][ T5844] usb 5-1: USB disconnect, device number 55 [ 1687.694545][T25155] fido_id[25155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1688.415735][ T7050] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1688.583071][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.583105][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.622348][ T7050] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1688.622380][ T7050] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1688.622397][ T7050] usb 1-1: Manufacturer: syz [ 1688.627830][ T7050] usb 1-1: config 0 descriptor?? [ 1689.466043][ T7050] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0020/input/input100 [ 1689.480667][ T7050] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0020/input/input101 [ 1689.524648][ T7050] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0020/input/input102 [ 1689.553734][ T7050] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0020/input/input103 [ 1689.589099][ T7050] uclogic 0003:256C:006D.0020: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 1689.669822][ T7050] usb 1-1: USB disconnect, device number 79 [ 1690.356243][T25181] fido_id[25181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1690.405822][ T5846] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1690.709652][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.709680][ T5846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1690.709725][ T5846] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1690.709748][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.760780][ T5846] usb 4-1: config 0 descriptor?? [ 1691.053248][T16016] usb 4-1: USB disconnect, device number 77 [ 1693.405714][ T7050] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1693.555787][ T7050] usb 1-1: Using ep0 maxpacket: 32 [ 1693.558654][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.558674][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.558696][ T7050] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1693.558709][ T7050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.561750][ T7050] usb 1-1: config 0 descriptor?? [ 1693.746069][ T6009] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1693.926511][ T6009] usb 3-1: Using ep0 maxpacket: 32 [ 1693.929069][ T6009] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1693.929096][ T6009] usb 3-1: config 0 has no interface number 0 [ 1693.929126][ T6009] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1693.929141][ T6009] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1693.932040][ T6009] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1693.932068][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.932083][ T6009] usb 3-1: Product: syz [ 1693.932091][ T6009] usb 3-1: Manufacturer: syz [ 1693.932099][ T6009] usb 3-1: SerialNumber: syz [ 1693.985923][ T5846] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1694.012277][ T7050] usbhid 1-1:0.0: can't add hid device: -71 [ 1694.012361][ T7050] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1694.033150][ T7050] usb 1-1: USB disconnect, device number 80 [ 1694.100531][ T6009] usb 3-1: config 0 descriptor?? [ 1694.101565][T25206] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1694.147869][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.147885][ T5846] usb 5-1: config 0 has no interfaces? [ 1694.147903][ T5846] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1694.147951][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.199046][ T5846] usb 5-1: config 0 descriptor?? [ 1694.711258][ T6009] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 1694.811673][T25221] netlink: 'syz.4.5821': attribute type 1 has an invalid length. [ 1694.871037][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1695.027076][ T6009] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 1695.056733][ T6009] usb 3-1: USB disconnect, device number 75 [ 1695.556734][T25221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1695.557342][T25217] bridge_slave_1: left allmulticast mode [ 1695.557371][T25217] bridge_slave_1: left promiscuous mode [ 1695.557780][T25217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.711038][T25217] bridge_slave_0: left allmulticast mode [ 1695.711078][T25217] bridge_slave_0: left promiscuous mode [ 1695.711494][T25217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.769023][T25217] bond2: (slave vlan2): Releasing active interface [ 1697.199647][T25222] vlan2: entered allmulticast mode [ 1697.199848][T25222] ip6gretap0: entered allmulticast mode [ 1697.200489][T25222] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 1697.508612][ T7050] usb 5-1: USB disconnect, device number 56 [ 1697.552021][ T6009] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1698.466216][ T7050] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1698.625817][ T7050] usb 1-1: Using ep0 maxpacket: 32 [ 1698.628388][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.628420][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.628460][ T7050] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1698.628484][ T7050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.634079][ T7050] usb 1-1: config 0 descriptor?? [ 1698.698870][ T7050] hub 1-1:0.0: USB hub found [ 1698.798439][T16016] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1698.840487][ T7050] hub 1-1:0.0: 1 port detected [ 1698.925813][T16016] usb 5-1: device descriptor read/64, error -71 [ 1699.175790][T16016] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1699.269799][T25269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1699.335809][T16016] usb 5-1: device descriptor read/64, error -71 [ 1699.446390][T16016] usb usb5-port1: attempt power cycle [ 1699.448466][T25272] syzkaller0: entered promiscuous mode [ 1699.448491][T25272] syzkaller0: entered allmulticast mode [ 1699.450246][ T6009] usb 1-1: USB disconnect, device number 81 [ 1699.728397][ T5846] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1699.805772][T16016] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1699.829470][T16016] usb 5-1: device descriptor read/8, error -71 [ 1699.885472][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 1699.890808][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1699.890857][ T5846] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1699.890882][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.935705][ T5846] usb 4-1: config 0 descriptor?? [ 1700.085766][T16016] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1700.120591][T16016] usb 5-1: device descriptor read/8, error -71 [ 1700.174419][ T5846] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1700.230263][T16016] usb usb5-port1: unable to enumerate USB device [ 1700.353454][ T5846] usb 4-1: USB disconnect, device number 78 [ 1700.388564][T25282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1700.390939][T25282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1700.390964][T25282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1700.806744][T16016] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1700.961443][T16016] usb 1-1: Using ep0 maxpacket: 32 [ 1700.963731][T16016] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1700.963758][T16016] usb 1-1: config 0 has no interface number 0 [ 1700.963829][T16016] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1700.968676][T16016] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1700.968703][T16016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.968722][T16016] usb 1-1: Product: syz [ 1700.968735][T16016] usb 1-1: Manufacturer: syz [ 1700.968749][T16016] usb 1-1: SerialNumber: syz [ 1700.985151][T16016] usb 1-1: config 0 descriptor?? [ 1701.015820][ T7050] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1701.167257][ T7050] usb 3-1: Using ep0 maxpacket: 32 [ 1701.170196][ T7050] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1701.170223][ T7050] usb 3-1: config 0 has no interface number 0 [ 1701.170266][ T7050] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1701.173800][ T7050] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1701.173830][ T7050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.173851][ T7050] usb 3-1: Product: syz [ 1701.173866][ T7050] usb 3-1: Manufacturer: syz [ 1701.173881][ T7050] usb 3-1: SerialNumber: syz [ 1701.192987][ T7050] usb 3-1: config 0 descriptor?? [ 1701.232260][ T7050] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1701.232296][ T7050] em28xx 3-1:0.132: Video interface 132 found: [ 1701.616406][ T7050] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1701.824599][ T7050] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1701.824642][ T7050] em28xx 3-1:0.132: board has no eeprom [ 1701.895888][ T7050] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1701.895915][ T7050] em28xx 3-1:0.132: analog set to bulk mode. [ 1701.922037][T16016] em28xx 3-1:0.132: Registering V4L2 extension [ 1702.025984][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1702.031620][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1702.032458][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1702.032878][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1702.052324][T25317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.052870][T25317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.085797][ T37] audit: type=1326 audit(1759163064.217:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25316 comm="syz.1.5854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165cc3eec9 code=0x0 [ 1702.178360][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1702.179526][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1702.183414][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1702.184845][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1702.302107][T25321] em28xx 3-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 1702.404303][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1702.404756][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1702.405190][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1702.431900][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1702.435797][T16016] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1702.477267][T16016] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 1702.478761][T16016] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1702.478780][T16016] em28xx 3-1:0.132: No AC97 audio processor [ 1702.547899][T16016] usb 3-1: Decoder not found [ 1702.547919][T16016] em28xx 3-1:0.132: failed to create media graph [ 1702.547955][T16016] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1702.578324][T16016] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1702.584272][T25323] syzkaller0: entered promiscuous mode [ 1702.584300][T25323] syzkaller0: entered allmulticast mode [ 1702.856156][ T7050] usb 3-1: USB disconnect, device number 76 [ 1702.858431][ T7050] em28xx 3-1:0.132: Disconnecting em28xx [ 1702.858457][ T7050] em28xx 3-1:0.132: Closing input extension [ 1703.115897][ T5846] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1703.303228][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 1703.343907][ T5846] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1703.344531][ T5846] usb 5-1: config 0 has no interface number 0 [ 1703.376473][ T5846] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1703.376503][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.376523][ T5846] usb 5-1: Product: syz [ 1703.376537][ T5846] usb 5-1: Manufacturer: syz [ 1703.376552][ T5846] usb 5-1: SerialNumber: syz [ 1703.405151][ T5846] usb 5-1: config 0 descriptor?? [ 1703.434919][ T5846] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1703.580305][ T7050] em28xx 3-1:0.132: Freeing device [ 1703.735811][T13636] usb 1-1: USB disconnect, device number 82 [ 1703.745924][T16016] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1703.906772][T16016] usb 4-1: Using ep0 maxpacket: 32 [ 1704.108953][T16016] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1704.108981][T16016] usb 4-1: config 0 has no interface number 0 [ 1704.133704][T16016] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1704.133733][T16016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.133753][T16016] usb 4-1: Product: syz [ 1704.133869][T16016] usb 4-1: Manufacturer: syz [ 1704.133884][T16016] usb 4-1: SerialNumber: syz [ 1704.164576][T16016] usb 4-1: config 0 descriptor?? [ 1704.180365][T16016] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1705.731083][T25340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1705.784049][T25336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1705.784078][T25336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1708.506080][ T5846] usb 5-1: qt2_attach - failed to power on unit: -110 [ 1708.506353][ T5846] quatech2 5-1:0.51: probe with driver quatech2 failed with error -110 [ 1709.216499][T16016] usb 4-1: qt2_attach - failed to power on unit: -110 [ 1709.216779][T16016] quatech2 4-1:0.51: probe with driver quatech2 failed with error -110 [ 1709.438789][T25362] syzkaller0: entered promiscuous mode [ 1709.438807][T25362] syzkaller0: entered allmulticast mode [ 1709.889328][ T5844] usb 5-1: USB disconnect, device number 61 [ 1710.037707][T25369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.061923][T25369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.119340][ T37] audit: type=1326 audit(1759163072.237:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25368 comm="syz.1.5868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165cc3eec9 code=0x0 [ 1710.122140][T16016] usb 4-1: USB disconnect, device number 79 [ 1710.367022][ T5844] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1710.525834][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 1710.532830][ T5844] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1710.532953][ T5844] usb 5-1: config 0 has no interface number 0 [ 1710.533002][ T5844] usb 5-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1710.537780][ T5844] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1710.537807][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.537827][ T5844] usb 5-1: Product: syz [ 1710.537841][ T5844] usb 5-1: Manufacturer: syz [ 1710.537855][ T5844] usb 5-1: SerialNumber: syz [ 1710.544213][ T5844] usb 5-1: config 0 descriptor?? [ 1711.087143][T25383] binder: BINDER_SET_CONTEXT_MGR already set [ 1711.087158][T25383] binder: 25382:25383 ioctl 4018620d 200000000040 returned -16 [ 1711.483772][T25390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1711.485231][T25390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1711.485247][T25390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1713.254435][ T5844] usb 5-1: USB disconnect, device number 62 [ 1714.045899][ T5844] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1714.239208][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.239236][ T5844] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1714.239273][ T5844] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1714.239296][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.249027][ T5844] usb 4-1: config 0 descriptor?? [ 1714.549750][ T6370] usb 4-1: USB disconnect, device number 80 [ 1715.003406][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1715.182344][T25423] bridge_slave_1: left allmulticast mode [ 1715.182367][T25423] bridge_slave_1: left promiscuous mode [ 1715.185946][T25423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.288104][T25423] bridge_slave_0: left allmulticast mode [ 1715.288137][T25423] bridge_slave_0: left promiscuous mode [ 1715.288425][T25423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.545198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.847802][T13636] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1715.975814][T13636] usb 1-1: device descriptor read/64, error -71 [ 1716.086483][ T5844] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1716.215998][T13636] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1716.235916][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 1716.239626][ T5844] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.239657][ T5844] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1716.239684][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1716.239718][ T5844] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1716.239741][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.299693][ T5844] usb 4-1: config 0 descriptor?? [ 1716.326577][ T5844] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1716.355744][T13636] usb 1-1: device descriptor read/64, error -71 [ 1716.466807][T13636] usb usb1-port1: attempt power cycle [ 1716.556367][T25447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.558018][T25447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.705554][T25448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1716.706452][ T5844] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1716.805694][T13636] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1716.827936][T13636] usb 1-1: device descriptor read/8, error -71 [ 1716.882208][ T5844] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1716.882236][ T5844] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1716.882257][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1716.882309][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1716.882336][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1716.884274][ T5844] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1716.884290][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1716.884301][ T5844] usb 3-1: Product: syz [ 1716.884309][ T5844] usb 3-1: Manufacturer: syz [ 1717.006397][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 1717.006468][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 1717.014421][ T5844] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1717.014443][ T5844] cdc_wdm 3-1:1.0: Unknown control protocol [ 1717.085753][T13636] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1717.106760][T13636] usb 1-1: device descriptor read/8, error -71 [ 1717.218926][T13636] usb usb1-port1: unable to enumerate USB device [ 1717.559631][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 1717.646294][T25456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.646846][T25456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.761429][ T6370] usb 3-1: USB disconnect, device number 77 [ 1718.666903][T25469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.667503][T25469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.860436][ T6370] usb 4-1: USB disconnect, device number 81 [ 1719.295843][T16017] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1719.377715][ T6370] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1719.479928][T16017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.479957][T16017] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1719.479995][T16017] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1719.480018][T16017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.535736][ T6370] usb 4-1: Using ep0 maxpacket: 32 [ 1719.542987][ T6370] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1719.543014][ T6370] usb 4-1: config 0 has no interface number 0 [ 1719.543063][ T6370] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1719.575939][ T6370] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1719.575968][ T6370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.575986][ T6370] usb 4-1: Product: syz [ 1719.576000][ T6370] usb 4-1: Manufacturer: syz [ 1719.576014][ T6370] usb 4-1: SerialNumber: syz [ 1719.579495][T16017] usb 3-1: config 0 descriptor?? [ 1719.629818][ T6370] usb 4-1: config 0 descriptor?? [ 1719.633018][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 1719.668900][ T6370] smsc75xx v1.0.0 [ 1719.668912][ T6370] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1719.669063][ T6370] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1719.873714][T25478] bridge_slave_1: left allmulticast mode [ 1719.873749][T25478] bridge_slave_1: left promiscuous mode [ 1719.874036][T25478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.935489][T13636] usb 3-1: USB disconnect, device number 78 [ 1720.307568][T25478] bridge_slave_0: left allmulticast mode [ 1720.307590][T25478] bridge_slave_0: left promiscuous mode [ 1720.307769][T25478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.129636][T25495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5901'. [ 1721.131913][T25495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5901'. [ 1721.131937][T25495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5901'. [ 1721.235747][T16016] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1721.405750][T16016] usb 5-1: Using ep0 maxpacket: 32 [ 1721.417903][T16016] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1721.417929][T16016] usb 5-1: config 0 has no interface number 0 [ 1721.417974][T16016] usb 5-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1721.420965][T16016] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1721.420991][T16016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.421010][T16016] usb 5-1: Product: syz [ 1721.421025][T16016] usb 5-1: Manufacturer: syz [ 1721.421037][T16016] usb 5-1: SerialNumber: syz [ 1721.442572][T16016] usb 5-1: config 0 descriptor?? [ 1721.539620][T25500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.540182][T25500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.866231][T16016] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1722.011052][ T5844] usb 4-1: USB disconnect, device number 82 [ 1722.035081][T16016] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1722.035100][T16016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.035110][T16016] usb 3-1: Product: syz [ 1722.035118][T16016] usb 3-1: Manufacturer: syz [ 1722.035126][T16016] usb 3-1: SerialNumber: syz [ 1722.055961][T16016] usb 3-1: config 0 descriptor?? [ 1722.125797][ T6009] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1722.169271][T25510] syzkaller0: entered promiscuous mode [ 1722.169847][T25510] syzkaller0: entered allmulticast mode [ 1722.305772][ T6009] usb 1-1: Using ep0 maxpacket: 32 [ 1722.379140][ T6009] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1722.379169][ T6009] usb 1-1: config 0 has no interface number 0 [ 1722.402928][ T6009] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1722.402960][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.402980][ T6009] usb 1-1: Product: syz [ 1722.402994][ T6009] usb 1-1: Manufacturer: syz [ 1722.403008][ T6009] usb 1-1: SerialNumber: syz [ 1722.442473][ T6009] usb 1-1: config 0 descriptor?? [ 1723.277325][ T6009] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1723.383631][T16016] usb 3-1: non-Atmel transceiver xxxx0008 [ 1723.738207][T16016] usb 3-1: Firmware version (0.0) predates our first public release. [ 1723.738234][T16016] usb 3-1: Please update to version 0.2 or newer [ 1723.738689][T16016] usb 3-1: atusb_probe: initialization failed, error = -19 [ 1723.749368][T16016] usb 3-1: USB disconnect, device number 79 [ 1724.055314][ T5851] Bluetooth: hci5: unexpected event for opcode 0x2023 [ 1724.236412][T13636] usb 5-1: USB disconnect, device number 63 [ 1724.318030][T25526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5910'. [ 1725.960228][T25541] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0 [ 1727.361292][T25557] netlink: 'syz.3.5918': attribute type 1 has an invalid length. [ 1727.445845][T16016] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1727.655768][T16016] usb 3-1: Using ep0 maxpacket: 16 [ 1727.736908][T16016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.806106][T25554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.807778][T16016] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1727.807799][T16016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.807810][T16016] usb 3-1: Product: syz [ 1727.807818][T16016] usb 3-1: Manufacturer: syz [ 1727.807825][T16016] usb 3-1: SerialNumber: syz [ 1727.811051][T25554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.867611][T16016] usb 3-1: config 0 descriptor?? [ 1728.367081][ T6009] usb 1-1: qt2_attach - failed to power on unit: -110 [ 1728.367252][ T6009] quatech2 1-1:0.51: probe with driver quatech2 failed with error -110 [ 1729.013401][ T5844] usb 1-1: USB disconnect, device number 87 [ 1729.498712][ T5844] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1729.607503][T25573] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5922'. [ 1729.665754][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 1729.693312][ T5844] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1729.693330][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.693341][ T5844] usb 1-1: Product: syz [ 1729.693348][ T5844] usb 1-1: Manufacturer: syz [ 1729.693356][ T5844] usb 1-1: SerialNumber: syz [ 1729.757716][ T5844] usb 1-1: config 0 descriptor?? [ 1729.763179][ T5844] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1730.182464][ T5844] gspca_sn9c20x: Write register 1001 failed -71 [ 1730.182479][ T5844] gspca_sn9c20x: Device initialization failed [ 1730.182533][ T5844] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1730.221351][ T5844] usb 1-1: USB disconnect, device number 88 [ 1730.274445][T16016] usb 3-1: USB disconnect, device number 80 [ 1730.418887][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.418995][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.725309][T25585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.737253][T25585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.868983][T25585] netlink: 'syz.1.5925': attribute type 1 has an invalid length. [ 1730.894247][T25585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1730.910036][T25585] vlan2: entered allmulticast mode [ 1730.910051][T25585] ip6gretap0: entered allmulticast mode [ 1730.910625][T25585] bond9: (slave vlan2): Error -34 calling dev_set_mtu [ 1732.595848][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1733.111901][T25603] netlink: 'syz.3.5929': attribute type 1 has an invalid length. [ 1733.471217][T25609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.479690][T25609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.039053][T25612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5931'. [ 1735.717530][ T5844] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1735.868232][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.868248][ T5844] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1735.868269][ T5844] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1735.868281][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.930235][ T5844] usb 5-1: config 0 descriptor?? [ 1736.150760][ T5844] usb 5-1: USB disconnect, device number 64 [ 1737.537120][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.542646][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.119379][T25640] loop6: detected capacity change from 0 to 7 [ 1739.138634][T25640] Dev loop6: unable to read RDB block 7 [ 1739.138664][T25640] loop6: unable to read partition table [ 1739.157279][T25640] loop6: partition table beyond EOD, truncated [ 1739.157304][T25640] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1739.278685][T23914] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1739.283662][T23914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1739.300461][T23914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1739.320206][T23914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1739.322081][T23914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1739.683509][T25657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5944'. [ 1740.296498][T15743] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 1740.296514][T15743] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 1740.296535][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1740.296548][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1740.296557][T15743] RIP: 0010:klist_remove+0x14d/0x340 [ 1740.296779][T15743] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 5a 30 f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 27 5a 30 f7 49 8b 84 24 98 00 00 00 48 89 [ 1740.296788][T15743] RSP: 0018:ffffc900049ff5e0 EFLAGS: 00010202 [ 1740.296798][T15743] RAX: 0000000000000013 RBX: ffff888024f4bb80 RCX: 0000000000000000 [ 1740.296806][T15743] RDX: 0000000000000006 RSI: ffffffff8d03b050 RDI: 0000000000000098 [ 1740.296813][T15743] RBP: ffffc900049ff6e0 R08: ffffffff8f1d6237 R09: 1ffffffff1e3ac46 [ 1740.296820][T15743] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 [ 1740.296827][T15743] R13: 1ffff1100b8ffb94 R14: ffff88805c7fdca0 R15: dffffc0000000000 [ 1740.296835][T15743] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1740.296843][T15743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.296850][T15743] CR2: 0000001b30e22ff8 CR3: 000000002923e000 CR4: 00000000003526f0 [ 1740.296859][T15743] Call Trace: [ 1740.296863][T15743] [ 1740.296869][T15743] ? __pfx_klist_remove+0x10/0x10 [ 1740.296879][T15743] ? __pfx_kobject_move+0x10/0x10 [ 1740.296890][T15743] ? get_device_parent+0x370/0x3a0 [ 1740.296952][T15743] device_move+0x195/0x710 [ 1740.296962][T15743] ? wake_up_q+0x99/0xd0 [ 1740.297016][T15743] hci_conn_del_sysfs+0xb8/0x170 [ 1740.297081][T15743] hci_conn_del+0xc33/0x11b0 [ 1740.297139][T15743] hci_conn_hash_flush+0x191/0x230 [ 1740.297150][T15743] hci_dev_close_sync+0xaef/0x1330 [ 1740.297202][T15743] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1740.297216][T15743] ? hci_unregister_dev+0x212/0x510 [ 1740.297228][T15743] hci_unregister_dev+0x21a/0x510 [ 1740.297240][T15743] vhci_release+0x155/0x1b0 [ 1740.297317][T15743] ? __pfx_vhci_release+0x10/0x10 [ 1740.297328][T15743] __fput+0x45b/0xa80 [ 1740.297359][T15743] task_work_run+0x1d1/0x260 [ 1740.297370][T15743] ? __pfx_task_work_run+0x10/0x10 [ 1740.297379][T15743] ? do_exit+0x6b0/0x2300 [ 1740.297394][T15743] ? kmem_cache_free+0x195/0x510 [ 1740.297417][T15743] do_exit+0x6b5/0x2300 [ 1740.297425][T15743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1740.297480][T15743] ? __lock_acquire+0xab9/0xd20 [ 1740.297500][T15743] ? __pfx_do_exit+0x10/0x10 [ 1740.297508][T15743] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1740.297520][T15743] ? rt_spin_lock+0x1bb/0x2c0 [ 1740.297533][T15743] do_group_exit+0x21c/0x2d0 [ 1740.297543][T15743] get_signal+0x125e/0x1310 [ 1740.297562][T15743] arch_do_signal_or_restart+0x9a/0x750 [ 1740.297577][T15743] ? kmem_cache_free+0x402/0x510 [ 1740.297589][T15743] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1740.297603][T15743] ? exit_to_user_mode_loop+0x40/0x110 [ 1740.297625][T15743] exit_to_user_mode_loop+0x75/0x110 [ 1740.297636][T15743] do_syscall_64+0x2bd/0x3b0 [ 1740.297664][T15743] ? lockdep_hardirqs_on+0x9c/0x150 [ 1740.297678][T15743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.297703][T15743] ? clear_bhb_loop+0x60/0xb0 [ 1740.297713][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.297722][T15743] RIP: 0033:0x7f5e9d29d8dc [ 1740.297765][T15743] Code: Unable to access opcode bytes at 0x7f5e9d29d8b2. [ 1740.297771][T15743] RSP: 002b:00007ffc856f7bb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1740.297781][T15743] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f5e9d29d8dc [ 1740.297788][T15743] RDX: 0000000000000030 RSI: 00007ffc856f7c70 RDI: 00000000000000f9 [ 1740.297795][T15743] RBP: 00007ffc856f7c1c R08: 0000000000000000 R09: 00007ffc856f7927 [ 1740.297802][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 1740.297808][T15743] R13: 000055558008e590 R14: 00000000001a727e R15: 00007ffc856f7c70 [ 1740.297818][T15743] [ 1740.297825][T15743] Modules linked in: [ 1740.297836][T15743] ---[ end trace 0000000000000000 ]--- [ 1740.297844][T15743] RIP: 0010:klist_remove+0x14d/0x340 [ 1740.297854][T15743] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 5a 30 f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 27 5a 30 f7 49 8b 84 24 98 00 00 00 48 89 [ 1740.297862][T15743] RSP: 0018:ffffc900049ff5e0 EFLAGS: 00010202 [ 1740.297870][T15743] RAX: 0000000000000013 RBX: ffff888024f4bb80 RCX: 0000000000000000 [ 1740.297877][T15743] RDX: 0000000000000006 RSI: ffffffff8d03b050 RDI: 0000000000000098 [ 1740.297884][T15743] RBP: ffffc900049ff6e0 R08: ffffffff8f1d6237 R09: 1ffffffff1e3ac46 [ 1740.297891][T15743] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 [ 1740.297898][T15743] R13: 1ffff1100b8ffb94 R14: ffff88805c7fdca0 R15: dffffc0000000000 [ 1740.297905][T15743] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1740.297913][T15743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.297920][T15743] CR2: 0000001b30e22ff8 CR3: 000000002923e000 CR4: 00000000003526f0 [ 1740.297931][T15743] Kernel panic - not syncing: Fatal exception [ 1740.298333][T15743] Kernel Offset: disabled