last executing test programs: 11.339444614s ago: executing program 0 (id=1127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x0, 0x7000000, &(0x7f0000000100)}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 11.206699653s ago: executing program 1 (id=1128): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xa00}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) 10.911813245s ago: executing program 3 (id=1130): writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d", 0x28}], 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=ANY=[@ANYBLOB="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"], 0x8814}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10.28563008s ago: executing program 3 (id=1132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/189) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.278114444s ago: executing program 1 (id=1133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) 8.253692169s ago: executing program 0 (id=1135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) socket$inet6(0xa, 0x4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c40)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.153911504s ago: executing program 1 (id=1136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/connector\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.863511311s ago: executing program 2 (id=1137): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.657923142s ago: executing program 0 (id=1139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.447945526s ago: executing program 1 (id=1140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '::&-:$-\'(-'}]}, 0x16) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.281474153s ago: executing program 2 (id=1141): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.696779283s ago: executing program 3 (id=1142): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) pipe(0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x24060400) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 6.381488667s ago: executing program 4 (id=1144): syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.338744229s ago: executing program 2 (id=1145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x38, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4010) 6.107099123s ago: executing program 1 (id=1146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) 6.014363182s ago: executing program 2 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) syz_usb_connect(0x5, 0x3d, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x64, 0x31, 0x88, 0x40, 0x93a, 0x2601, 0x16fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x8, 0x7, 0x40, 0x3, [{{0x9, 0x4, 0xdc, 0x8, 0x0, 0x35, 0xf6, 0xd8, 0x7}}, {{0x9, 0x4, 0xcb, 0x4, 0x1, 0xe5, 0x22, 0xa8, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x9, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf3, 0x8}]}}]}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f00000000c0)=[{r5, 0x3388}], 0x1, 0x800) 5.656367249s ago: executing program 0 (id=1148): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[], 0x0) shutdown(0xffffffffffffffff, 0x1) 5.622657073s ago: executing program 3 (id=1149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f90000", 0x91}, {&(0x7f00000000c0)}], 0x2}, 0x0) 3.265659034s ago: executing program 4 (id=1150): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.217697078s ago: executing program 3 (id=1151): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 3.060593491s ago: executing program 1 (id=1152): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) 2.921567967s ago: executing program 2 (id=1153): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 2.548419123s ago: executing program 4 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.211116217s ago: executing program 0 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffff0c, 0x3, 0x80000001, 0xfffffff6}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.483601499s ago: executing program 4 (id=1156): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, 0x0, 0x85) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r1, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.196475818s ago: executing program 2 (id=1157): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000700)={0x0, 0x14}, 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xac58}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xf9}, 0x0, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 873.565184ms ago: executing program 0 (id=1158): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 873.173763ms ago: executing program 4 (id=1159): sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x70bd2e, 0x25dfdbfc}, 0x14}}, 0x80) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1044}, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 537.787244ms ago: executing program 3 (id=1160): socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x102, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=1161): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './cgroup/../file0/file0\x00'}) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000180), 0x2012000, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@dont_measure}]}}) r6 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x100) umount2(&(0x7f0000000600)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) kernel console output (not intermixed with test programs): d pid=7077 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651538ebe9 code=0x7ffc0000 [ 202.617398][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.672602][ T30] audit: type=1326 audit(1754667455.320:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651538ebe9 code=0x7ffc0000 [ 202.729468][ T30] audit: type=1326 audit(1754667455.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f651538ebe9 code=0x7ffc0000 [ 202.755730][ T5933] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 202.800843][ T24] usb 3-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 202.850718][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 202.860963][ T5933] usb 5-1: USB disconnect, device number 10 [ 202.917341][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.929507][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.947450][ T30] audit: type=1326 audit(1754667455.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651538ebe9 code=0x7ffc0000 [ 202.974711][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 203.085433][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 203.212285][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 203.227519][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.280251][ T24] usb 3-1: Product: syz [ 203.356529][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 203.376244][ T24] usb 3-1: Manufacturer: syz [ 203.455896][ T24] usb 3-1: SerialNumber: syz [ 203.548363][ T24] usb 3-1: config 0 descriptor?? [ 203.591357][ T7078] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 203.647615][ T24] usb 3-1: ucan: probing device on interface #0 [ 203.799845][ T24] usb 3-1: ucan: invalid endpoint configuration [ 203.865986][ T24] usb 3-1: ucan: probe failed; try to update the device firmware [ 204.074122][ T7089] delete_channel: no stack [ 204.094630][ T24] usb 3-1: USB disconnect, device number 7 [ 204.919670][ T7113] B: renamed from veth0 (while UP) [ 205.767299][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 205.796534][ T5955] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 205.852375][ T5955] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 206.031962][ T5955] usb 2-1: USB disconnect, device number 12 [ 206.085433][ T5955] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 206.122425][ T5955] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 206.169919][ T5955] sierra 2-1:0.3: device disconnected [ 206.593870][ T7130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.201447][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.3.220'. [ 208.272187][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.3.220'. [ 208.327590][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.3.220'. [ 209.338972][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.227'. [ 209.876003][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 209.882588][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 209.899254][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 209.900189][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 209.905407][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 210.849926][ T7190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.927019][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.942693][ T7192] netlink: 148 bytes leftover after parsing attributes in process `syz.4.233'. [ 212.425492][ T7192] syz.4.233 (7192): drop_caches: 2 [ 212.855135][ T7223] netlink: 148 bytes leftover after parsing attributes in process `syz.1.248'. [ 212.957346][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.986411][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 213.235204][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 213.274870][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 213.405755][ T24] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 213.416862][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.433344][ T24] usb 5-1: Product: syz [ 213.441079][ T24] usb 5-1: Manufacturer: syz [ 213.445809][ T24] usb 5-1: SerialNumber: syz [ 213.455161][ T24] usb 5-1: config 0 descriptor?? [ 213.691835][ T24] powermate: unknown product id 0240 [ 213.718241][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 213.997038][ C1] powermate: config urb returned -71 [ 214.002987][ C1] powermate: config urb returned -71 [ 214.010000][ C1] powermate: config urb returned -71 [ 214.017457][ C1] powermate: config urb returned -71 [ 214.026366][ T24] usb 5-1: USB disconnect, device number 11 [ 214.032498][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 214.849277][ T7247] random: crng reseeded on system resumption [ 215.515907][ T7265] netlink: 'syz.3.269': attribute type 21 has an invalid length. [ 217.372641][ T7304] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 218.137610][ T5982] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.238819][ T5940] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 218.299243][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.312123][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.340223][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.430507][ T5982] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 218.468864][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 218.478400][ T5940] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 218.493295][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.524266][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.553395][ T5940] usb 4-1: config 0 descriptor?? [ 218.674651][ T5982] usb 3-1: config 0 descriptor?? [ 219.072286][ T5940] viewsonic 0003:2133:0018.0002: item fetching failed at offset 0/4 [ 219.142083][ T5940] viewsonic 0003:2133:0018.0002: probe with driver viewsonic failed with error -22 [ 219.227266][ T5982] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 219.234797][ T5982] dragonrise 0003:0079:0011.0003: unbalanced collection at end of report description [ 219.266090][ T5982] dragonrise 0003:0079:0011.0003: parse failed [ 219.285664][ T5940] usb 4-1: USB disconnect, device number 13 [ 219.295862][ T5982] dragonrise 0003:0079:0011.0003: probe with driver dragonrise failed with error -22 [ 219.433822][ T5933] usb 3-1: USB disconnect, device number 8 [ 219.835836][ T7343] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 220.143181][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 220.881988][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 220.891783][ T5940] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.077484][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 221.113701][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.139276][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.167540][ T5940] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 221.223617][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.245054][ T5940] usb 1-1: config 0 descriptor?? [ 221.350049][ T7377] B: renamed from veth0 (while UP) [ 221.551509][ T7381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 221.969082][ T5940] viewsonic 0003:0543:E621.0004: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.0-1/input0 [ 222.204392][ T5940] usb 1-1: USB disconnect, device number 9 [ 222.622527][ T7383] fido_id[7383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 224.331732][ T7413] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.313'. [ 224.349794][ T7413] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 224.372428][ T7413] openvswitch: netlink: Message has 1 unknown bytes. [ 225.757340][ T7437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 225.763906][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.841038][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 226.101929][ T7441] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 226.137431][ T5862] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 226.249258][ T7439] vhci_hcd: connection reset by peer [ 226.298205][ T7441] netdevsim netdevsim3: Falling back to sysfs fallback for: x [ 226.307747][ T49] vhci_hcd: stop threads [ 226.312027][ T49] vhci_hcd: release socket [ 226.365285][ T49] vhci_hcd: disconnect device [ 226.617836][ T5940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.106378][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 227.129545][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.140838][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.156825][ T5940] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 227.171793][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.214383][ T5940] usb 2-1: config 0 descriptor?? [ 227.631829][ T5940] hid (null): unknown global tag 0xc [ 227.688364][ T5940] nzxt-kraken2 0003:1E71:170E.0005: unknown global tag 0xc [ 227.709242][ T5940] nzxt-kraken2 0003:1E71:170E.0005: item 0 1 1 12 parsing failed [ 227.741487][ T5940] nzxt-kraken2 0003:1E71:170E.0005: hid parse failed with -22 [ 227.786921][ T5940] nzxt-kraken2 0003:1E71:170E.0005: probe with driver nzxt-kraken2 failed with error -22 [ 227.827477][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.867390][ T5940] usb 2-1: USB disconnect, device number 13 [ 227.997342][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 228.018791][ T24] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 228.063757][ T24] usb 1-1: config 0 has no interface number 0 [ 228.077465][ T24] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.117554][ T24] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.144212][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 228.163942][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.206383][ T24] usb 1-1: config 0 descriptor?? [ 228.358769][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 228.824822][ T5940] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.860982][ T9] usb 1-1: USB disconnect, device number 10 [ 228.878857][ T5955] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.977297][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 228.987016][ T5940] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.001086][ T5940] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.015327][ T5940] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 229.031541][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.041031][ T5940] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 229.062997][ T5955] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 229.074254][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.082739][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.102691][ T5940] usb 2-1: config 0 descriptor?? [ 229.107861][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.118473][ T5955] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 229.132856][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.154218][ T5955] usb 3-1: config 0 descriptor?? [ 229.552151][ T5940] logitech-hidpp-device 0003:046D:C262.0007: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 229.612029][ T5955] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 229.624972][ T5955] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 229.685296][ T5955] dragonrise 0003:0079:0006.0008: hidraw1: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 229.723202][ T5955] dragonrise 0003:0079:0006.0008: no inputs found [ 229.756141][ T5955] dragonrise 0003:0079:0006.0008: force feedback init failed [ 229.791995][ T5940] usb 2-1: USB disconnect, device number 14 [ 229.833346][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 229.882995][ T5955] usb 3-1: USB disconnect, device number 9 [ 229.954197][ T7498] fido_id[7498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 230.000511][ T7496] fido_id[7496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 230.751773][ T7514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 230.758348][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.774912][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 230.796394][ T7517] netlink: 148 bytes leftover after parsing attributes in process `syz.1.345'. [ 231.007346][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 231.244027][ T7516] vhci_hcd: connection closed [ 231.257251][ T12] vhci_hcd: stop threads [ 231.281859][ T7514] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 231.293482][ T7514] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 231.309130][ T5862] vhci_hcd: vhci_device speed not set [ 231.478527][ T12] vhci_hcd: release socket [ 231.543239][ T12] vhci_hcd: disconnect device [ 232.936496][ T7543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.353'. [ 233.457519][ T5940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 233.467283][ T5955] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.607553][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 233.623721][ T5940] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.635287][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 233.649997][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.671912][ T5940] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.683847][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.694033][ T5940] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.707264][ T5955] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 233.716717][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.725596][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.745742][ T5940] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 233.786047][ T5955] usb 4-1: config 0 descriptor?? [ 233.800897][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.830897][ T5940] usb 1-1: config 0 descriptor?? [ 233.838423][ T5958] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 234.109478][ T5958] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.118113][ T5958] usb 5-1: config 0 has no interface number 0 [ 234.133621][ T5958] usb 5-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 234.144919][ T5958] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.156233][ T5958] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.166371][ T5958] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 234.193754][ T5958] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 234.205157][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.305520][ T5955] hid (null): report_id 0 is invalid [ 234.320618][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.341521][ T5955] ft260 0003:0403:6030.000A: report_id 0 is invalid [ 234.353803][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.366903][ T5955] ft260 0003:0403:6030.000A: item 0 0 1 8 parsing failed [ 234.369651][ T5958] usb 5-1: config 0 descriptor?? [ 234.375616][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.393445][ T5955] ft260 0003:0403:6030.000A: failed to parse HID [ 234.400469][ T5955] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -22 [ 234.410484][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.424446][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.435022][ T5940] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 234.445342][ T5940] hid-generic 0003:045E:05DA.0009: unbalanced collection at end of report description [ 234.459138][ T5940] hid-generic 0003:045E:05DA.0009: probe with driver hid-generic failed with error -22 [ 234.526250][ T5940] usb 4-1: USB disconnect, device number 14 [ 234.557319][ T5982] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.593432][ T5916] usb 1-1: USB disconnect, device number 11 [ 234.729986][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 234.765126][ T5982] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 234.775671][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.785131][ T5982] usb 3-1: Product: syz [ 234.792712][ T5982] usb 3-1: Manufacturer: syz [ 234.803668][ T5982] usb 3-1: SerialNumber: syz [ 234.822931][ T5982] usb 3-1: config 0 descriptor?? [ 234.833114][ T5958] uclogic 0003:28BD:0935.000B: interface is invalid, ignoring [ 235.130670][ T5940] usb 3-1: USB disconnect, device number 10 [ 235.162732][ T5982] usb 5-1: USB disconnect, device number 12 [ 236.214004][ T7599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 236.220664][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.295744][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 236.840964][ T7599] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 236.849647][ T7599] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 236.958953][ T7601] vhci_hcd: connection reset by peer [ 236.985888][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 237.088545][ T59] vhci_hcd: stop threads [ 237.092956][ T59] vhci_hcd: release socket [ 237.100609][ T59] vhci_hcd: disconnect device [ 237.167314][ T24] vhci_hcd: vhci_device speed not set [ 237.831936][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 238.227611][ T7622] tipc: Started in network mode [ 238.297479][ T7622] tipc: Node identity 8, cluster identity 4711 [ 238.303746][ T7622] tipc: Node number set to 8 [ 238.315771][ T7622] tipc: Cannot configure node identity twice [ 238.986663][ T7635] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.018235][ T7634] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 239.227856][ T5955] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 239.287489][ T5933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.389141][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.402380][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.407379][ T5916] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 239.412676][ T5955] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 239.432079][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.447379][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 239.469971][ T5933] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 239.487517][ T5933] usb 1-1: config 0 has no interface number 0 [ 239.525509][ T7646] netlink: 148 bytes leftover after parsing attributes in process `syz.3.387'. [ 239.547112][ T5955] usb 5-1: config 0 descriptor?? [ 239.562115][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 239.570005][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 239.577117][ T5933] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.613067][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.621900][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 239.642387][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 239.651701][ T5955] usb 5-1: media controller created [ 239.658094][ T5933] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 239.667792][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.675792][ T5933] usb 1-1: Product: syz [ 239.707253][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.729023][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.782122][ T5933] usb 1-1: Manufacturer: syz [ 239.787044][ T5916] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 239.791091][ T5933] usb 1-1: SerialNumber: syz [ 239.832542][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 239.844097][ T5933] usb 1-1: config 0 descriptor?? [ 239.863901][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 239.882218][ T5933] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 239.899297][ T5933] em28xx 1-1:0.132: Video interface 132 found: [ 239.907354][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 239.936504][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.957718][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 239.970205][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 239.993007][ T5916] usb 3-1: config 0 descriptor?? [ 240.014253][ T5916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 240.051418][ T5955] usb 5-1: USB disconnect, device number 13 [ 240.055785][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 240.098033][ T5916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 240.221463][ T7641] dvb-usb: bulk message failed: -22 (4/0) [ 240.289428][ T5933] em28xx 1-1:0.132: chip ID is em2710/2820 [ 240.302422][ T5916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 240.313944][ T5916] usb 3-1: media controller created [ 240.344373][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.345081][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 240.393472][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 240.432025][ T5916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 240.460672][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 240.539413][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 240.577887][ T5933] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 240.594180][ T5933] em28xx 1-1:0.132: board has no eeprom [ 240.618225][ T5916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 240.683905][ T5933] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 240.683937][ T5916] usb 3-1: USB disconnect, device number 11 [ 240.696517][ T5933] em28xx 1-1:0.132: analog set to bulk mode. [ 240.708093][ T5955] em28xx 1-1:0.132: Registering V4L2 extension [ 240.755014][ T5933] usb 1-1: USB disconnect, device number 12 [ 240.779574][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 240.784745][ T5933] em28xx 1-1:0.132: Disconnecting em28xx [ 240.785905][ T5982] dvb-usb: error while querying for an remote control event. [ 241.073475][ T5955] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 241.137387][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 241.152988][ T5955] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 241.186381][ T5955] em28xx 1-1:0.132: No AC97 audio processor [ 241.262020][ T5955] usb 1-1: Decoder not found [ 241.297547][ T5955] em28xx 1-1:0.132: failed to create media graph [ 241.326242][ T5955] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 241.410375][ T5955] em28xx 1-1:0.132: Remote control support is not available for this card. [ 241.445163][ T5933] em28xx 1-1:0.132: Closing input extension [ 241.511316][ T5933] em28xx 1-1:0.132: Freeing device [ 241.967597][ T5933] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.130762][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 242.173741][ T5933] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 242.184815][ T5933] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 242.201735][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 242.212459][ T5933] usb 1-1: config 1 has no interface number 0 [ 242.324991][ T5933] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.415767][ T5933] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 242.476840][ T5933] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 242.549446][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.600210][ T5933] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 242.793095][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.404'. [ 242.853223][ T5933] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 243.261226][ T5933] usb 1-1: USB disconnect, device number 13 [ 243.305256][ T5933] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 243.528558][ T5982] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.698932][ T5982] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 243.717450][ T5982] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 243.849924][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.411'. [ 244.020481][ T7717] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 244.040135][ T7717] netlink: 17 bytes leftover after parsing attributes in process `syz.0.412'. [ 244.058638][ T5982] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 244.170822][ T5982] usb 5-1: config 220 has no interface number 2 [ 244.189471][ T5982] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 244.288777][ T5982] usb 5-1: config 220 interface 0 has no altsetting 0 [ 244.303716][ T5982] usb 5-1: config 220 interface 76 has no altsetting 0 [ 244.332731][ T5982] usb 5-1: config 220 interface 1 has no altsetting 0 [ 244.386072][ T5982] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 244.483044][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.506730][ T5982] usb 5-1: Product: syz [ 244.513387][ T5982] usb 5-1: Manufacturer: syz [ 244.541166][ T5982] usb 5-1: SerialNumber: syz [ 244.823928][ T5982] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 244.837215][ T5982] usb 5-1: No valid video chain found. [ 244.842799][ T5982] usb 5-1: selecting invalid altsetting 0 [ 244.916995][ T7729] netlink: 116 bytes leftover after parsing attributes in process `syz.1.417'. [ 244.927854][ T5982] usb 5-1: selecting invalid altsetting 0 [ 244.934047][ T5982] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 245.017520][ T5982] usb 5-1: USB disconnect, device number 14 [ 245.115871][ T7734] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.144425][ T7734] macsec1: entered allmulticast mode [ 245.164329][ T5940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.177311][ T7734] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 245.257028][ T7734] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 245.267228][ T7734] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 245.337517][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 245.345375][ T5940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.375643][ T5940] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 245.403712][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 245.506911][ T5940] usb 1-1: config 0 interface 0 has no altsetting 1 [ 245.546527][ T5940] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 245.556024][ T5933] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 245.573768][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 245.603428][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.651936][ T5940] usb 1-1: SerialNumber: syz [ 245.689895][ T5940] usb 1-1: config 0 descriptor?? [ 245.717496][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 245.744810][ T5933] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 245.766799][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.846037][ T5933] usb 2-1: config 0 descriptor?? [ 245.852366][ T7738] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.953802][ T5940] usb-storage 1-1:0.0: USB Mass Storage device detected [ 246.045788][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 246.121918][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 246.181438][ T5940] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 246.304167][ T5933] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 246.363301][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 246.405539][ T5933] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 246.427427][ T5933] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 246.439819][ T5940] usb 1-1: USB disconnect, device number 14 [ 246.482832][ T5933] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 246.531476][ T5933] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 246.569447][ T5933] uclogic 0003:5543:0064.000C: hidraw0: USB HID v1.01 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 246.590601][ T5933] usb 2-1: USB disconnect, device number 15 [ 246.791668][ T7762] fido_id[7762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 248.138167][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 248.338642][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 248.917942][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'. [ 249.644428][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 249.739540][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 249.937260][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 250.047474][ T5940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 250.099067][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 250.128553][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 250.145352][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 250.179970][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.204262][ T24] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 250.246358][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.256399][ T5940] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.257250][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 250.269950][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.289536][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.319556][ T24] usb 1-1: config 0 descriptor?? [ 250.329696][ T5940] usb 4-1: Product: syz [ 250.333941][ T5940] usb 4-1: Manufacturer: syz [ 250.363728][ T5940] usb 4-1: SerialNumber: syz [ 250.406301][ T5940] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.407481][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.445771][ T5933] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.587382][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 250.600007][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.611742][ T5916] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 250.769608][ T24] microsoft 0003:045E:00F9.000D: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 250.791606][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.823235][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.835362][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.855290][ T24] microsoft 0003:045E:00F9.000D: no inputs found [ 250.887938][ T5916] usb 3-1: config 0 descriptor?? [ 250.989559][ T24] microsoft 0003:045E:00F9.000D: could not initialize ff, continuing anyway [ 251.040206][ T24] usb 1-1: USB disconnect, device number 15 [ 251.213513][ T9] usb 4-1: USB disconnect, device number 15 [ 251.312323][ T5916] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0 [ 251.457431][ T5916] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0 [ 251.483081][ T5916] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0 [ 251.498660][ T5916] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0 [ 251.506012][ T5916] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0 [ 251.535000][ T5916] cypress 0003:04B4:07B1.000E: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 251.622299][ T5916] usb 3-1: USB disconnect, device number 12 [ 251.724078][ T7825] CUSE: DEVNAME unspecified [ 251.796502][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 251.861556][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 252.037477][ T5933] usb 4-1: Service connection timeout for: 256 [ 252.051057][ T5933] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 252.106571][ T5933] ath9k_htc: Failed to initialize the device [ 252.160701][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 253.108929][ T5916] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.149574][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.329671][ T5916] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.338608][ T5916] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 253.356060][ T5916] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.438541][ T5916] usb 2-1: config 220 has no interface number 2 [ 253.445134][ T5916] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 253.458939][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 253.612585][ T5916] usb 2-1: config 220 interface 0 has no altsetting 0 [ 253.636264][ T5916] usb 2-1: config 220 interface 76 has no altsetting 0 [ 253.677380][ T5916] usb 2-1: config 220 interface 1 has no altsetting 0 [ 253.689775][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.699937][ T5862] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.016354][ T5862] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.050102][ T5916] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 254.087410][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.095957][ T5916] usb 2-1: Product: syz [ 254.103543][ T5862] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.144105][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.154128][ T5916] usb 2-1: Manufacturer: syz [ 254.162120][ T5862] usb 3-1: Product: syz [ 254.166561][ T5916] usb 2-1: SerialNumber: syz [ 254.173747][ T5862] usb 3-1: Manufacturer: syz [ 254.181553][ T5862] usb 3-1: SerialNumber: syz [ 254.221274][ T5862] hub 3-1:1.0: bad descriptor, ignoring hub [ 254.237265][ T5862] hub 3-1:1.0: probe with driver hub failed with error -5 [ 254.405992][ T5916] usb 2-1: selecting invalid altsetting 0 [ 254.450188][ T5862] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.464891][ T5916] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 254.526538][ T5916] usb 2-1: No valid video chain found. [ 254.688636][ T5862] usb 3-1: USB disconnect, device number 13 [ 254.711123][ T5916] usb 2-1: selecting invalid altsetting 0 [ 254.722667][ T5916] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 254.838370][ T5916] usb 2-1: USB disconnect, device number 16 [ 255.227420][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 255.402501][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.424299][ T5862] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.463228][ T5862] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.500054][ T5862] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.513414][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.563492][ T5862] usb 3-1: Product: syz [ 255.568165][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 255.587417][ T5862] usb 3-1: Manufacturer: syz [ 255.598229][ T5862] usb 3-1: SerialNumber: syz [ 255.630942][ T5862] hub 3-1:1.0: bad descriptor, ignoring hub [ 255.643683][ T5862] hub 3-1:1.0: probe with driver hub failed with error -5 [ 255.737319][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 255.745070][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.793425][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.867297][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.937356][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 255.980417][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.018493][ T24] usb 2-1: config 0 descriptor?? [ 256.459446][ T24] sony 0003:054C:0268.000F: unknown main item tag 0x0 [ 256.483328][ T24] sony 0003:054C:0268.000F: unknown main item tag 0x0 [ 256.546613][ T24] sony 0003:054C:0268.000F: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 256.582194][ T24] sony 0003:054C:0268.000F: failed to claim input [ 256.673932][ T24] usb 2-1: USB disconnect, device number 17 [ 256.728761][ T7910] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 256.739018][ T7910] macsec1: entered allmulticast mode [ 256.752469][ T7910] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 256.772207][ T7910] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 256.784884][ T7910] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 256.825125][ T7911] fido_id[7911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 256.850801][ T7914] macvlan0: entered promiscuous mode [ 256.882013][ T7914] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 256.895000][ T7914] netlink: 'syz.3.482': attribute type 2 has an invalid length. [ 256.921286][ T7917] tap0: tun_chr_ioctl cmd 1074025678 [ 256.933609][ T7917] tap0: group set to 0 [ 257.135573][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 257.139614][ T7849] usblp0: removed [ 257.156663][ T5862] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.240557][ T5862] usb 3-1: USB disconnect, device number 14 [ 257.286057][ T5862] usblp0: removed [ 257.599569][ T5933] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 257.629175][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.757555][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 257.767525][ T5955] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 257.778127][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.792446][ T5933] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 257.801784][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 257.812829][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.833451][ T5933] usb 4-1: config 0 descriptor?? [ 257.844095][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 257.853461][ T9] usb 2-1: config 0 has no interface number 0 [ 257.866297][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.875675][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.885591][ T9] usb 2-1: Product: syz [ 257.892327][ T9] usb 2-1: Manufacturer: syz [ 257.898282][ T9] usb 2-1: SerialNumber: syz [ 257.910678][ T9] usb 2-1: config 0 descriptor?? [ 257.919831][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 257.929166][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 257.939473][ T5955] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 257.951806][ T5955] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 257.966346][ T5955] usb 1-1: config 0 has no interface number 0 [ 257.976456][ T5955] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.998603][ T5955] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 258.016830][ T5955] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 258.037551][ T5955] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 258.054081][ T5955] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 258.062765][ T5955] usb 1-1: Product: syz [ 258.067058][ T5955] usb 1-1: Manufacturer: syz [ 258.095926][ T5955] usb 1-1: config 0 descriptor?? [ 258.113176][ T7935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 258.156085][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 258.552142][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 258.782027][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 258.782141][ T24] usb 2-1: USB disconnect, device number 18 [ 258.857619][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 258.913482][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 258.961879][ T24] quatech2 2-1:0.51: device disconnected [ 258.991881][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.998323][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.010783][ T5955] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input12 [ 259.043520][ T5933] holtek 0003:1241:5015.0010: unknown main item tag 0x0 [ 259.069826][ T5933] holtek 0003:1241:5015.0010: unknown main item tag 0x0 [ 259.091792][ T5933] holtek 0003:1241:5015.0010: item fetching failed at offset 2/5 [ 259.115880][ T5933] holtek 0003:1241:5015.0010: parse failed [ 259.122787][ T5933] holtek 0003:1241:5015.0010: probe with driver holtek failed with error -22 [ 259.158310][ T7955] netlink: 72 bytes leftover after parsing attributes in process `syz.4.497'. [ 259.245540][ T24] usb 1-1: USB disconnect, device number 16 [ 259.245632][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 259.272631][ T5933] usb 4-1: USB disconnect, device number 16 [ 259.817704][ T5955] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.007263][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 260.026686][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.056714][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 260.076680][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.105127][ T5955] usb 3-1: config 0 descriptor?? [ 260.121636][ T5955] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 260.227289][ T5862] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.386468][ T5862] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 260.410308][ T5862] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 260.417685][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.427266][ T5862] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.443752][ T5862] usb 2-1: config 220 has no interface number 2 [ 260.450724][ T5862] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.469007][ T5862] usb 2-1: config 220 interface 0 has no altsetting 0 [ 260.476006][ T5862] usb 2-1: config 220 interface 76 has no altsetting 0 [ 260.485450][ T5862] usb 2-1: config 220 interface 1 has no altsetting 0 [ 260.501680][ T5862] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 260.521183][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.539266][ T5862] usb 2-1: Product: syz [ 260.547355][ T5862] usb 2-1: Manufacturer: syz [ 260.552156][ T5862] usb 2-1: SerialNumber: syz [ 260.579681][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 260.595798][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.617700][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.637471][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 260.646635][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.663432][ T9] usb 1-1: config 0 descriptor?? [ 260.784920][ T5862] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 260.806179][ T5862] usb 2-1: No valid video chain found. [ 260.819081][ T5862] usb 2-1: selecting invalid altsetting 0 [ 260.872710][ T5862] usb 2-1: selecting invalid altsetting 0 [ 260.878918][ T5862] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 260.896147][ T5862] usb 2-1: USB disconnect, device number 19 [ 261.022085][ T5955] gspca_vc032x: reg_w err -71 [ 261.057055][ T5955] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 261.086832][ T5955] usb 3-1: USB disconnect, device number 15 [ 261.239008][ T9] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 261.431690][ T9] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 261.539910][ T8003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.516'. [ 261.635103][ T9] ft260 0003:0403:6030.0011: failed to retrieve system status [ 261.654514][ T9] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -71 [ 261.769956][ T9] usb 1-1: USB disconnect, device number 17 [ 262.233421][ T8022] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 262.248630][ T8022] macsec1: entered allmulticast mode [ 262.267101][ T8022] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 262.291760][ T8022] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 262.299762][ T8022] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 262.653890][ T8030] netlink: 'syz.0.527': attribute type 9 has an invalid length. [ 264.495401][ T8080] B: renamed from veth0 (while UP) [ 265.580499][ T30] audit: type=1326 audit(1754667518.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 265.732929][ T30] audit: type=1326 audit(1754667518.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 265.832776][ T30] audit: type=1326 audit(1754667518.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 265.979165][ T30] audit: type=1326 audit(1754667518.340:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 266.160118][ T30] audit: type=1326 audit(1754667518.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 266.244358][ T30] audit: type=1326 audit(1754667518.340:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 266.318019][ T30] audit: type=1326 audit(1754667518.340:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 266.517991][ T30] audit: type=1326 audit(1754667518.340:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 266.547267][ T30] audit: type=1326 audit(1754667518.340:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68a78ebe9 code=0x7ffc0000 [ 267.977484][ T5940] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 268.148304][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 268.155870][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.191328][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.227335][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.247441][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 268.279718][ T5940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.350789][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.407271][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 268.413962][ T5940] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.425644][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 268.437878][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 268.457622][ T5940] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.506498][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.527220][ T5940] usb 5-1: Manufacturer: syz [ 268.552976][ T5940] usb 5-1: config 0 descriptor?? [ 268.577278][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.607264][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.621270][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.743984][ T8140] netlink: 216 bytes leftover after parsing attributes in process `syz.3.568'. [ 268.777540][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 268.870695][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 268.876448][ T9] usbtmc 1-1:16.0: can't read capabilities [ 268.960546][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.568'. [ 269.037388][ T5940] rc_core: IR keymap rc-hauppauge not found [ 269.070197][ T5940] Registered IR keymap rc-empty [ 269.089312][ T9] usb 1-1: USB disconnect, device number 18 [ 269.114558][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.137398][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.281438][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 269.317533][ T5958] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 269.351106][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 269.423693][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.457474][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.499657][ T5958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.517551][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.547553][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.564652][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.585768][ T5958] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.609759][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.631681][ T5958] usb 2-1: Product: syz [ 269.637655][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.647199][ T5958] usb 2-1: Manufacturer: syz [ 269.652787][ T5958] usb 2-1: SerialNumber: syz [ 269.681468][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.717544][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.767310][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.788447][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.812164][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 269.853392][ T5940] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 269.884655][ T5958] usb 2-1: 0:2 : does not exist [ 269.893923][ T5940] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 269.919112][ T5958] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 269.947463][ T5940] usb 5-1: USB disconnect, device number 15 [ 270.044068][ T8154] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 270.072838][ T5958] usb 2-1: USB disconnect, device number 20 [ 270.112535][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 270.209874][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.281391][ T8158] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 270.334764][ T8158] team0: Port device dummy0 added [ 270.345349][ T8158] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 270.376462][ T8158] team0: Port device dummy0 removed [ 270.413383][ T8158] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.838460][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 271.068117][ T5940] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.088438][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 271.097411][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.110450][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.134766][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.264528][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 271.293421][ T5940] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 271.353571][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.371102][ T5940] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 271.405697][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.432994][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.605303][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.625827][ T5940] hub 4-1:32.0: bad descriptor, ignoring hub [ 271.711553][ T5940] hub 4-1:32.0: probe with driver hub failed with error -5 [ 271.937435][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 271.943059][ T9] usbtmc 3-1:16.0: can't read capabilities [ 272.209718][ T5940] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 272.237392][ T9] usb 3-1: USB disconnect, device number 16 [ 272.527269][ T5933] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 272.597361][ T5954] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 272.687444][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 272.695899][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.722880][ T5933] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 272.740686][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.761965][ T5933] usb 5-1: Product: syz [ 272.772254][ T5933] usb 5-1: Manufacturer: syz [ 272.777097][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 272.798985][ T5933] usb 5-1: SerialNumber: syz [ 272.812862][ T5933] usb 5-1: config 0 descriptor?? [ 272.818142][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 272.831059][ T5954] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 272.843713][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.858464][ T5954] usb 2-1: config 0 descriptor?? [ 272.864810][ T8189] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 273.262965][ T5933] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 273.347679][ T5862] usb 4-1: USB disconnect, device number 17 [ 273.399614][ T5954] uclogic 0003:28BD:0078.0012: interface is invalid, ignoring [ 273.464195][ T5933] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 273.490126][ T5933] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 273.507362][ T5954] usb 2-1: USB disconnect, device number 21 [ 273.716812][ T5940] usb 5-1: USB disconnect, device number 16 [ 274.710000][ T8225] netlink: 168 bytes leftover after parsing attributes in process `syz.4.597'. [ 275.097244][ T5862] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.250484][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.389254][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.460277][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.533575][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.547779][ T8229] loop2: detected capacity change from 0 to 7 [ 275.601114][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.610836][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.622583][ T5862] usb 3-1: config 0 descriptor?? [ 275.632592][ T8229] Dev loop2: unable to read RDB block 7 [ 275.727583][ T8229] loop2: unable to read partition table [ 275.737598][ T8229] loop2: partition table beyond EOD, truncated [ 275.757302][ T8229] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.332242][ T8234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 276.419117][ T5862] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 276.702349][ T5954] usb 3-1: USB disconnect, device number 17 [ 276.731157][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 277.817305][ T5954] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 277.999911][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.016969][ T8273] netlink: 148 bytes leftover after parsing attributes in process `syz.1.613'. [ 278.167281][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.170781][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.293526][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 278.314052][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.437406][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 278.451797][ T5954] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.464919][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.475618][ T24] usb 5-1: config 0 has no interface number 0 [ 278.482436][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.505576][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.548884][ T5954] usb 3-1: config 0 descriptor?? [ 278.582611][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.606282][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.649980][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.693762][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.772193][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.861050][ T24] usb 5-1: config 0 descriptor?? [ 278.886771][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.045764][ T5954] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 279.178319][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.616'. [ 279.196023][ T24] usb 5-1: USB disconnect, device number 17 [ 279.206910][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 279.391223][ T24] usb 3-1: USB disconnect, device number 18 [ 280.550470][ T8299] pim6reg1: entered promiscuous mode [ 280.556422][ T8299] pim6reg1: entered allmulticast mode [ 280.827950][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 281.686304][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.694325][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.224259][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.358992][ T8344] random: crng reseeded on system resumption [ 282.406039][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.132035][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.315097][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 283.590851][ T2992] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.625744][ T2992] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.635866][ T2992] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.702767][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.757324][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.800212][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.819655][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.900666][ T10] usb 1-1: SerialNumber: syz [ 284.066835][ T8365] syzkaller1: entered promiscuous mode [ 284.073351][ T8365] syzkaller1: entered allmulticast mode [ 284.097279][ T5954] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 284.153994][ T10] usb 1-1: 0:2 : does not exist [ 284.181433][ T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 284.266277][ T10] usb 1-1: USB disconnect, device number 19 [ 284.322900][ T5954] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 284.340153][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.363405][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.402215][ T5954] usb 5-1: config 0 descriptor?? [ 284.420501][ T5954] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 284.500721][ T8321] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 284.618002][ T5954] gp8psk: usb in 128 operation failed. [ 284.625819][ T5954] gp8psk: usb in 137 operation failed. [ 284.637250][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.647722][ T5954] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 284.656410][ T5954] usb 5-1: media controller created [ 284.678868][ T8321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.707238][ T8321] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 284.727590][ T8321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 284.742863][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.767687][ T8321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.807408][ T8321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.848048][ T5954] gp8psk_fe: Frontend attached [ 284.862914][ T5954] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 284.870801][ T8321] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 284.881423][ T5954] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 284.893873][ T8321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 284.926238][ T8321] usb 4-1: Product: syz [ 284.938954][ T8321] usb 4-1: Manufacturer: syz [ 284.948198][ T8321] usb 4-1: SerialNumber: syz [ 284.982588][ T8321] usb 4-1: config 0 descriptor?? [ 285.127605][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 285.196563][ T5954] gp8psk: usb in 137 operation failed. [ 285.207650][ T5954] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 285.235025][ T5954] gp8psk: found Genpix USB device pID = 203 (hex) [ 285.241932][ T8321] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 285.266862][ T5954] usb 5-1: USB disconnect, device number 18 [ 285.279585][ T8321] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 285.438676][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.651'. [ 285.448130][ T8321] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 285.463619][ T8321] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 285.652057][ T8321] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 285.750057][ T8398] netlink: 196 bytes leftover after parsing attributes in process `syz.0.653'. [ 285.781398][ T8321] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 285.796879][ T5954] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 286.287419][ T8321] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 286.342884][ T8321] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 286.411162][ T8321] usb 4-1: USB disconnect, device number 18 [ 287.598427][ T8434] syzkaller1: entered promiscuous mode [ 287.616801][ T8434] syzkaller1: entered allmulticast mode [ 287.752479][ T8440] netlink: 196 bytes leftover after parsing attributes in process `syz.4.669'. [ 287.954522][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.139492][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.160095][ T5862] usb 2-1: config 0 has no interfaces? [ 288.191805][ T5862] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.215485][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.272247][ T5862] usb 2-1: Product: syz [ 288.290852][ T5862] usb 2-1: Manufacturer: syz [ 288.307024][ T5862] usb 2-1: SerialNumber: syz [ 288.335848][ T5862] usb 2-1: config 0 descriptor?? [ 288.389253][ T8453] usb usb8: usbfs: process 8453 (syz.3.673) did not claim interface 0 before use [ 288.586940][ T8324] usb 2-1: USB disconnect, device number 22 [ 288.646256][ T8459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.654468][ T8459] IPv6: NLM_F_CREATE should be set when creating new route [ 288.661920][ T8459] IPv6: NLM_F_CREATE should be set when creating new route [ 288.847236][ T5954] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 288.928862][ T8465] netlink: 168 bytes leftover after parsing attributes in process `syz.2.677'. [ 289.106951][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.122964][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.135812][ T5954] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.289515][ T5954] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.317742][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.345385][ T5954] usb 4-1: config 0 descriptor?? [ 289.767435][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 289.788561][ T5954] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 289.840177][ T5954] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 289.959288][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 289.974344][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 289.984064][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.032517][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.044499][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 290.091086][ T5940] usb 4-1: USB disconnect, device number 19 [ 290.097494][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.113114][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.127810][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.136869][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.611925][ T10] usb 1-1: usb_control_msg returned -32 [ 290.622779][ T10] usbtmc 1-1:16.0: can't read capabilities [ 290.759951][ T8500] netlink: 196 bytes leftover after parsing attributes in process `syz.2.690'. [ 291.167234][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.199452][ T5940] usb 1-1: USB disconnect, device number 20 [ 291.492775][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.512952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.528087][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 291.539969][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.572616][ T10] usb 2-1: config 0 descriptor?? [ 292.004952][ T10] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 292.028021][ T10] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 292.035565][ T10] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 292.056572][ T10] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 292.066297][ T10] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 292.085482][ T10] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 292.158851][ T8324] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 292.317555][ T8324] usb 1-1: Using ep0 maxpacket: 8 [ 292.324501][ T8324] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 292.334221][ T8324] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.344792][ T8324] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.355645][ T8324] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.366089][ T8324] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.379597][ T8324] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.390329][ T8324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.406605][ T8527] netlink: 168 bytes leftover after parsing attributes in process `syz.2.700'. [ 292.446328][ T5954] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 292.658907][ T10] playstation 0003:054C:0DF2.0016: Failed to retrieve feature with reportID 5: -71 [ 292.672374][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.687975][ T10] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense calibration info: -71 [ 292.702679][ T5954] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 292.710959][ T5954] usb 4-1: can't read configurations, error -71 [ 292.717862][ T10] playstation 0003:054C:0DF2.0016: Failed to get calibration data from DualSense [ 292.728094][ T10] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 292.738064][ T8324] usb 1-1: usb_control_msg returned -32 [ 292.739546][ T10] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -71 [ 292.768998][ T10] usb 2-1: USB disconnect, device number 23 [ 292.775275][ T8324] usbtmc 1-1:16.0: can't read capabilities [ 293.099080][ T8529] usbtmc 1-1:16.0: control status returned 0 [ 293.335470][ T8535] usb usb8: usbfs: process 8535 (syz.1.704) did not claim interface 0 before use [ 293.381453][ T8324] usb 1-1: USB disconnect, device number 21 [ 293.543996][ T8543] netlink: 'syz.1.706': attribute type 13 has an invalid length. [ 293.567387][ T10] IPVS: starting estimator thread 0... [ 293.607993][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 293.656095][ T8543] netlink: 'syz.1.706': attribute type 13 has an invalid length. [ 293.678215][ T8548] netlink: 196 bytes leftover after parsing attributes in process `syz.3.707'. [ 293.743330][ T8546] IPVS: using max 33 ests per chain, 79200 per kthread [ 293.751847][ T211] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.784248][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 293.787363][ T211] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.839791][ T211] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.918233][ T211] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.747577][ T8324] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 294.907292][ T8324] usb 3-1: Using ep0 maxpacket: 8 [ 294.922337][ T8324] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.947852][ T8324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.958047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805602e800: rx timeout, send abort [ 294.969467][ T8324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.983467][ T8324] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.012730][ T8324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.052550][ T8324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.107729][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 295.267384][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 295.275746][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.294090][ T8324] usb 3-1: GET_CAPABILITIES returned 0 [ 295.300402][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.314760][ T8324] usbtmc 3-1:16.0: can't read capabilities [ 295.330918][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.361601][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.393410][ T43] usb 2-1: config 0 descriptor?? [ 295.456850][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056df9c00: rx timeout, send abort [ 295.465756][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805602e800: abort rx timeout. Force session deactivation [ 295.526926][ T8324] usb 3-1: USB disconnect, device number 19 [ 295.816182][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 295.965555][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056df9c00: abort rx timeout. Force session deactivation [ 296.165509][ T8614] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 296.198268][ T8614] macsec1: entered allmulticast mode [ 296.199412][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 296.212060][ T8614] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 296.243976][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 296.274415][ T8614] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 296.283012][ T8614] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 296.294228][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 296.322910][ T43] usb 2-1: USB disconnect, device number 24 [ 296.469148][ T8623] vlan2: entered allmulticast mode [ 296.502489][ T8623] macvlan0: entered allmulticast mode [ 297.297963][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 297.905067][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 298.130048][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.744'. [ 298.347645][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 298.431145][ T8663] syzkaller1: entered promiscuous mode [ 298.436948][ T8663] syzkaller1: entered allmulticast mode [ 298.509440][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 298.523247][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.611228][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.631307][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.641631][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.653942][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.665860][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.686379][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.698017][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.986135][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.046598][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.060049][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.097279][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.118802][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.137230][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.184812][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.284294][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.365097][ T8675] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 299.427464][ T8675] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 299.441877][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.477188][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.488612][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.498037][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.518639][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.534439][ T8676] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 299.546800][ T8676] macsec1: entered allmulticast mode [ 299.552429][ T8676] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 299.565385][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.574705][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.589290][ T8676] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 299.598804][ T8676] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 299.607065][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.624458][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 299.640043][ T43] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 299.661171][ T43] usb 2-1: Product: syz [ 299.679554][ T43] usb 2-1: Manufacturer: syz [ 299.696782][ T43] usb 2-1: SerialNumber: syz [ 299.737065][ T43] usb 2-1: config 0 descriptor?? [ 299.776736][ T43] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.028117][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 300.104748][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 300.116492][ T10] usb 2-1: USB disconnect, device number 25 [ 300.134394][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 300.222466][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.756'. [ 300.592905][ T8696] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 300.887887][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 300.967426][ T5954] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.207226][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 301.230620][ T5954] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 301.239592][ T5954] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.295079][ T5954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.402980][ T5954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.512151][ T5954] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.616989][ T5954] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.667232][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.935872][ T5954] usb 4-1: GET_CAPABILITIES returned 0 [ 301.950883][ T5954] usbtmc 4-1:16.0: can't read capabilities [ 302.250607][ T5954] usb 4-1: USB disconnect, device number 22 [ 302.257079][ T8700] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 302.637789][ T5932] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 302.773964][ T8734] netlink: 148 bytes leftover after parsing attributes in process `syz.0.776'. [ 302.872044][ T5932] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 302.904946][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.935413][ T5932] usb 2-1: Product: syz [ 302.941978][ T5932] usb 2-1: Manufacturer: syz [ 302.962571][ T5932] usb 2-1: SerialNumber: syz [ 303.003289][ T5932] usb 2-1: config 0 descriptor?? [ 303.129953][ T8739] capability: warning: `syz.4.778' uses deprecated v2 capabilities in a way that may be insecure [ 303.457386][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 303.464001][ T8744] syzkaller1: entered promiscuous mode [ 303.496394][ T8744] syzkaller1: entered allmulticast mode [ 303.663327][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 303.681558][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.707266][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 303.757439][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 303.882133][ T43] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 303.910749][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.958396][ T43] usb 4-1: Product: syz [ 304.033983][ T43] usb 4-1: Manufacturer: syz [ 304.054247][ T43] usb 4-1: SerialNumber: syz [ 304.085979][ T43] usb 4-1: config 0 descriptor?? [ 304.128687][ T5932] usb 2-1: non-Atmel transceiver xxxx0008 [ 304.333187][ T43] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 304.357375][ T5932] usb 2-1: Firmware version (0.0) predates our first public release. [ 304.384728][ T43] usb 4-1: USB disconnect, device number 23 [ 304.413000][ T5932] usb 2-1: Please update to version 0.2 or newer [ 304.617413][ T5932] usb 2-1: atusb_probe: initialization failed, error = -19 [ 304.694270][ T5932] usb 2-1: USB disconnect, device number 26 [ 305.077997][ T5954] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 305.247379][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 305.294677][ T5954] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 305.312820][ T5954] usb 3-1: config 0 has no interface number 0 [ 305.347447][ T5954] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.370288][ T5954] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 305.381882][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.390350][ T5954] usb 3-1: Product: syz [ 305.394767][ T5954] usb 3-1: Manufacturer: syz [ 305.399916][ T5954] usb 3-1: SerialNumber: syz [ 305.410248][ T5954] usb 3-1: config 0 descriptor?? [ 305.420970][ T5954] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 305.436222][ T5954] em28xx 3-1:0.132: Video interface 132 found: [ 305.823970][ T5954] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 306.438384][ T5954] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 306.454219][ T5954] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 306.470804][ T5954] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 306.492297][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 306.562792][ T5954] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 306.572894][ T5954] em28xx 3-1:0.132: analog set to bulk mode. [ 306.599350][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 306.633532][ T5954] usb 3-1: USB disconnect, device number 20 [ 306.695187][ T5954] em28xx 3-1:0.132: Disconnecting em28xx [ 306.720660][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 307.037022][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 307.049276][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 307.075536][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 307.104156][ T10] usb 3-1: Decoder not found [ 307.177431][ T10] em28xx 3-1:0.132: failed to create media graph [ 307.252232][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 307.343325][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 307.384899][ T5954] em28xx 3-1:0.132: Closing input extension [ 307.432943][ T5954] em28xx 3-1:0.132: Freeing device [ 309.127386][ T30] audit: type=1326 audit(1754667561.900:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5798ebe9 code=0x7fc00000 [ 309.786431][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 309.967334][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.200237][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.215149][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 310.288989][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.332984][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.344959][ T10] usb 3-1: Product: syz [ 310.351752][ T10] usb 3-1: Manufacturer: syz [ 310.356413][ T10] usb 3-1: SerialNumber: syz [ 310.604910][ T8859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.010575][ T8888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 311.017253][ T8888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.029778][ T8888] vhci_hcd vhci_hcd.0: Device attached [ 311.236639][ T8859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.267493][ T43] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 311.288635][ T8321] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 311.455346][ T10] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 311.464619][ T10] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 311.467403][ T8321] usb 2-1: Using ep0 maxpacket: 16 [ 311.478712][ T10] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 311.489243][ T8321] usb 2-1: config 0 has no interfaces? [ 311.494786][ T8321] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 311.507557][ T5932] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 311.510566][ T8321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.533315][ T8321] usb 2-1: config 0 descriptor?? [ 311.666977][ T10] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 311.678441][ T5932] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.694414][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.706418][ T10] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 311.720949][ T10] wwan wwan0: port wwan0mbim0 attached [ 311.729518][ T5932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.744946][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.756987][ T10] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 311.769170][ T8889] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 311.771594][ T5954] usb 2-1: USB disconnect, device number 27 [ 311.782548][ T5932] usb 1-1: Product: syz [ 311.786837][ T5932] usb 1-1: Manufacturer: syz [ 311.801041][ T2971] vhci_hcd: stop threads [ 311.807015][ T5932] usb 1-1: SerialNumber: syz [ 311.812595][ T2971] vhci_hcd: release socket [ 311.824680][ T2971] vhci_hcd: disconnect device [ 311.843816][ T10] usb 3-1: USB disconnect, device number 21 [ 311.893090][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 312.048520][ T8896] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 312.111520][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 312.655830][ T8923] bridge0: entered allmulticast mode [ 312.686298][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 312.720023][ T8923] bridge_slave_1: left allmulticast mode [ 312.725989][ T8896] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 312.746197][ T8923] bridge_slave_1: left promiscuous mode [ 312.763751][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.870432][ T8923] bridge_slave_0: left allmulticast mode [ 312.904575][ T8923] bridge_slave_0: left promiscuous mode [ 312.940947][ T5932] cdc_ncm 1-1:1.0: bind() failure [ 312.966133][ T5932] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 312.998636][ T5932] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 313.017026][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.067289][ T5932] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 313.110569][ T5932] usb 1-1: USB disconnect, device number 22 [ 313.319891][ T8923] bridge0 (unregistering): left allmulticast mode [ 313.814127][ T8940] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 313.990578][ T8940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.145206][ T8948] bond1: (slave gretap1): making interface the new active one [ 314.232367][ T8948] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 314.268829][ T8954] syzkaller1: entered promiscuous mode [ 314.276756][ T8954] syzkaller1: entered allmulticast mode [ 314.868738][ T8321] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.038499][ T8321] usb 5-1: Using ep0 maxpacket: 8 [ 315.103734][ T8321] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 315.141602][ T8321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.172429][ T8321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.217280][ T8321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.257355][ T8321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.297162][ T8321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.333774][ T8321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.700616][ T8321] usb 5-1: GET_CAPABILITIES returned 0 [ 315.706190][ T8321] usbtmc 5-1:16.0: can't read capabilities [ 316.052620][ T8965] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 316.098517][ T8321] usb 5-1: USB disconnect, device number 19 [ 316.367596][ T5932] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.417570][ T43] vhci_hcd: vhci_device speed not set [ 316.746569][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.870362][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.921531][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.011145][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.044905][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.075516][ T5932] usb 1-1: config 0 descriptor?? [ 317.398646][ T9020] netlink: 148 bytes leftover after parsing attributes in process `syz.4.862'. [ 317.487488][ T5954] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 317.578037][ T5932] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 317.722628][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.735285][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.745835][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.812451][ T5954] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.828847][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.888662][ T5954] usb 3-1: config 0 descriptor?? [ 318.317553][ T5954] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 318.439836][ T5954] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.984429][ T8321] usb 3-1: USB disconnect, device number 22 [ 319.714312][ T43] usb 1-1: USB disconnect, device number 23 [ 319.837790][ T9061] netlink: 148 bytes leftover after parsing attributes in process `syz.2.871'. [ 320.366425][ T9073] netlink: 148 bytes leftover after parsing attributes in process `syz.3.875'. [ 320.440540][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.447568][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.527002][ T9076] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 320.553960][ T9076] macsec1: entered allmulticast mode [ 320.572462][ T9076] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 320.706991][ T9076] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 320.714690][ T9076] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 320.751951][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 320.783463][ T9083] netlink: 148 bytes leftover after parsing attributes in process `syz.1.877'. [ 321.457236][ T5932] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.607394][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 321.618168][ T5932] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 321.633359][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.664079][ T5932] usb 5-1: config 0 has no interface number 1 [ 321.697417][ T5932] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 321.779898][ T5932] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 321.804928][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.851424][ T5932] usb 5-1: Product: syz [ 321.866173][ T5932] usb 5-1: Manufacturer: syz [ 321.886541][ T5932] usb 5-1: SerialNumber: syz [ 321.915772][ T5932] usb 5-1: config 0 descriptor?? [ 321.980889][ T5932] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 322.654717][ T2343] pvrusb2: Invalid write control endpoint [ 322.654953][ T5932] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 322.681977][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 322.717192][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 322.744064][ T5932] usb 5-1: USB disconnect, device number 20 [ 322.988033][ T9107] syzkaller1: entered promiscuous mode [ 322.994292][ T9107] syzkaller1: entered allmulticast mode [ 323.167256][ T5862] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 323.339864][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 323.372091][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.392444][ T5862] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 323.417202][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.462931][ T5862] usb 4-1: config 0 descriptor?? [ 323.471336][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 323.570249][ T9125] netlink: 148 bytes leftover after parsing attributes in process `syz.1.892'. [ 323.871045][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 323.884196][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 323.934480][ T5862] usb 4-1: USB disconnect, device number 24 [ 324.410724][ T9139] netlink: 148 bytes leftover after parsing attributes in process `syz.2.897'. [ 324.885153][ T9152] @: renamed from vlan0 [ 325.952177][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 326.094859][ T9166] bond0: (slave bond_slave_1): Releasing backup interface [ 327.286121][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 327.395096][ T9199] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 327.434916][ T9201] syzkaller0: entered promiscuous mode [ 327.469167][ T9201] syzkaller0: entered allmulticast mode [ 328.462969][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 330.395517][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 330.745046][ T9266] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.941'. [ 330.770861][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 330.978615][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.940'. [ 331.536474][ T9284] syzkaller0: entered promiscuous mode [ 331.574259][ T9284] syzkaller0: entered allmulticast mode [ 332.247278][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 332.417317][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 332.441220][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.452736][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.475143][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.489371][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.507264][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.557274][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.717988][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 333.082577][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 333.092820][ T10] usbtmc 3-1:16.0: can't read capabilities [ 333.135483][ T10] usb 3-1: USB disconnect, device number 23 [ 333.160592][ T5954] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.183033][ T5954] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.206314][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.244151][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 333.280633][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 333.328367][ T5954] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.349843][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.374399][ T5954] usb 1-1: Product: syz [ 333.385633][ T5954] usb 1-1: Manufacturer: syz [ 333.407006][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 333.425117][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 333.466361][ T5954] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 333.492442][ T5954] cdc_wdm 1-1:1.0: Unknown control protocol [ 333.714946][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 333.777741][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.784701][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.793120][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.799923][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.806243][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.812963][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.819254][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.825964][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.832836][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.839537][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.845880][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.852607][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.858963][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.865778][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.872462][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.879063][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.885457][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.892060][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.898383][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 333.905220][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 333.911706][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 333.920505][ T5954] usb 1-1: USB disconnect, device number 24 [ 334.007280][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 334.037158][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 334.046151][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 334.081016][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.305098][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.314421][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.381427][ T10] usb 2-1: Product: syz [ 334.445161][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'. [ 334.544470][ T10] usb 2-1: Manufacturer: syz [ 334.560484][ T10] usb 2-1: SerialNumber: syz [ 334.934919][ T10] usb 2-1: 0:2 : does not exist [ 335.056416][ T10] usb 2-1: USB disconnect, device number 28 [ 335.634206][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 336.269331][ T9361] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 336.300797][ T9361] macsec1: entered allmulticast mode [ 336.334633][ T9361] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 336.437780][ T9361] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 336.445515][ T9361] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 336.561300][ T9367] syzkaller1: entered promiscuous mode [ 336.659232][ T9367] syzkaller1: entered allmulticast mode [ 337.226243][ T9380] netlink: 148 bytes leftover after parsing attributes in process `syz.3.973'. [ 337.588775][ T9392] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 337.616269][ T9392] macsec1: entered allmulticast mode [ 337.625653][ T9392] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 337.689203][ T9395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'. [ 337.716150][ T9392] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 337.727513][ T9392] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 338.391805][ T9412] netlink: 148 bytes leftover after parsing attributes in process `syz.1.983'. [ 339.621495][ T9432] macsec1: entered allmulticast mode [ 339.626951][ T9432] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 339.662304][ T9432] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 340.038732][ T9442] syz_tun: entered allmulticast mode [ 340.127523][ T9446] netlink: 148 bytes leftover after parsing attributes in process `syz.0.994'. [ 340.206135][ T9442] dvmrp8: entered allmulticast mode [ 340.281715][ T9441] syz_tun: left allmulticast mode [ 340.315984][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 340.750613][ T8321] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 340.886175][ T8321] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.264885][ T9483] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1003'. [ 342.897231][ T5862] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 343.053825][ T5862] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 343.071013][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.096196][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 343.106594][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.115864][ T5862] usb 1-1: Product: syz [ 343.140367][ T5862] usb 1-1: Manufacturer: syz [ 343.167579][ T5862] usb 1-1: SerialNumber: syz [ 343.199179][ T5862] usb 1-1: config 0 descriptor?? [ 343.493022][ T5862] hso 1-1:0.0: Failed to find INT IN ep [ 343.499997][ T5862] usb-storage 1-1:0.0: USB Mass Storage device detected [ 343.582986][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 343.700880][ T5862] usb 1-1: USB disconnect, device number 25 [ 344.268970][ T9511] macsec1: entered allmulticast mode [ 344.274526][ T9511] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 344.305045][ T9511] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 346.071265][ T9549] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 346.133481][ T9549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.345980][ T9549] bond2: (slave ip6erspan0): making interface the new active one [ 346.371026][ T9549] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 346.739270][ T9554] syz_tun: entered allmulticast mode [ 346.749929][ T9554] syz_tun: left allmulticast mode [ 347.604977][ T9582] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 347.612702][ T9582] macsec1: entered allmulticast mode [ 347.619098][ T9582] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 347.727624][ T9582] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 347.741386][ T9582] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 348.953403][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1039'. [ 348.964609][ T9607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1039'. [ 349.526348][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'. [ 350.626854][ T9616] warning: `syz.3.1041' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 352.977566][ T9635] binder: 9634:9635 ioctl c0306201 2000000003c0 returned -14 [ 353.688019][ T9661] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1054'. [ 354.808222][ T9672] kvm: pic: non byte write [ 355.168694][ T9675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1058'. [ 355.319870][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 355.750264][ T9682] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1061'. [ 355.879150][ T9682] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1061'. [ 356.399664][ T9695] binder: 9694:9695 ioctl 4018620d 0 returned -22 [ 357.901641][ T9723] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1071'. [ 358.856769][ T9737] binder_alloc: 9736: pid 9736 spamming oneway? 1 buffers allocated for a total size of 4096 [ 358.869735][ T9737] binder_alloc: 9736: pid 9736 spamming oneway? 2 buffers allocated for a total size of 5120 [ 359.406832][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1077'. [ 359.846572][ T9747] tipc: Enabled bearer , priority 0 [ 359.894822][ T9747] syzkaller0: entered promiscuous mode [ 359.931613][ T9747] syzkaller0: entered allmulticast mode [ 359.997620][ T9746] tipc: Resetting bearer [ 360.067403][ T8321] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 360.114245][ T9746] tipc: Disabling bearer [ 360.209994][ T9758] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 360.249540][ T8321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.276243][ T8321] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.340086][ T8321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.396583][ T8321] usb 1-1: config 0 descriptor?? [ 360.408427][ T9763] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1085'. [ 360.839908][ T8321] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 360.852919][ T8321] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001B/input/input19 [ 360.964240][ T8321] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 361.007923][ T5954] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 361.188433][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 361.210919][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.260545][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.322981][ T5954] usb 3-1: Product: syz [ 361.353577][ T5954] usb 3-1: Manufacturer: syz [ 361.366177][ T5954] usb 3-1: SerialNumber: syz [ 361.378226][ T5954] usb 3-1: config 0 descriptor?? [ 361.617473][ T5954] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.756528][ T9797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.232435][ T5862] usb 1-1: USB disconnect, device number 26 [ 363.527389][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 363.692286][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 363.723096][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.781174][ T5954] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 363.791115][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 363.810746][ T5954] usb 3-1: USB disconnect, device number 24 [ 363.837143][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.894154][ T9] usb 2-1: config 0 descriptor?? [ 364.476028][ T9] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 364.529735][ T9] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 364.537054][ T9] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 364.588820][ T9] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 364.699489][ T9] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 364.827706][ T9] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 364.883083][ T9] koneplus 0003:1E7D:2D51.001C: couldn't init struct koneplus_device [ 364.975195][ T9] koneplus 0003:1E7D:2D51.001C: couldn't install mouse [ 365.016412][ T9] koneplus 0003:1E7D:2D51.001C: probe with driver koneplus failed with error -71 [ 365.080806][ T9] usb 2-1: USB disconnect, device number 29 [ 365.268711][ T9823] fido_id[9823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory Stopping sshd: [ 365.615152][ T9830] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 365.721005][ T9837] fuse: Unknown parameter '00000000000000000003' stopped /usr/sbin/sshd (pid 5625) OK [ 366.118136][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 366.152113][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 366.207905][ T9846] netlink: 'syz.0.1108': attribute type 1 has an invalid length. Stopping crond: [ 366.225294][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. stopped /usr/sbin/crond (pid 5605) OK [ 366.431614][ T9852] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 366.448334][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 366.556764][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'. [ 366.712418][ T9846] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 366.789489][ T9846] bond1 (unregistering): Released all slaves Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5528) [ 367.648096][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. Stopping network: OK Stopping iptables: modprobe: can't change directory to '6.16.0-syzkaller-12063-g37816488247d': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL [ 372.089666][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. Stopping system message bus: [ 372.812220][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 373.697264][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 373.719318][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 373.784162][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 373.824839][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 373.877702][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.946172][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 373.992082][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 374.087409][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 374.149181][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.230094][ T10] usb 4-1: config 0 descriptor?? done [ 374.451144][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 374.547424][ T10] usb 4-1: USB disconnect, device number 25 [ 374.600751][ T10] usblp0: removed [ 374.691963][ T9991] binder: 9986:9991 unknown command 0 [ 374.776723][ T9991] binder: 9986:9991 ioctl c0306201 200000000c40 returned -22 [ 375.017177][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 375.080621][ T9999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 375.132416][ T9999] kvm: pic: single mode not supported [ 375.132772][ T9999] kvm: pic: non byte read [ 375.133231][ T9999] kvm: pic: level sensitive irq not supported [ 375.133301][ T9999] kvm: pic: non byte read [ 375.174223][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 375.179057][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 375.179088][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 375.179117][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 375.179161][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.179184][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.179208][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 375.179249][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 375.179271][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.182383][ T10] usb 4-1: config 0 descriptor?? [ 375.409822][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 375.410780][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.420933][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.442704][ T10] usb 4-1: USB disconnect, device number 26 [ 375.473867][ T10] usblp0: removed [ 376.464497][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. Stopping klogd: OK [ 377.168094][ T5862] usb 3-1: new high-speed USB device number 25 using dummy_hcd Stopping acpid: [ 377.777016][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. OK Stopping syslogd: [ 379.576486][ T8321] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 379.630998][ T8321] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 stopped /sbin/syslogd (pid 5216) OK [ 380.561727][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 380.878285][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 380.969507][T10084] tipc: Enabled bearer , priority 0 [ 380.983009][T10086] syzkaller0: entered promiscuous mode [ 380.991233][T10086] syzkaller0: entered allmulticast mode [ 381.317905][T10086] tipc: Resetting bearer [ 381.352173][T10082] tipc: Resetting bearer [ 381.479513][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 381.504505][T10082] tipc: Disabling bearer umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 381.887008][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.893967][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.077652][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 382.253560][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 382.302641][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 382.323979][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.347191][ T10] usb 3-1: Product: syz [ 382.362145][ T10] usb 3-1: Manufacturer: syz [ 382.378028][ T10] usb 3-1: SerialNumber: syz [ 382.400039][ T10] usb 3-1: config 0 descriptor?? umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only [ 382.419135][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 382.768716][ T5234] udevd[5234]: could not touch /run/udev/queue: Read-only file system Connection to 10.128.1.46 closed by remote host. [ 382.904340][ T10] gspca_sonixj: reg_r err -71 [ 382.927209][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 382.988428][ T10] usb 3-1: USB disconnect, device number 26 Sent SIGKILL to all processes Requesting system poweroff [ 384.480332][ T211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.877594][ T211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.950605][ T211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.037514][ T211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.088849][ T2343] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 385.098821][ T2343] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 385.109029][ T2343] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 385.118972][ T2343] pvrusb2: Failure uploading firmware1 [ 385.124685][ T2343] pvrusb2: Device initialization was not successful. [ 385.131909][ T2343] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 385.142564][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 385.144324][ T5932] pvrusb2: Device being rendered inoperable [ 385.152373][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 385.153359][ T2343] ------------[ cut here ]------------ [ 385.172987][ T2343] WARNING: CPU: 1 PID: 2343 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 385.184841][ T2343] Modules linked in: [ 385.189518][ T2343] CPU: 1 UID: 0 PID: 2343 Comm: pvrusb2-context Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 385.201721][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.213793][ T2343] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 385.220412][ T2343] Code: ba fb e9 5d fc ff ff e8 c8 3a ba fb c6 05 79 cd 87 09 01 48 c7 c7 c0 7b 0a 8c e8 35 2e 22 fb e9 85 fc ff ff e8 ab 3a ba fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 7c 0a 8c 4c 89 e2 e8 55 21 27 fb e9 [ 385.240365][ T2343] RSP: 0018:ffffc900047775d0 EFLAGS: 00010293 [ 385.246499][ T2343] RAX: ffffffff86057105 RBX: dffffc0000000000 RCX: ffff888029b73c00 [ 385.254547][ T2343] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 385.262625][ T2343] RBP: 0000000000000001 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 385.270848][ T2343] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8c635280 [ 385.278920][ T2343] R13: 0000000000001770 R14: ffff888054a5f0b0 R15: 00000000fffffff5 [ 385.287148][ T2343] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 385.296193][ T2343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.302875][ T2343] CR2: 0000200000404030 CR3: 0000000033e46000 CR4: 00000000003526f0 [ 385.311029][ T2343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.319385][ T2343] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 385.327624][ T2343] Call Trace: [ 385.330921][ T2343] [ 385.333871][ T2343] ? kmem_cache_free+0x18f/0x400 [ 385.339076][ T2343] ? _request_firmware+0x6be/0x15b0 [ 385.344406][ T2343] _request_firmware+0xf83/0x15b0 [ 385.350098][ T2343] ? __lock_acquire+0xab9/0xd20 [ 385.355182][ T2343] ? __pfx__request_firmware+0x10/0x10 [ 385.360790][ T2343] ? rcu_is_watching+0x15/0xb0 [ 385.365614][ T2343] ? trace_contention_end+0x39/0x120 [ 385.370975][ T2343] ? __mutex_lock+0x335/0x1360 [ 385.376276][ T2343] request_firmware+0x36/0x50 [ 385.381169][ T2343] pvr2_locate_firmware+0xb3/0x500 [ 385.386335][ T2343] pvr2_upload_firmware1+0x1b4/0x900 [ 385.391808][ T2343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.398255][ T2343] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 385.404121][ T2343] pvr2_hdw_initialize+0x3df/0x3ac0 [ 385.409352][ T2343] ? __lock_acquire+0xab9/0xd20 [ 385.414226][ T2343] ? __mutex_trylock_common+0x153/0x260 [ 385.419868][ T2343] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 385.425659][ T2343] ? rcu_is_watching+0x15/0xb0 [ 385.430462][ T2343] ? trace_contention_end+0x39/0x120 [ 385.435781][ T2343] ? pvr2_context_thread_func+0x263/0xaf0 [ 385.441668][ T2343] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 385.447339][ T2343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.453331][ T2343] ? schedule+0x91/0x360 [ 385.457658][ T2343] ? schedule+0x16f/0x360 [ 385.462026][ T2343] pvr2_context_thread_func+0x487/0xaf0 [ 385.467824][ T2343] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 385.473993][ T2343] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 385.479945][ T2343] ? __pfx_autoremove_wake_function+0x10/0x10 [ 385.486062][ T2343] ? __kthread_parkme+0x7b/0x200 [ 385.491047][ T2343] ? __kthread_parkme+0x1a1/0x200 [ 385.496069][ T2343] kthread+0x70e/0x8a0 [ 385.500257][ T2343] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 385.506492][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.511171][ T2343] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.516378][ T2343] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.521613][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.526629][ T2343] ret_from_fork+0x3fc/0x770 [ 385.531318][ T2343] ? __pfx_ret_from_fork+0x10/0x10 [ 385.536453][ T2343] ? __switch_to_asm+0x39/0x70 [ 385.541249][ T2343] ? __switch_to_asm+0x33/0x70 [ 385.545999][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.550636][ T2343] ret_from_fork_asm+0x1a/0x30 [ 385.555434][ T2343] [ 385.558484][ T2343] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 385.565822][ T2343] CPU: 1 UID: 0 PID: 2343 Comm: pvrusb2-context Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 385.577960][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.588010][ T2343] Call Trace: [ 385.591462][ T2343] [ 385.594529][ T2343] dump_stack_lvl+0x99/0x250 [ 385.599556][ T2343] ? __asan_memcpy+0x40/0x70 [ 385.604185][ T2343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.609933][ T2343] ? __pfx__printk+0x10/0x10 [ 385.614657][ T2343] vpanic+0x281/0x750 [ 385.618650][ T2343] ? __pfx__printk+0x10/0x10 [ 385.623246][ T2343] ? __pfx_vpanic+0x10/0x10 [ 385.627767][ T2343] ? is_bpf_text_address+0x292/0x2b0 [ 385.633061][ T2343] panic+0xb9/0xc0 [ 385.636945][ T2343] ? __pfx_panic+0x10/0x10 [ 385.641382][ T2343] __warn+0x31b/0x4b0 [ 385.645477][ T2343] ? firmware_fallback_sysfs+0x746/0x9b0 [ 385.651141][ T2343] ? firmware_fallback_sysfs+0x746/0x9b0 [ 385.656802][ T2343] report_bug+0x2be/0x4f0 [ 385.661156][ T2343] ? firmware_fallback_sysfs+0x746/0x9b0 [ 385.666996][ T2343] ? firmware_fallback_sysfs+0x746/0x9b0 [ 385.673271][ T2343] ? firmware_fallback_sysfs+0x748/0x9b0 [ 385.679004][ T2343] handle_bug+0x84/0x160 [ 385.683316][ T2343] exc_invalid_op+0x1a/0x50 [ 385.687829][ T2343] asm_exc_invalid_op+0x1a/0x20 [ 385.692680][ T2343] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 385.698918][ T2343] Code: ba fb e9 5d fc ff ff e8 c8 3a ba fb c6 05 79 cd 87 09 01 48 c7 c7 c0 7b 0a 8c e8 35 2e 22 fb e9 85 fc ff ff e8 ab 3a ba fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 7c 0a 8c 4c 89 e2 e8 55 21 27 fb e9 [ 385.718616][ T2343] RSP: 0018:ffffc900047775d0 EFLAGS: 00010293 [ 385.724803][ T2343] RAX: ffffffff86057105 RBX: dffffc0000000000 RCX: ffff888029b73c00 [ 385.732764][ T2343] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 385.740754][ T2343] RBP: 0000000000000001 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 385.748759][ T2343] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8c635280 [ 385.756735][ T2343] R13: 0000000000001770 R14: ffff888054a5f0b0 R15: 00000000fffffff5 [ 385.764742][ T2343] ? firmware_fallback_sysfs+0x745/0x9b0 [ 385.770490][ T2343] ? kmem_cache_free+0x18f/0x400 [ 385.775487][ T2343] ? _request_firmware+0x6be/0x15b0 [ 385.780740][ T2343] _request_firmware+0xf83/0x15b0 [ 385.785881][ T2343] ? __lock_acquire+0xab9/0xd20 [ 385.790762][ T2343] ? __pfx__request_firmware+0x10/0x10 [ 385.796219][ T2343] ? rcu_is_watching+0x15/0xb0 [ 385.800975][ T2343] ? trace_contention_end+0x39/0x120 [ 385.806253][ T2343] ? __mutex_lock+0x335/0x1360 [ 385.811036][ T2343] request_firmware+0x36/0x50 [ 385.816205][ T2343] pvr2_locate_firmware+0xb3/0x500 [ 385.821341][ T2343] pvr2_upload_firmware1+0x1b4/0x900 [ 385.826664][ T2343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.832640][ T2343] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 385.838540][ T2343] pvr2_hdw_initialize+0x3df/0x3ac0 [ 385.843907][ T2343] ? __lock_acquire+0xab9/0xd20 [ 385.848781][ T2343] ? __mutex_trylock_common+0x153/0x260 [ 385.854340][ T2343] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 385.859976][ T2343] ? rcu_is_watching+0x15/0xb0 [ 385.864740][ T2343] ? trace_contention_end+0x39/0x120 [ 385.870026][ T2343] ? pvr2_context_thread_func+0x263/0xaf0 [ 385.875938][ T2343] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 385.881589][ T2343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.887929][ T2343] ? schedule+0x91/0x360 [ 385.892321][ T2343] ? schedule+0x16f/0x360 [ 385.896690][ T2343] pvr2_context_thread_func+0x487/0xaf0 [ 385.902346][ T2343] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 385.908415][ T2343] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 385.914430][ T2343] ? __pfx_autoremove_wake_function+0x10/0x10 [ 385.920527][ T2343] ? __kthread_parkme+0x7b/0x200 [ 385.925558][ T2343] ? __kthread_parkme+0x1a1/0x200 [ 385.930611][ T2343] kthread+0x70e/0x8a0 [ 385.934820][ T2343] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 385.940888][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.945500][ T2343] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.950695][ T2343] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.955916][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.960532][ T2343] ret_from_fork+0x3fc/0x770 [ 385.965124][ T2343] ? __pfx_ret_from_fork+0x10/0x10 [ 385.970491][ T2343] ? __switch_to_asm+0x39/0x70 [ 385.975681][ T2343] ? __switch_to_asm+0x33/0x70 [ 385.980549][ T2343] ? __pfx_kthread+0x10/0x10 [ 385.985526][ T2343] ret_from_fork_asm+0x1a/0x30 [ 385.990300][ T2343] [ 385.993620][ T2343] Kernel Offset: disabled [ 385.998046][ T2343] Rebooting in 86400 seconds..