last executing test programs: 4m0.218658583s ago: executing program 2 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 4m0.014603605s ago: executing program 2 (id=79): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r2 = dup(r1) ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0) 3m58.045077863s ago: executing program 2 (id=92): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000040)="7ef17527c5c0f635b818aa60aa81203703e5f2322a4f51d378be49dc5effbe6de21744ccc1db54aa40f8fd2d620cb802cf191cce324acbf1204cd327ce") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1eace2d0fb0a010000000000000000030001000000008000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x400004]}}) 3m57.757511849s ago: executing program 2 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 3m57.212434555s ago: executing program 2 (id=100): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 3m56.677250569s ago: executing program 2 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 3m56.057072637s ago: executing program 32 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 3m32.672804096s ago: executing program 3 (id=230): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x0, 0x1, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 3m32.359026538s ago: executing program 3 (id=233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) listen(r0, 0xa) 3m32.14541843s ago: executing program 3 (id=234): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200c2, 0x37) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000400010046) 3m31.746730707s ago: executing program 3 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) symlink(0x0, &(0x7f00000017c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x245) 3m31.435755243s ago: executing program 3 (id=242): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x40000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x2, 0x51, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x2, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x4], [0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x6d, 0x5, 0x0, 0x0, 0x0, 0x80, 0x4, 0xfffffffc, 0x3, 0x0, 0x7, 0x8f3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3m31.184578436s ago: executing program 3 (id=245): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 3m30.633048116s ago: executing program 33 (id=245): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 7.191055528s ago: executing program 1 (id=1610): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x18, &(0x7f0000000000)={0x0, 0x10, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) 7.036326594s ago: executing program 0 (id=1611): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2, 0x400005}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x100}, &(0x7f00000001c0)=0x8) 5.905147614s ago: executing program 0 (id=1616): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x202, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x9, 0x5, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 5.32054828s ago: executing program 6 (id=1622): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}, 0x9}], 0x1, 0x40002000, 0x0) 4.57297746s ago: executing program 5 (id=1623): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 4.404639308s ago: executing program 0 (id=1624): unshare(0x22020600) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.276551289s ago: executing program 5 (id=1626): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="0100000000080000000012"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20040010) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)) 3.872692268s ago: executing program 4 (id=1627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 3.813093236s ago: executing program 1 (id=1628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002d40)={0x1, 0x1}, 0x8) 3.800485529s ago: executing program 5 (id=1629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x7c45, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.59849376s ago: executing program 4 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) 3.497626096s ago: executing program 6 (id=1631): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.03537173s ago: executing program 6 (id=1632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000001280)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0xfffffffffffffffe, {0x4000, 0x0, 0x0, 0xffffffff}}, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000240)={0x0, "ad7f514df1331181c31a6872dfbd1c13"}) 2.945426405s ago: executing program 4 (id=1633): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.725017103s ago: executing program 5 (id=1634): socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX], 0x20) 2.609199891s ago: executing program 5 (id=1635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4008c001) 2.549900092s ago: executing program 6 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x3, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4, 0x0, '\x00', 0x5}, {0x5, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0x85, 0xbe}, {0x0, 0x6, 0x0, '\x00', 0xeb}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0xfe, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xff, 0x1, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe}]}}) 2.329105721s ago: executing program 1 (id=1637): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.27417169s ago: executing program 1 (id=1638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f0000000000)) 2.035793817s ago: executing program 1 (id=1639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x8000000000000000, 0x10, 0x2, 0x1, 0x4, 0x2, 0x4, 0x401, 0x1000, 0x8, 0x3, 0x9, 0x8000, 0x5, 0x10000], 0x2000, 0x2300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.662331098s ago: executing program 5 (id=1640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1.662140144s ago: executing program 4 (id=1641): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_uring_setup(0x6b6, &(0x7f0000000000)={0x0, 0xf324, 0x40, 0x2, 0xb9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001100)) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 1.540627471s ago: executing program 0 (id=1642): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 1.271039194s ago: executing program 4 (id=1643): syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00000e7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000100)="653664f36764de6f000f090f01b70d0064f30fc731670fc71c187875260f30baf80c66b8aabad58d66efbafc0cb000ee660f3880340fc77e00", 0x39}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.12938564s ago: executing program 6 (id=1644): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 704.251037ms ago: executing program 4 (id=1645): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mount$fuseblk(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x200480, 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x0, 0x0, 0xfffffffffffffff7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 702.861184ms ago: executing program 1 (id=1655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) mknod(0x0, 0x8001420, 0x4) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) 462.012479ms ago: executing program 0 (id=1646): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 220.067144ms ago: executing program 0 (id=1647): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000340)={0x40, 0x9, 0x3c, {0x3c, 0x2, "aa89854891171a9f95a0f1049787b426406c4c591f6616bb302c306a9070841a4c68680b633c3ec1de9cf78ecf571e4d593ef7221fab8e75b853"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=1648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0xffff, 0x2, r3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): etables:0kB all_unreclaimable? no Balloon:0kB [ 206.526837][ T8421] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.563644][ T5918] usb 2-1: config 0 descriptor?? [ 206.619601][ T8421] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 206.634247][ T8421] Node 0 DMA32 free:1350272kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26952kB inactive_anon:0kB active_file:5660kB inactive_file:157404kB unevictable:1536kB writepending:716kB present:3129332kB managed:2561028kB mlocked:0kB bounce:0kB free_pcp:35924kB local_pcp:15128kB free_cma:0kB [ 206.702078][ T8421] lowmem_reserve[]: 0 0 1 1 1 [ 206.706986][ T8421] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 206.773449][ T8421] lowmem_reserve[]: 0 0 0 0 0 [ 206.778291][ T8421] Node 1 Normal free:3900316kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:12544kB free_cma:0kB [ 206.841946][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 206.869807][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.878005][ T8421] lowmem_reserve[]: 0 0 0 0 0 [ 206.878067][ T8421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.917404][ T5918] usb 2-1: USB disconnect, device number 12 [ 206.965738][ T8421] Node 0 DMA32: 515*4kB (UME) 231*8kB (UM) 127*16kB (UM) 74*32kB (UM) 35*64kB (UM) 23*128kB (UME) 5*256kB (M) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 325*4096kB (UM) = 1350068kB [ 207.021823][ T8421] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 207.082281][ T8421] Node 1 Normal: 215*4kB (UM) 54*8kB (UME) 35*16kB (UME) 113*32kB (UME) 29*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 949*4096kB (M) = 3900316kB [ 207.116055][ T8421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.126155][ T8421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.154381][ T8421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.178600][ T8421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.205045][ T8421] 42661 total pagecache pages [ 207.219619][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 207.236997][ T8421] 0 pages in swap cache [ 207.241326][ T8421] Free swap = 124996kB [ 207.249263][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 207.262381][ T8421] Total swap = 124996kB [ 207.266804][ T8421] 2097051 pages RAM [ 207.287984][ T8421] 0 pages HighMem/MovableOnly [ 207.300077][ T8421] 424688 pages reserved [ 207.304630][ T8421] 0 pages cma reserved [ 207.441921][ T5918] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 207.609959][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 207.625875][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.637662][ T5918] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 207.651428][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.663639][ T5918] usb 2-1: config 0 descriptor?? [ 207.677079][ T5918] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 207.702729][ T5918] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 208.072125][ T5918] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 208.192997][ T5887] usb 2-1: USB disconnect, device number 13 [ 208.221215][ T5887] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 208.242216][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 208.266615][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 208.291876][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 208.332959][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 208.367285][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 208.379095][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 208.395258][ T5918] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 208.421898][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.439159][ T5918] usb 7-1: Product: syz [ 208.447370][ T5918] usb 7-1: Manufacturer: syz [ 208.455322][ T5918] usb 7-1: SerialNumber: syz [ 208.470172][ T5918] usb 7-1: config 0 descriptor?? [ 208.480812][ T8471] syzkaller1: entered promiscuous mode [ 208.486797][ T8471] syzkaller1: entered allmulticast mode [ 208.628309][ T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.654011][ T24] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.655132][ T5909] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 208.838766][ T5909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.866158][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.894057][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.907434][ T5909] usb 1-1: Product: syz [ 208.911672][ T5909] usb 1-1: Manufacturer: syz [ 208.920348][ T5909] usb 1-1: SerialNumber: syz [ 208.921469][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 208.942042][ T5887] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 208.953189][ T5918] input input11: Device does not respond to id packet M [ 208.972429][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 208.981904][ T5918] input input11: Device does not respond to id packet P [ 209.000152][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 209.006780][ T5918] input input11: Device does not respond to id packet B [ 209.028052][ T5918] input input11: Limiting number of effects to 32 (device reports 101) [ 209.132240][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 209.149473][ T5887] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 209.170205][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.191954][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.201555][ T5909] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 209.223371][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.243080][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 209.271013][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 209.272193][ T5909] usb 1-1: USB disconnect, device number 9 [ 209.280847][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.306616][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.316051][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 209.330699][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.333596][ T5909] usblp0: removed [ 209.339402][ T5918] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 209.368112][ T5918] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input11 [ 209.453540][ T5918] usb 7-1: USB disconnect, device number 9 [ 209.468145][ T5189] iforce 7-1:0.0: usb_submit_urb failed -19 [ 209.508123][ T5189] iforce 7-1:0.0: usb_submit_urb failed -19 [ 209.619469][ T5887] usb 6-1: GET_CAPABILITIES returned 0 [ 209.645516][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 209.990297][ T8477] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 209.996856][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.012283][ T5918] usb 6-1: USB disconnect, device number 11 [ 210.029460][ T8496] macvlan2: entered promiscuous mode [ 210.066630][ T8496] bond_slave_0: entered promiscuous mode [ 210.072678][ T8496] bond_slave_1: entered promiscuous mode [ 210.131978][ T8496] bond0: entered promiscuous mode [ 210.144444][ T8496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.179270][ T8496] team0: Port device macvlan2 added [ 210.193665][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 210.223604][ T5909] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 210.262502][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.296514][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.319333][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.349939][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.388180][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.400173][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.642005][ T5909] usb 2-1: GET_CAPABILITIES returned 0 [ 210.647608][ T5909] usbtmc 2-1:16.0: can't read capabilities [ 210.714145][ T8511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4093662463 (4093662463 ns) > initial count (1099723850 ns). Using initial count to start timer. [ 211.032274][ T8491] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 211.032734][ T5918] usb 2-1: USB disconnect, device number 14 [ 211.226297][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 211.513805][ T5902] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 211.686907][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 211.698302][ T5902] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 211.730231][ T5902] usb 7-1: config 0 has no interface number 0 [ 211.756147][ T5902] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 211.788811][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.826267][ T5902] usb 7-1: Product: syz [ 211.830525][ T5902] usb 7-1: Manufacturer: syz [ 211.862839][ T5902] usb 7-1: SerialNumber: syz [ 211.874514][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.882881][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 211.900237][ T5902] usb 7-1: config 0 descriptor?? [ 211.984855][ T5902] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 212.262270][ T917] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.329916][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 212.425432][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.459341][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.476042][ T917] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 212.487415][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.524091][ T8567] netlink: 112 bytes leftover after parsing attributes in process `syz.1.762'. [ 212.544583][ T917] usb 1-1: config 0 descriptor?? [ 213.004271][ T917] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 213.032919][ T917] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 213.088795][ T8580] macvlan2: entered promiscuous mode [ 213.114818][ T8580] bond_slave_1: entered promiscuous mode [ 213.120759][ T8580] bond0: entered promiscuous mode [ 213.178591][ T917] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 213.181137][ T8580] bond_slave_0: entered promiscuous mode [ 213.279484][ T8580] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.294257][ T8580] team0: Port device macvlan2 added [ 213.407728][ T5902] gspca_topro: reg_r err -71 [ 213.425943][ T5902] gspca_topro: Sensor soi763a [ 213.482102][ T5902] usb 7-1: USB disconnect, device number 10 [ 213.927794][ T8596] input: syz0 as /devices/virtual/input/input12 [ 214.023627][ T5918] usb 1-1: USB disconnect, device number 10 [ 214.552093][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.735791][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 214.776540][ T5887] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 214.817370][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.846127][ T5887] usb 2-1: Product: syz [ 214.850389][ T5887] usb 2-1: Manufacturer: syz [ 214.870620][ T5887] usb 2-1: SerialNumber: syz [ 214.897659][ T5887] usb 2-1: config 0 descriptor?? [ 214.933913][ T5887] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 215.083343][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'. [ 215.112025][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.277956][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 215.309312][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 215.346287][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 215.376318][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 215.389425][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 215.422473][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 215.440548][ T24] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 215.450319][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.458830][ T24] usb 5-1: Product: syz [ 215.463285][ T24] usb 5-1: Manufacturer: syz [ 215.467953][ T24] usb 5-1: SerialNumber: syz [ 215.476560][ T24] usb 5-1: config 0 descriptor?? [ 215.542827][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 215.591915][ T5902] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 215.734467][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.744692][ T5902] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 215.751497][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.765968][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.777845][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.782332][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.789352][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.802661][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.820552][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.826170][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.835652][ T43] usb 7-1: config 0 descriptor?? [ 215.853148][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.864404][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.873256][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.883074][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.896033][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.904578][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.916663][ T24] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 215.916985][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.923278][ T24] input input13: Device does not respond to id packet M [ 215.938910][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.942383][ T24] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 215.950115][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.961978][ T24] input input13: Device does not respond to id packet P [ 215.963264][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.971198][ T24] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 215.982149][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.996373][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.998601][ T24] input input13: Device does not respond to id packet B [ 216.006071][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.026998][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 216.033626][ T24] input input13: Limiting number of effects to 32 (device reports 101) [ 216.044296][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.053521][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.064772][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 216.073124][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.082348][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.094801][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 216.104592][ T5902] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.115110][ T5902] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.125092][ T5902] usb 6-1: Product: syz [ 216.129395][ T5902] usb 6-1: Manufacturer: syz [ 216.134507][ T5902] usb 6-1: SerialNumber: syz [ 216.142518][ T5902] usb 6-1: config 0 descriptor?? [ 216.158970][ T5902] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.235475][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 216.243809][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 216.252549][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 216.259086][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 216.277437][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 216.290911][ T43] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 216.317017][ T43] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 216.355140][ T24] usb 5-1: USB disconnect, device number 10 [ 216.395797][ T5887] gspca_stk1135: reg_w 0xf err -71 [ 216.416387][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.437461][ T5887] gspca_stk1135: Sensor write failed [ 216.463057][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.469476][ T5887] gspca_stk1135: Sensor write failed [ 216.477977][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.484784][ T5887] gspca_stk1135: Sensor read failed [ 216.490186][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.500427][ T5887] gspca_stk1135: Sensor read failed [ 216.521504][ T5887] gspca_stk1135: Detected sensor type unknown (0x0) [ 216.541171][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.567533][ T5887] gspca_stk1135: Sensor read failed [ 216.586096][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.612062][ T5887] gspca_stk1135: Sensor read failed [ 216.617378][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.642123][ T5887] gspca_stk1135: Sensor write failed [ 216.648538][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 216.672373][ T24] usb 7-1: USB disconnect, device number 11 [ 216.682579][ T5887] gspca_stk1135: Sensor write failed [ 216.689668][ T5887] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 216.748515][ T5887] usb 2-1: USB disconnect, device number 15 [ 217.181115][ T5887] usb 6-1: USB disconnect, device number 12 [ 217.555308][ T5902] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.719160][ T5902] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 217.730165][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.738453][ T5902] usb 5-1: Product: syz [ 217.742929][ T5902] usb 5-1: Manufacturer: syz [ 217.747667][ T5902] usb 5-1: SerialNumber: syz [ 217.759173][ T5902] usb 5-1: config 0 descriptor?? [ 217.764659][ T5965] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 217.927868][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.939100][ T5965] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.948829][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.966431][ T5965] usb 7-1: config 0 descriptor?? [ 218.199149][ T5965] usbhid 7-1:0.0: can't add hid device: -71 [ 218.209846][ T5965] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 218.223120][ T5965] usb 7-1: USB disconnect, device number 12 [ 218.350231][ T5887] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 219.221320][ T5902] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 219.236845][ T5902] usb 5-1: USB disconnect, device number 11 [ 219.245408][ T5902] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 219.297564][ T5499] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 219.317368][ T5902] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 219.631976][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 219.631980][ T8657] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.514890][ T8657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.530205][ T8657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.538162][ T8657] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 220.554463][ T8657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.560562][ T8657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.574812][ T8657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.584495][ T8657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.590571][ T8657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.600553][ T8657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.609474][ T8657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.615994][ T8657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.634728][ T8657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.881623][ T8708] loop6: detected capacity change from 0 to 7 [ 220.930128][ T8708] Dev loop6: unable to read RDB block 7 [ 220.935207][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 220.967964][ T8708] loop6: AHDI p1 p2 p3 p4 [ 220.975946][ T8708] loop6: partition table partially beyond EOD, truncated [ 221.001202][ T8708] loop6: p1 start 926365495 is beyond EOD, truncated [ 221.012004][ T8708] loop6: p2 size 47 extends beyond EOD, truncated [ 221.029741][ T8708] loop6: p3 start 1886353253 is beyond EOD, truncated [ 221.177343][ T7457] udevd[7457]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 221.712175][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 222.276806][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 222.602223][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.602259][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 222.602402][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.672063][ T5965] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.679778][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.832183][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 222.843113][ T5965] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.861891][ T5965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.881897][ T5965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.932299][ T5902] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 223.111914][ T5965] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.132095][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 223.141885][ T5965] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.151081][ T5902] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 223.167397][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.168858][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.202361][ T5902] usb 6-1: config 0 descriptor?? [ 223.278124][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'. [ 223.412480][ T5965] usb 2-1: GET_CAPABILITIES returned 0 [ 223.418077][ T5965] usbtmc 2-1:16.0: can't read capabilities [ 223.459520][ T5902] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 223.550706][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 223.635144][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.646131][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.656664][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.667866][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.677031][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.692059][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.692290][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 223.701299][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.701361][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.706016][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.737080][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.745626][ T8786] tipc: Started in network mode [ 223.746208][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.751425][ T8786] tipc: Node identity 4, cluster identity 4711 [ 223.774643][ T8786] tipc: Node number set to 4 [ 223.813374][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.822569][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.831755][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.840940][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.850930][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.871693][ T5965] usb 2-1: USB disconnect, device number 16 [ 223.877756][ T8788] netlink: 'syz.4.838': attribute type 10 has an invalid length. [ 223.914772][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.957084][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.976551][ T8788] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.005575][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.028559][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.049472][ T24] usb 1-1: config 0 descriptor?? [ 224.071278][ T24] hub 1-1:0.0: USB hub found [ 224.253114][ T8794] loop2: detected capacity change from 0 to 7 [ 224.262844][ T8794] Dev loop2: unable to read RDB block 7 [ 224.268625][ T8794] loop2: unable to read partition table [ 224.275279][ T8794] loop2: partition table beyond EOD, truncated [ 224.281630][ T8794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.291570][ T24] hub 1-1:0.0: 1 port detected [ 224.675278][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.681425][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.687813][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 224.694060][ T5902] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 224.733778][ T5902] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 224.747406][ T5902] asix 6-1:0.0: probe with driver asix failed with error -71 [ 224.762885][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.780539][ T5902] usb 6-1: USB disconnect, device number 13 [ 224.947501][ T24] hub 1-1:0.0: activate --> -90 [ 225.533549][ T30] audit: type=1326 audit(1749917109.754:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7fc00000 [ 225.554344][ T5902] usb 1-1: USB disconnect, device number 11 [ 225.562718][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 225.592866][ T24] usb 1-1-port1: attempt power cycle [ 225.859845][ T8831] input: syz1 as /devices/virtual/input/input14 [ 226.118432][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 226.201879][ T30] audit: type=1326 audit(1749917110.414:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.4.848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f81539 code=0x7fc00000 [ 226.684808][ T8854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.752407][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.752686][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.841703][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.966553][ T8863] netlink: 2024 bytes leftover after parsing attributes in process `syz.5.869'. [ 226.980228][ T8863] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.869'. [ 226.990322][ T8863] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.869'. [ 227.384606][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 227.438283][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 227.450198][ T8874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 227.466998][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 227.484240][ T8879] pim6reg1: entered promiscuous mode [ 227.494259][ T8879] pim6reg1: entered allmulticast mode [ 227.528341][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 227.618711][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 227.670584][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 228.457233][ T8905] sctp: [Deprecated]: syz.0.886 (pid 8905) Use of int in max_burst socket option deprecated. [ 228.457233][ T8905] Use struct sctp_assoc_value instead [ 228.651982][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.805532][ T24] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 228.836105][ T24] usb 5-1: config 0 has no interface number 0 [ 228.889727][ T24] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 228.911946][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.921531][ T24] usb 5-1: Product: syz [ 228.946712][ T24] usb 5-1: Manufacturer: syz [ 228.951460][ T24] usb 5-1: SerialNumber: syz [ 228.990111][ T24] usb 5-1: config 0 descriptor?? [ 229.542076][ T5918] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 229.739023][ T5918] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 229.766332][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.796307][ T5918] usb 7-1: Product: syz [ 229.806177][ T5918] usb 7-1: Manufacturer: syz [ 229.818676][ T5918] usb 7-1: SerialNumber: syz [ 229.841576][ T5918] usb 7-1: config 0 descriptor?? [ 229.860845][ T5918] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 230.025803][ T24] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.045025][ T24] asix 5-1:0.239: probe with driver asix failed with error -71 [ 230.073891][ T24] usb 5-1: USB disconnect, device number 12 [ 230.762338][ T5902] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 230.941924][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 230.957580][ T5902] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 230.977425][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.990346][ T5902] usb 2-1: config 0 descriptor?? [ 231.005169][ T5902] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 231.307446][ T5918] gspca_sunplus: reg_r err -71 [ 231.316019][ T5918] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 231.338813][ T5918] usb 7-1: USB disconnect, device number 13 [ 231.456017][ T8966] netlink: 'syz.5.913': attribute type 10 has an invalid length. [ 231.504126][ T8966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 231.742044][ T5909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 231.906615][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 231.934903][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.946953][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.959663][ T5909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.969957][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.985379][ T5909] usb 1-1: Product: syz [ 231.991669][ T5909] usb 1-1: Manufacturer: syz [ 231.997177][ T5909] usb 1-1: SerialNumber: syz [ 232.244231][ T5909] usb 1-1: 0:2 : does not exist [ 232.274398][ T5909] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 232.447157][ T5909] usb 1-1: USB disconnect, device number 16 [ 232.474070][ T5918] usb 2-1: USB disconnect, device number 17 [ 232.621638][ T7457] udevd[7457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.468111][ T9006] __nla_validate_parse: 2 callbacks suppressed [ 233.468131][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.928'. [ 233.664142][ T9009] syzkaller1: entered promiscuous mode [ 233.671313][ T9009] syzkaller1: entered allmulticast mode [ 235.557877][ T30] audit: type=1326 audit(1749917119.764:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 235.701716][ T30] audit: type=1326 audit(1749917119.764:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 235.843094][ T30] audit: type=1326 audit(1749917119.764:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 236.000033][ T30] audit: type=1326 audit(1749917119.764:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 236.085775][ T30] audit: type=1326 audit(1749917119.764:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 236.109431][ T30] audit: type=1326 audit(1749917119.764:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 236.145554][ T30] audit: type=1326 audit(1749917119.804:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 236.287746][ T30] audit: type=1326 audit(1749917119.804:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 236.353132][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 236.398706][ T30] audit: type=1326 audit(1749917119.804:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 236.480559][ T30] audit: type=1326 audit(1749917119.804:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 239.572278][ T5902] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 239.801425][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 239.819939][ T5902] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 239.852917][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 239.902769][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 239.945645][ T5902] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 239.960663][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 239.989226][ T5902] usb 2-1: Product: syz [ 239.998031][ T5902] usb 2-1: SerialNumber: syz [ 240.029414][ T5902] r8152-cfgselector 2-1: Unknown version 0x0000 [ 240.050929][ T5902] r8152-cfgselector 2-1: config 0 descriptor?? [ 240.117572][ T5902] hub 2-1:0.0: bad descriptor, ignoring hub [ 240.140394][ T5902] hub 2-1:0.0: probe with driver hub failed with error -5 [ 240.608280][ T5902] r8152-cfgselector 2-1: reset high-speed USB device number 18 using dummy_hcd [ 241.133126][ T5902] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 242.205169][ T9163] loop6: detected capacity change from 0 to 63 [ 242.255375][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.270849][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.284092][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.309273][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.327127][ T9163] Buffer I/O error on dev loop6, logical block 1, async page read [ 242.327853][ T7457] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.360915][ T9163] Buffer I/O error on dev loop6, logical block 1, async page read [ 242.381573][ T9163] Buffer I/O error on dev loop6, logical block 1, async page read [ 242.400786][ T9163] Buffer I/O error on dev loop6, logical block 1, async page read [ 242.601975][ T5909] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 242.756286][ T5909] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 242.774092][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.791901][ T5918] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.793210][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.836108][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 242.855841][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.865890][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.877713][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 242.886483][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.898199][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.909737][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 242.918162][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.927649][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.939204][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 242.950780][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.960677][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.965229][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 242.972558][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 242.980244][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.985756][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.004504][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.016090][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.020696][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.025675][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.037967][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.042499][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.057712][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.063927][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.089326][ T5909] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.098981][ T5909] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.100104][ T5918] usb 6-1: config 0 descriptor?? [ 243.110738][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.126266][ T5909] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.136010][ T5909] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.144842][ T5909] usb 7-1: Product: syz [ 243.150455][ T5909] usb 7-1: Manufacturer: syz [ 243.183772][ T5909] usb 7-1: SerialNumber: syz [ 243.185885][ T5918] hub 6-1:0.0: USB hub found [ 243.210074][ T5909] usb 7-1: config 0 descriptor?? [ 243.262834][ T5909] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 243.285842][ T9187] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 243.320117][ T9187] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 243.395185][ T9172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.428031][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.463621][ T5918] hub 6-1:0.0: 1 port detected [ 243.772238][ T5909] usb 7-1: USB disconnect, device number 14 [ 243.803101][ T5909] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 243.993744][ T9200] syzkaller1: entered promiscuous mode [ 243.999487][ T9200] syzkaller1: entered allmulticast mode [ 244.352145][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.476243][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 244.476265][ T30] audit: type=1326 audit(1749917128.694:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.522098][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 244.531629][ T24] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 244.541137][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 244.549707][ T30] audit: type=1326 audit(1749917128.724:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.574473][ T24] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 244.629065][ T24] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 244.676284][ T5918] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 244.697619][ T30] audit: type=1326 audit(1749917128.724:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.698255][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.755343][ T30] audit: type=1326 audit(1749917128.724:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.758150][ T5918] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 244.777967][ T30] audit: type=1326 audit(1749917128.724:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.829926][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 244.832375][ T30] audit: type=1326 audit(1749917128.724:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.865615][ T24] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 244.877668][ T30] audit: type=1326 audit(1749917128.724:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.885179][ T5918] usbhid 6-1:0.0: can't add hid device: -32 [ 244.907807][ T30] audit: type=1326 audit(1749917128.724:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 244.924632][ T24] usb 1-1: Product: syz [ 244.945275][ T24] usb 1-1: Manufacturer: syz [ 244.949936][ T24] usb 1-1: SerialNumber: syz [ 244.962010][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 244.985189][ T24] usb 1-1: config 0 descriptor?? [ 245.011944][ T5909] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 245.017986][ T24] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.040822][ T5918] usb 6-1: USB disconnect, device number 14 [ 245.054842][ T24] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.122065][ T917] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 245.168790][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 245.177649][ T5909] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 245.203721][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.224956][ T5909] usb 7-1: config 0 descriptor?? [ 245.302122][ T917] usb 2-1: Using ep0 maxpacket: 8 [ 245.309957][ T917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.325602][ T917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.339858][ T30] audit: type=1326 audit(1749917129.554:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 245.362471][ T917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.372687][ T917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.386409][ T30] audit: type=1326 audit(1749917129.554:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 245.409834][ T917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.420820][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.451926][ T5909] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 245.665793][ T917] usb 2-1: GET_CAPABILITIES returned 0 [ 245.672218][ T917] usbtmc 2-1:16.0: can't read capabilities [ 245.876496][ T5918] usb 2-1: USB disconnect, device number 19 [ 246.867231][ T5909] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.901826][ T5909] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 246.940092][ T5909] asix 7-1:0.0: probe with driver asix failed with error -71 [ 246.982167][ T5909] usb 7-1: USB disconnect, device number 15 [ 246.992102][ T5918] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 247.151987][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 247.166924][ T5918] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.173255][ T5894] usb 1-1: USB disconnect, device number 17 [ 247.175560][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 247.202886][ T5894] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 247.266505][ T5918] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.302134][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.337067][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.369456][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.405581][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.512492][ T5918] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.521627][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.597266][ T5918] usb 2-1: config 0 descriptor?? [ 247.884659][ T5918] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.976499][ T5918] usb 2-1: USB disconnect, device number 20 [ 248.020660][ T5918] usblp0: removed [ 248.432225][ T5918] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 248.605489][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 248.637216][ T5918] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 248.666060][ T5918] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 248.691898][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 248.719257][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.742184][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.767380][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.791094][ T5918] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 248.811989][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.839913][ T5918] usb 2-1: config 0 descriptor?? [ 249.102623][ T5909] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 249.168163][ T9267] netlink: 'syz.5.1031': attribute type 1 has an invalid length. [ 249.233009][ T9267] bond0: (slave bond_slave_0): Releasing backup interface [ 249.259906][ T9267] bond1: (slave bond_slave_0): Enslaving as a backup interface with an up link [ 249.273140][ T5918] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.284912][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.355424][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.398977][ T5909] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 249.423522][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.448719][ T5909] usb 1-1: config 0 descriptor?? [ 249.528871][ T5918] usb 2-1: USB disconnect, device number 21 [ 249.542569][ T5918] usblp0: removed [ 249.675116][ T5965] usb 1-1: USB disconnect, device number 18 [ 251.281020][ T9309] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 251.405684][ T9311] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 252.847670][ T9342] kvm: MONITOR instruction emulated as NOP! [ 253.102026][ T5909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 253.274183][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.306806][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.334477][ T5909] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 253.367479][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.410038][ T5909] usb 1-1: config 0 descriptor?? [ 253.842859][ T5909] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 253.866642][ T5909] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 254.031909][ T5909] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 254.156024][ T9386] vivid-000: disconnect [ 254.169701][ T9386] vivid-000: reconnect [ 254.640849][ T9350] cp2112 0003:10C4:EA90.000F: Multi-message I2C transactions not supported [ 254.661944][ T5909] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 254.686055][ T5909] usb 1-1: USB disconnect, device number 19 [ 255.881944][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 256.008425][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 256.432684][ T5909] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 256.594327][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 256.631876][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 256.639472][ T5909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.654232][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.681041][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.691427][ T5909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.706467][ T5909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.715884][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.981225][ T5909] usb 6-1: GET_CAPABILITIES returned 0 [ 257.017476][ T5909] usbtmc 6-1:16.0: can't read capabilities [ 257.234234][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.243424][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.252736][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.262449][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.271848][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.280975][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.291550][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.300683][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.309798][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.319016][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.328141][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.337256][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.346358][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.355451][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.364531][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.373598][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.442107][ T5909] usb 6-1: USB disconnect, device number 15 [ 257.541911][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.703834][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.731611][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.753517][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.772429][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.796252][ T9433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.825859][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.432858][ T5902] usb 5-1: USB disconnect, device number 13 [ 258.562102][ T5909] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 258.781660][ T5909] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.798021][ T5909] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.808642][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.819236][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 258.830535][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 258.845746][ T5909] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.869591][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.877994][ T5909] usb 6-1: Product: syz [ 258.882333][ T5909] usb 6-1: Manufacturer: syz [ 258.898039][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 258.903576][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 258.911004][ T5909] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 258.917550][ T5909] cdc_wdm 6-1:1.0: Unknown control protocol [ 259.371883][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.489459][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 259.549978][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 259.582816][ T24] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 259.601130][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.617471][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.627423][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.641285][ T24] usb 5-1: Product: syz [ 259.660992][ T24] usb 5-1: Manufacturer: syz [ 259.665893][ T24] usb 5-1: SerialNumber: syz [ 259.701960][ T5902] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 259.862014][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 259.894748][ T5902] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 259.906705][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.919397][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.936719][ T5902] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.951944][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.975554][ T5902] usb 1-1: Product: syz [ 259.976595][ T24] usb 5-1: 0:2 : does not exist [ 259.988390][ T5902] usb 1-1: Manufacturer: syz [ 260.002147][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 260.042210][ T5902] usb 1-1: SerialNumber: syz [ 260.126266][ T24] usb 5-1: USB disconnect, device number 14 [ 260.494418][ T5902] usb 1-1: 0:2 : does not exist [ 261.003510][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.009925][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.236148][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 261.236424][ T5918] usb 6-1: USB disconnect, device number 16 [ 261.243031][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 261.254989][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 261.279567][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.732224][ T5902] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 261.805399][ T5902] usb 1-1: USB disconnect, device number 20 [ 261.911702][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 262.231860][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 262.406467][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 262.434261][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.556866][ T24] usb 5-1: Product: syz [ 262.561123][ T24] usb 5-1: Manufacturer: syz [ 262.583244][ T24] usb 5-1: SerialNumber: syz [ 262.606227][ T24] usb 5-1: config 0 descriptor?? [ 263.060566][ T24] airspy 5-1:0.0: Board ID: 05 [ 263.074269][ T24] airspy 5-1:0.0: Firmware version:  [ 264.083470][ T24] airspy 5-1:0.0: Registered as swradio24 [ 264.085737][ T5894] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 264.089260][ T24] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 264.418407][ T5902] usb 5-1: USB disconnect, device number 15 [ 264.428907][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.455174][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 264.491969][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 264.520776][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.556528][ T5894] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 264.569490][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.577997][ T5894] usb 6-1: Product: syz [ 264.604490][ T5894] usb 6-1: Manufacturer: syz [ 264.609187][ T5894] usb 6-1: SerialNumber: syz [ 264.638973][ T5894] usb 6-1: config 0 descriptor?? [ 264.987758][ T24] usb 6-1: USB disconnect, device number 17 [ 265.212039][ T5902] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 265.432154][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 265.457044][ T5902] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 265.471887][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.487834][ T5902] usb 2-1: Product: syz [ 265.492119][ T5902] usb 2-1: Manufacturer: syz [ 265.496754][ T5902] usb 2-1: SerialNumber: syz [ 265.504412][ T5902] usb 2-1: config 0 descriptor?? [ 265.511916][ T5909] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.525606][ T5902] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 265.589455][ T24] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 265.692067][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 265.704272][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.715997][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.726199][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.741337][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.757705][ T24] usb 1-1: string descriptor 0 read error: -22 [ 265.762370][ T5909] usb 5-1: config 0 descriptor?? [ 265.765761][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 265.785158][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.789765][ T5909] hub 5-1:0.0: USB hub found [ 265.799067][ T24] usb 1-1: config 0 descriptor?? [ 265.811705][ T24] usbtest 1-1:0.0: FX2 device [ 265.818592][ T24] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 265.987986][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 265.988007][ T30] audit: type=1326 audit(1749917150.204:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1132" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x0 [ 266.026756][ T917] usb 1-1: USB disconnect, device number 21 [ 266.297126][ T9579] input: syz0 as /devices/virtual/input/input15 [ 266.397648][ T5909] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 266.619104][ T5909] hid-generic 0003:046D:C31C.0010: item fetching failed at offset 0/1 [ 266.646172][ T5909] hid-generic 0003:046D:C31C.0010: probe with driver hid-generic failed with error -22 [ 266.966569][ T5902] gspca_topro: Sensor cx0342 [ 267.011932][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 267.184977][ T917] usb 2-1: USB disconnect, device number 22 [ 267.226634][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.253236][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.272114][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.299686][ T24] usb 1-1: config 0 descriptor?? [ 267.317229][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 267.392013][ T5902] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 267.594161][ T5902] usb 7-1: config 0 has no interfaces? [ 267.619242][ T5902] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.656921][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.695076][ T5902] usb 7-1: Product: syz [ 267.705564][ T5902] usb 7-1: Manufacturer: syz [ 267.726304][ T5902] usb 7-1: SerialNumber: syz [ 267.759183][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 267.775648][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.784105][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 267.791930][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 267.799493][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 267.810284][ T5902] usb 7-1: config 0 descriptor?? [ 268.015376][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 268.028390][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 268.043482][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 268.050464][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 268.062171][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 268.069605][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 268.077212][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.084649][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.093970][ T5902] usb 7-1: USB disconnect, device number 16 [ 268.099530][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.129857][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.165680][ T24] pwc: Registered as video103. [ 268.195933][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 268.275219][ T24] usb 1-1: USB disconnect, device number 22 [ 268.454471][ T5965] usb 5-1: USB disconnect, device number 16 [ 268.951109][ T9615] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1147'. [ 268.999780][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'. [ 269.111868][ T5902] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 269.274249][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.300377][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.329289][ T5902] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 269.346569][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.368636][ T5902] usb 7-1: config 0 descriptor?? [ 269.808468][ T5902] hid-generic 0003:04F3:0754.0011: failed to start in urb: -90 [ 269.834371][ T5902] hid-generic 0003:04F3:0754.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 270.164149][ T24] usb 7-1: USB disconnect, device number 17 [ 270.271938][ T5965] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.315281][ T9633] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 270.474555][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 270.514922][ T5965] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 270.556756][ T5965] usb 5-1: config 5 has no interface number 0 [ 270.563232][ T5965] usb 5-1: config 5 interface 168 has no altsetting 0 [ 270.574218][ T5965] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 270.586425][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.612222][ T5965] usb 5-1: Product: syz [ 270.626889][ T5965] usb 5-1: Manufacturer: syz [ 270.631585][ T5965] usb 5-1: SerialNumber: syz [ 270.860452][ T5965] pn533_usb 5-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 270.932017][ T5965] usb 5-1: USB disconnect, device number 17 [ 272.175051][ T5965] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 272.371882][ T5965] usb 6-1: Using ep0 maxpacket: 16 [ 272.391105][ T5965] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 272.422060][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.425733][ T9673] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1167'. [ 272.459531][ T5965] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.475258][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.492014][ T9675] input: syz1 as /devices/virtual/input/input17 [ 272.512210][ T9668] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1167'. [ 272.531971][ T5965] usb 6-1: Product: syz [ 272.551879][ T5965] usb 6-1: Manufacturer: syz [ 272.556562][ T5965] usb 6-1: SerialNumber: syz [ 272.602503][ T5965] usb 6-1: config 0 descriptor?? [ 272.630625][ T5965] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.650415][ T5965] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 273.245812][ T9691] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 273.272029][ T5965] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 273.284114][ T5965] em28xx 6-1:0.0: Config register raw data: 0x2f [ 273.290658][ T5965] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 273.300757][ T5965] em28xx 6-1:0.0: No AC97 audio processor [ 273.384579][ T9695] bond1: entered promiscuous mode [ 273.390120][ T9695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.200531][ T5965] usb 6-1: USB disconnect, device number 18 [ 274.561973][ T5887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 274.711844][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 274.719048][ T5887] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.730671][ T5887] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.741869][ T5887] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.750963][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.774261][ T5887] hub 5-1:4.0: USB hub found [ 274.842013][ T5918] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 274.977968][ T5887] hub 5-1:4.0: 2 ports detected [ 274.995336][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.007909][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 275.021615][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 275.041470][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.059040][ T5965] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 275.067392][ T9723] binder: 9722:9723 ioctl c0306201 800000c0 returned -14 [ 275.090707][ T5918] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 275.111212][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.120134][ T5918] usb 1-1: Product: syz [ 275.130250][ T5918] usb 1-1: Manufacturer: syz [ 275.145942][ T5918] usb 1-1: SerialNumber: syz [ 275.158858][ T5918] usb 1-1: config 0 descriptor?? [ 275.226914][ T5965] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.248510][ T5965] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.269863][ T5965] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.291916][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.339418][ T9721] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 275.366376][ T5965] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.530902][ T5965] usb 1-1: USB disconnect, device number 23 [ 275.618274][ T9730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.850271][ T9] usb 6-1: USB disconnect, device number 19 [ 276.200413][ T5887] hub 5-1:4.0: activate --> -90 [ 276.406584][ T5965] usb 5-1: USB disconnect, device number 18 [ 276.412709][ T5887] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 277.018622][ T9757] binder: 9756:9757 ioctl c0306201 800000c0 returned -14 [ 277.040508][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 277.351679][ T9770] input: syz0 as /devices/virtual/input/input18 [ 277.743446][ T9779] all: renamed from lo [ 279.713495][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1216'. [ 279.723070][ T5901] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 279.857656][ T9805] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1216'. [ 279.903578][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 279.928047][ T5901] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.954390][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.999740][ T5901] usb 2-1: Product: syz [ 280.023347][ T5901] usb 2-1: Manufacturer: syz [ 280.041383][ T5901] usb 2-1: SerialNumber: syz [ 280.079547][ T5901] usb 2-1: config 0 descriptor?? [ 280.430381][ T5901] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 280.789048][ T9819] netlink: 'syz.0.1221': attribute type 5 has an invalid length. [ 281.382016][ T30] audit: type=1800 audit(1749917165.594:2268): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1225" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 281.471340][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 281.647491][ T5901] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 281.743225][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 281.752527][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 281.768763][ T5901] usb 2-1: USB disconnect, device number 23 [ 281.789293][ T5868] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.820085][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 281.833551][ T5868] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.847616][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 281.872259][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.881283][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.948764][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.992517][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.027351][ T5868] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 282.037003][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.079599][ T5868] usb 1-1: config 0 descriptor?? [ 282.343089][ T5868] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.399471][ T5868] usb 1-1: USB disconnect, device number 24 [ 282.432694][ T5868] usblp0: removed [ 282.912266][ T5868] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 282.922025][ T5965] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 283.072136][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 283.083076][ T5868] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 283.095431][ T5868] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 283.104291][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 283.113907][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.123843][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 283.137610][ T5965] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 283.139579][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.169324][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.178647][ T5868] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 283.195825][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.204011][ T5965] usb 5-1: Product: syz [ 283.204035][ T5965] usb 5-1: Manufacturer: syz [ 283.204052][ T5965] usb 5-1: SerialNumber: syz [ 283.208034][ T5965] usb 5-1: config 0 descriptor?? [ 283.240784][ T5868] usb 1-1: config 0 descriptor?? [ 283.489996][ T5868] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 283.691362][ T5965] usb 5-1: Firmware version (0.0) predates our first public release. [ 283.692166][ T9857] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 283.710162][ T5965] usb 5-1: Please update to version 0.2 or newer [ 283.717497][ T9857] veth0_vlan: entered allmulticast mode [ 283.746381][ T5965] usb 5-1: Firmware: build [ 283.768589][ T9857] veth0_vlan: left promiscuous mode [ 283.779306][ T9857] veth0_vlan: entered promiscuous mode [ 283.790795][ T9857] team0: Device veth0_vlan failed to register rx_handler [ 283.819424][ C0] usblp0: nonzero read bulk status received: -71 [ 283.828662][ T9825] usblp0: error -71 reading from printer [ 283.836185][ T5868] usb 1-1: USB disconnect, device number 25 [ 283.892127][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 283.980857][ T5965] usb 5-1: USB disconnect, device number 19 [ 284.064183][ T9824] usblp0: removed [ 284.077578][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.100140][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.113140][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.122335][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.139075][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.155456][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.166675][ T24] usb 7-1: Product: syz [ 284.170900][ T24] usb 7-1: Manufacturer: syz [ 284.186606][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 284.191951][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 284.199547][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 284.206048][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 284.278032][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 284.295609][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 285.156511][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.163218][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.169793][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.176433][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.182816][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.189468][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.196273][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.202910][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.209610][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.216262][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.222816][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.229461][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.236703][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.243348][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.249961][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.256623][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.263510][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.270161][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.276788][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 285.283431][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 285.291246][ T5965] usb 7-1: USB disconnect, device number 18 [ 285.291310][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 286.832012][ T5868] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 287.044214][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.071775][ T5868] usb 7-1: config 0 has no interfaces? [ 287.097805][ T5868] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.133028][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.178680][ T5868] usb 7-1: config 0 descriptor?? [ 287.685559][ T24] usb 7-1: USB disconnect, device number 19 [ 288.501895][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1275'. [ 288.861849][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 289.053674][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 289.138918][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.171494][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 289.181535][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.381832][ T5901] usb 1-1: Product: syz [ 289.680671][ T5901] usb 1-1: Manufacturer: syz [ 289.688193][ T5901] usb 1-1: SerialNumber: syz [ 289.734225][ T5901] usb 1-1: config 0 descriptor?? [ 289.746669][ T5901] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.817553][ T5901] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 289.863364][T10002] input: syz0 as /devices/virtual/input/input19 [ 290.235734][T10010] netlink: 186232 bytes leftover after parsing attributes in process `syz.6.1287'. [ 290.401103][ T5901] em28xx 1-1:0.0: chip ID is em2874 [ 291.426238][ T5901] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 291.431886][ T5965] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 291.459106][ T5901] em28xx 1-1:0.0: board has no eeprom [ 291.554035][ T5901] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 291.585579][ T5901] em28xx 1-1:0.0: dvb set to bulk mode. [ 291.601518][ T9649] em28xx 1-1:0.0: Binding DVB extension [ 291.620886][ T5901] usb 1-1: USB disconnect, device number 26 [ 291.638490][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.669257][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.672834][ T5901] em28xx 1-1:0.0: Disconnecting em28xx [ 291.735769][ T5965] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 291.790113][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.794834][T10034] netlink: 'syz.5.1297': attribute type 6 has an invalid length. [ 291.806973][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1297'. [ 291.850383][ T5965] usb 2-1: config 0 descriptor?? [ 291.853951][ T9649] em28xx 1-1:0.0: Registering input extension [ 292.000889][ T9649] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 292.002591][ T5887] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 292.024467][ T9649] Registered IR keymap rc-empty [ 292.045276][ T9649] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 292.088182][ T9649] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 292.129105][ T9649] em28xx 1-1:0.0: Input extension successfully initialized [ 292.153142][ T5901] em28xx 1-1:0.0: Closing input extension [ 292.183840][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 292.215532][ T5887] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 292.223985][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 292.236667][ T5887] usb 7-1: config 0 has no interface number 0 [ 292.252437][ T5887] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.257246][ T5901] em28xx 1-1:0.0: Freeing device [ 292.279334][ T5887] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 292.298480][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.320729][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.331863][ T5887] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.353027][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.360080][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.368752][ T5887] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.385808][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.393414][ T5887] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 292.403043][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.411382][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.419533][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 292.425436][ T5965] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 292.434584][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.447790][ T5965] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 292.459441][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.469234][ T5887] usb 7-1: config 0 descriptor?? [ 292.489020][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.501558][ T5887] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 292.516344][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.533418][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.550662][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.565179][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.574608][ T5965] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0x01 [ 292.586506][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.623016][ T24] usb 6-1: config 0 descriptor?? [ 292.722544][ T5887] usb 7-1: USB disconnect, device number 20 [ 292.743103][ T5887] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 292.844078][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 292.879927][ T24] usb 6-1: USB disconnect, device number 20 [ 292.889834][ T24] usblp0: removed [ 293.200634][ T5965] cp2112 0003:10C4:EA90.0012: error reading lock byte: -71 [ 293.227607][ T5965] usb 2-1: USB disconnect, device number 24 [ 293.362500][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 293.513998][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 293.527343][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 293.541542][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 293.550630][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 293.560368][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.583164][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.608772][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 293.623267][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 293.634690][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.652913][ T24] usb 6-1: config 0 descriptor?? [ 293.876176][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 294.116501][ C1] usblp0: nonzero read bulk status received: -71 [ 294.123541][ T24] usb 6-1: USB disconnect, device number 21 [ 294.356878][T10040] usblp0: removed [ 295.651996][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1320'. [ 295.695585][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1320'. [ 296.189263][T10108] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 296.294243][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.754260][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 297.422532][ T30] audit: type=1326 audit(1749917181.634:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.1.1338" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 297.611275][T10152] Set syz1 is full, maxelem 1038 reached [ 297.723958][T10157] fuse: root generation should be zero [ 299.550191][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 299.610599][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 299.659859][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 300.202032][ T5901] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 300.374131][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.781845][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 300.806797][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.824155][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.832609][ T5901] usb 5-1: Product: syz [ 300.836843][ T5901] usb 5-1: Manufacturer: syz [ 300.842127][ T5901] usb 5-1: SerialNumber: syz [ 300.858256][T10224] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.928465][ T5901] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 301.953712][ T5901] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 301.961183][ T5901] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 302.130317][ T5901] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 302.141819][ T5918] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 302.307553][ T5918] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.337849][ T5918] usb 1-1: config 0 has no interface number 0 [ 302.361840][ T5918] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 302.393441][ T5918] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 302.433487][ T5918] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.458650][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.488726][ T5918] usb 1-1: config 0 descriptor?? [ 302.515960][T10253] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.542810][ T5918] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 302.576683][ T5901] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 302.644983][ T5901] usb 5-1: USB disconnect, device number 20 [ 302.653545][ T5901] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 302.762153][ T5965] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 302.800505][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 302.809755][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 302.856368][T10273] syz_tun: entered promiscuous mode [ 302.876269][T10273] gretap0: entered promiscuous mode [ 302.899891][T10273] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 302.910871][T10273] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 302.944003][ T5965] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 302.963575][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.991313][ T5965] usb 7-1: config 0 descriptor?? [ 303.495251][ T5887] usb 1-1: USB disconnect, device number 27 [ 303.614398][ T5918] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 303.796598][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 303.814814][ T5918] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 303.834072][ T5918] usb 5-1: config 0 has no interface number 0 [ 303.851853][ T5918] usb 5-1: config 0 interface 104 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 303.875989][ T5918] usb 5-1: config 0 interface 104 altsetting 11 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 303.900304][ T5918] usb 5-1: config 0 interface 104 altsetting 11 bulk endpoint 0xF has invalid maxpacket 16 [ 303.911955][ T5918] usb 5-1: config 0 interface 104 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 303.923290][ T5918] usb 5-1: config 0 interface 104 has no altsetting 0 [ 303.933880][ T5918] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=85.b3 [ 303.943443][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.951581][ T5918] usb 5-1: Product: syz [ 303.958442][ T5918] usb 5-1: Manufacturer: syz [ 303.966377][ T5918] usb 5-1: SerialNumber: syz [ 303.975312][ T5918] usb 5-1: config 0 descriptor?? [ 303.990879][T10277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.230760][ T5918] i2c-tiny-usb 5-1:0.104: version 85.b3 found at bus 005 address 021 [ 304.240920][ T5918] (null): failure setting delay to 10us [ 304.248762][ T5918] i2c-tiny-usb 5-1:0.104: probe with driver i2c-tiny-usb failed with error -5 [ 304.279697][ T5918] usb 5-1: USB disconnect, device number 21 [ 304.685684][ T5965] pegasus 7-1:0.0: setup Pegasus II specific registers [ 304.721963][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 304.732954][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 304.816493][ T5965] pegasus 7-1:0.0: can't locate MII phy, using default [ 304.875480][ T5965] pegasus 7-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, be:6b:fe:6f:4f:b2 [ 304.898146][ T5965] usb 7-1: USB disconnect, device number 21 [ 305.211865][ T5887] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 305.528932][T10319] loop4: detected capacity change from 0 to 524288000 [ 305.805070][ T5887] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.813917][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.851811][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.898475][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.918314][ T5887] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.928509][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.937494][ T5887] usb 5-1: Product: syz [ 305.941955][ T5887] usb 5-1: Manufacturer: syz [ 305.956139][ T5887] cdc_wdm 5-1:1.0: skipping garbage [ 305.961410][ T5887] cdc_wdm 5-1:1.0: skipping garbage [ 305.977496][ T5887] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 305.986154][ T5887] cdc_wdm 5-1:1.0: Unknown control protocol [ 306.977007][ T5901] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 306.995132][ C0] wdm_int_callback: 7 callbacks suppressed [ 306.995157][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 306.996180][ T5918] usb 5-1: USB disconnect, device number 22 [ 307.001026][ C0] wdm_int_callback: 7 callbacks suppressed [ 307.001044][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.001065][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 307.202130][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 307.211143][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 307.220662][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.235887][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.248816][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.263989][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.274147][ T5901] usb 2-1: Product: syz [ 307.301117][ T5901] usb 2-1: Manufacturer: syz [ 307.306696][ T5901] usb 2-1: SerialNumber: syz [ 307.762551][ T5901] usb 2-1: 0:2 : does not exist [ 308.185850][ T9649] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 308.407581][ T9649] usb 7-1: config 0 has no interfaces? [ 308.428638][ T9649] usb 7-1: config 0 has no interfaces? [ 308.441564][ T9649] usb 7-1: config 0 has no interfaces? [ 308.458095][ T9649] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 308.511616][ T9649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 308.521137][T10370] syzkaller1: entered promiscuous mode [ 308.550130][ T9649] usb 7-1: Product: syz [ 308.554704][T10370] syzkaller1: entered allmulticast mode [ 308.561155][ T9649] usb 7-1: Manufacturer: syz [ 308.580058][ T9649] usb 7-1: SerialNumber: syz [ 308.599226][ T9649] usb 7-1: config 0 descriptor?? [ 308.880139][ T9649] usb 7-1: USB disconnect, device number 22 [ 308.971586][ T5901] usb 2-1: 1:0: cannot get min/max values for control 6 (id 1) [ 309.028063][ T5901] usb 2-1: USB disconnect, device number 25 [ 309.044171][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 309.522306][ T9649] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 309.682781][ T9649] usb 6-1: Using ep0 maxpacket: 8 [ 309.711589][ T9649] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.748458][ T9649] usb 6-1: config 179 has no interface number 0 [ 309.757622][ T9649] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 309.778548][ T9649] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 309.791260][ T9649] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.809108][ T9649] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 309.837873][ T9649] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 309.857850][ T9649] usb 6-1: config 179 interface 65 has no altsetting 0 [ 309.883065][ T9649] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 309.897845][ T9649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.959067][ T9649] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21 [ 310.239935][ T5887] usb 6-1: USB disconnect, device number 22 [ 310.240002][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 310.277826][ T5887] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 311.612068][T10405] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 314.092138][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 314.259614][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 314.291930][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 314.374965][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 314.405897][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 314.441913][ T5868] usb 1-1: can't read configurations, error -71 [ 314.922494][T10506] fuse: Invalid uid '00000000000000000001' [ 315.090242][T10508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.143060][T10541] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.1484'. [ 316.208279][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1484'. [ 317.531984][ T5965] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 317.701840][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 317.742551][ T5965] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 317.776719][ T5965] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 317.807479][ T5965] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 317.829741][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.857925][ T5965] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.877788][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.909755][ T5965] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 317.931797][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.971489][ T5965] usb 1-1: config 0 descriptor?? [ 318.234919][ T5965] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 318.342271][ T5965] usb 1-1: USB disconnect, device number 30 [ 318.372794][ T5965] usblp0: removed [ 318.670032][T10591] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1503'. [ 318.761975][ T5965] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 318.895358][ T5918] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 318.916595][ T5918] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.021959][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 319.030064][ T5965] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 319.049930][ T5965] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 319.081858][ T5965] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 319.091029][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.127443][ T5965] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.162035][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.201963][ T5965] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 319.219861][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.248526][ T5965] usb 1-1: config 0 descriptor?? [ 319.694907][ T5965] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 319.901846][ T5965] usb 1-1: USB disconnect, device number 31 [ 319.925415][ T5965] usblp0: removed [ 321.561863][ T5887] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 321.737709][ T5887] usb 1-1: config 0 has no interfaces? [ 321.743729][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.760845][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.778024][ T5887] usb 1-1: config 0 descriptor?? [ 321.791535][T10656] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 322.021410][ T5965] usb 1-1: USB disconnect, device number 32 [ 322.132834][ T5887] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 322.312917][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 322.328385][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.349096][ T5887] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 322.397644][ T5887] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.428090][ T5887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.449079][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.455895][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.478833][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.488521][ T5887] usb 6-1: Product: syz [ 322.493383][ T5887] usb 6-1: Manufacturer: syz [ 322.498185][ T5887] usb 6-1: SerialNumber: syz [ 322.614175][ T9649] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 322.832089][ T9649] usb 5-1: Using ep0 maxpacket: 16 [ 322.839399][ T9649] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 322.851181][ T9649] usb 5-1: config 0 has no interface number 0 [ 322.871187][ T9649] usb 5-1: config 0 interface 180 has no altsetting 0 [ 322.919913][ T9649] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 322.974358][ T9649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.011844][ T9649] usb 5-1: Product: syz [ 323.016104][ T9649] usb 5-1: Manufacturer: syz [ 323.102006][ T9649] usb 5-1: SerialNumber: syz [ 323.120191][ T9649] usb 5-1: config 0 descriptor?? [ 323.461672][ T5887] usb 6-1: USB disconnect, device number 23 [ 323.493561][ T9649] viperboard 5-1:0.180: version 0.f2 found at bus 005 address 023 [ 323.556869][ T7457] udevd[7457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.592629][ T9649] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 323.641272][ T9649] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 323.746346][ T9649] usb 5-1: USB disconnect, device number 23 [ 323.752508][ T30] audit: type=1800 audit(1749917207.964:2270): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1535" name=789995D6C0BDB87AA869C4E6FA9FA1BD9345CE1D269273DD143925C7DE0233B8FE809BED212020BD dev="tmpfs" ino=1324 res=0 errno=0 [ 323.931627][ T30] audit: type=1804 audit(1749917207.974:2271): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1535" name=789995D6C0BDB87AA869C4E6FA9FA1BD9345CE1D269273DD143925C7DE0233B8FE809BED212020BD dev="tmpfs" ino=1324 res=1 errno=0 [ 324.401688][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1541'. [ 324.446940][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'. [ 324.952513][ T5833] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 325.372103][ T5887] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 325.508544][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 325.560433][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.578321][ T5887] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.590203][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.606897][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.640148][T10709] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.665156][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.879012][ T5887] usb 6-1: USB disconnect, device number 24 [ 326.076787][T10715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.128913][T10715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.409687][T10715] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.425725][T10715] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.450697][T10715] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.460663][T10715] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.993055][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 329.002869][ T5833] Bluetooth: hci1: Injecting HCI hardware error event [ 329.011255][ T5833] Bluetooth: hci1: hardware error 0x00 [ 329.194419][T10773] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 329.201361][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.231546][T10773] vhci_hcd vhci_hcd.0: Device attached [ 329.252886][T10780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.295330][T10773] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 329.301962][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.336345][T10773] vhci_hcd vhci_hcd.0: Device attached [ 329.402022][ T9649] vhci_hcd: vhci_device speed not set [ 329.547632][ T9649] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 329.575758][T10773] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(15) [ 329.582464][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.592944][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 329.602281][T10780] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 329.608934][T10780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.635588][T10773] vhci_hcd vhci_hcd.0: Device attached [ 329.641002][T10791] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(9) [ 329.647690][T10791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 329.713912][T10800] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(18) [ 329.720599][T10800] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 329.752418][T10780] vhci_hcd vhci_hcd.0: Device attached [ 329.769948][T10773] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 329.776633][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.828345][T10800] vhci_hcd vhci_hcd.0: Device attached [ 329.848029][T10791] vhci_hcd vhci_hcd.0: Device attached [ 329.914694][T10773] vhci_hcd vhci_hcd.0: Device attached [ 329.954880][T10782] vhci_hcd: connection closed [ 329.955397][T10795] vhci_hcd: connection closed [ 329.955948][T10774] vhci_hcd: connection reset by peer [ 329.960254][T10789] vhci_hcd: connection closed [ 329.982424][ T1107] vhci_hcd: stop threads [ 330.021695][T10794] vhci_hcd: connection closed [ 330.027873][ T1107] vhci_hcd: release socket [ 330.230318][ T1107] vhci_hcd: disconnect device [ 330.250651][ T1107] vhci_hcd: stop threads [ 330.251336][T10804] vhci_hcd: connection closed [ 330.256098][T10802] vhci_hcd: connection closed [ 330.261432][ T1107] vhci_hcd: release socket [ 330.281082][ T1107] vhci_hcd: disconnect device [ 330.297807][ T1107] vhci_hcd: stop threads [ 330.303439][ T1107] vhci_hcd: release socket [ 330.308106][ T1107] vhci_hcd: disconnect device [ 330.318462][ T1107] vhci_hcd: stop threads [ 330.331906][ T1107] vhci_hcd: release socket [ 330.342407][ T1107] vhci_hcd: disconnect device [ 330.352371][ T1107] vhci_hcd: stop threads [ 330.365912][ T1107] vhci_hcd: release socket [ 330.377947][ T1107] vhci_hcd: disconnect device [ 330.384586][ T1107] vhci_hcd: stop threads [ 330.391855][ T1107] vhci_hcd: release socket [ 330.397053][ T1107] vhci_hcd: disconnect device [ 330.404242][ T1107] vhci_hcd: stop threads [ 330.415001][ T1107] vhci_hcd: release socket [ 330.428623][ T1107] vhci_hcd: disconnect device [ 330.430473][T10810] input: syz0 as /devices/virtual/input/input22 [ 330.433653][ T2155] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 330.447943][ T5909] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 330.583969][ T2155] usb 5-1: Using ep0 maxpacket: 32 [ 330.604605][ T2155] usb 5-1: config 4 has an invalid interface number: 194 but max is 0 [ 330.627850][ T2155] usb 5-1: config 4 has no interface number 0 [ 330.632107][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 330.634098][ T2155] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 330.647071][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.667846][ T5909] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 330.677038][ T2155] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 330.677074][ T2155] usb 5-1: config 4 interface 194 has no altsetting 0 [ 330.679842][ T2155] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 330.713438][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.725351][ T2155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.733804][ T2155] usb 5-1: Product: syz [ 330.738191][ T2155] usb 5-1: Manufacturer: syz [ 330.743494][ T2155] usb 5-1: SerialNumber: syz [ 330.762090][ T5909] usb 7-1: Product: syz [ 330.771601][ T5909] usb 7-1: Manufacturer: syz [ 330.779331][ T5909] usb 7-1: SerialNumber: syz [ 330.796484][ T5909] usb 7-1: config 0 descriptor?? [ 330.809506][ T5909] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 330.819798][ T5909] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 331.026361][ T2155] usb 5-1: probing VID:PID(0424:012C) [ 331.038944][ T2155] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 331.062544][ T2155] usb 5-1: vub300 ignoring EndPoint(0) 03 [ 331.068375][ T2155] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 331.075235][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 331.092537][ T2155] usb 5-1: vub300 ignoring EndPoint(1) 04 [ 331.098388][ T2155] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 331.157446][ T2155] vub300 5-1:4.194: probe with driver vub300 failed with error -22 [ 331.221858][ T2155] usb 5-1: USB disconnect, device number 24 [ 331.430286][ T5909] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 331.637173][ T5902] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 331.849014][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.891655][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.909792][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.925356][ T5902] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.938564][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.958686][ T5902] usb 1-1: config 0 descriptor?? [ 332.097021][T10836] binder: 10835:10836 ioctl 4018620d 0 returned -22 [ 332.108302][T10836] binder: 10835:10836 ioctl c0306201 0 returned -14 [ 332.293799][ T5909] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 332.321934][ T5909] em28xx 7-1:0.0: board has no eeprom [ 332.402261][ T5909] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 332.410734][ T5902] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 332.420989][ T5909] em28xx 7-1:0.0: dvb set to bulk mode. [ 332.443084][ T9650] em28xx 7-1:0.0: Binding DVB extension [ 332.452251][ T5902] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 332.522991][ T5909] usb 7-1: USB disconnect, device number 23 [ 332.553711][ T5909] em28xx 7-1:0.0: Disconnecting em28xx [ 332.611023][ T9650] em28xx 7-1:0.0: Registering input extension [ 332.642030][ T5909] em28xx 7-1:0.0: Closing input extension [ 332.671958][ T5909] em28xx 7-1:0.0: Freeing device [ 332.801986][ T5919] usb 1-1: USB disconnect, device number 33 [ 332.831887][T10850] fido_id[10850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:047F:FFFF.0014/report_descriptor': No such file or directory [ 334.584908][T10895] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 334.611868][T10895] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 334.674504][ T9649] vhci_hcd: vhci_device speed not set [ 335.390397][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 335.397095][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.431608][T10907] vhci_hcd vhci_hcd.0: Device attached [ 335.449272][T10912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.502638][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 335.509289][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.557576][T10907] vhci_hcd vhci_hcd.0: Device attached [ 335.567571][T10912] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 335.574286][T10912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.648728][T10739] vhci_hcd: vhci_device speed not set [ 335.683448][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(9) [ 335.690066][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 335.697863][T10912] vhci_hcd vhci_hcd.0: Device attached [ 335.713358][T10739] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 335.733352][T10907] vhci_hcd vhci_hcd.0: Device attached [ 335.744600][T10924] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(12) [ 335.751293][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.781870][T10907] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(14) [ 335.788542][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.799398][T10924] vhci_hcd vhci_hcd.0: Device attached [ 335.818995][T10907] vhci_hcd vhci_hcd.0: Device attached [ 335.836753][T10912] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(16) [ 335.843444][T10912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.952145][T10934] sctp: [Deprecated]: syz.0.1611 (pid 10934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.952145][T10934] Use struct sctp_sack_info instead [ 335.954025][T10912] vhci_hcd vhci_hcd.0: Device attached [ 335.992048][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 336.152336][ T917] usb usb44-port8: attempt power cycle [ 336.173469][T10932] vhci_hcd: connection closed [ 336.176930][T10928] vhci_hcd: connection closed [ 336.182050][T10925] vhci_hcd: connection closed [ 336.188296][T10919] vhci_hcd: connection closed [ 336.203070][T10914] vhci_hcd: connection closed [ 336.204449][T10916] vhci_hcd: connection closed [ 336.207973][T10908] vhci_hcd: connection reset by peer [ 336.212825][ T1107] vhci_hcd: stop threads [ 336.242308][ T1107] vhci_hcd: release socket [ 336.247010][ T1107] vhci_hcd: disconnect device [ 336.261139][ T1107] vhci_hcd: stop threads [ 336.267659][ T1107] vhci_hcd: release socket [ 336.276964][ T1107] vhci_hcd: disconnect device [ 336.294954][ T1107] vhci_hcd: stop threads [ 336.316947][ T1107] vhci_hcd: release socket [ 336.332377][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 336.332436][ T1107] vhci_hcd: disconnect device [ 336.361355][ T5909] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 336.382226][ T1107] vhci_hcd: stop threads [ 336.386562][ T1107] vhci_hcd: release socket [ 336.403146][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.424277][ T1107] vhci_hcd: disconnect device [ 336.427946][ T5909] usb 2-1: Product: syz [ 336.440109][ T5909] usb 2-1: Manufacturer: syz [ 336.442303][ T1107] vhci_hcd: stop threads [ 336.447264][ T5909] usb 2-1: SerialNumber: syz [ 336.460730][ T1107] vhci_hcd: release socket [ 336.469001][ T5909] usb 2-1: config 0 descriptor?? [ 336.480876][ T1107] vhci_hcd: disconnect device [ 336.484600][ T5909] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 336.502343][ T1107] vhci_hcd: stop threads [ 336.520675][ T1107] vhci_hcd: release socket [ 336.534473][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 336.544147][ T1107] vhci_hcd: disconnect device [ 336.557089][ T1107] vhci_hcd: stop threads [ 336.561414][ T1107] vhci_hcd: release socket [ 336.590329][ T1107] vhci_hcd: disconnect device [ 336.623642][ T30] audit: type=1326 audit(1749917220.834:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.5.1614" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x0 [ 336.723519][ T917] usb usb44-port8: unable to enumerate USB device [ 336.868209][T10948] team0: Device gtp0 is of different type [ 336.981862][ T917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 337.124032][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1621'. [ 337.143697][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 337.153091][ T917] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 337.170259][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.192602][ T917] usb 1-1: config 0 descriptor?? [ 337.406999][ T917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 337.965586][ T917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.084605][ T917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 338.120813][ T917] usb 1-1: media controller created [ 338.138059][ T5909] gspca_ov534_9: reg_w failed -71 [ 338.209310][ T917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.345454][ T917] az6027: usb out operation failed. (-71) [ 338.381941][ T5909] gspca_ov534_9: Unknown sensor 0000 [ 338.382047][ T5909] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 338.399532][ T917] az6027: usb out operation failed. (-71) [ 338.412463][ T917] stb0899_attach: Driver disabled by Kconfig [ 338.418547][ T917] az6027: no front-end attached [ 338.418547][ T917] [ 338.445967][ T5909] usb 2-1: USB disconnect, device number 26 [ 338.481184][ T917] az6027: usb out operation failed. (-71) [ 338.498885][ T917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 338.519426][ T917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 338.573865][ T917] dvb-usb: schedule remote query interval to 400 msecs. [ 338.605461][ T917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 338.657697][ T917] usb 1-1: USB disconnect, device number 34 [ 338.845278][ T917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 339.979558][T10993] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1633'. [ 340.016761][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1633'. [ 340.821874][T10739] vhci_hcd: vhci_device speed not set [ 341.316783][ T30] audit: type=1326 audit(1749917225.524:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.0.1642" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x0 [ 341.338408][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.165244][ T9650] usb usb46-port8: attempt power cycle [ 342.256551][ T9649] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 342.435120][ T9649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.473809][ T9649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.507656][ T9649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.529204][ T9649] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.540584][ T9649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.582977][ T9649] usb 2-1: config 0 descriptor?? [ 342.762221][ T917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 342.784546][ T9650] usb usb46-port8: unable to enumerate USB device [ 342.915079][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 342.927147][ C0] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 342.935603][ C0] CPU: 0 UID: 0 PID: 11013 Comm: syz.5.1640 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 342.947724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.957819][ C0] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 342.963665][ C0] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 79 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 fc 78 30 f8 4d 8b 24 24 e8 93 f4 [ 342.983324][ C0] RSP: 0018:ffffc900000065d0 EFLAGS: 00010202 [ 342.989423][ C0] RAX: 0000000000000083 RBX: ffff8880268f9a20 RCX: 0000000000000100 [ 342.997414][ C0] RDX: ffff88802a3eda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.005406][ C0] RBP: ffff8880268f9a37 R08: 0000000000000000 R09: ffffffff89d46d16 [ 343.013401][ C0] R10: ffffc900000068a0 R11: fffff52000000d1a R12: 0000000000000418 [ 343.021414][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004d1f346 [ 343.029415][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f5015b40 [ 343.038392][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 343.044993][ C0] CR2: 00000000801d8018 CR3: 0000000077e9a000 CR4: 00000000003526f0 [ 343.053037][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.061023][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.069204][ C0] Call Trace: [ 343.072525][ C0] [ 343.075431][ C0] nexthop_get_nhc_lookup+0x1af/0x400 [ 343.080856][ C0] fib_table_lookup+0xf26/0x16e0 [ 343.085835][ C0] fib_lookup+0x1c5/0x440 [ 343.090212][ C0] ? fib_lookup+0x76/0x440 [ 343.094668][ C0] ip_route_output_key_hash_rcu+0x2fb/0x23a0 [ 343.100692][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 343.106373][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 343.112044][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 343.117613][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 343.123735][ C0] ? dst_cache_get_ip4+0xf6/0x820 [ 343.128785][ C0] ip_route_output_flow+0x2a/0x150 [ 343.133921][ C0] sit_tunnel_xmit+0x86b/0x1fc0 [ 343.138799][ C0] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 343.144114][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 343.149254][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 343.154306][ C0] ? register_lock_class+0x51/0x320 [ 343.159529][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 343.164671][ C0] ? neigh_connected_output+0x1ea/0x460 [ 343.170238][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 343.175635][ C0] ? read_seqbegin+0x122/0x250 [ 343.180415][ C0] ? neigh_connected_output+0x1ea/0x460 [ 343.185976][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.191228][ C0] ? read_seqbegin+0x1ac/0x250 [ 343.196009][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 343.201149][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 343.206385][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 343.211709][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 343.217289][ C0] ? ip6_mtu+0x7d/0x3f0 [ 343.221468][ C0] ? ip6_mtu+0x7d/0x3f0 [ 343.225642][ C0] ip6_finish_output+0x234/0x7d0 [ 343.230599][ C0] udp_tunnel6_xmit_skb+0x5da/0xa60 [ 343.235930][ C0] geneve_xmit+0x1cc7/0x2b70 [ 343.240554][ C0] ? __lock_acquire+0xab9/0xd20 [ 343.245466][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 343.251223][ C0] ? geneve_xmit+0x128/0x2b70 [ 343.255936][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 343.261603][ C0] ? __pfx_geneve_xmit+0x10/0x10 [ 343.266655][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 343.271799][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 343.276849][ C0] ? register_lock_class+0x51/0x320 [ 343.282072][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 343.287208][ C0] ? neigh_resolve_output+0x438/0x750 [ 343.292613][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 343.298029][ C0] ? read_seqbegin+0x122/0x250 [ 343.302830][ C0] ? neigh_resolve_output+0x438/0x750 [ 343.308270][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.313503][ C0] ? read_seqbegin+0x1ac/0x250 [ 343.318292][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 343.323419][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.328815][ C0] ? eth_header+0x11b/0x200 [ 343.333337][ C0] ? __asan_memcpy+0x40/0x70 [ 343.337959][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 343.343183][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 343.348487][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 343.354096][ C0] ? ip6_mtu+0x7d/0x3f0 [ 343.358276][ C0] ? ip6_mtu+0x7d/0x3f0 [ 343.362449][ C0] ip6_finish_output+0x234/0x7d0 [ 343.367407][ C0] ndisc_send_skb+0xb47/0x1400 [ 343.372281][ C0] ? ndisc_send_skb+0x208/0x1400 [ 343.377244][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 343.382472][ C0] ? __pfx_dst_output+0x10/0x10 [ 343.387356][ C0] addrconf_rs_timer+0x369/0x670 [ 343.392318][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 343.397798][ C0] call_timer_fn+0x17e/0x5f0 [ 343.402416][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 343.407906][ C0] ? call_timer_fn+0xbe/0x5f0 [ 343.412612][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 343.417751][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.422976][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.428203][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 343.433679][ C0] __run_timer_base+0x61a/0x860 [ 343.438572][ C0] ? ktime_get+0x3e/0x1f0 [ 343.442923][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 343.448313][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 343.454578][ C0] run_timer_softirq+0xb7/0x180 [ 343.459449][ C0] handle_softirqs+0x286/0x870 [ 343.464242][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 343.469032][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 343.474347][ C0] __irq_exit_rcu+0xca/0x1f0 [ 343.478963][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 343.484189][ C0] irq_exit_rcu+0x9/0x30 [ 343.488491][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 343.494184][ C0] [ 343.497141][ C0] [ 343.500084][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.506092][ C0] RIP: 0010:lock_is_held_type+0x65/0x190 [ 343.511763][ C0] Code: 85 ef 00 00 00 65 4c 8b 2c 25 08 e0 9c 92 41 83 bd ec 0a 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 5d 54 99 8d e8 e7 16 00 00 65 ff [ 343.531403][ C0] RSP: 0018:ffffc9000dadf730 EFLAGS: 00000246 [ 343.537506][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff88802a3eda00 [ 343.545768][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e13edc0 [ 343.553760][ C0] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000000 [ 343.561751][ C0] R10: ffffc9000dadf960 R11: fffff52001b5bf2f R12: dffffc0000000000 [ 343.569763][ C0] R13: ffff88802a3eda00 R14: ffffffff8e13edc0 R15: 0000000000000000 [ 343.577772][ C0] __might_resched+0xa6/0x610 [ 343.582482][ C0] ? __pfx___might_resched+0x10/0x10 [ 343.587791][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 343.592841][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 343.598408][ C0] ? sock_recvmsg_nosec+0xa1/0x1c0 [ 343.603576][ C0] __might_fault+0x77/0x130 [ 343.608110][ C0] _copy_from_user+0x28/0xb0 [ 343.612734][ C0] get_compat_msghdr+0xad/0x4a0 [ 343.617611][ C0] ? __pfx_get_compat_msghdr+0x10/0x10 [ 343.623097][ C0] ? rcu_is_watching+0x15/0xb0 [ 343.627884][ C0] ? ___sys_recvmsg+0x1c4/0x510 [ 343.632929][ C0] ___sys_recvmsg+0x17f/0x510 [ 343.637631][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 343.642866][ C0] do_recvmmsg+0x36a/0x770 [ 343.647309][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 343.652278][ C0] ? kcov_ioctl+0x200/0x640 [ 343.656820][ C0] ? kfree+0x4d/0x440 [ 343.660855][ C0] ? fput+0xa0/0xd0 [ 343.664705][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 343.670728][ C0] __sys_recvmmsg+0x19d/0x280 [ 343.675436][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 343.680712][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 343.685684][ C0] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 343.691886][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 343.697049][ C0] do_fast_syscall_32+0x34/0x80 [ 343.701930][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.708371][ C0] RIP: 0023:0xf7f13539 [ 343.712549][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.732429][ C0] RSP: 002b:00000000f501555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 343.740950][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 343.748935][ C0] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 343.756916][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.764944][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.772936][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.780945][ C0] [ 343.783984][ C0] Modules linked in: [ 343.788129][ C0] ---[ end trace 0000000000000000 ]--- [ 343.793670][ C0] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 343.799534][ C0] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 79 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 fc 78 30 f8 4d 8b 24 24 e8 93 f4 [ 343.819249][ C0] RSP: 0018:ffffc900000065d0 EFLAGS: 00010202 [ 343.825421][ C0] RAX: 0000000000000083 RBX: ffff8880268f9a20 RCX: 0000000000000100 [ 343.833477][ C0] RDX: ffff88802a3eda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.841499][ C0] RBP: ffff8880268f9a37 R08: 0000000000000000 R09: ffffffff89d46d16 [ 343.849558][ C0] R10: ffffc900000068a0 R11: fffff52000000d1a R12: 0000000000000418 [ 343.857710][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004d1f346 [ 343.865793][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f5015b40 [ 343.874826][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 343.881468][ C0] CR2: 00000000801d8018 CR3: 0000000077e9a000 CR4: 00000000003526f0 [ 343.889515][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.897583][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.905616][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 343.913169][ C0] Kernel Offset: disabled [ 343.917509][ C0] Rebooting in 86400 seconds..