last executing test programs: 13.998203175s ago: executing program 0 (id=3811): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.294064344s ago: executing program 0 (id=3812): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e90200", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b", 0xcd}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f", 0x78}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.116514021s ago: executing program 1 (id=3819): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 11.060086532s ago: executing program 4 (id=3821): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x244) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 9.945073761s ago: executing program 0 (id=3824): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='&:}\x00', &(0x7f00000002c0)="1b", 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)={0x40, 0x7, 0x57, "9cf792d715460e3f93bf0762b609cf299cdabeedeaeb1752535d9f0c9f65a28bc9578268a4b34b185ee54dd01a4c3e32d08ed1f23b950fb84435e6ea707f2e899d2e59e9069fcc29a6575863378eb6c2cb7456b8ff5551"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1e0, 0x4b}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "e374"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) 9.935537791s ago: executing program 4 (id=3825): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.481338419s ago: executing program 3 (id=3827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.476336259s ago: executing program 1 (id=3837): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x20008800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x28, 0x24, 0x107, 0xfffffefe, 0x0, {0x3, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x8010) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8000000000000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0xfff, 0x1, 0xff, 0x5, 0x3, 0x6}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) inotify_init() syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x0, 'queue0\x00', 0x7d}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX]) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.43479105s ago: executing program 3 (id=3828): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x63, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea9"}, @generic={0x80, 0x11, "09e12e5f0b6bdcf72f2ec7008a15fa88b0"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @generic={0x8}, @generic={0x1, 0x1, '+'}]}}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xe98}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.698837819s ago: executing program 2 (id=3829): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x6855e913, 0x1, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000001a000020"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001200", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.197282963s ago: executing program 3 (id=3830): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 6.12800546s ago: executing program 4 (id=3831): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}, {@barrier}, {@part={'part', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@nobarrier}]}, 0xfe, 0x5de, &(0x7f0000000d40)="$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") 6.065025742s ago: executing program 3 (id=3832): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x80805, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.7667976s ago: executing program 3 (id=3833): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@getstats={0x1c, 0x5e, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x1c}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000150) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) r3 = socket(0xa, 0x1, 0x84) r4 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) dup3(r4, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r6, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 5.76608259s ago: executing program 2 (id=3844): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc2010) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.621381003s ago: executing program 2 (id=3834): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e90200", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b", 0xcd}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f", 0x78}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.521134016s ago: executing program 1 (id=3835): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 5.305131312s ago: executing program 4 (id=3836): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x244) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 5.199631395s ago: executing program 0 (id=3838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x40000000000ff80, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYRESHEX], 0xa8}}, 0x40080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x24008000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="76010000"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00004d8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000007c0)="b9d20900000f320f01c4470fe31d27f80000360fc71c1755d6360f235a3e420f01df420f01d166400f6d790e0fc77f0f", 0x30}], 0x1, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000906033e31442b0000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700060000000c000180080001400a0101010c00028008000140200000000c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0xa, 0x1) bind$inet6(r8, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) 4.461110434s ago: executing program 1 (id=3839): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x600}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) readv(r0, &(0x7f0000000200), 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 4.433254534s ago: executing program 0 (id=3840): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902"], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b", 0x63}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e90200", 0x87}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 3.793791182s ago: executing program 4 (id=3841): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac"}, 0x74, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 3.642885195s ago: executing program 1 (id=3842): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.633106211s ago: executing program 4 (id=3843): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.521893544s ago: executing program 2 (id=3845): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x6855e913, 0x1, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000001a000020"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001200", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.469126066s ago: executing program 3 (id=3846): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.691133846s ago: executing program 2 (id=3847): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x0, 'ovf\x00', 0x3e, 0xff, 0x15}, 0x2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.575199669s ago: executing program 0 (id=3848): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) 723.673151ms ago: executing program 2 (id=3849): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}, {@barrier}, {@part={'part', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@nobarrier}]}, 0xfe, 0x5de, &(0x7f0000000d40)="$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") 0s ago: executing program 1 (id=3850): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e"], 0x0) kernel console output (not intermixed with test programs): 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1326.002197][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.046822][ T21] usb 4-1: Product: syz [ 1326.096428][ T21] usb 4-1: Manufacturer: syz [ 1326.105861][ T21] usb 4-1: SerialNumber: syz [ 1326.304032][ T21] usb 4-1: config 0 descriptor?? [ 1326.709320][T20519] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1326.821747][ T21] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1326.832452][ T21] em28xx 4-1:0.132: Video interface 132 found: [ 1326.956357][T20524] loop1: detected capacity change from 0 to 128 [ 1327.187401][T20528] loop2: detected capacity change from 0 to 32768 [ 1327.194452][T20527] loop4: detected capacity change from 0 to 32768 [ 1327.267570][ T21] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1327.388338][T20524] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1327.425522][T20530] device syzkaller0 entered promiscuous mode [ 1327.522238][T20535] overlayfs: missing 'lowerdir' [ 1327.541840][T20524] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.218286][T20543] overlayfs: missing 'lowerdir' [ 1328.327797][ T4520] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1328.757758][ T21] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1328.783021][ T21] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1328.909142][T20548] loop3: detected capacity change from 0 to 128 [ 1328.957701][ T4520] usb 5-1: Using ep0 maxpacket: 32 [ 1328.966185][T20550] loop2: detected capacity change from 0 to 2048 [ 1328.972820][ T21] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1328.995233][ T21] em28xx 4-1:0.132: analog set to bulk mode. [ 1329.008031][T20548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1329.038159][T20548] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.047740][T20550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1329.087654][ T4520] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1329.321969][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1329.436559][ T4520] usb 5-1: config 0 has no interface number 0 [ 1329.478800][ T21] usb 4-1: USB disconnect, device number 92 [ 1329.536415][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1329.796091][ T4520] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1329.809319][ T21] em28xx 4-1:0.132: Disconnecting em28xx [ 1329.824998][ T3983] em28xx 4-1:0.132: Registering V4L2 extension [ 1330.047466][ T4520] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1330.056572][ T4520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.641845][T20568] loop1: detected capacity change from 0 to 8 [ 1330.826735][ T3983] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1331.728313][ T4520] usb 5-1: Product: syz [ 1331.732548][ T4520] usb 5-1: Manufacturer: syz [ 1331.737181][ T4520] usb 5-1: SerialNumber: syz [ 1331.996340][ T3983] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1332.431443][ T3983] em28xx 4-1:0.132: No AC97 audio processor [ 1332.451070][ T4520] usb 5-1: config 0 descriptor?? [ 1332.456444][ T3983] usb 4-1: Decoder not found [ 1332.461175][ T3983] em28xx 4-1:0.132: failed to create media graph [ 1332.467970][ T4520] usb 5-1: can't set config #0, error -71 [ 1332.475525][ T3983] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1332.482698][ T4520] usb 5-1: USB disconnect, device number 50 [ 1332.551830][ T3983] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1332.587662][ T21] em28xx 4-1:0.132: Closing input extension [ 1332.695741][ T21] em28xx 4-1:0.132: Freeing device [ 1332.781557][T20581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1332.830549][T20581] loop4: detected capacity change from 0 to 1024 [ 1332.840218][T20579] loop2: detected capacity change from 0 to 128 [ 1332.894522][T20581] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1333.036899][T20579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1333.097655][ T21] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1333.200019][T20579] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.327516][ T21] usb 4-1: device descriptor read/64, error -71 [ 1333.579498][T20587] device syzkaller0 entered promiscuous mode [ 1333.607637][ T21] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1333.648350][T20590] loop4: detected capacity change from 0 to 128 [ 1333.777526][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1333.913341][T20590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1334.057835][T20590] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.089920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.204244][T20596] loop3: detected capacity change from 0 to 2048 [ 1334.388552][T20596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1334.689107][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1335.012228][ T26] audit: type=1800 audit(1777659482.777:133): pid=20603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3643" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 1335.032328][T17499] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1335.231357][T20606] loop2: detected capacity change from 0 to 128 [ 1335.329741][T20606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1335.354492][T17499] usb 1-1: Using ep0 maxpacket: 16 [ 1335.379842][T20606] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.411766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.611206][T17499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.621636][T17499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1335.681715][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1336.023935][T20614] kvm [20613]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1336.051366][T20614] kvm [20613]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1336.074578][T20614] kvm [20613]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1336.089506][T20614] kvm [20613]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1336.128372][T20614] kvm [20613]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1336.207324][T20621] loop3: detected capacity change from 0 to 2048 [ 1336.286306][T20621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1336.417700][T17499] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1336.451296][T17499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.517605][T17499] usb 1-1: Product: syz [ 1336.549541][T17499] usb 1-1: Manufacturer: syz [ 1336.554194][T17499] usb 1-1: SerialNumber: syz [ 1337.199451][T20633] loop4: detected capacity change from 0 to 8 [ 1337.430602][T20632] loop1: detected capacity change from 0 to 8 [ 1338.698630][T20635] loop0: detected capacity change from 0 to 8 [ 1338.727718][T17499] usb 1-1: 0:2 : does not exist [ 1338.753873][T20641] loop3: detected capacity change from 0 to 128 [ 1338.768301][T20640] device syzkaller0 entered promiscuous mode [ 1338.790412][T20637] loop1: detected capacity change from 0 to 128 [ 1338.817019][T17499] usb 1-1: USB disconnect, device number 41 [ 1338.895698][T20646] loop4: detected capacity change from 0 to 128 [ 1338.902922][T20641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1338.913786][T20641] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.140464][T20637] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1339.237336][T20650] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1339.245365][T20650] SQUASHFS error: Failed to read block 0x0: -5 [ 1339.251687][T20650] SQUASHFS error: Unable to read data cache entry [0] [ 1339.258948][T20650] SQUASHFS error: Unable to read page, block 0, size ff [ 1339.267052][T20650] SQUASHFS error: Unable to read data cache entry [0] [ 1339.273945][T20650] SQUASHFS error: Unable to read page, block 0, size ff [ 1339.726279][T20650] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1339.734236][T20650] SQUASHFS error: Failed to read block 0x0: -5 [ 1339.746279][T20650] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1339.754399][T20650] SQUASHFS error: Failed to read block 0x0: -5 [ 1339.765358][T20650] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1339.773824][T20650] SQUASHFS error: Failed to read block 0x0: -5 [ 1339.825624][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.851983][T20637] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.884284][ T26] audit: type=1800 audit(1777659487.547:134): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3651" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 1339.953308][T20646] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1339.974500][T20646] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.243883][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1340.907394][T20667] loop1: detected capacity change from 0 to 2048 [ 1340.941551][T20667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.122435][T17499] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1341.146175][T20670] loop0: detected capacity change from 0 to 128 [ 1341.215545][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'. [ 1341.377645][T17499] usb 3-1: Using ep0 maxpacket: 16 [ 1341.400057][T20672] loop4: detected capacity change from 0 to 2048 [ 1341.444962][T20670] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1341.517909][T17499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.606709][T20670] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.666227][T17499] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.690296][T20672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1342.092152][T17499] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1342.554999][T17499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.565190][T20682] loop1: detected capacity change from 0 to 128 [ 1342.596409][T17499] usb 3-1: Product: syz [ 1342.602409][T17499] usb 3-1: Manufacturer: syz [ 1342.607125][T17499] usb 3-1: SerialNumber: syz [ 1342.641882][T20685] loop4: detected capacity change from 0 to 8 [ 1342.704124][T20682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1342.718492][T20690] loop0: detected capacity change from 0 to 2048 [ 1342.732457][T20690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1342.767716][T20682] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.257049][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1343.438389][T17499] usb 3-1: 0:2 : does not exist [ 1343.770874][T17499] usb 3-1: USB disconnect, device number 89 [ 1343.788356][T20695] device syzkaller0 entered promiscuous mode [ 1344.008802][T20702] loop1: detected capacity change from 0 to 32768 [ 1344.061300][T20704] loop0: detected capacity change from 0 to 2048 [ 1344.075969][T20708] loop2: detected capacity change from 0 to 128 [ 1344.174919][T20704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1344.235740][T20708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1344.257626][T20708] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.440415][T20714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1344.461077][T20714] overlayfs: missing 'lowerdir' [ 1345.030100][ T26] audit: type=1800 audit(1777659492.767:135): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3668" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 1345.248883][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1345.351481][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1345.465843][ T23] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1345.604129][T20724] tipc: Enabling of bearer rejected, failed to enable media [ 1345.737600][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1345.857895][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1345.882789][ T23] usb 4-1: config 0 has no interface number 0 [ 1345.945427][ T23] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1346.157594][ T23] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1346.170305][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.201201][ T23] usb 4-1: Product: syz [ 1346.205398][ T23] usb 4-1: Manufacturer: syz [ 1346.230686][T20749] loop4: detected capacity change from 0 to 128 [ 1346.230709][ T23] usb 4-1: SerialNumber: syz [ 1346.262792][ T23] usb 4-1: config 0 descriptor?? [ 1346.311121][ T23] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1346.347236][T20749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1346.381220][ T23] em28xx 4-1:0.132: Video interface 132 found: [ 1346.415206][T20749] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.454544][ T4520] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1346.469375][T20751] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1346.710632][ T4520] usb 1-1: Using ep0 maxpacket: 32 [ 1346.808128][ T23] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1346.828741][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1346.861545][ T4520] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1346.895614][ T4520] usb 1-1: config 0 has no interface number 0 [ 1346.937703][T17499] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1346.957788][ T4520] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1347.164689][ T4520] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1347.174235][ T4520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.201666][T17499] usb 2-1: Using ep0 maxpacket: 32 [ 1347.211786][ T4520] usb 1-1: Product: syz [ 1347.215969][ T4520] usb 1-1: Manufacturer: syz [ 1347.222089][ T4520] usb 1-1: SerialNumber: syz [ 1347.261771][ T4520] usb 1-1: config 0 descriptor?? [ 1347.310197][ T4520] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1347.320926][T17499] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1347.348940][T17499] usb 2-1: config 0 has no interface number 0 [ 1347.355068][T17499] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1347.375753][ T4520] em28xx 1-1:0.132: Video interface 132 found: [ 1347.547598][T17499] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1347.565844][T17499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.574259][T17499] usb 2-1: Product: syz [ 1347.578773][T17499] usb 2-1: Manufacturer: syz [ 1347.583398][T17499] usb 2-1: SerialNumber: syz [ 1347.590496][T17499] usb 2-1: config 0 descriptor?? [ 1347.631293][ T23] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1347.643589][T17499] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1347.657513][ T23] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1347.673337][T17499] em28xx 2-1:0.132: Video interface 132 found: [ 1347.679942][ T21] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1347.737615][ T4520] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1347.879258][ T23] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1347.887116][ T23] em28xx 4-1:0.132: analog set to bulk mode. [ 1347.920621][ T23] usb 4-1: USB disconnect, device number 95 [ 1347.933415][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 1347.943697][ T23] em28xx 4-1:0.132: Disconnecting em28xx [ 1347.953766][ T4261] em28xx 4-1:0.132: Registering V4L2 extension [ 1348.040672][ T4261] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1348.049302][ T4261] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1348.056439][ T4261] em28xx 4-1:0.132: No AC97 audio processor [ 1348.063888][T17499] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1348.070398][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.080925][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1348.090789][ T5368] Bluetooth: hci4: command 0x0406 tx timeout [ 1348.093707][ T4261] usb 4-1: Decoder not found [ 1348.101775][ T4261] em28xx 4-1:0.132: failed to create media graph [ 1348.108231][ T4261] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1348.116113][ T4261] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1348.125120][ T23] em28xx 4-1:0.132: Closing input extension [ 1348.133845][ T23] em28xx 4-1:0.132: Freeing device [ 1348.183975][T20734] Set syz1 is full, maxelem 65536 reached [ 1348.197819][ T4520] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1348.211477][ T4520] em28xx 1-1:0.132: board has no eeprom [ 1348.240237][T20769] loop2: detected capacity change from 0 to 128 [ 1348.257796][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1348.266857][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.276206][ T21] usb 5-1: Product: syz [ 1348.280872][ T21] usb 5-1: Manufacturer: syz [ 1348.285484][ T21] usb 5-1: SerialNumber: syz [ 1348.297555][ T4520] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1348.305415][ T4520] em28xx 1-1:0.132: analog set to bulk mode. [ 1348.312117][T20769] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1348.340906][ T4520] usb 1-1: USB disconnect, device number 42 [ 1348.346937][ T4261] em28xx 1-1:0.132: Registering V4L2 extension [ 1348.357951][ T4520] em28xx 1-1:0.132: Disconnecting em28xx [ 1348.363767][T20769] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.544889][ T4261] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1348.552308][T17499] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1348.571764][T20774] device syzkaller0 entered promiscuous mode [ 1348.580957][ T4261] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1348.591438][T17499] em28xx 2-1:0.132: board has no eeprom [ 1348.599735][ T4261] em28xx 1-1:0.132: No AC97 audio processor [ 1348.607823][ T21] usb 5-1: 0:2 : does not exist [ 1348.655815][ T21] usb 5-1: USB disconnect, device number 51 [ 1348.663730][ T4261] usb 1-1: Decoder not found [ 1348.668424][ T4261] em28xx 1-1:0.132: failed to create media graph [ 1348.674781][ T4261] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1348.685539][ T4261] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1348.717505][T17499] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1348.725436][T17499] em28xx 2-1:0.132: analog set to bulk mode. [ 1348.748543][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 1349.021606][T17499] usb 2-1: USB disconnect, device number 91 [ 1349.168506][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.189199][ T4520] em28xx 1-1:0.132: Closing input extension [ 1349.209688][ T4520] em28xx 1-1:0.132: Freeing device [ 1349.235458][T17499] em28xx 2-1:0.132: Disconnecting em28xx [ 1349.306902][ T4261] em28xx 2-1:0.132: Registering V4L2 extension [ 1349.411039][ T4261] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1349.438440][ T4261] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1349.456877][ T4261] em28xx 2-1:0.132: No AC97 audio processor [ 1349.474455][ T4261] usb 2-1: Decoder not found [ 1349.476863][T20787] loop2: detected capacity change from 0 to 2048 [ 1349.485847][ T4261] em28xx 2-1:0.132: failed to create media graph [ 1349.497121][T20789] loop1: detected capacity change from 0 to 2048 [ 1349.506136][ T4261] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1349.520206][T20787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1349.546446][T20789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1349.564115][ T4261] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1349.627206][T17499] em28xx 2-1:0.132: Closing input extension [ 1349.814261][T17499] em28xx 2-1:0.132: Freeing device [ 1350.234481][ T26] audit: type=1800 audit(1777659497.967:136): pid=20796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3687" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 1350.377773][ T4520] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1350.457580][ T21] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1350.526244][T20803] loop2: detected capacity change from 0 to 128 [ 1350.577958][T20803] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1350.594520][T20803] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.647497][ T4520] usb 1-1: Using ep0 maxpacket: 32 [ 1350.777617][ T5368] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1350.807610][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 1350.919268][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1351.110220][ T5368] usb 2-1: Using ep0 maxpacket: 16 [ 1351.247924][ T5368] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.277890][ T5368] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1351.502555][ T4520] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1351.511673][ T4520] usb 1-1: config 0 has no interface number 0 [ 1351.517836][ T4520] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.547693][ T21] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1351.555909][ T21] usb 5-1: config 0 has no interface number 0 [ 1351.572560][ T21] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.584587][T20810] loop2: detected capacity change from 0 to 128 [ 1351.607497][ T5368] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1351.617259][ T5368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.625652][ T5368] usb 2-1: Product: syz [ 1351.630692][ T5368] usb 2-1: Manufacturer: syz [ 1351.635310][ T5368] usb 2-1: SerialNumber: syz [ 1351.638075][T20810] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1351.660187][T20810] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1351.692760][ T4520] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1351.702399][ T4520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.716095][ T4520] usb 1-1: Product: syz [ 1351.720497][ T4520] usb 1-1: Manufacturer: syz [ 1351.725347][ T4520] usb 1-1: SerialNumber: syz [ 1351.738830][ T4520] usb 1-1: config 0 descriptor?? [ 1351.747803][ T21] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1351.762654][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.771154][ T21] usb 5-1: Product: syz [ 1351.775463][ T21] usb 5-1: Manufacturer: syz [ 1351.788346][ T4520] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1351.803292][ T21] usb 5-1: SerialNumber: syz [ 1351.816926][ T21] usb 5-1: config 0 descriptor?? [ 1351.827140][ T4520] em28xx 1-1:0.132: Video interface 132 found: [ 1351.869873][ T21] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1351.885352][ T21] em28xx 5-1:0.132: Video interface 132 found: [ 1351.903088][ T4392] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1352.045874][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1352.218194][ T4520] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1352.377814][ T21] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1352.617708][ T5368] usb 2-1: 0:2 : does not exist [ 1352.644456][T20817] loop2: detected capacity change from 0 to 128 [ 1352.703389][T20817] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1352.717647][T20817] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.727765][ T4392] usb 4-1: Using ep0 maxpacket: 32 [ 1352.761181][ T5368] usb 2-1: USB disconnect, device number 92 [ 1352.957513][ T4520] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 1352.964241][ T4520] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1353.037092][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 1353.197703][ T21] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1353.208295][ T21] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1353.277820][ T4520] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1353.301296][ T4520] em28xx 1-1:0.132: analog set to bulk mode. [ 1353.339548][T17499] em28xx 1-1:0.132: Registering V4L2 extension [ 1353.453839][ T4520] usb 1-1: USB disconnect, device number 43 [ 1353.460133][ T21] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1353.577472][ T21] em28xx 5-1:0.132: analog set to bulk mode. [ 1353.588676][ T4520] em28xx 1-1:0.132: Disconnecting em28xx [ 1353.638300][ T4392] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1353.646500][ T4392] usb 4-1: config 0 has no interface number 0 [ 1353.652781][ T4392] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1353.663211][ T21] usb 5-1: USB disconnect, device number 52 [ 1353.690393][ T21] em28xx 5-1:0.132: Disconnecting em28xx [ 1353.744368][T17499] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1353.751514][T17499] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1353.759564][T17499] em28xx 1-1:0.132: No AC97 audio processor [ 1353.767124][T17499] usb 1-1: Decoder not found [ 1353.772285][T17499] em28xx 1-1:0.132: failed to create media graph [ 1353.778851][T17499] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1353.786561][T17499] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1353.796637][ T5101] em28xx 5-1:0.132: Registering V4L2 extension [ 1353.827644][ T4392] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1353.840695][ T4392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.850318][ T4392] usb 4-1: Product: syz [ 1353.854506][ T4392] usb 4-1: Manufacturer: syz [ 1353.877571][ T4392] usb 4-1: SerialNumber: syz [ 1353.914343][ T4392] usb 4-1: config 0 descriptor?? [ 1353.919519][ T5368] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1353.937402][T20831] loop2: detected capacity change from 0 to 128 [ 1353.958798][ T5101] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1353.965860][ T5101] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1353.976908][T20831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1353.987521][ T5101] em28xx 5-1:0.132: No AC97 audio processor [ 1353.989463][ T5101] usb 5-1: Decoder not found [ 1354.000776][ T4392] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1354.008580][T20831] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.013024][ T4392] em28xx 4-1:0.132: Video interface 132 found: [ 1354.065386][ T5101] em28xx 5-1:0.132: failed to create media graph [ 1354.091633][T20835] loop4: detected capacity change from 0 to 128 [ 1354.091725][ T5101] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1354.107239][ T5101] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1354.116456][ T4520] em28xx 1-1:0.132: Closing input extension [ 1354.122975][ T21] em28xx 5-1:0.132: Closing input extension [ 1354.134632][ T4520] em28xx 1-1:0.132: Freeing device [ 1354.150925][ T21] em28xx 5-1:0.132: Freeing device [ 1354.311425][T20835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1354.336425][T20835] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.412691][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1355.009048][ T5368] usb 2-1: Using ep0 maxpacket: 32 [ 1355.019497][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1355.077643][ T4392] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1355.177692][ T5368] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1355.191098][ T5368] usb 2-1: config 0 has no interface number 0 [ 1355.197759][ T5368] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1355.318755][T20844] loop0: detected capacity change from 0 to 128 [ 1355.365227][T20844] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1355.376769][T20844] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.441405][ T5368] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1355.451001][ T5368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.459126][ T5368] usb 2-1: Product: syz [ 1355.463399][ T5368] usb 2-1: Manufacturer: syz [ 1355.468095][ T5368] usb 2-1: SerialNumber: syz [ 1355.474360][ T5368] usb 2-1: config 0 descriptor?? [ 1355.536915][ T5368] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1355.605039][ T5368] em28xx 2-1:0.132: Video interface 132 found: [ 1355.639901][T20852] loop1: detected capacity change from 0 to 2048 [ 1355.661347][T20852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1355.731464][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 1355.798189][ T5368] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1355.827613][ T4392] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1355.888592][ T4392] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1356.147671][ T5368] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1356.243152][ T5368] em28xx 2-1:0.132: board has no eeprom [ 1356.347617][ T4392] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1356.369860][ T5368] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1356.422146][ T4392] em28xx 4-1:0.132: analog set to bulk mode. [ 1356.497567][ T5368] em28xx 2-1:0.132: analog set to bulk mode. [ 1356.555362][ T4392] usb 4-1: USB disconnect, device number 96 [ 1356.567569][ T5368] usb 2-1: USB disconnect, device number 93 [ 1356.735642][T20860] loop3: detected capacity change from 0 to 1024 [ 1356.761349][T20861] loop4: detected capacity change from 0 to 8 [ 1356.884804][T20860] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1357.325147][ T4392] em28xx 4-1:0.132: Disconnecting em28xx [ 1357.331459][ T5368] em28xx 2-1:0.132: Disconnecting em28xx [ 1357.338627][ T4935] em28xx 4-1:0.132: Registering V4L2 extension [ 1357.497813][T20870] loop0: detected capacity change from 0 to 128 [ 1357.575004][T20870] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1357.597708][T20870] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.629836][ T4935] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1357.636905][ T4935] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1357.652636][ T4935] em28xx 4-1:0.132: No AC97 audio processor [ 1357.659831][ T4935] usb 4-1: Decoder not found [ 1357.664441][ T4935] em28xx 4-1:0.132: failed to create media graph [ 1357.670949][ T4935] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1357.678542][ T4935] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1357.687300][ T4407] em28xx 2-1:0.132: Registering V4L2 extension [ 1357.698467][T20875] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1357.727512][ T4228] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1357.798216][ T4407] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1357.805459][ T4407] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1357.817831][ T4407] em28xx 2-1:0.132: No AC97 audio processor [ 1357.824968][ T4407] usb 2-1: Decoder not found [ 1357.833604][ T4407] em28xx 2-1:0.132: failed to create media graph [ 1357.841325][ T4407] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1357.865624][ T4407] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1357.899990][ T4392] em28xx 4-1:0.132: Closing input extension [ 1357.906576][ T5368] em28xx 2-1:0.132: Closing input extension [ 1357.938102][ T4392] em28xx 4-1:0.132: Freeing device [ 1357.959571][ T5368] em28xx 2-1:0.132: Freeing device [ 1358.014089][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 1358.117563][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1358.228411][ T4228] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1358.383940][ T4392] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1358.422801][ T4228] usb 3-1: config 0 has no interface number 0 [ 1358.616522][T20887] loop1: detected capacity change from 0 to 32768 [ 1358.626810][ T4228] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1358.637088][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.771073][T20890] loop0: detected capacity change from 0 to 128 [ 1358.891043][T20894] loop4: detected capacity change from 0 to 2048 [ 1358.927717][ T4228] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1358.945119][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.027212][T20896] overlayfs: missing 'lowerdir' [ 1359.032853][ T4228] usb 3-1: Product: syz [ 1359.037077][ T4228] usb 3-1: Manufacturer: syz [ 1359.041782][ T4228] usb 3-1: SerialNumber: syz [ 1359.054004][ T4228] usb 3-1: config 0 descriptor?? [ 1359.107617][ T4392] usb 4-1: config 0 has no interfaces? [ 1359.126657][T20890] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1359.141053][ T4392] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1359.164010][T20894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1359.546623][ T4228] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1359.615503][T20890] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.674254][ T4392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.848806][ T4228] em28xx 3-1:0.132: Video interface 132 found: [ 1360.297292][ T26] audit: type=1800 audit(1777659508.027:137): pid=20900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3710" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 1360.448558][ T4392] usb 4-1: config 0 descriptor?? [ 1360.607657][ T4228] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1360.614410][T20907] loop1: detected capacity change from 0 to 32768 [ 1360.702782][T17499] usb 4-1: USB disconnect, device number 97 [ 1360.738717][T20915] loop0: detected capacity change from 0 to 128 [ 1360.753343][T20917] loop4: detected capacity change from 0 to 1024 [ 1360.792995][T20917] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1360.977040][T20915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1361.007615][T20915] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.248299][T20921] loop4: detected capacity change from 0 to 32768 [ 1361.257938][T20922] overlayfs: missing 'lowerdir' [ 1361.848737][ T4228] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 1361.855638][ T4228] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1361.866099][T20926] loop3: detected capacity change from 0 to 2048 [ 1362.004116][T20926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1362.109169][ T4228] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1362.127020][ T4228] em28xx 3-1:0.132: analog set to bulk mode. [ 1362.326597][ T4228] usb 3-1: USB disconnect, device number 90 [ 1362.333333][ T4228] em28xx 3-1:0.132: Disconnecting em28xx [ 1362.341073][ T4940] em28xx 3-1:0.132: Registering V4L2 extension [ 1362.474409][T20942] overlayfs: missing 'lowerdir' [ 1363.175592][T20947] loop2: detected capacity change from 0 to 2048 [ 1363.307595][T20947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.362584][ T4940] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1363.372003][T20953] loop1: detected capacity change from 0 to 2048 [ 1363.388739][ T4940] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1363.395876][ T4940] em28xx 3-1:0.132: No AC97 audio processor [ 1363.424611][T20956] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1363.429034][ T4940] usb 3-1: Decoder not found [ 1363.447262][ T4940] em28xx 3-1:0.132: failed to create media graph [ 1363.479953][T20953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.524732][ T4940] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1363.752537][ T4940] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1363.761374][ T4228] em28xx 3-1:0.132: Closing input extension [ 1364.150069][ T26] audit: type=1800 audit(1777659511.877:138): pid=20961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3719" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 1364.250189][ T4228] em28xx 3-1:0.132: Freeing device [ 1364.348574][T20968] loop0: detected capacity change from 0 to 16 [ 1364.375790][T20966] loop1: detected capacity change from 0 to 2048 [ 1364.386894][T20970] loop2: detected capacity change from 0 to 128 [ 1364.480230][T20966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1364.624947][T20972] cramfs: Error -3 while decompressing! [ 1364.630756][T20972] cramfs: ffffffff964040c8(27)->ffff88804a136000(4096) [ 1364.637724][T20972] cramfs: Error -3 while decompressing! [ 1364.643278][T20972] cramfs: ffffffff964040e3(16)->ffff88804a137000(4096) [ 1364.650217][T20972] cramfs: Error -3 while decompressing! [ 1364.656196][T20972] cramfs: ffffffff964040c8(27)->ffff88804a136000(4096) [ 1364.668434][ T26] audit: type=1800 audit(1777659512.427:139): pid=20972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3724" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1364.749372][T20970] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1364.777589][T20970] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.090809][T20977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1365.370508][T20977] ext4 filesystem being mounted at /325/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.644640][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1365.866339][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1366.002741][T20983] tipc: Enabled bearer , priority 0 [ 1366.097630][ T5368] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1366.137399][T20983] tipc: Resetting bearer [ 1366.235502][T20982] tipc: Disabling bearer [ 1366.340780][T20993] set_capacity_and_notify: 1 callbacks suppressed [ 1366.340796][T20993] loop2: detected capacity change from 0 to 128 [ 1366.428447][T20993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1366.477567][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.483878][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.491841][T20993] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1366.524128][ T5368] usb 2-1: config 0 has no interfaces? [ 1366.530108][ T5368] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1366.542982][ T5368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.696302][ T5368] usb 2-1: config 0 descriptor?? [ 1366.748335][ T4228] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1366.844559][ T4520] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1367.097583][ T4520] usb 1-1: Using ep0 maxpacket: 16 [ 1367.228157][ T4520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.243104][ T4520] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1367.343432][ T5368] usb 2-1: USB disconnect, device number 94 [ 1367.407705][ T4520] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1367.428607][ T4520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.443786][ T4520] usb 1-1: Product: syz [ 1367.458232][ T4520] usb 1-1: Manufacturer: syz [ 1367.462971][ T4520] usb 1-1: SerialNumber: syz [ 1367.598750][T21003] kvm [21002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcc [ 1367.613500][T21003] kvm [21002]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1367.617679][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 1367.634187][T21003] kvm [21002]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x28 [ 1367.643525][T21003] kvm [21002]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1367.797662][ T4520] usb 1-1: 0:2 : does not exist [ 1367.838219][T21008] loop1: detected capacity change from 0 to 2048 [ 1367.885441][T21008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1367.900612][ T4520] usb 1-1: USB disconnect, device number 44 [ 1368.113866][ T4228] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1368.123696][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.151136][ T4228] usb 5-1: Product: syz [ 1368.155355][ T4228] usb 5-1: Manufacturer: syz [ 1368.177473][ T4228] usb 5-1: SerialNumber: syz [ 1368.290900][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1368.834299][T21014] loop0: detected capacity change from 0 to 128 [ 1368.880983][ T4228] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1368.900673][T21017] loop2: detected capacity change from 0 to 16 [ 1368.931667][T21022] loop3: detected capacity change from 0 to 128 [ 1368.943338][T21014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1368.965120][T21014] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.124515][T21022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1369.149250][ T4228] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1369.161505][T21022] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.225760][T21023] device syzkaller0 entered promiscuous mode [ 1369.246270][T21026] cramfs: Error -3 while decompressing! [ 1369.252014][T21026] cramfs: ffffffff964040c8(27)->ffff8880542c4000(4096) [ 1369.258989][T21026] cramfs: Error -3 while decompressing! [ 1369.264928][T21026] cramfs: ffffffff964040e3(16)->ffff88804ca5f000(4096) [ 1369.271892][T21026] cramfs: Error -3 while decompressing! [ 1369.277482][T21026] cramfs: ffffffff964040c8(27)->ffff8880542c4000(4096) [ 1369.317588][ T26] audit: type=1800 audit(1777659517.047:140): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3737" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1369.410600][ T4228] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1369.419208][ T4228] usb 5-1: media controller created [ 1369.435136][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1369.529702][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3735'. [ 1370.141457][ T4228] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1370.164852][ T4228] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 1370.175970][ T4228] usb 5-1: USB disconnect, device number 53 [ 1370.265833][T21036] loop0: detected capacity change from 0 to 128 [ 1370.303641][T21038] loop3: detected capacity change from 0 to 128 [ 1370.314425][T21036] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1370.327804][T21036] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.541761][T21038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1370.552530][T21038] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.607634][ T21] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1370.858444][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1371.024173][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1371.426551][T21050] loop4: detected capacity change from 0 to 2048 [ 1371.480417][T21053] loop0: detected capacity change from 0 to 128 [ 1371.517725][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 1371.575627][T21050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1371.624851][T21053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1371.637588][ T21] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1371.646970][ T21] usb 3-1: config 0 has no interface number 0 [ 1371.657894][ T21] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1371.673849][T21053] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.468433][ T21] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1372.490747][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.499063][ T21] usb 3-1: Product: syz [ 1372.503346][ T21] usb 3-1: Manufacturer: syz [ 1372.508058][ T21] usb 3-1: SerialNumber: syz [ 1372.534819][ T21] usb 3-1: config 0 descriptor?? [ 1372.564844][T21066] loop0: detected capacity change from 0 to 8 [ 1372.580162][ T21] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1372.598012][ T21] em28xx 3-1:0.132: Video interface 132 found: [ 1372.852480][ T23] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1373.007642][ T21] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1373.097578][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1373.219258][ T23] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1373.235730][ T23] usb 5-1: config 0 has no interface number 0 [ 1373.242095][ T23] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.288455][T21071] loop3: detected capacity change from 0 to 128 [ 1373.348087][T21071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1373.364218][T21071] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.422383][ T23] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1373.442509][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.469607][ T23] usb 5-1: Product: syz [ 1373.482368][ T23] usb 5-1: Manufacturer: syz [ 1373.495692][ T23] usb 5-1: SerialNumber: syz [ 1373.594879][T21069] kvm [21068]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcc [ 1373.612739][T21069] kvm [21068]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1373.625036][T21069] kvm [21068]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x28 [ 1373.672080][T21069] kvm [21068]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1373.672682][ T23] usb 5-1: config 0 descriptor?? [ 1373.716610][T21078] loop0: detected capacity change from 0 to 16 [ 1373.725508][ T23] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1373.739301][ T23] em28xx 5-1:0.132: Video interface 132 found: [ 1373.757604][ T21] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 1373.814847][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1374.086959][T21080] cramfs: Error -3 while decompressing! [ 1374.092776][T21080] cramfs: ffffffff964040c8(27)->ffff888071fdd000(4096) [ 1374.099723][T21080] cramfs: Error -3 while decompressing! [ 1374.105279][T21080] cramfs: ffffffff964040e3(16)->ffff888071fde000(4096) [ 1374.112485][T21080] cramfs: Error -3 while decompressing! [ 1374.118076][T21080] cramfs: ffffffff964040c8(27)->ffff888071fdd000(4096) [ 1374.176987][ T26] audit: type=1800 audit(1777659521.887:141): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3750" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1374.275886][ T21] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1374.341993][T21082] loop1: detected capacity change from 0 to 128 [ 1374.367661][T21084] loop3: detected capacity change from 0 to 128 [ 1374.377591][ T21] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1374.395411][ T21] em28xx 3-1:0.132: analog set to bulk mode. [ 1374.400843][T21082] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1374.416224][ T5101] em28xx 3-1:0.132: Registering V4L2 extension [ 1374.427297][ T21] usb 3-1: USB disconnect, device number 91 [ 1374.439057][ T21] em28xx 3-1:0.132: Disconnecting em28xx [ 1374.461733][T21084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1374.513909][ T5101] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1374.521394][ T5101] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1374.529243][T21084] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.593034][T21082] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.626105][ T23] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1374.632562][ T5101] em28xx 3-1:0.132: No AC97 audio processor [ 1374.640748][ T5101] usb 3-1: Decoder not found [ 1374.645363][ T5101] em28xx 3-1:0.132: failed to create media graph [ 1374.652072][ T5101] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1374.715374][ T5101] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1374.730384][ T21] em28xx 3-1:0.132: Closing input extension [ 1374.736635][T21091] loop2: detected capacity change from 0 to 128 [ 1374.788510][ T21] em28xx 3-1:0.132: Freeing device [ 1374.929026][T21091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1374.947743][T21091] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.007766][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1375.227157][ T5101] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1376.038609][ T5101] usb 1-1: Using ep0 maxpacket: 16 [ 1376.057686][ T23] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1376.064448][ T23] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1376.115673][T21106] loop1: detected capacity change from 0 to 2048 [ 1376.151533][T21109] loop2: detected capacity change from 0 to 128 [ 1376.196896][T21106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.197653][ T23] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1376.220852][T21109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1376.234667][ T23] em28xx 5-1:0.132: analog set to bulk mode. [ 1376.238428][T21109] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.262924][ T23] usb 5-1: USB disconnect, device number 54 [ 1376.279106][ T23] em28xx 5-1:0.132: Disconnecting em28xx [ 1376.284826][ T21] em28xx 5-1:0.132: Registering V4L2 extension [ 1376.327769][T21110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.472773][ T5101] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1376.481912][ T5101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.490339][ T5101] usb 1-1: Product: syz [ 1376.494520][ T5101] usb 1-1: Manufacturer: syz [ 1376.505477][ T5101] usb 1-1: SerialNumber: syz [ 1377.322273][ T5101] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1377.398302][ T5101] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1377.512848][ T5101] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1377.586353][ T5101] usb 1-1: media controller created [ 1377.614274][ T21] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1377.634629][ T21] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1377.695482][ T21] em28xx 5-1:0.132: No AC97 audio processor [ 1377.713101][ T5101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1377.733955][ T21] usb 5-1: Decoder not found [ 1377.742611][ T21] em28xx 5-1:0.132: failed to create media graph [ 1377.780424][ T21] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1377.792068][ T21] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1377.803017][ T23] em28xx 5-1:0.132: Closing input extension [ 1377.814287][ T23] em28xx 5-1:0.132: Freeing device [ 1377.881782][T21133] set_capacity_and_notify: 1 callbacks suppressed [ 1377.881797][T21133] loop4: detected capacity change from 0 to 8 [ 1377.930100][ T5101] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1377.981162][ T5101] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 1378.044123][ T5101] usb 1-1: USB disconnect, device number 45 [ 1378.683185][T21141] kvm [21140]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcc [ 1378.768096][T21141] kvm [21140]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1378.818933][T21141] kvm [21140]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x28 [ 1378.857773][T21141] kvm [21140]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1378.902759][T21153] loop4: detected capacity change from 0 to 128 [ 1379.105426][T21153] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1379.126564][T21153] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.176801][ T5101] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1379.470501][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1380.077723][ T4228] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1380.087519][ T5101] usb 3-1: Using ep0 maxpacket: 32 [ 1380.161378][T21171] loop4: detected capacity change from 0 to 8 [ 1380.207552][ T5101] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1380.277540][ T4228] usb 2-1: device descriptor read/64, error -71 [ 1380.335313][T21172] loop0: detected capacity change from 0 to 128 [ 1380.558633][T21172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1380.569748][ T4228] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1380.705148][T21172] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.807585][ T4228] usb 2-1: device descriptor read/64, error -71 [ 1380.895184][ T5101] usb 3-1: config 0 has no interface number 0 [ 1380.901614][ T5101] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1380.937761][ T4228] usb usb2-port1: attempt power cycle [ 1381.082177][ T5101] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1381.116429][ T5101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.164677][ T5101] usb 3-1: Product: syz [ 1381.173496][ T5101] usb 3-1: Manufacturer: syz [ 1381.178470][ T5101] usb 3-1: SerialNumber: syz [ 1381.196963][ T5101] usb 3-1: config 0 descriptor?? [ 1381.332651][ T5101] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1381.411478][ T5101] em28xx 3-1:0.132: Video interface 132 found: [ 1381.700328][ T5101] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1381.707648][ T5100] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1381.760166][T21137] Set syz1 is full, maxelem 65536 reached [ 1381.834216][T21182] loop3: detected capacity change from 0 to 2048 [ 1381.940362][T21182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1381.967634][ T4228] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1382.097652][ T4228] usb 2-1: device descriptor read/8, error -71 [ 1382.397694][ T4228] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1382.527921][ T4228] usb 2-1: device descriptor read/8, error -71 [ 1382.647710][ T4228] usb usb2-port1: unable to enumerate USB device [ 1382.779613][ T4261] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1382.787296][ T5101] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1382.800053][ T5100] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1382.808621][ T5100] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1382.817982][ T5101] em28xx 3-1:0.132: board has no eeprom [ 1382.823764][ T5100] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.834146][ T5100] usb 5-1: config 220 has no interface number 2 [ 1382.840580][ T5100] usb 5-1: config 220 interface 1 altsetting 5 has an invalid endpoint with address 0x21, skipping [ 1382.851328][ T5100] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1382.864428][ T5100] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1382.871507][ T5100] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1382.878466][ T5100] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1382.907529][ T5101] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1382.915386][ T5101] em28xx 3-1:0.132: analog set to bulk mode. [ 1382.928552][ T21] em28xx 3-1:0.132: Registering V4L2 extension [ 1382.941499][T21191] loop3: detected capacity change from 0 to 8 [ 1382.960219][ T5101] usb 3-1: USB disconnect, device number 92 [ 1382.968508][ T5101] em28xx 3-1:0.132: Disconnecting em28xx [ 1383.153151][ T5100] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1383.162442][ T5100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.170987][ T5100] usb 5-1: Product: syz [ 1383.175205][ T5100] usb 5-1: Manufacturer: syz [ 1383.187489][ T5100] usb 5-1: SerialNumber: syz [ 1383.197528][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 1383.212757][ T21] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1383.227261][ T21] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1383.239001][ T21] em28xx 3-1:0.132: No AC97 audio processor [ 1383.252203][ T21] usb 3-1: Decoder not found [ 1383.265054][ T21] em28xx 3-1:0.132: failed to create media graph [ 1383.282015][ T21] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1383.304024][ T21] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1383.326476][ T5101] em28xx 3-1:0.132: Closing input extension [ 1383.343090][ T5101] em28xx 3-1:0.132: Freeing device [ 1383.361132][ T4261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1383.459796][ T4261] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 1383.487067][ T4261] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 1383.515038][ T4261] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 1383.532598][ T4261] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.544798][ T4261] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1383.554492][ T4261] usb 1-1: config 7 has no interface number 0 [ 1383.560939][ T4261] usb 1-1: config 7 has no interface number 1 [ 1383.567128][ T4261] usb 1-1: config 7 has no interface number 2 [ 1383.573772][ T4261] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1383.608219][ T4261] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1383.628813][ T4261] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1383.640236][ T4261] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1383.654368][ T4261] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1383.668090][ T4261] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1383.679528][ T4261] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1383.691296][ T4261] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1383.703081][ T4261] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1383.714382][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1383.725176][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1383.739052][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1383.750024][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1383.761370][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1383.847761][ T5100] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1383.857100][ T5100] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1383.864523][ T4261] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1383.878047][ T5100] usb 5-1: No valid video chain found. [ 1383.883587][ T5100] usb 5-1: selecting invalid altsetting 0 [ 1383.889420][ T4261] usb 1-1: config 7 interface 106 has no altsetting 0 [ 1383.896207][ T4261] usb 1-1: config 7 interface 182 has no altsetting 0 [ 1383.905841][ T4261] usb 1-1: config 7 interface 148 has no altsetting 0 [ 1383.978552][ T5100] usb 5-1: selecting invalid altsetting 0 [ 1383.984332][ T5100] usbtest: probe of 5-1:220.1 failed with error -22 [ 1384.013446][ T5100] usb 5-1: USB disconnect, device number 55 [ 1384.067584][ T4261] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1384.076669][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.148174][ T4261] usb 1-1: Product: syz [ 1384.152486][ T4261] usb 1-1: Manufacturer: syz [ 1384.157099][ T4261] usb 1-1: SerialNumber: syz [ 1384.220189][T21219] loop1: detected capacity change from 0 to 8 [ 1385.101316][T21222] loop4: detected capacity change from 0 to 2048 [ 1385.150413][ T4261] usb 1-1: USB disconnect, device number 46 [ 1385.224298][T21222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1385.256350][T21230] loop2: detected capacity change from 0 to 2048 [ 1385.277091][T21230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1385.987628][ T4407] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1386.243527][T21250] device syzkaller0 entered promiscuous mode [ 1386.272305][ T4407] usb 2-1: Using ep0 maxpacket: 16 [ 1386.317519][T17499] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1386.407626][ T4407] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.417951][ T4407] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1386.480683][ T4261] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1386.557632][T17499] usb 5-1: Using ep0 maxpacket: 32 [ 1386.617725][ T4407] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1386.627644][ T4407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.635661][ T4407] usb 2-1: Product: syz [ 1386.640297][ T4407] usb 2-1: Manufacturer: syz [ 1386.644937][ T4407] usb 2-1: SerialNumber: syz [ 1386.677554][T17499] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1386.685917][T17499] usb 5-1: config 0 has no interface number 0 [ 1386.692406][T17499] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1386.747545][ T4261] usb 1-1: Using ep0 maxpacket: 32 [ 1386.807507][ T5100] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1386.857599][T17499] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1386.866976][T17499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.875396][ T4261] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1386.883727][T17499] usb 5-1: Product: syz [ 1386.887961][T17499] usb 5-1: Manufacturer: syz [ 1386.892573][T17499] usb 5-1: SerialNumber: syz [ 1386.897472][ T4261] usb 1-1: config 0 has no interface number 0 [ 1386.903680][ T4261] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1386.915204][T17499] usb 5-1: config 0 descriptor?? [ 1386.949973][T17499] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1386.959947][T17499] em28xx 5-1:0.132: Video interface 132 found: [ 1386.987721][ T4407] usb 2-1: 0:2 : does not exist [ 1387.035673][ T4407] usb 2-1: USB disconnect, device number 99 [ 1387.047673][ T5100] usb 4-1: Using ep0 maxpacket: 32 [ 1387.087644][ T4261] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1387.096805][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.112592][ T4261] usb 1-1: Product: syz [ 1387.116854][ T4261] usb 1-1: Manufacturer: syz [ 1387.123213][ T4261] usb 1-1: SerialNumber: syz [ 1387.130038][ T4261] usb 1-1: config 0 descriptor?? [ 1387.169750][ T4261] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1387.180091][ T5100] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1387.188679][ T4261] em28xx 1-1:0.132: Video interface 132 found: [ 1387.194940][ T5100] usb 4-1: config 0 has no interface number 0 [ 1387.201103][ T5100] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1387.278250][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1387.367630][T17499] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1387.377530][ T5100] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1387.387147][ T5100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.395335][ T5100] usb 4-1: Product: syz [ 1387.399715][ T5100] usb 4-1: Manufacturer: syz [ 1387.404342][ T5100] usb 4-1: SerialNumber: syz [ 1387.407589][ T4392] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1387.422190][ T5100] usb 4-1: config 0 descriptor?? [ 1387.474615][ T5100] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1387.486027][ T5100] em28xx 4-1:0.132: Video interface 132 found: [ 1387.597678][ T4261] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1387.637704][T17499] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1387.650364][T17499] em28xx 5-1:0.132: board has no eeprom [ 1387.657789][ T4392] usb 3-1: Using ep0 maxpacket: 32 [ 1387.747694][T17499] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1387.759091][T17499] em28xx 5-1:0.132: analog set to bulk mode. [ 1387.774096][T17499] usb 5-1: USB disconnect, device number 56 [ 1387.784853][T17499] em28xx 5-1:0.132: Disconnecting em28xx [ 1387.794950][ T23] em28xx 5-1:0.132: Registering V4L2 extension [ 1387.797824][ T4392] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1387.817808][ T4392] usb 3-1: config 0 has no interface number 0 [ 1387.828121][ T4392] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1387.897694][ T5100] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1387.931703][ T23] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1387.939632][ T23] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1387.946857][ T23] em28xx 5-1:0.132: No AC97 audio processor [ 1387.954932][ T23] usb 5-1: Decoder not found [ 1387.960041][ T23] em28xx 5-1:0.132: failed to create media graph [ 1387.966604][ T23] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1387.975257][ T23] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1387.985035][T17499] em28xx 5-1:0.132: Closing input extension [ 1387.998311][T17499] em28xx 5-1:0.132: Freeing device [ 1388.037622][ T4392] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1388.049190][ T4392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.057863][ T4392] usb 3-1: Product: syz [ 1388.062052][ T4392] usb 3-1: Manufacturer: syz [ 1388.066683][ T4392] usb 3-1: SerialNumber: syz [ 1388.092905][ T4392] usb 3-1: config 0 descriptor?? [ 1388.160153][ T4392] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1388.179247][ T4392] em28xx 3-1:0.132: Video interface 132 found: [ 1388.317488][ T4261] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 1388.324556][ T4261] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1388.370214][ T5100] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1388.396656][ T5100] em28xx 4-1:0.132: board has no eeprom [ 1388.437925][T21271] device syzkaller0 entered promiscuous mode [ 1388.580652][ T4261] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1388.589010][ T4261] em28xx 1-1:0.132: analog set to bulk mode. [ 1388.603597][ T4261] usb 1-1: USB disconnect, device number 47 [ 1388.607959][ T4392] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1388.611757][ T4261] em28xx 1-1:0.132: Disconnecting em28xx [ 1388.625517][ T23] em28xx 1-1:0.132: Registering V4L2 extension [ 1388.680549][ T23] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1388.687678][ T23] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1388.694795][ T23] em28xx 1-1:0.132: No AC97 audio processor [ 1388.701077][ T5100] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1388.710198][ T23] usb 1-1: Decoder not found [ 1388.714817][ T23] em28xx 1-1:0.132: failed to create media graph [ 1388.722005][ T5100] em28xx 4-1:0.132: analog set to bulk mode. [ 1388.738136][ T23] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1388.743979][ T4228] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1388.749579][ T23] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1388.765101][ T4261] em28xx 1-1:0.132: Closing input extension [ 1388.782655][ T23] em28xx 4-1:0.132: Registering V4L2 extension [ 1388.790221][ T4261] em28xx 1-1:0.132: Freeing device [ 1388.820303][ T5368] usb 4-1: USB disconnect, device number 98 [ 1388.830509][ T5368] em28xx 4-1:0.132: Disconnecting em28xx [ 1388.857577][ T4407] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1388.899506][ T23] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1388.906670][ T23] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1388.916919][ T23] em28xx 4-1:0.132: No AC97 audio processor [ 1388.924228][ T23] usb 4-1: Decoder not found [ 1388.929070][ T23] em28xx 4-1:0.132: failed to create media graph [ 1388.935432][ T23] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1388.943074][ T23] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1388.951809][ T5368] em28xx 4-1:0.132: Closing input extension [ 1388.964192][ T5368] em28xx 4-1:0.132: Freeing device [ 1389.047527][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 1389.107669][ T4392] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1389.120960][ T4392] em28xx 3-1:0.132: board has no eeprom [ 1389.137669][ T4407] usb 5-1: Using ep0 maxpacket: 16 [ 1389.250327][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1389.287702][ T4392] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1389.296000][ T4392] em28xx 3-1:0.132: analog set to bulk mode. [ 1389.317576][ T4407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1389.334381][ T4392] em28xx 3-1:0.132: Registering V4L2 extension [ 1389.361861][ T4228] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 1389.372681][ T4228] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 1389.404961][ T4228] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 1389.418496][ T23] usb 3-1: USB disconnect, device number 93 [ 1389.422540][ T4228] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.426049][ T23] em28xx 3-1:0.132: Disconnecting em28xx [ 1389.435712][ T4407] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 1389.464221][ T4407] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 1389.480490][ T4228] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1389.496290][ T4407] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 1389.511274][ T4228] usb 2-1: config 7 has no interface number 0 [ 1389.515583][T21293] loop3: detected capacity change from 0 to 2048 [ 1389.521266][ T4407] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.537465][ T4228] usb 2-1: config 7 has no interface number 1 [ 1389.554743][ T4228] usb 2-1: config 7 has no interface number 2 [ 1389.561033][ T4407] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1389.570289][ T4228] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1389.581510][ T4407] usb 5-1: config 7 has no interface number 0 [ 1389.587752][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1389.594271][T21293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1389.599148][ T4407] usb 5-1: config 7 has no interface number 1 [ 1389.624835][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1389.641460][ T4407] usb 5-1: config 7 has no interface number 2 [ 1389.654959][ T4392] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1389.662415][ T4407] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1389.673652][ T4228] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1389.684913][ T4392] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1389.697510][ T4392] em28xx 3-1:0.132: No AC97 audio processor [ 1389.703673][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1389.719217][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1389.746457][ T4392] usb 3-1: Decoder not found [ 1389.764456][ T4392] em28xx 3-1:0.132: failed to create media graph [ 1389.779858][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1389.813395][ T4228] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1389.835285][ T4392] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1389.855808][ T4407] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1389.888212][ T4392] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1389.902278][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1389.915680][ T23] em28xx 3-1:0.132: Closing input extension [ 1389.916828][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1389.937974][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1389.950733][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1389.963192][ T4407] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1390.050372][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1390.145230][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1390.255992][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1390.320313][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1390.362383][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1390.383530][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1390.404217][T21300] loop2: detected capacity change from 0 to 128 [ 1390.417515][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1390.445492][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1390.486832][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1390.507486][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1390.533402][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1390.557103][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1390.580406][T21300] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1390.593343][ T23] em28xx 3-1:0.132: Freeing device [ 1390.598993][ T4228] usb 2-1: config 7 interface 106 has no altsetting 0 [ 1390.605937][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1390.605966][T21300] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.618526][ T4228] usb 2-1: config 7 interface 182 has no altsetting 0 [ 1390.655679][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1390.667262][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1390.680557][ T4407] usb 5-1: config 7 interface 106 has no altsetting 0 [ 1390.687608][ T4228] usb 2-1: config 7 interface 148 has no altsetting 0 [ 1390.694488][ T4407] usb 5-1: config 7 interface 182 has no altsetting 0 [ 1390.701351][ T4407] usb 5-1: config 7 interface 148 has no altsetting 0 [ 1390.920188][T21308] loop3: detected capacity change from 0 to 2048 [ 1390.991254][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1391.065285][T21308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1391.465279][ T4228] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1391.474878][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.483866][ T4228] usb 2-1: Product: syz [ 1391.899573][T21313] loop1: detected capacity change from 0 to 8 [ 1392.019004][ T4228] usb 2-1: Manufacturer: syz [ 1392.023760][ T4228] usb 2-1: SerialNumber: syz [ 1392.067608][ T4228] usb 2-1: can't set config #7, error -71 [ 1392.084232][ T4407] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1392.093963][ T4228] usb 2-1: USB disconnect, device number 100 [ 1392.100426][ T4407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.110159][ T4407] usb 5-1: Product: syz [ 1392.114346][ T4407] usb 5-1: Manufacturer: syz [ 1392.151271][ T4407] usb 5-1: can't set config #7, error -71 [ 1392.242373][ T4407] usb 5-1: USB disconnect, device number 57 [ 1393.237549][ T4261] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1393.247488][ T5368] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1393.297660][ T4407] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1393.437527][ T4261] usb 1-1: device descriptor read/64, error -71 [ 1393.507490][ T5368] usb 3-1: Using ep0 maxpacket: 32 [ 1393.557473][ T4407] usb 5-1: Using ep0 maxpacket: 16 [ 1393.627527][ T5368] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1393.636502][ T5368] usb 3-1: config 0 has no interface number 0 [ 1393.657600][ T5368] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1393.717538][ T4261] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1393.717557][ T4407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1393.797577][ T4407] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 1393.805870][ T4407] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 1393.814590][ T4407] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 1393.822997][ T4407] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.833349][ T4407] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1393.843043][ T4407] usb 5-1: config 7 has no interface number 0 [ 1393.849409][ T5368] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1393.858583][ T4407] usb 5-1: config 7 has no interface number 1 [ 1393.864682][ T4407] usb 5-1: config 7 has no interface number 2 [ 1393.871097][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.879301][ T5368] usb 3-1: Product: syz [ 1393.883479][ T5368] usb 3-1: Manufacturer: syz [ 1393.888830][ T4407] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1393.900136][ T5368] usb 3-1: SerialNumber: syz [ 1393.905706][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1393.917808][ T5368] usb 3-1: config 0 descriptor?? [ 1393.922884][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1393.934094][ T4407] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1393.937593][ T4261] usb 1-1: device descriptor read/64, error -71 [ 1393.946472][ T4407] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1393.965441][ T4407] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1393.978774][ T5368] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1393.989670][ T5368] em28xx 3-1:0.132: Video interface 132 found: [ 1393.997244][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1394.008564][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1394.024325][ T4407] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1394.036008][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1394.047943][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1394.058891][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1394.069840][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1394.080799][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1394.091746][ T4407] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1394.105150][ T4407] usb 5-1: config 7 interface 106 has no altsetting 0 [ 1394.112291][ T4261] usb usb1-port1: attempt power cycle [ 1394.134234][T21339] loop3: detected capacity change from 0 to 128 [ 1394.140612][ T4407] usb 5-1: config 7 interface 182 has no altsetting 0 [ 1394.151972][ T4407] usb 5-1: config 7 interface 148 has no altsetting 0 [ 1394.194448][T21339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1394.217821][T21339] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.429584][ T5368] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1394.467692][ T4407] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1394.476776][ T4407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.544441][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1394.588223][ T4261] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1394.728151][ T4261] usb 1-1: device descriptor read/8, error -71 [ 1395.017562][ T4261] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1395.132261][ T4261] usb 1-1: device descriptor read/8, error -71 [ 1395.144498][ T4407] usb 5-1: Product: syz [ 1395.149076][ T4407] usb 5-1: Manufacturer: syz [ 1395.153886][ T4407] usb 5-1: SerialNumber: syz [ 1395.187109][T21360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.204968][ T4407] usb 5-1: can't set config #7, error -71 [ 1395.219107][ T4407] usb 5-1: USB disconnect, device number 58 [ 1395.227588][ T5368] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1395.236302][ T5368] em28xx 3-1:0.132: board has no eeprom [ 1395.277705][ T4261] usb usb1-port1: unable to enumerate USB device [ 1395.331909][T21364] loop4: detected capacity change from 0 to 2048 [ 1395.337617][ T5368] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1395.348033][ T5368] em28xx 3-1:0.132: analog set to bulk mode. [ 1395.385815][ T5368] usb 3-1: USB disconnect, device number 94 [ 1395.411316][T21364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1395.422967][ T5368] em28xx 3-1:0.132: Disconnecting em28xx [ 1395.433910][ T4392] em28xx 3-1:0.132: Registering V4L2 extension [ 1395.501222][T21360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.701963][T21360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.737673][ T4228] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1395.987767][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 1396.147698][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1396.228109][ T4228] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 1396.236414][ T4228] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 1396.293184][ T4392] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1396.307187][ T4392] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1396.324834][ T4228] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 1396.347487][ T4392] em28xx 3-1:0.132: No AC97 audio processor [ 1396.354281][ T4228] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.377665][ T4392] usb 3-1: Decoder not found [ 1396.382382][ T4392] em28xx 3-1:0.132: failed to create media graph [ 1396.402173][ T4228] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1396.411626][ T4392] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1396.427443][ T4228] usb 4-1: config 7 has no interface number 0 [ 1396.435129][ T4392] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1396.453849][ T4228] usb 4-1: config 7 has no interface number 1 [ 1396.463647][ T4228] usb 4-1: config 7 has no interface number 2 [ 1396.470037][ T5368] em28xx 3-1:0.132: Closing input extension [ 1396.478751][ T5368] em28xx 3-1:0.132: Freeing device [ 1396.484736][ T4228] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1396.526273][ T4228] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1396.543128][ T4228] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1396.570064][ T4228] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1396.584381][ T4228] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1396.598111][ T4228] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1396.612577][ T4228] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1396.623637][ T4228] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1396.635350][ T4228] usb 4-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1396.646485][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1396.657263][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1396.668312][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1396.679286][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1396.690292][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1396.701160][ T4228] usb 4-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1396.715009][ T4228] usb 4-1: config 7 interface 106 has no altsetting 0 [ 1396.721992][ T4228] usb 4-1: config 7 interface 182 has no altsetting 0 [ 1396.728877][ T4228] usb 4-1: config 7 interface 148 has no altsetting 0 [ 1396.758395][T21360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.876233][T21360] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.887698][ T4228] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1396.896953][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.905010][ T4228] usb 4-1: Product: syz [ 1396.909648][ T4228] usb 4-1: Manufacturer: syz [ 1396.914260][ T4228] usb 4-1: SerialNumber: syz [ 1396.922652][T21360] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.936295][T21360] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.950347][T21360] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.017633][ T5368] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1397.087496][ T4392] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1397.107502][ T4935] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1397.327544][ T4392] usb 1-1: Using ep0 maxpacket: 32 [ 1397.344321][ T4228] usb 4-1: USB disconnect, device number 99 [ 1397.350362][ T4935] usb 5-1: Using ep0 maxpacket: 32 [ 1397.377570][ T5368] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1397.406228][ T5368] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1397.424050][ T5368] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.434963][ T5368] usb 3-1: config 220 has no interface number 2 [ 1397.441427][ T5368] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1397.455127][ T4392] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1397.463385][ T5368] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1397.470586][ T4935] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1397.478856][ T4392] usb 1-1: config 0 has no interface number 0 [ 1397.485057][ T4935] usb 5-1: config 0 has no interface number 0 [ 1397.491196][ T5368] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1397.498229][ T4392] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1397.504977][ T4935] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1397.515157][ T5368] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1397.657586][ T4392] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1397.666772][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.674868][ T4392] usb 1-1: Product: syz [ 1397.679197][ T4935] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1397.688330][ T5368] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1397.697381][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.697457][ T4392] usb 1-1: Manufacturer: syz [ 1397.710091][ T4935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.718135][ T5368] usb 3-1: Product: syz [ 1397.722309][ T5368] usb 3-1: Manufacturer: syz [ 1397.727306][ T5368] usb 3-1: SerialNumber: syz [ 1397.731978][ T4935] usb 5-1: Product: syz [ 1397.736150][ T4935] usb 5-1: Manufacturer: syz [ 1397.740849][ T4392] usb 1-1: SerialNumber: syz [ 1397.748889][ T4392] usb 1-1: config 0 descriptor?? [ 1397.753973][ T4935] usb 5-1: SerialNumber: syz [ 1397.760196][ T4935] usb 5-1: config 0 descriptor?? [ 1397.799680][ T4935] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1397.814878][ T4935] em28xx 5-1:0.132: Video interface 132 found: [ 1398.087657][ T4228] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1398.107914][ T5368] usb 3-1: selecting invalid altsetting 0 [ 1398.114373][ T5368] usb 3-1: selecting invalid altsetting 0 [ 1398.128183][ T5368] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1398.134556][ T5368] usb 3-1: No valid video chain found. [ 1398.227809][ T4935] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1398.238544][ T5368] usb 3-1: selecting invalid altsetting 0 [ 1398.244831][ T5368] usbtest: probe of 3-1:220.1 failed with error -22 [ 1398.273503][ T5368] usb 3-1: USB disconnect, device number 95 [ 1398.327566][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 1398.487619][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1398.567520][ T4228] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 1398.575830][ T4228] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 1398.597347][ T4228] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 1398.617478][ T4228] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.637729][ T4228] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 1398.647171][ T4228] usb 2-1: config 7 has no interface number 0 [ 1398.663518][ T4228] usb 2-1: config 7 has no interface number 1 [ 1398.669740][ T4228] usb 2-1: config 7 has no interface number 2 [ 1398.675860][ T4228] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1398.697550][ T4935] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1398.717512][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1398.728376][ T4935] em28xx 5-1:0.132: board has no eeprom [ 1398.747491][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 1398.758749][ T4228] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1398.776354][ T4228] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1398.790121][ T4228] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1398.801308][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1398.810192][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcc [ 1398.812306][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1398.832032][ T4228] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 1398.836587][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1398.843006][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 1398.843032][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1398.843056][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1398.885125][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8c [ 1398.886320][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1398.905037][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1398.905230][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1398.916603][ T4228] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1398.938383][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8c [ 1398.947283][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1398.956655][ T4228] usb 2-1: config 7 interface 106 has no altsetting 0 [ 1398.963487][ T4228] usb 2-1: config 7 interface 182 has no altsetting 0 [ 1398.973343][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x18 [ 1398.982300][ T4228] usb 2-1: config 7 interface 148 has no altsetting 0 [ 1398.994967][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1399.014799][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1399.023060][ T4935] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1399.031287][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1399.040157][ T4935] em28xx 5-1:0.132: analog set to bulk mode. [ 1399.071138][ T5368] em28xx 5-1:0.132: Registering V4L2 extension [ 1399.080550][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1399.107779][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1399.123713][T21396] loop3: detected capacity change from 0 to 128 [ 1399.133736][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8c [ 1399.147866][ T4228] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 1399.157057][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.187332][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8c [ 1399.196685][ T5368] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1399.215601][ T4228] usb 2-1: Product: syz [ 1399.218131][T21396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1399.220533][ T4228] usb 2-1: Manufacturer: syz [ 1399.235018][ T5368] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1399.244627][T21396] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.258211][ T4228] usb 2-1: SerialNumber: syz [ 1399.338336][T21391] kvm [21390]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1399.368318][T21391] kvm [21390]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1399.444670][ T5368] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1399.458814][ T4935] usb 5-1: USB disconnect, device number 59 [ 1399.465736][ T4935] em28xx 5-1:0.132: Disconnecting em28xx [ 1399.472110][ T5368] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1399.568715][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1400.133848][ T5368] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1400.141487][ T5368] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1400.148714][ T5368] em28xx 5-1:0.132: No AC97 audio processor [ 1400.155557][ T5368] usb 5-1: Decoder not found [ 1400.160856][ T5368] em28xx 5-1:0.132: failed to create media graph [ 1400.167236][ T5368] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1400.174867][ T5368] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1400.183850][ T4935] em28xx 5-1:0.132: Closing input extension [ 1400.234770][ T4935] em28xx 5-1:0.132: Freeing device [ 1400.275769][T21406] loop4: detected capacity change from 0 to 1024 [ 1400.296683][ T4228] usb 2-1: USB disconnect, device number 101 [ 1400.311487][T21406] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1400.525655][T21411] device syzkaller0 entered promiscuous mode [ 1400.677609][ T4392] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 1400.686446][ T4392] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1400.694512][ T4392] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1400.702786][ T4392] f81534: probe of 1-1:0.12 failed with error -71 [ 1400.722747][ T4392] usb 1-1: USB disconnect, device number 52 [ 1400.772700][T21417] loop1: detected capacity change from 0 to 2048 [ 1400.787650][ T4407] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1400.819618][T21417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1400.977575][ T4261] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1401.177897][ T4261] usb 3-1: device descriptor read/64, error -71 [ 1401.272666][T21420] loop4: detected capacity change from 0 to 2048 [ 1401.457806][ T4261] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1401.505975][T21420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1401.807559][ T4407] usb 4-1: Using ep0 maxpacket: 32 [ 1401.937706][ T4407] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1401.976913][ T4407] usb 4-1: config 0 has no interface number 0 [ 1402.060432][ T4407] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1402.087250][T21432] netlink: 'syz.1.3839': attribute type 13 has an invalid length. [ 1402.104113][T21432] netlink: 'syz.1.3839': attribute type 17 has an invalid length. [ 1402.249583][ T4407] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1402.269861][ T4407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.289695][ T4407] usb 4-1: Product: syz [ 1402.294469][ T4407] usb 4-1: Manufacturer: syz [ 1402.302492][ T4407] usb 4-1: SerialNumber: syz [ 1402.322930][ T4407] usb 4-1: config 0 descriptor?? [ 1402.369919][ T4407] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1402.394777][ T4407] em28xx 4-1:0.132: Video interface 132 found: [ 1402.458967][ T4261] usb 3-1: device descriptor read/64, error -71 [ 1402.509540][T21432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.520336][T21432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.587598][ T4261] usb usb3-port1: attempt power cycle [ 1402.593520][T21436] loop4: detected capacity change from 0 to 128 [ 1402.627567][ T21] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1402.660967][T21436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1402.679453][T21436] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.837563][ T4407] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1402.973557][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1403.127973][ T4407] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1403.163559][ T4407] em28xx 4-1:0.132: board has no eeprom [ 1403.277685][ T4407] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1403.293306][ T4407] em28xx 4-1:0.132: analog set to bulk mode. [ 1403.396577][ T4407] usb 4-1: USB disconnect, device number 100 [ 1403.468404][ T4392] em28xx 4-1:0.132: Registering V4L2 extension [ 1403.486822][ T4407] em28xx 4-1:0.132: Disconnecting em28xx [ 1403.597006][ T4392] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1403.606304][ T4392] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1403.616715][ T4392] em28xx 4-1:0.132: No AC97 audio processor [ 1403.627324][ T4392] usb 4-1: Decoder not found [ 1403.634191][ T4392] em28xx 4-1:0.132: failed to create media graph [ 1403.641885][ T4392] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1403.651393][ T4392] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1403.662131][ T4407] em28xx 4-1:0.132: Closing input extension [ 1403.686413][ T4407] em28xx 4-1:0.132: Freeing device [ 1403.697657][ T4261] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1403.705448][ T23] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1403.807689][ T21] usb 1-1: config 0 has no interfaces? [ 1403.813327][ T21] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1403.832624][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.853160][ T21] usb 1-1: config 0 descriptor?? [ 1403.877233][T21446] kvm_set_msr_common: 6 callbacks suppressed [ 1403.877247][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcc [ 1403.893119][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1403.905421][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8c [ 1403.919278][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1403.934011][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8c [ 1403.944314][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1403.957730][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x18 [ 1403.966927][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1403.976102][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1403.981472][ T4261] usb 3-1: device not accepting address 98, error -71 [ 1403.999812][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1404.008385][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1404.019912][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1404.028572][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1404.039810][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8c [ 1404.056507][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8c [ 1404.076922][T21446] kvm [21445]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8c [ 1404.085727][T21446] kvm [21445]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1404.127654][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1404.135935][ T23] usb 2-1: config 0 has no interface number 0 [ 1404.144835][T21429] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3840'. [ 1404.154757][ T23] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1404.167322][T18151] usb 1-1: USB disconnect, device number 53 [ 1404.217478][ T4392] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1404.247500][ T4407] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1404.347859][ T23] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1404.362001][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.371959][ T23] usb 2-1: Product: syz [ 1404.376248][ T23] usb 2-1: Manufacturer: syz [ 1404.386232][ T23] usb 2-1: SerialNumber: syz [ 1404.405151][ T23] usb 2-1: config 0 descriptor?? [ 1404.457533][ T4392] usb 5-1: Using ep0 maxpacket: 32 [ 1404.473705][ T23] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1404.487476][ T4407] usb 4-1: Using ep0 maxpacket: 32 [ 1404.493371][ T23] em28xx 2-1:0.132: Video interface 132 found: [ 1404.577730][ T4392] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1404.592917][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.615591][ T4407] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1404.636422][ T4392] usb 5-1: config 0 descriptor?? [ 1404.644541][ T4407] usb 4-1: config 0 has no interface number 0 [ 1404.655945][ T4407] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1404.692770][ T4392] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1404.817620][ T4407] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1404.831274][ T4407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.840801][ T4407] usb 4-1: Product: syz [ 1404.845061][ T4407] usb 4-1: Manufacturer: syz [ 1404.854299][ T4407] usb 4-1: SerialNumber: syz [ 1404.862904][ T4407] usb 4-1: config 0 descriptor?? [ 1404.907577][ T23] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1404.915274][ T4407] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1404.930912][ T4407] em28xx 4-1:0.132: Video interface 132 found: [ 1405.017523][ T4228] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1405.267666][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 1405.347663][ T4407] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1405.377538][ T23] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1405.388449][ T4228] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1405.397554][ T23] em28xx 2-1:0.132: board has no eeprom [ 1405.403822][ T4228] usb 1-1: config 0 has no interface number 0 [ 1405.414722][ T4228] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1405.557570][ T23] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1405.565638][ T23] em28xx 2-1:0.132: analog set to bulk mode. [ 1405.577742][ T4261] em28xx 2-1:0.132: Registering V4L2 extension [ 1405.680166][ T5100] usb 2-1: USB disconnect, device number 102 [ 1405.688537][ T4261] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1405.702940][ T5100] em28xx 2-1:0.132: Disconnecting em28xx [ 1405.723866][ T4228] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1405.733079][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.741176][ T4228] usb 1-1: Product: syz [ 1405.745427][ T4228] usb 1-1: Manufacturer: syz [ 1405.750492][ T4228] usb 1-1: SerialNumber: syz [ 1405.758603][ T4228] usb 1-1: config 0 descriptor?? [ 1405.787039][ T4261] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1405.796792][ T4261] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1405.806176][ T4261] em28xx 2-1:0.132: No AC97 audio processor [ 1405.812059][T21463] loop2: detected capacity change from 0 to 1024 [ 1405.820917][ T4228] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1405.830964][ T4228] em28xx 1-1:0.132: Video interface 132 found: [ 1405.835283][ T4261] usb 2-1: Decoder not found [ 1405.838425][ T4407] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1405.851824][ T4261] em28xx 2-1:0.132: failed to create media graph [ 1405.869506][ T4407] em28xx 4-1:0.132: board has no eeprom [ 1405.875455][T21463] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1405.876592][ T4261] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1405.901690][ T4261] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1405.910909][ T5100] em28xx 2-1:0.132: Closing input extension [ 1405.925092][ T5100] em28xx 2-1:0.132: Freeing device [ 1406.027697][ T4407] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1406.035787][ T4407] em28xx 4-1:0.132: analog set to bulk mode. [ 1406.042242][ T4935] em28xx 4-1:0.132: Registering V4L2 extension [ 1406.145334][ T4407] usb 4-1: USB disconnect, device number 101 [ 1406.153309][ T4407] em28xx 4-1:0.132: Disconnecting em28xx [ 1406.159214][ T4935] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1406.203160][ T4935] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1406.210327][ T4935] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1406.222499][ T4935] em28xx 4-1:0.132: No AC97 audio processor [ 1406.232781][ T4935] usb 4-1: Decoder not found [ 1406.241720][ T4228] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1406.249633][ T4935] em28xx 4-1:0.132: failed to create media graph [ 1406.287069][ T4935] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1406.301506][ T4935] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1406.306791][T21469] ================================================================== [ 1406.318387][T21469] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 1406.321205][ T4407] em28xx 4-1:0.132: Closing input extension [ 1406.325429][T21469] Read of size 8 at addr ffff888065df0900 by task v4l_id/21469 [ 1406.325448][T21469] [ 1406.325464][T21469] CPU: 1 PID: 21469 Comm: v4l_id Not tainted syzkaller #0 [ 1406.348338][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1406.358415][T21469] Call Trace: [ 1406.361709][T21469] [ 1406.364649][T21469] dump_stack_lvl+0x188/0x250 [ 1406.369370][T21469] ? show_regs_print_info+0x20/0x20 [ 1406.374589][T21469] ? _printk+0xda/0x130 [ 1406.378769][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.383379][T21469] ? load_image+0x400/0x400 [ 1406.387907][T21469] print_address_description+0x60/0x2d0 [ 1406.393474][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.398065][T21469] kasan_report+0xdf/0x130 [ 1406.402562][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.407187][T21469] v4l2_fh_open+0xc6/0x430 [ 1406.411748][T21469] em28xx_v4l2_open+0x152/0x990 [ 1406.416665][T21469] ? __lock_acquire+0x7d10/0x7d10 [ 1406.421746][T21469] v4l2_open+0x20b/0x360 [ 1406.426046][T21469] chrdev_open+0x5c5/0x6a0 [ 1406.430555][T21469] ? cd_forget+0x160/0x160 [ 1406.435014][T21469] ? fsnotify_perm+0x3a7/0x560 [ 1406.439857][T21469] ? cd_forget+0x160/0x160 [ 1406.444285][T21469] do_dentry_open+0x7ff/0xf80 [ 1406.449003][T21469] path_openat+0x26f5/0x2fa0 [ 1406.453632][T21469] ? verify_lock_unused+0x140/0x140 [ 1406.458854][T21469] ? slab_post_alloc_hook+0x4c/0x380 [ 1406.464162][T21469] ? do_filp_open+0x410/0x410 [ 1406.468873][T21469] do_filp_open+0x1e2/0x410 [ 1406.473407][T21469] ? vfs_tmpfile+0x300/0x300 [ 1406.478040][T21469] ? _raw_spin_unlock+0x24/0x40 [ 1406.482941][T21469] ? alloc_fd+0x598/0x630 [ 1406.487291][T21469] do_sys_openat2+0x150/0x4b0 [ 1406.491979][T21469] ? __lock_acquire+0x7d10/0x7d10 [ 1406.497033][T21469] ? do_sys_open+0xe0/0xe0 [ 1406.501445][T21469] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1406.507451][T21469] ? lock_chain_count+0x20/0x20 [ 1406.512336][T21469] ? vtime_user_exit+0x2c8/0x3e0 [ 1406.517340][T21469] __x64_sys_openat+0x135/0x160 [ 1406.522201][T21469] do_syscall_64+0x4c/0xa0 [ 1406.526652][T21469] ? clear_bhb_loop+0x30/0x80 [ 1406.531349][T21469] ? clear_bhb_loop+0x30/0x80 [ 1406.536051][T21469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1406.541972][T21469] RIP: 0033:0x7f577be3c407 [ 1406.546416][T21469] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1406.566023][T21469] RSP: 002b:00007fffa189b010 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1406.574465][T21469] RAX: ffffffffffffffda RBX: 00007f577bd4e880 RCX: 00007f577be3c407 [ 1406.582460][T21469] RDX: 0000000000000000 RSI: 00007fffa189cf1b RDI: ffffffffffffff9c [ 1406.590446][T21469] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1406.598437][T21469] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1406.606445][T21469] R13: 00007fffa189b260 R14: 00007f577c5ca000 R15: 000055eab43074d8 [ 1406.614440][T21469] [ 1406.617457][T21469] [ 1406.619793][T21469] The buggy address belongs to the page: [ 1406.625436][T21469] page:ffffea0001977c00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65df0 [ 1406.635593][T21469] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1406.642710][T21469] raw: 00fff00000000000 ffffea000095f008 ffff8880b90409f0 0000000000000000 [ 1406.651309][T21469] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1406.659897][T21469] page dumped because: kasan: bad access detected [ 1406.666332][T21469] page_owner tracks the page as freed [ 1406.671713][T21469] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4935, ts 1406049210532, free_ts 1406301362220 [ 1406.687625][T21469] get_page_from_freelist+0x1bbd/0x1ca0 [ 1406.687791][ T4392] gspca_vc032x: I2c Bus Busy Wait 00 [ 1406.693265][T21469] __alloc_pages+0x1ee/0x480 [ 1406.693286][T21469] kmalloc_order+0x40/0x150 [ 1406.707654][T21469] kmalloc_order_trace+0x14/0xf0 [ 1406.712613][T21469] em28xx_v4l2_init+0xe2/0x2e50 [ 1406.717511][T21469] em28xx_init_extension+0x118/0x1b0 [ 1406.722819][T21469] process_one_work+0x85f/0x1010 [ 1406.727848][T21469] worker_thread+0xaa6/0x1290 [ 1406.732590][T21469] kthread+0x436/0x520 [ 1406.736681][T21469] ret_from_fork+0x1f/0x30 [ 1406.741162][T21469] page last free stack trace: [ 1406.745840][T21469] free_unref_page_prepare+0x637/0x6c0 [ 1406.751317][T21469] free_unref_page+0x8f/0x2a0 [ 1406.756158][T21469] free_nonslab_page+0xe2/0x150 [ 1406.761025][T21469] em28xx_v4l2_init+0x1649/0x2e50 [ 1406.766063][T21469] em28xx_init_extension+0x118/0x1b0 [ 1406.771347][T21469] process_one_work+0x85f/0x1010 [ 1406.776305][T21469] worker_thread+0xaa6/0x1290 [ 1406.781008][T21469] kthread+0x436/0x520 [ 1406.785093][T21469] ret_from_fork+0x1f/0x30 [ 1406.789509][T21469] [ 1406.791847][T21469] Memory state around the buggy address: [ 1406.797491][T21469] ffff888065df0800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1406.797998][ T4228] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1406.805563][T21469] ffff888065df0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1406.805577][T21469] >ffff888065df0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1406.805587][T21469] ^ [ 1406.805597][T21469] ffff888065df0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1406.835102][ T4228] em28xx 1-1:0.132: board has no eeprom [ 1406.838299][T21469] ffff888065df0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1406.838312][T21469] ================================================================== [ 1406.838319][T21469] Disabling lock debugging due to kernel taint [ 1406.846663][T21469] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1406.846675][T21469] CPU: 1 PID: 21469 Comm: v4l_id Tainted: G B syzkaller #0 [ 1406.846695][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1406.846706][T21469] Call Trace: [ 1406.846712][T21469] [ 1406.846718][T21469] dump_stack_lvl+0x188/0x250 [ 1406.846742][T21469] ? show_regs_print_info+0x20/0x20 [ 1406.846759][T21469] ? load_image+0x400/0x400 [ 1406.846780][T21469] panic+0x2e5/0x810 [ 1406.924742][T21469] ? bpf_jit_dump+0xd0/0xd0 [ 1406.929252][T21469] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1406.935248][T21469] ? _raw_spin_unlock+0x40/0x40 [ 1406.940093][T21469] ? print_memory_metadata+0x314/0x400 [ 1406.945547][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.950133][T21469] check_panic_on_warn+0x80/0xa0 [ 1406.955162][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.959744][T21469] end_report+0x6d/0xf0 [ 1406.963891][T21469] kasan_report+0x102/0x130 [ 1406.968396][T21469] ? v4l2_fh_open+0xc6/0x430 [ 1406.973009][T21469] v4l2_fh_open+0xc6/0x430 [ 1406.977430][T21469] em28xx_v4l2_open+0x152/0x990 [ 1406.982288][T21469] ? __lock_acquire+0x7d10/0x7d10 [ 1406.987306][T21469] v4l2_open+0x20b/0x360 [ 1406.991541][T21469] chrdev_open+0x5c5/0x6a0 [ 1406.995951][T21469] ? cd_forget+0x160/0x160 [ 1407.000379][T21469] ? fsnotify_perm+0x3a7/0x560 [ 1407.005169][T21469] ? cd_forget+0x160/0x160 [ 1407.009587][T21469] do_dentry_open+0x7ff/0xf80 [ 1407.014282][T21469] path_openat+0x26f5/0x2fa0 [ 1407.018882][T21469] ? verify_lock_unused+0x140/0x140 [ 1407.024074][T21469] ? slab_post_alloc_hook+0x4c/0x380 [ 1407.029356][T21469] ? do_filp_open+0x410/0x410 [ 1407.034065][T21469] do_filp_open+0x1e2/0x410 [ 1407.038577][T21469] ? vfs_tmpfile+0x300/0x300 [ 1407.043188][T21469] ? _raw_spin_unlock+0x24/0x40 [ 1407.048035][T21469] ? alloc_fd+0x598/0x630 [ 1407.052378][T21469] do_sys_openat2+0x150/0x4b0 [ 1407.057044][T21469] ? __lock_acquire+0x7d10/0x7d10 [ 1407.062067][T21469] ? do_sys_open+0xe0/0xe0 [ 1407.066472][T21469] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1407.072441][T21469] ? lock_chain_count+0x20/0x20 [ 1407.077287][T21469] ? vtime_user_exit+0x2c8/0x3e0 [ 1407.077640][ T4228] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1407.082217][T21469] __x64_sys_openat+0x135/0x160 [ 1407.082251][T21469] do_syscall_64+0x4c/0xa0 [ 1407.094817][ T4228] em28xx 1-1:0.132: analog set to bulk mode. [ 1407.094899][T21469] ? clear_bhb_loop+0x30/0x80 [ 1407.109945][T21469] ? clear_bhb_loop+0x30/0x80 [ 1407.114642][T21469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1407.120552][T21469] RIP: 0033:0x7f577be3c407 [ 1407.120837][ T4228] usb 1-1: USB disconnect, device number 54 [ 1407.124983][T21469] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1407.125001][T21469] RSP: 002b:00007fffa189b010 EFLAGS: 00000202 [ 1407.137284][ T4228] em28xx 1-1:0.132: Disconnecting em28xx [ 1407.150491][T21469] ORIG_RAX: 0000000000000101 [ 1407.150503][T21469] RAX: ffffffffffffffda RBX: 00007f577bd4e880 RCX: 00007f577be3c407 [ 1407.150517][T21469] RDX: 0000000000000000 RSI: 00007fffa189cf1b RDI: ffffffffffffff9c [ 1407.150530][T21469] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1407.150541][T21469] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1407.150551][T21469] R13: 00007fffa189b260 R14: 00007f577c5ca000 R15: 000055eab43074d8 [ 1407.150570][T21469] [ 1407.150909][T21469] Kernel Offset: disabled [ 1407.214322][T21469] Rebooting in 86400 seconds..