last executing test programs: 5m30.788288944s ago: executing program 1 (id=1338): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r0, &(0x7f0000000340)=""/82, 0x52) exit(0x0) getdents(r0, 0x0, 0x0) 5m29.859763561s ago: executing program 1 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08"}}}}, 0xfdef) 5m29.515877709s ago: executing program 1 (id=1358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 5m29.304133319s ago: executing program 1 (id=1360): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 5m28.368923214s ago: executing program 1 (id=1369): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x3, 0x2], [0x7fffffff, 0x80000001, 0x6, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0x7fffffffffffffff, 0x80000000, 0xb12, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0xc, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0xf, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x1, 0xb, 0x9, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x5d, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7687, 0x1ff, 0x7, 0xe648, 0x100000000, 0x6, 0xdfb3, 0x3, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0xffffffffffff8ff4, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x6, 0x7, 0x7, 0xca, 0x8, 0x9, 0xc144, 0x2, 0x0, 0x4]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5m28.176758041s ago: executing program 1 (id=1371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 5m27.848417383s ago: executing program 32 (id=1371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 4m50.717761267s ago: executing program 3 (id=1734): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1d}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m50.057804621s ago: executing program 3 (id=1741): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001cc0)="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", 0x28d}], 0x1}}], 0x1, 0x60c5895) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]}) 4m49.79734507s ago: executing program 3 (id=1744): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) unshare(0x2c060000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 4m49.536496181s ago: executing program 3 (id=1748): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m48.519207883s ago: executing program 3 (id=1757): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f00000000c0)=0x84) 4m48.181954024s ago: executing program 3 (id=1759): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) 4m47.775176866s ago: executing program 33 (id=1759): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) 7.935409422s ago: executing program 2 (id=4938): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 7.747806186s ago: executing program 2 (id=4939): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x8000084) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x8, 0x0) 5.337435432s ago: executing program 2 (id=4953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x7}}}], 0x38}, 0x0) 3.787925721s ago: executing program 2 (id=4963): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) 3.596835054s ago: executing program 2 (id=4965): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 2.998068363s ago: executing program 2 (id=4969): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.337933032s ago: executing program 5 (id=4976): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d8", 0x1}, {0x0}], 0x2, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000c, r2}}], 0x20, 0x2400e044}, 0x0) 2.166516375s ago: executing program 5 (id=4978): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1.982246502s ago: executing program 5 (id=4981): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/3, 0x3}, {0x0}], 0x2}, 0x3}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 1.897303058s ago: executing program 4 (id=4982): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 1.888786839s ago: executing program 5 (id=4983): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 941.8792ms ago: executing program 0 (id=4994): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0x10, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xfffffffe, @local, 0x4}], 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @local, 0x4}], 0x1c) 935.673314ms ago: executing program 6 (id=4995): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) 934.34146ms ago: executing program 0 (id=4996): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x4, 0x6, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 932.11836ms ago: executing program 5 (id=4997): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00004ff000/0x1000)=nil, 0x1000}}) 871.882485ms ago: executing program 0 (id=4998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x1, 0x62e98893, 0x2, 0xfffffbff, 0x5}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 828.593892ms ago: executing program 4 (id=4999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r1, 0x0, 0x0) 727.158494ms ago: executing program 6 (id=5000): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x16) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x32) ioctl$UI_DEV_CREATE(r0, 0x5501) 717.387484ms ago: executing program 5 (id=5001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000800f22c0360f01c30f20e06635020000000f22e066b8000000000f23d80f21f86635400000c00f21bb66b8001800000f23d00f21f86635300000010f23f80f01c9360f791c670f78cc360fc76b0af3f5", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 681.721931ms ago: executing program 4 (id=5002): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 631.121093ms ago: executing program 0 (id=5003): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x8, 0x0, 0x6c21, 0xb, 0x4, 0x40, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 574.319311ms ago: executing program 4 (id=5004): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x7d) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 548.658783ms ago: executing program 6 (id=5005): syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 432.367776ms ago: executing program 4 (id=5006): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 397.051912ms ago: executing program 0 (id=5007): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000841) listen(r0, 0x2000fff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 302.688395ms ago: executing program 6 (id=5008): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = epoll_create(0xb3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002009}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x2, 'syz0\x00'}, 0x2, 0x3, 0x2, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) poll(&(0x7f00000002c0)=[{r1, 0x181}], 0x1, 0x2f56) 271.754458ms ago: executing program 0 (id=5009): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 124.132232ms ago: executing program 6 (id=5010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 41.724245ms ago: executing program 4 (id=5011): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {0x4, 0xa, 0x1, 0xb5d}, 0x29, [0x4, 0x7f, 0xfffffff2, 0xff, 0x3, 0x4, 0x3, 0x7, 0x8, 0x1, 0x1, 0xbc, 0x10001, 0x2, 0x1, 0x2, 0x5, 0x4, 0x8, 0x4ce, 0x9059, 0x9, 0x84, 0x8, 0x7, 0x5, 0xffffff01, 0x0, 0x8001, 0x1, 0xff, 0x40, 0x9, 0x7, 0x0, 0xc, 0xfff, 0xa, 0x8000, 0x81, 0x1c, 0x6, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0x7, 0x6, 0x2, 0x4, 0x6, 0x200, 0x6, 0x8, 0x6, 0x2000, 0x9, 0x8, 0x1, 0x1, 0x3, 0x0, 0x6], [0x7ff, 0x1c3, 0xfffffff7, 0x5, 0x69b, 0x2, 0x6, 0xffff, 0x34, 0x2, 0x6, 0x9, 0x5, 0x1, 0x4, 0x8000000, 0xa, 0x1000, 0x0, 0x0, 0x2, 0x7, 0x5, 0x5, 0x9, 0x7c43, 0x7fff, 0x100, 0xe12, 0x0, 0x37, 0x3, 0x5, 0x200, 0x6, 0x3, 0x5, 0x7, 0x1, 0x80, 0x4, 0xffffffff, 0xffffffff, 0x8, 0x1, 0x52f, 0x10, 0x7, 0x46b, 0xb, 0x2, 0x9, 0x3, 0x1ff, 0x0, 0x6, 0xeb1e, 0x60e, 0x741d, 0x7ff, 0x6, 0x5, 0x1, 0x5], [0x4, 0xc2, 0x4, 0x401, 0x101, 0x3, 0x1000, 0x70, 0xaff6, 0x6, 0x10000, 0x3, 0x200, 0x81, 0x2, 0x0, 0x74e, 0x5, 0x5, 0x1, 0x216a, 0x10000, 0x9, 0x1, 0x8, 0x5, 0x3, 0x7, 0x3, 0xfd3b, 0x80, 0xe, 0x401, 0x0, 0xe, 0x8, 0x0, 0x7f, 0x2, 0x4, 0x9, 0x0, 0xd, 0x6, 0x5, 0x100, 0xf, 0x6, 0x4366b5a2, 0x6, 0x8, 0x3, 0x8, 0x9, 0x88b, 0xffffa1e1, 0x8, 0x10, 0x7, 0x0, 0xf, 0x6, 0x7], [0x2, 0x8, 0x7, 0x0, 0x3f, 0x7, 0x217b215b, 0x100, 0xffffffff, 0x0, 0x400, 0x7, 0x9, 0xffffffff, 0x7fffffff, 0x7, 0x8a2f, 0x1, 0x7fffffff, 0x0, 0x3, 0xf, 0x86, 0xbb9, 0x4, 0x9, 0x7, 0x7ff, 0x118, 0xb6fa, 0x7356, 0x8, 0x3ff, 0x30e, 0x7fffffff, 0x8, 0x400, 0x0, 0x1, 0xc, 0xa, 0x23, 0x5, 0x9, 0x2, 0x6, 0x8, 0x400, 0xec1, 0xfffff801, 0x5, 0x3ff, 0x6, 0xf, 0x2, 0x3, 0xf9a, 0x4, 0xd94, 0xfffffffb, 0x3ff, 0x7, 0x1c5f, 0x3]}, 0x45c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 6 (id=5012): r0 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) pipe(0x0) io_setup(0x9, &(0x7f0000000100)=0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x1e}) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T5906] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 401.271495][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 401.286057][ T5906] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.313234][ T5906] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.330190][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.344842][ T5906] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 401.367868][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.402706][ T5906] usb 5-1: config 0 descriptor?? [ 401.830826][ T5906] hid_parser_main: 1221 callbacks suppressed [ 401.830848][ T5906] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 401.845007][ T5906] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 401.852528][ T1213] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 401.860303][ T5906] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 401.867365][ T5906] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 401.876339][ T5906] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 401.885143][ T5906] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 402.000719][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 402.031569][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 402.035247][ T5933] usb 5-1: USB disconnect, device number 53 [ 402.045320][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.059700][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.070434][ T1213] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.080014][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.105496][ T1213] usb 1-1: config 0 descriptor?? [ 402.119857][ T1213] hub 1-1:0.0: USB hub found [ 402.180363][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 402.187190][ T10] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 402.199812][ T10] usb 7-1: config 0 has no interface number 0 [ 402.210124][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 402.219365][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.233922][ T10] usb 7-1: Product: syz [ 402.238169][ T10] usb 7-1: Manufacturer: syz [ 402.250956][ T10] usb 7-1: SerialNumber: syz [ 402.258895][ T10] usb 7-1: config 0 descriptor?? [ 402.325133][ T1213] hub 1-1:0.0: 1 port detected [ 402.472761][ T10] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 402.483690][ T10] uvcvideo 7-1:0.31: No valid video chain found. [ 402.516465][ T10] usb 7-1: USB disconnect, device number 30 [ 402.694951][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'. [ 402.723275][T15561] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3899'. [ 402.959178][ T1213] hub 1-1:0.0: activate --> -90 [ 403.161087][ T1213] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 403.181396][ T1213] usb 1-1: USB disconnect, device number 51 [ 403.200628][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 403.257418][ T5884] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 403.373198][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.392797][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.409239][ T10] usb 3-1: config 0 descriptor?? [ 403.420266][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 403.423261][ T10] cp210x 3-1:0.0: cp210x converter detected [ 403.430974][ T5884] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 403.444457][ T5884] usb 6-1: config 0 interface 0 has no altsetting 0 [ 403.452408][ T5884] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 403.462138][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.483293][ T5884] usb 6-1: config 0 descriptor?? [ 403.834305][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 403.862188][T15603] input: syz0 as /devices/virtual/input/input78 [ 403.960849][ T5884] nzxt-smart2 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 404.071250][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 404.087839][T15607] input: syz1 as /devices/virtual/input/input79 [ 404.269822][ T10] usb 3-1: USB disconnect, device number 48 [ 404.299461][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.332014][ T10] cp210x 3-1:0.0: device disconnected [ 404.397342][ T5933] usb 6-1: USB disconnect, device number 35 [ 405.340658][T15651] veth2: entered promiscuous mode [ 405.351613][T15651] veth2: entered allmulticast mode [ 405.760792][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 406.633052][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3959'. [ 407.635727][T15753] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.3977'. [ 407.691949][T15756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3978'. [ 407.730266][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 407.743673][T15758] netlink: 'syz.2.3979': attribute type 15 has an invalid length. [ 407.752878][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3979'. [ 407.768761][ T6030] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.768823][T15758] netlink: 'syz.2.3979': attribute type 15 has an invalid length. [ 407.778827][ T6030] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.787216][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3979'. [ 407.804278][ T6030] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.815670][ T6030] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.901138][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 407.909518][ T10] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 407.918619][ T10] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 407.930187][ T10] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 407.939442][ T10] usb 7-1: config 250 has no interface number 0 [ 407.946819][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 407.960571][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 407.971773][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.983689][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.994742][ T10] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 408.009072][ T10] usb 7-1: config 250 interface 228 has no altsetting 0 [ 408.018597][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 408.046861][ T10] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 408.061218][ T10] usb 7-1: Product: syz [ 408.065799][ T10] usb 7-1: SerialNumber: syz [ 408.083483][ T10] hub 7-1:250.228: bad descriptor, ignoring hub [ 408.093555][ T10] hub 7-1:250.228: probe with driver hub failed with error -5 [ 408.178147][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 408.294358][ T10] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 408.430623][ T5884] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 408.515415][ T10] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 408.596726][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.633397][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.647554][ T5884] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 408.657022][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.681900][ T5884] usb 1-1: config 0 descriptor?? [ 408.805487][ T30] audit: type=1326 audit(1764736859.027:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.4.3997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7518f749 code=0x0 [ 409.000671][ T5914] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 409.105727][ T5884] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 409.115593][ T5884] cm6533_jd 0003:0D8C:0022.0037: unknown main item tag 0x0 [ 409.141263][ T5884] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0037/input/input80 [ 409.181269][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 409.193194][ T5884] cm6533_jd 0003:0D8C:0022.0037: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 409.218413][ T5914] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.240509][ T5914] usb 6-1: config 179 has no interface number 0 [ 409.251399][ T5914] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.272583][ T5914] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.283980][ T5914] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.301974][ T10] usb 7-1: USB disconnect, device number 31 [ 409.321007][ T5914] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.333384][ T10] usblp0: removed [ 409.335583][ T5914] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.359623][ T5933] usb 1-1: USB disconnect, device number 52 [ 409.382510][ T5914] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.397100][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.428802][T15798] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 409.649167][T15822] netlink: 'syz.4.4008': attribute type 13 has an invalid length. [ 409.659177][T15822] veth0_macvtap: left promiscuous mode [ 409.671717][T15822] macvtap0: entered promiscuous mode [ 409.677327][T15822] macvtap0: entered allmulticast mode [ 409.716942][ T5933] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input81 [ 409.891390][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.901878][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.370222][ T5913] usb 6-1: USB disconnect, device number 36 [ 410.370244][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 410.385081][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 410.465724][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 410.496248][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.529496][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.554977][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.587812][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.611770][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.632696][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.661024][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.689954][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.704084][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.723773][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.751294][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.764732][T15845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.795093][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.808796][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.851445][ T10] usb 5-1: SerialNumber: syz [ 411.092410][ T10] usb 5-1: 0:2 : does not exist [ 411.143394][ T10] usb 5-1: USB disconnect, device number 54 [ 411.215308][T11616] udevd[11616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.322382][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 411.370195][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4031'. [ 411.730216][ T5933] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 411.890234][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 411.908085][ T5933] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 411.945297][ T5933] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 411.967260][T15889] kvm: user requested TSC rate below hardware speed [ 411.979529][ T5933] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.020203][ T5933] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 412.066452][ T5933] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 412.086124][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.106419][ T5933] usb 1-1: Product: syz [ 412.120206][ T5933] usb 1-1: Manufacturer: syz [ 412.133634][ T5933] usb 1-1: SerialNumber: syz [ 412.199483][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 412.221508][ T5933] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input82 [ 412.420291][ T5933] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 412.454211][ T5933] (id 0x00) [ 412.560170][ T5933] rc_core: IR keymap rc-imon-pad not found [ 412.582686][ T5933] Registered IR keymap rc-empty [ 412.587665][ T5933] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 412.605368][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0xe3 [ 412.616735][ T5933] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 412.622061][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x63 [ 412.644409][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x423 [ 412.658682][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x422 [ 412.661439][ T5933] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 412.670441][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x4e9 [ 412.688534][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x490 [ 412.703725][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1d9 [ 412.711308][T15911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 412.713126][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x5c9 [ 412.729235][ T5933] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input83 [ 412.735954][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x7d0 [ 412.751455][T15897] kvm: kvm [15896]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x715 [ 412.785208][ T5933] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:53> initialized [ 412.882866][ T5933] usb 1-1: USB disconnect, device number 53 [ 413.559558][T15938] binder: 15937:15938 ioctl 4018620d 0 returned -22 [ 413.644183][T15939] binder: 15937:15939 ioctl c0306201 0 returned -14 [ 413.740171][ T5933] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 413.910388][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 413.938202][ T5933] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 413.949859][T15947] vlan2: entered promiscuous mode [ 413.974768][T15947] gretap0: entered promiscuous mode [ 413.981290][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.013355][ T5933] usb 6-1: Product: syz [ 414.023389][ T5933] usb 6-1: Manufacturer: syz [ 414.031788][ T5933] usb 6-1: SerialNumber: syz [ 414.054245][ T5933] usb 6-1: config 0 descriptor?? [ 414.078797][ T5933] gspca_main: sq905-2.14.0 probing 2770:9120 [ 414.190454][ T5906] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 414.353650][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 414.365631][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.379343][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.402195][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 414.422316][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 414.462073][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.496773][ T5906] usb 5-1: config 0 descriptor?? [ 414.668075][T15962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.936072][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 414.971370][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 414.978368][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 414.997523][T15976] binder: 15975:15976 ioctl c0306201 2000000003c0 returned -14 [ 415.031934][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.038855][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.059638][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.066886][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.077391][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.085746][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.093613][ T5906] apple 0003:05AC:0247.0038: unknown main item tag 0x0 [ 415.102394][ T5933] gspca_sq905: bulk read fail (-22) len 0/4 [ 415.114115][ T5933] sq905 6-1:0.0: probe with driver sq905 failed with error -5 [ 415.125130][ T5906] apple 0003:05AC:0247.0038: unexpected long global item [ 415.155649][ T5906] apple 0003:05AC:0247.0038: parse failed [ 415.179330][ T5906] apple 0003:05AC:0247.0038: probe with driver apple failed with error -22 [ 415.210435][ T5906] usb 5-1: USB disconnect, device number 55 [ 415.319602][ T5913] usb 6-1: USB disconnect, device number 37 [ 415.359361][T15991] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4080'. [ 415.593890][T16000] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4081'. [ 415.604592][T15991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.615802][T15991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.626115][T15991] bond0 (unregistering): Released all slaves [ 415.665291][T15996] netlink: 'syz.2.4081': attribute type 29 has an invalid length. [ 415.683373][T15999] netlink: 'syz.2.4081': attribute type 29 has an invalid length. [ 415.808361][T16008] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4087'. [ 416.310184][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 416.490202][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 416.501943][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 416.522111][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.532418][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.546898][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.562781][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.571489][ T10] usb 7-1: Product: syz [ 416.575784][ T10] usb 7-1: Manufacturer: syz [ 416.580746][ T10] usb 7-1: SerialNumber: syz [ 416.601558][T16043] kAFS: unable to lookup cell '(,c¾ûL' [ 416.615167][T16043] kAFS: unable to lookup cell '.,' [ 417.037237][ T10] usb 7-1: 0:2 : does not exist [ 417.640265][T11183] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 417.790359][T11183] usb 6-1: Using ep0 maxpacket: 16 [ 417.797594][T11183] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 417.808146][T11183] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.819836][T11183] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.829285][T11183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.837417][T11183] usb 6-1: Product: syz [ 417.843171][T11183] usb 6-1: Manufacturer: syz [ 417.847799][T11183] usb 6-1: SerialNumber: syz [ 417.875978][ T10] usb 7-1: USB disconnect, device number 32 [ 418.266218][T11183] usb 6-1: 0:2 : does not exist [ 418.380588][T16098] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 418.444198][T16098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.477979][T16102] bond2: (slave geneve2): making interface the new active one [ 418.493066][T16102] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 418.508372][T16102] syz.4.4122 (16102) used greatest stack depth: 17568 bytes left [ 418.530183][ T5933] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 418.676859][T11183] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 418.712027][ T5933] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.743549][ T5933] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.771895][T11183] usb 6-1: USB disconnect, device number 38 [ 418.779108][ T5933] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.836405][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.889872][T16094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.912411][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 418.969321][ T5933] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.241379][ T10] usb 1-1: USB disconnect, device number 54 [ 419.492784][T16128] kvm: MWAIT instruction emulated as NOP! [ 419.550352][ C0] ip6_tnl_xmit_ctl: 88 callbacks suppressed [ 419.550371][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.600343][ T5906] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 419.796819][ T5906] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.833638][ T5906] usb 3-1: config 0 has no interface number 0 [ 419.866123][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.910145][ T5906] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 419.940332][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 419.998188][ T5906] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 420.036417][ T5906] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 420.071418][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.099403][T16151] ªªªªªª: renamed from vlan0 [ 420.108843][ T5906] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 420.139648][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.185739][ T5906] usb 3-1: config 0 descriptor?? [ 420.226613][T16126] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.246587][T16126] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.316810][ T5906] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 420.414918][T16156] netlink: 'syz.6.4145': attribute type 16 has an invalid length. [ 420.447769][T16156] netlink: 'syz.6.4145': attribute type 17 has an invalid length. [ 420.477627][T16156] bridge0: left promiscuous mode [ 420.491283][T16156] bridge0: left allmulticast mode [ 420.557789][ T5906] usb 3-1: USB disconnect, device number 49 [ 420.612849][T16156] veth0_macvtap: left allmulticast mode [ 420.619426][ T5906] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 420.662966][T16156] macvtap1: left allmulticast mode [ 420.685225][T16156] ip6gre1: left promiscuous mode [ 420.708237][T16156] ip6gre1: left allmulticast mode [ 420.728011][T16156] batman_adv: batadv0: Interface deactivated: macvtap2 [ 420.776295][T16156] veth0_to_batadv: left allmulticast mode [ 420.783214][T16156] macvtap2: left allmulticast mode [ 420.794925][T16156] veth2: left promiscuous mode [ 420.799804][T16156] veth2: left allmulticast mode [ 420.807703][ T36] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.831906][ T36] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.844089][ T36] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.854341][ T36] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.969967][T16164] loop2: detected capacity change from 0 to 7 [ 420.988849][T16164] Dev loop2: unable to read RDB block 7 [ 421.009129][T16164] loop2: unable to read partition table [ 421.028552][T16164] loop2: partition table beyond EOD, truncated [ 421.048523][T16164] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.240494][ T5933] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 421.262046][ T5906] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 421.402119][ T5933] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 421.418076][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.460712][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 421.461258][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.477194][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.523427][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.536646][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.569854][ T5906] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 421.587905][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.605575][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.636096][ T5906] usb 6-1: config 0 descriptor?? [ 421.647804][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.715491][ T5933] usb 5-1: config 0 descriptor?? [ 422.021599][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4155'. [ 422.107913][T16185] bridge0: entered allmulticast mode [ 422.114536][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 422.125614][T16185] bridge_slave_1: left allmulticast mode [ 422.131683][T16185] bridge_slave_1: left promiscuous mode [ 422.137617][T16185] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.152442][ T5933] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 422.169915][T16185] bridge_slave_0: left allmulticast mode [ 422.186647][T16185] bridge_slave_0: left promiscuous mode [ 422.203196][ T5933] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 422.216937][T16185] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.294256][T16185] bridge0 (unregistering): left allmulticast mode [ 422.424738][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4158'. [ 422.448875][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4158'. [ 422.481733][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.514331][ T5906] letsketch 0003:6161:4D15.003A: Device info: ᣠ[ 422.521390][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.524262][T11183] usb 5-1: USB disconnect, device number 56 [ 422.720837][ T5906] letsketch 0003:6161:4D15.003A: Device info: à° [ 422.959464][ T5906] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 422.980454][ T5906] letsketch 0003:6161:4D15.003A: probe with driver letsketch failed with error -71 [ 423.008656][ T5906] usb 6-1: USB disconnect, device number 39 [ 424.022764][T11183] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 424.140227][ T5933] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 424.191889][T11183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.217395][T11183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.248224][T11183] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 424.274941][T11183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.314008][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.344178][T11183] usb 3-1: config 0 descriptor?? [ 424.360223][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.389666][ T5933] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 424.423761][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.462898][ T5933] usb 5-1: Product: syz [ 424.481416][ T5933] usb 5-1: Manufacturer: syz [ 424.486075][ T5933] usb 5-1: SerialNumber: syz [ 424.531896][ T5933] usb 5-1: config 0 descriptor?? [ 424.581330][ T5933] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 424.628123][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.654990][ T30] audit: type=1804 audit(1764736874.867:533): pid=16239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4178" name=6D656D66643A6C32AA2AAAAAAB49F9BF83667CC38615ACBBEDBF25D8EE2917AA0FAA6C5296E621D76B026FFF5345 dev="hugetlbfs" ino=68478 res=1 errno=0 [ 424.659792][ T5933] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 424.683169][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.770287][ T5906] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 424.780731][ T5933] usb 5-1: media controller created [ 424.853799][T11183] hid_parser_main: 839 callbacks suppressed [ 424.853822][T11183] hid-steam 0003:28DE:1142.003B: unknown main item tag 0x0 [ 424.905052][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.914790][T11183] hid-steam 0003:28DE:1142.003B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 424.991057][T11183] hid-steam 0003:28DE:1142.003B: Steam wireless receiver connected [ 425.016785][ T5933] DVB: Unable to find symbol tda10046_attach() [ 425.023960][T11183] hid-steam 0003:28DE:1142.003B: No HID_FEATURE_REPORT submitted - nothing to read [ 425.035797][ T5933] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 425.054753][T11183] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 425.066107][ T5933] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 425.115842][T11183] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 425.190521][ T5884] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 425.354761][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.383242][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.410114][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 425.430249][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.460244][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.469479][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.517136][ T5884] usb 6-1: config 0 descriptor?? [ 425.603747][ T5913] usb 3-1: USB disconnect, device number 50 [ 425.657444][ T5913] hid-steam 0003:28DE:1142.003B: Steam wireless receiver disconnected [ 425.971089][ T5884] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 425.995669][ T5933] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 426.054331][ T5933] usb 5-1: USB disconnect, device number 57 [ 426.469996][ T30] audit: type=1326 audit(1764736876.687:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.6.4190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f654d18f749 code=0x0 [ 426.515651][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 426.962668][T16292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 426.973617][T16295] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4197'. [ 427.409216][T16321] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4208'. [ 427.551672][ T5933] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 427.566818][T16321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.577263][T16321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.587230][T16321] bond0 (unregistering): Released all slaves [ 427.654273][ T5913] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 427.730863][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.747478][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.758602][ T5933] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 427.767989][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.780309][ T5933] usb 5-1: config 0 descriptor?? [ 427.820330][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 427.831486][ T5913] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 427.841279][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.849994][ T5913] usb 1-1: Product: syz [ 427.855014][ T5913] usb 1-1: Manufacturer: syz [ 427.859919][ T5913] usb 1-1: SerialNumber: syz [ 427.867920][ T5913] usb 1-1: config 0 descriptor?? [ 427.889336][ T5913] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 428.062886][ T5914] usb 6-1: USB disconnect, device number 40 [ 428.113887][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4216'. [ 428.197062][ T5933] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 428.218165][ T5933] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003E/input/input86 [ 428.310418][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 428.345199][ T5933] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 428.401735][T16317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.430945][T16317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.455281][ T5933] usb 5-1: USB disconnect, device number 58 [ 428.470233][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 428.477555][T16345] fido_id[16345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 428.494046][ T10] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 428.504699][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.539726][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.559943][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.579980][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.614826][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.648208][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.681988][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.703187][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.716175][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 428.726326][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 428.736391][ T10] usb 3-1: SerialNumber: syz [ 428.757176][ T10] usb 3-1: config 0 descriptor?? [ 428.787153][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87 [ 428.937440][ T5913] gspca_ov534_9: reg_w failed -71 [ 428.950552][ T5906] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 428.984849][ T5190] bcm5974 3-1:0.0: could not read from device [ 429.008451][ T5190] bcm5974 3-1:0.0: could not read from device [ 429.015986][ T10] usb 3-1: USB disconnect, device number 51 [ 429.030365][ T5190] bcm5974 3-1:0.0: could not read from device [ 429.116490][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.164411][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.188091][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.203331][ T5906] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.221166][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.235215][ T5906] usb 7-1: config 0 descriptor?? [ 429.240622][ T5913] gspca_ov534_9: Unknown sensor 0000 [ 429.240716][ T5913] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 429.289636][ T5913] usb 1-1: USB disconnect, device number 56 [ 429.661505][ T5933] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 429.715138][ T5906] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 429.840312][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 429.880681][ T5914] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 429.890909][ T5933] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 429.916961][ T5933] usb 5-1: config 179 has no interface number 0 [ 429.946548][ T5933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 429.968403][ T5933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 429.981271][ T5933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.000418][ T5933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 430.022574][ T5933] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 430.060547][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 430.078029][ T5933] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 430.099650][ T5914] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 430.111876][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.120368][ T5914] usb 6-1: config 0 has no interface number 0 [ 430.128289][ T5914] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.149682][T16360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 430.157624][ T5914] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 430.199952][ T5914] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 430.211943][ T5914] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.231960][ T5914] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 430.250370][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.279362][ T5914] usb 6-1: Product: syz [ 430.284192][ T5914] usb 6-1: Manufacturer: syz [ 430.288993][ T5914] usb 6-1: SerialNumber: syz [ 430.346050][ T5914] usb 6-1: config 0 descriptor?? [ 430.417576][ T5933] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input89 [ 430.621982][ T5914] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 430.649953][ T5906] usb 7-1: USB disconnect, device number 33 [ 430.880387][T16390] input: syz0 as /devices/virtual/input/input90 [ 430.889711][ T5913] usb 6-1: USB disconnect, device number 41 [ 430.986081][ T5906] usb 5-1: USB disconnect, device number 59 [ 430.986207][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 431.000697][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 431.205161][T16400] dvmrp1: entered allmulticast mode [ 431.922385][T16427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.213521][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 432.224458][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4254'. [ 432.244830][ T3513] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.244947][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 432.262970][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4254'. [ 432.265217][ T3513] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.292608][ T5913] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 432.311805][ T3869] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.335683][ T3869] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.440725][ T5914] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 432.460428][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 432.483220][ T5913] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 432.505640][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4256'. [ 432.512568][ T5913] usb 1-1: config 1 has no interface number 1 [ 432.530483][ T5913] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.557243][ T5913] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 432.592275][T16452] netlink: 'syz.4.4259': attribute type 1 has an invalid length. [ 432.601787][ T5913] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.614706][ T5914] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 432.642521][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.655236][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.661288][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.687074][ T5913] usb 1-1: Product: syz [ 432.696214][ T5913] usb 1-1: Manufacturer: syz [ 432.701114][ T5913] usb 1-1: SerialNumber: syz [ 432.741686][ T5914] usb 3-1: config 0 descriptor?? [ 432.772087][T16452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.798377][ T5914] gspca_main: spca508-2.14.0 probing 8086:0110 [ 432.877445][T16454] bond3: (slave ip6gretap1): making interface the new active one [ 432.905198][T16454] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 433.019257][ T5914] gspca_spca508: reg_read err -32 [ 433.051572][ T5914] gspca_spca508: reg_read err -32 [ 433.059411][ T5914] gspca_spca508: reg_read err -32 [ 433.101580][ T5914] gspca_spca508: reg_read err -32 [ 433.141408][ T5913] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 433.308245][ T5914] gspca_spca508: reg write: error -71 [ 433.330295][ T5914] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 433.370522][ T5914] usb 3-1: USB disconnect, device number 52 [ 433.503425][T16479] netlink: 'syz.5.4270': attribute type 16 has an invalid length. [ 433.521722][T16479] netlink: 'syz.5.4270': attribute type 17 has an invalid length. [ 433.652059][ T5906] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 433.678672][T16479] vxlan0: left promiscuous mode [ 433.686717][T16479] veth0: left promiscuous mode [ 433.691993][T16479] veth0: left allmulticast mode [ 433.702015][ T4329] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.731027][ T3869] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.753018][ T3869] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.791930][ T3869] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.820255][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 433.842058][ T5906] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 433.871793][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.914534][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 433.952242][ T5913] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 434.012725][ T5913] usb 1-1: USB disconnect, device number 57 [ 434.161812][T11183] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 434.350229][T11183] usb 6-1: Using ep0 maxpacket: 8 [ 434.417720][T11183] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.466559][T11183] usb 6-1: config 4 interface 0 has no altsetting 0 [ 434.483370][T11183] usb 6-1: string descriptor 0 read error: -22 [ 434.489683][T11183] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 434.510332][T11183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.550279][T11183] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 434.572890][T11183] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.616670][T11183] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 434.636377][T11183] usb 6-1: media controller created [ 434.701942][T11183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.910684][ T5933] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 435.039754][ T6029] usb 6-1: USB disconnect, device number 42 [ 435.077760][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.117254][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.134644][ T5906] gspca_nw80x: reg_w err -71 [ 435.142271][ T5906] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 435.147094][ T5933] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 435.159716][ T5906] usb 7-1: USB disconnect, device number 34 [ 435.182856][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.203366][ T5933] usb 1-1: config 0 descriptor?? [ 435.639705][ T5933] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 435.673625][ T5933] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 435.750719][ T5933] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected [ 435.770537][ T5933] hid-steam 0003:28DE:1142.0040: No HID_FEATURE_REPORT submitted - nothing to read [ 435.804693][ T5933] hid-steam 0003:28DE:1142.0041: unknown main item tag 0x0 [ 435.838058][ T5933] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 435.974148][ T5906] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 436.163028][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.185665][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.226801][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.263577][ T5906] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 436.284522][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.308208][ T5906] usb 5-1: config 0 descriptor?? [ 436.475837][ T6029] usb 1-1: USB disconnect, device number 58 [ 436.503268][ T6029] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected [ 436.777905][ T5906] acrux 0003:1A34:0802.0042: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 436.810776][ T5906] acrux 0003:1A34:0802.0042: no inputs found [ 436.821679][ T5906] acrux 0003:1A34:0802.0042: Failed to enable force feedback support, error: -19 [ 436.995125][ T5933] usb 5-1: USB disconnect, device number 60 [ 437.381234][ T5933] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 437.540264][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 437.554018][ T5933] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 437.573385][ T5933] usb 1-1: config 0 has no interface number 0 [ 437.593650][ T5933] usb 1-1: config 0 interface 182 has no altsetting 0 [ 437.621455][ T5933] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 437.637300][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.649397][ T5933] usb 1-1: Product: syz [ 437.655945][ T5933] usb 1-1: Manufacturer: syz [ 437.676236][ T5933] usb 1-1: SerialNumber: syz [ 437.687311][ T5933] usb 1-1: config 0 descriptor?? [ 437.701521][ T5933] hub 1-1:0.182: bad descriptor, ignoring hub [ 437.717046][ T5933] hub 1-1:0.182: probe with driver hub failed with error -5 [ 437.936090][ T5933] kaweth 1-1:0.182: Firmware present in device. [ 438.109428][ T5933] kaweth 1-1:0.182: Statistics collection: 0 [ 438.134290][ T5933] kaweth 1-1:0.182: Multicast filter limit: 0 [ 438.161349][ T5933] kaweth 1-1:0.182: MTU: 0 [ 438.183044][ T5933] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 438.736198][ T5933] kaweth 1-1:0.182: kaweth interface created at eth5 [ 438.862738][ T5906] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 438.980462][ T5933] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 439.050680][T11183] usb 1-1: USB disconnect, device number 59 [ 439.051315][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 439.071841][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.107706][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.133292][ T5906] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 439.142270][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 439.153123][ T5933] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 439.164816][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.182930][ T5933] usb 6-1: config 0 has no interface number 0 [ 439.189119][ T5933] usb 6-1: config 0 interface 184 has no altsetting 0 [ 439.193688][ T5906] usb 5-1: config 0 descriptor?? [ 439.233458][ T5933] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 439.261962][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.290246][ T5933] usb 6-1: Product: syz [ 439.303245][ T5933] usb 6-1: Manufacturer: syz [ 439.318120][ T5933] usb 6-1: SerialNumber: syz [ 439.339573][ T5933] usb 6-1: config 0 descriptor?? [ 439.356758][ T5933] smsc75xx v1.0.0 [ 439.835571][ T5906] usb 5-1: language id specifier not provided by device, defaulting to English [ 440.035454][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.052756][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.263252][ T5906] letsketch 0003:6161:4D15.0043: Device info: à° [ 440.380588][ T5933] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 440.489116][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.506711][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.516369][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.521921][ T5906] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 440.534988][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.543685][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.591654][ T5933] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 440.608482][ T5906] letsketch 0003:6161:4D15.0043: probe with driver letsketch failed with error -71 [ 440.636287][ T5933] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 440.649277][ T5906] usb 5-1: USB disconnect, device number 61 [ 440.666565][ T5933] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 440.707448][ T5933] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 440.748220][ T5933] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 440.792536][ T5933] usb 6-1: USB disconnect, device number 43 [ 441.488174][T16615] chnl_net:caif_netlink_parms(): no params data found [ 441.650233][ T5906] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 441.763331][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.779756][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.795220][T16615] bridge_slave_0: entered allmulticast mode [ 441.812547][T16615] bridge_slave_0: entered promiscuous mode [ 441.831947][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.842992][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.864021][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.878026][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.890427][T16615] bridge_slave_1: entered allmulticast mode [ 441.898300][T16615] bridge_slave_1: entered promiscuous mode [ 441.922892][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.952522][ T5906] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.975057][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.008034][ T5906] usb 5-1: config 0 descriptor?? [ 442.036487][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.059535][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.137704][T16615] team0: Port device team_slave_0 added [ 442.150713][T16640] input: syz0 as /devices/virtual/input/input91 [ 442.153546][T16615] team0: Port device team_slave_1 added [ 442.280584][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.287707][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.350334][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.374643][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.390326][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.416309][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.472780][ T5906] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 442.479267][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.599870][ T5833] Bluetooth: hci1: command tx timeout [ 442.884498][T16615] hsr_slave_0: entered promiscuous mode [ 442.927273][T16615] hsr_slave_1: entered promiscuous mode [ 442.957331][T16615] debugfs: 'hsr0' already exists in 'hsr' [ 442.980460][T16615] Cannot create hsr debugfs directory [ 443.073986][T16653] vlan2: entered promiscuous mode [ 443.579204][T16615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 443.620607][T16615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.774569][T16615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 443.810545][T16615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.832235][ T5914] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 443.902606][T16615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 443.925717][T16615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.011261][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.032091][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.043550][T16615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 444.064578][T16615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.075928][ T5914] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 444.106113][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.126367][ T5914] usb 6-1: SerialNumber: syz [ 444.149498][ T5914] usb 6-1: 0:2 : does not exist [ 444.396789][ T5914] usb 6-1: USB disconnect, device number 44 [ 444.418373][T16615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.458582][T16615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.493760][T16615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.515540][T16615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.575158][ T24] usb 5-1: USB disconnect, device number 62 [ 444.670271][ T5833] Bluetooth: hci1: command tx timeout [ 444.714717][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.737991][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.757635][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.764845][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.784261][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.791482][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.915859][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.983010][T16615] veth0_vlan: entered promiscuous mode [ 445.009146][T16615] veth1_vlan: entered promiscuous mode [ 445.054098][T16615] veth0_macvtap: entered promiscuous mode [ 445.065887][T16615] veth1_macvtap: entered promiscuous mode [ 445.096661][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.116107][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.132641][ T6207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.154156][ T6207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.182935][ T6207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.196343][ T6207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.281449][ T5906] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 445.302768][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.326629][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.373503][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.383812][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.478502][ T5906] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 445.491925][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.501219][ T5906] usb 6-1: Product: syz [ 445.506501][ T5906] usb 6-1: Manufacturer: syz [ 445.526005][ T5906] usb 6-1: SerialNumber: syz [ 445.533823][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 445.551874][ T5906] usb 6-1: config 0 descriptor?? [ 445.712329][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 445.733887][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 445.770703][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.790532][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.804741][ T5906] usb 6-1: USB disconnect, device number 45 [ 445.813321][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.840530][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.871126][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.890284][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.991045][ T1213] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 446.119655][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 446.132204][ T24] usbtmc 7-1:16.0: can't read capabilities [ 446.150333][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 446.169648][ T1213] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 446.180546][ T1213] usb 3-1: config 179 has no interface number 0 [ 446.186926][ T1213] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 446.203709][ T1213] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 446.215543][ T1213] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.226915][ T1213] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 446.238875][ T1213] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 446.252592][ T1213] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 446.260477][ T5933] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 446.261747][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.286185][T16703] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 446.434068][ T5933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.438263][ T1213] usb 7-1: USB disconnect, device number 35 [ 446.442828][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.442861][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.442904][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.444545][ T5933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.449788][T16688] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 446.460439][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.522364][ T5933] usb 1-1: Product: syz [ 446.526207][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input92 [ 446.528886][ T5933] usb 1-1: Manufacturer: syz [ 446.558194][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 446.564611][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 446.575159][ T5933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 446.582315][ T5933] cdc_wdm 1-1:1.0: Unknown control protocol [ 446.735076][ T5933] usb 3-1: USB disconnect, device number 53 [ 446.735170][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 446.749603][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 446.758610][ T5833] Bluetooth: hci1: command tx timeout [ 446.854789][ C0] cdc_wdm 1-1:1.0: unknown notification 255 received: index 255 len 0 [ 447.067281][ T5933] usb 1-1: USB disconnect, device number 60 [ 447.095427][T16729] input: syz0 as /devices/virtual/input/input93 [ 447.223727][ T24] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 447.413438][T16742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.539981][T16749] loop6: detected capacity change from 0 to 524287999 [ 447.792808][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'. [ 448.737365][T16802] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 448.834604][ T5833] Bluetooth: hci1: command tx timeout [ 449.196193][T16823] binder: 16821:16823 ioctl c0306201 2000000001c0 returned -22 [ 449.390259][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 449.400193][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 449.411257][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 449.854899][T16851] atomic_op ffff8880777e0998 conn xmit_atomic 0000000000000000 [ 450.290221][ T5933] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 450.419811][T16874] ip6gretap0: entered promiscuous mode [ 450.434809][T16874] macsec1: entered promiscuous mode [ 450.450596][T16874] macsec1: entered allmulticast mode [ 450.464214][T16874] ip6gretap0: entered allmulticast mode [ 450.480228][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 450.486349][T16874] ip6gretap0: left allmulticast mode [ 450.495792][ T5933] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.507663][T16874] ip6gretap0: left promiscuous mode [ 450.514986][ T5933] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.550354][ T5933] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.577597][ T5933] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.597627][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.614678][ T5933] usb 7-1: Product: syz [ 450.624675][ T5933] usb 7-1: Manufacturer: syz [ 450.634666][ T5933] usb 7-1: SerialNumber: syz [ 451.096473][ T5933] usb 7-1: 0:2 : does not exist [ 451.631083][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 451.631454][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 451.649537][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 451.990156][ T6029] usb 7-1: USB disconnect, device number 36 [ 452.335205][T16938] batadv_slave_1: entered promiscuous mode [ 452.353483][T16937] batadv_slave_1: left promiscuous mode [ 452.611075][ T5933] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 452.790151][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 452.799554][ T5933] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.827754][ T5933] usb 1-1: config 0 has no interface number 0 [ 452.872475][ T5933] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.908071][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.950532][ T5933] usb 1-1: Product: syz [ 452.965398][ T5933] usb 1-1: Manufacturer: syz [ 452.985421][ T5933] usb 1-1: SerialNumber: syz [ 453.007941][ T5933] usb 1-1: config 0 descriptor?? [ 453.048370][ T5933] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 453.265426][ T5933] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 453.323395][ T5933] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 453.486403][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4425'. [ 453.528614][T16981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.654282][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 453.662510][ T5933] usb 1-1: USB disconnect, device number 61 [ 453.701964][ T5933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 453.782420][ T5933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 453.800220][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 453.807040][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 453.870350][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 453.891891][ T5933] quatech2 1-1:0.51: device disconnected [ 454.478044][T17006] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 455.932865][T17047] input: syz1 as /devices/virtual/input/input94 [ 456.033045][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 456.040839][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 456.057219][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 456.447085][T17057] syzkaller1: entered promiscuous mode [ 456.453280][T17057] syzkaller1: entered allmulticast mode [ 456.920856][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4457'. [ 457.191457][T17084] loop6: detected capacity change from 0 to 524287999 [ 457.595302][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 457.680927][ T5933] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 457.857753][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.890048][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.899943][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.957814][ T5933] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.000698][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.022139][ T5933] usb 1-1: config 0 descriptor?? [ 458.190211][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.196838][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 458.241359][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 458.302112][ T5906] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 458.346219][ T5906] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.439602][ T5933] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd [ 458.503788][ T5933] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 458.773472][ T1213] usb 1-1: USB disconnect, device number 62 [ 458.854116][T17135] loop6: detected capacity change from 0 to 2560 [ 458.888353][T17135] buffer_io_error: 648 callbacks suppressed [ 458.888371][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.935710][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.979827][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.007996][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.045830][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.060439][ T5906] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 459.073353][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.101784][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.122460][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.174447][T17135] ldm_validate_partition_table(): Disk read failed. [ 459.181919][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.189920][T17135] Buffer I/O error on dev loop6, logical block 0, async page read [ 459.201138][T17135] Dev loop6: unable to read RDB block 0 [ 459.207238][T17135] loop6: unable to read partition table [ 459.218618][T17135] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 459.260799][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 459.283252][ T5906] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.341149][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.368579][ T5906] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 459.404992][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.461309][ T5906] usb 5-1: config 0 descriptor?? [ 459.735248][ T30] audit: type=1326 audit(1764736909.947:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.0.4490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd51598f749 code=0x0 [ 459.941979][ T5906] nzxt-smart2 0003:1E71:2009.0047: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 460.261837][T17169] loop2: detected capacity change from 0 to 7 [ 460.282054][T11616] Dev loop2: unable to read RDB block 7 [ 460.287678][T11616] loop2: unable to read partition table [ 460.305780][T11616] loop2: partition table beyond EOD, truncated [ 460.328501][T17169] Dev loop2: unable to read RDB block 7 [ 460.345950][T17169] loop2: unable to read partition table [ 460.357145][T17169] loop2: partition table beyond EOD, truncated [ 460.365780][T17169] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.416927][ T5906] usb 5-1: USB disconnect, device number 63 [ 460.900584][ T5933] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 461.073832][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 461.093630][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.131487][T17192] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 461.157895][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.201257][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.272848][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.322814][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.354054][ T5933] usb 1-1: config 0 descriptor?? [ 461.519153][T17205] vlan0: entered allmulticast mode [ 461.533586][T17205] dummy0: entered allmulticast mode [ 461.563450][ T5914] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 461.721640][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 461.743219][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.782302][ T5914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.797389][ T5933] HID 045e:07da: Invalid code 65791 type 1 [ 461.813582][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.830811][ T5933] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0048/input/input96 [ 461.866286][ T5914] usb 3-1: config 0 descriptor?? [ 461.891943][ T5933] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 462.051115][ T5933] usb 1-1: USB disconnect, device number 63 [ 462.112378][ T5914] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 462.329843][ T1213] usb 3-1: USB disconnect, device number 54 [ 462.336186][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 462.887525][T17249] syz_tun: entered allmulticast mode [ 462.918940][T17248] syz_tun: left allmulticast mode [ 463.662041][ T5914] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 463.841470][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 463.849548][ T5914] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 463.867203][ T5914] usb 6-1: config 1 has no interface number 1 [ 463.880558][ T5914] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.908781][ T5914] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 463.963559][ T5914] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.014093][ T5914] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.043681][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.062902][ T5914] usb 6-1: Product: syz [ 464.110177][ T5914] usb 6-1: Manufacturer: syz [ 464.114899][ T5914] usb 6-1: SerialNumber: syz [ 464.590882][ T5914] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 465.414766][ T1213] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 465.450941][ T5914] usb 6-1: USB disconnect, device number 46 [ 465.524330][T11627] udevd[11627]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.620584][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 465.629873][ T1213] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 465.669159][ T1213] usb 3-1: config 0 has no interface number 0 [ 465.694071][ T1213] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 465.703535][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.717617][ T1213] usb 3-1: Product: syz [ 465.721950][ T5906] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 465.729950][ T1213] usb 3-1: Manufacturer: syz [ 465.735024][ T1213] usb 3-1: SerialNumber: syz [ 465.744207][ T1213] usb 3-1: config 0 descriptor?? [ 465.900222][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 465.909315][ T5906] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 465.918551][ T5914] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 465.919223][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.940408][ T5906] usb 7-1: config 0 descriptor?? [ 465.949561][ T5906] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 466.132096][ T5914] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 466.150175][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.181576][ T5914] usb 1-1: config 0 descriptor?? [ 466.204459][ T5914] cp210x 1-1:0.0: cp210x converter detected [ 466.289029][ T1213] usb 3-1: USB disconnect, device number 55 [ 466.588287][ T5906] gspca_sonixj: reg_w1 err -71 [ 466.596548][ T5906] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 466.605758][ T5914] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 466.608449][ T5906] usb 7-1: USB disconnect, device number 37 [ 466.660977][ T5914] usb 1-1: cp210x converter now attached to ttyUSB0 [ 466.852305][ T5906] usb 1-1: USB disconnect, device number 64 [ 466.881752][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.908066][ T5906] cp210x 1-1:0.0: device disconnected [ 467.027619][T17338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.152586][T17341] program syz.4.4571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.564262][T17351] syzkaller1: entered promiscuous mode [ 467.569777][T17351] syzkaller1: entered allmulticast mode [ 468.735549][ T1213] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 468.955746][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.997808][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.022554][ T1213] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 469.049155][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.112090][ T1213] usb 3-1: config 0 descriptor?? [ 469.454683][ T1213] usbhid 3-1:0.0: can't add hid device: -71 [ 469.466808][ T1213] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 469.494008][ T1213] usb 3-1: USB disconnect, device number 56 [ 469.672738][T17402] netlink: 'syz.4.4597': attribute type 5 has an invalid length. [ 469.686727][ T30] audit: type=1326 audit(1764736919.907:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51598f749 code=0x7ffc0000 [ 469.775033][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4600'. [ 469.785486][ T30] audit: type=1326 audit(1764736919.937:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51598f749 code=0x7ffc0000 [ 469.878890][ T30] audit: type=1326 audit(1764736919.947:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd51598f749 code=0x7ffc0000 [ 469.949451][ T30] audit: type=1326 audit(1764736919.947:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51598f749 code=0x7ffc0000 [ 469.987592][ T30] audit: type=1326 audit(1764736919.947:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17403 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51598f749 code=0x7ffc0000 [ 470.010001][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.051944][T17417] kvm: user requested TSC rate below hardware speed [ 470.633509][T17440] pim6reg1: entered promiscuous mode [ 470.682460][T17440] pim6reg1: entered allmulticast mode [ 470.764216][T17440] pim6reg1: left promiscuous mode [ 470.769309][T17440] pim6reg1: left allmulticast mode [ 470.998746][ T30] audit: type=1326 audit(1764736921.217:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.5.4620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f859618f749 code=0x0 [ 471.104060][ T30] audit: type=1326 audit(1764736921.327:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 471.126595][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.183429][ T30] audit: type=1326 audit(1764736921.357:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58592b829 code=0x7ffc0000 [ 471.260905][ T30] audit: type=1326 audit(1764736921.357:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff58592b829 code=0x7ffc0000 [ 471.303834][T17469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4625'. [ 471.315184][ T30] audit: type=1326 audit(1764736921.357:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 471.469380][T17474] loop3: detected capacity change from 0 to 7 [ 471.483331][T17474] Dev loop3: unable to read RDB block 7 [ 471.489617][T17474] loop3: unable to read partition table [ 471.498882][T17474] loop3: partition table beyond EOD, truncated [ 471.506085][T17474] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.721483][ T5914] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 471.884661][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 471.920285][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.962260][ T5914] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 471.993668][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.028449][ T5914] usb 5-1: config 0 descriptor?? [ 472.048875][T17475] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 472.396232][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4643'. [ 472.406397][T17511] hsr_slave_0: left promiscuous mode [ 472.413620][T17511] hsr_slave_1: left promiscuous mode [ 472.513259][ T5914] hid-multitouch 0003:0457:07DA.0049: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 472.670264][ T781] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 472.772210][ T5916] usb 5-1: USB disconnect, device number 64 [ 472.791158][ T5914] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 472.831119][ T781] usb 1-1: Using ep0 maxpacket: 8 [ 472.838922][ T781] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 472.855019][ T781] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 472.865123][ T781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.880680][ T781] usb 1-1: Product: syz [ 472.886298][ T781] usb 1-1: Manufacturer: syz [ 472.892358][ T781] usb 1-1: SerialNumber: syz [ 472.899011][ T781] usb 1-1: config 0 descriptor?? [ 472.913270][ T781] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 472.970168][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 472.983424][ T5914] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 472.997049][ T5914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.007313][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.017181][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.029752][ T5914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.044452][ T5914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.053830][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.281561][T17532] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4651'. [ 473.300771][ T5914] usb 6-1: usb_control_msg returned -32 [ 473.306529][ T5914] usbtmc 6-1:16.0: can't read capabilities [ 473.880382][ T5914] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 473.939352][ T781] gspca_zc3xx: reg_w_i err -71 [ 474.063357][ T5914] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.072347][ T5914] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.086226][T17550] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 474.099905][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.137159][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 474.156076][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 474.173002][ T5914] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.185178][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 474.197784][ T5914] usb 5-1: Product: syz [ 474.209434][ T5914] usb 5-1: Manufacturer: syz [ 474.238449][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 474.243920][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 474.251770][ T5914] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 474.257696][ T5914] cdc_wdm 5-1:1.0: Unknown control protocol [ 474.287879][ T1213] usb 6-1: USB disconnect, device number 47 [ 474.450256][ T5914] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 474.540263][ T781] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 474.546757][ T781] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 474.557614][ T781] usb 1-1: USB disconnect, device number 65 [ 474.601960][ T5914] usb 7-1: config 0 has no interfaces? [ 474.607800][ T5914] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 474.617847][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.628122][ T5914] usb 7-1: config 0 descriptor?? [ 474.867334][ T5914] usb 7-1: USB disconnect, device number 38 [ 475.030198][ T781] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 475.114011][T17574] netlink: 'syz.2.4668': attribute type 13 has an invalid length. [ 475.122086][T17574] netlink: 'syz.2.4668': attribute type 17 has an invalid length. [ 475.180311][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.197682][ T781] usb 1-1: Using ep0 maxpacket: 16 [ 475.206047][ T781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.218299][ T781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.228614][ T781] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 475.244656][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.281416][ T781] usb 1-1: config 0 descriptor?? [ 475.764104][ T781] logitech-hidpp-device 0003:046D:C091.004A: item fetching failed at offset 1/5 [ 475.816115][ T781] logitech-hidpp-device 0003:046D:C091.004A: hidpp_probe:parse failed [ 475.850630][ T781] logitech-hidpp-device 0003:046D:C091.004A: probe with driver logitech-hidpp-device failed with error -22 [ 475.983193][ T10] usb 1-1: USB disconnect, device number 66 [ 476.178524][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'. [ 476.712808][ T781] usb 5-1: USB disconnect, device number 65 [ 477.081599][T17627] kvm: kvm [17625]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 478.010839][ T781] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 478.220703][ T781] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 478.229033][ T781] usb 5-1: config 0 has no interface number 0 [ 478.242476][ T781] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 478.252428][ T781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.267282][ T781] usb 5-1: Product: syz [ 478.271812][ T781] usb 5-1: Manufacturer: syz [ 478.277043][ T781] usb 5-1: SerialNumber: syz [ 478.293598][ T781] usb 5-1: config 0 descriptor?? [ 478.302395][ T781] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 478.313473][ T781] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 478.440365][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 478.610202][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 478.631084][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 478.639977][ T10] usb 7-1: config 0 has no interface number 0 [ 478.640790][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4703'. [ 478.673632][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 478.679390][T11183] usb 5-1: USB disconnect, device number 66 [ 478.690204][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.690232][ T10] usb 7-1: Product: syz [ 478.690247][ T10] usb 7-1: Manufacturer: syz [ 478.690261][ T10] usb 7-1: SerialNumber: syz [ 478.700858][ T10] usb 7-1: config 0 descriptor?? [ 478.730520][T17682] vivid-001: disconnect [ 478.737341][T17682] vivid-001: reconnect [ 478.758171][ T10] smsc95xx v2.0.0 [ 478.817488][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 478.817506][ T30] audit: type=1326 audit(1764736929.037:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.5.4715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f859618f749 code=0x0 [ 478.845935][ T781] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 478.992334][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.010164][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.020042][ T781] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 479.037330][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.049594][ T781] usb 3-1: config 0 descriptor?? [ 479.166572][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 479.177688][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 479.793090][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 479.826962][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 479.856848][ T10] usb 7-1: USB disconnect, device number 39 [ 480.306866][ T781] uclogic 0003:256C:006D.004B: failed retrieving string descriptor #100: -71 [ 480.328417][ T781] uclogic 0003:256C:006D.004B: failed retrieving pen parameters: -71 [ 480.345758][T17737] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 480.364354][ T781] uclogic 0003:256C:006D.004B: failed probing pen v1 parameters: -71 [ 480.373134][ T781] uclogic 0003:256C:006D.004B: failed probing parameters: -71 [ 480.400271][ T781] uclogic 0003:256C:006D.004B: probe with driver uclogic failed with error -71 [ 480.466538][ T781] usb 3-1: USB disconnect, device number 57 [ 480.757555][T17758] ip6gre1: entered allmulticast mode [ 480.790387][T11183] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 480.908212][T17766] netlink: 'syz.4.4752': attribute type 25 has an invalid length. [ 480.916241][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'. [ 480.928487][T17766] netlink: 'syz.4.4752': attribute type 25 has an invalid length. [ 480.936554][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'. [ 480.964029][T11183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.006456][T11183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.019660][T11183] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 481.060194][T11183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.079895][T11183] usb 7-1: config 0 descriptor?? [ 481.130570][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 481.230513][ T5913] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 481.305250][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.336883][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 481.381189][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.397617][ T5913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.416957][ T10] usb 1-1: config 0 descriptor?? [ 481.426776][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.426854][T11183] usbhid 7-1:0.0: can't add hid device: -71 [ 481.436576][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.448450][T11183] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 481.470837][T11183] usb 7-1: USB disconnect, device number 40 [ 481.477614][ T5913] usb 6-1: Product: syz [ 481.488310][ T5913] usb 6-1: Manufacturer: syz [ 481.500113][ T5913] usb 6-1: SerialNumber: syz [ 481.847661][ T10] keytouch 0003:0926:3333.004C: fixing up Keytouch IEC report descriptor [ 481.875153][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.004C/input/input97 [ 482.080817][ T10] keytouch 0003:0926:3333.004C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 482.542117][ T5913] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 482.563674][ T5913] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 482.577951][ T5913] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 482.792294][T11183] usb 1-1: USB disconnect, device number 67 [ 482.810712][ T5913] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 482.888193][ T5913] usb 6-1: USB disconnect, device number 48 [ 482.924467][ T5913] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 484.709571][T17861] netlink: 'syz.2.4780': attribute type 29 has an invalid length. [ 484.719686][T17861] netlink: 'syz.2.4780': attribute type 29 has an invalid length. [ 484.744612][T17861] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4780'. [ 484.764612][T17861] unsupported nla_type 66 [ 485.413151][T17894] netlink: 'syz.2.4791': attribute type 1 has an invalid length. [ 485.497823][T17894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.521335][T17898] bond2: (slave geneve2): making interface the new active one [ 485.540035][T17898] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 485.610221][T11183] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 485.718824][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4795'. [ 485.732058][ T5913] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 485.763494][T11183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.795449][T11183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.816644][T11183] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 485.835678][T11183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.857785][T11183] usb 5-1: config 0 descriptor?? [ 485.930315][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 485.937549][ T5913] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.948307][ T5913] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 485.958718][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.968544][ T5913] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 485.977755][ T5913] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 485.986149][ T5913] usb 7-1: Product: syz [ 485.990461][ T5913] usb 7-1: Manufacturer: syz [ 485.995069][ T5913] usb 7-1: SerialNumber: syz [ 486.010241][ T10] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 486.020963][ T5913] usb 7-1: config 0 descriptor?? [ 486.158389][T11183] usbhid 5-1:0.0: can't add hid device: -71 [ 486.185114][T11183] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 486.203103][ T10] usb 3-1: config 0 has no interfaces? [ 486.208720][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 486.213392][T11183] usb 5-1: USB disconnect, device number 67 [ 486.240692][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.268316][ T10] usb 3-1: config 0 descriptor?? [ 486.451801][ T5913] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 486.466599][T17924] netlink: 'syz.0.4800': attribute type 13 has an invalid length. [ 486.475137][T17924] netlink: 'syz.0.4800': attribute type 17 has an invalid length. [ 486.565109][T17924] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.601494][ T5933] usb 3-1: USB disconnect, device number 58 [ 486.608160][T17924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.859836][ T5913] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 487.149193][ T5913] usb 7-1: USB disconnect, device number 41 [ 488.551212][ T30] audit: type=1326 audit(1764736938.777:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.610930][ T30] audit: type=1326 audit(1764736938.777:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.634442][ T30] audit: type=1326 audit(1764736938.777:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.695073][ T30] audit: type=1326 audit(1764736938.777:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.737174][ T30] audit: type=1326 audit(1764736938.797:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.768467][ T30] audit: type=1326 audit(1764736938.797:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.792031][ T30] audit: type=1326 audit(1764736938.797:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.818266][ T30] audit: type=1326 audit(1764736938.797:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.842117][ T30] audit: type=1326 audit(1764736938.797:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 488.865197][ T30] audit: type=1326 audit(1764736938.797:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58598f749 code=0x7ffc0000 [ 489.353674][T17968] bridge_slave_0: left allmulticast mode [ 489.359364][T17968] bridge_slave_0: left promiscuous mode [ 489.390639][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.440152][T17968] bridge_slave_1: left allmulticast mode [ 489.445849][T17968] bridge_slave_1: left promiscuous mode [ 489.473850][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.525219][T17968] bond0: (slave bond_slave_0): Releasing backup interface [ 489.572553][T17968] bond0: (slave bond_slave_1): Releasing backup interface [ 489.655010][T17968] team0: Port device team_slave_0 removed [ 489.678893][ T5906] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 489.707765][T17968] team0: Port device team_slave_1 removed [ 489.726000][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.742458][T17968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.795001][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.814550][T17968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.837166][T17968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.862329][ T5906] usb 1-1: config 0 has no interfaces? [ 489.867856][ T5906] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 489.922671][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.984574][ T5906] usb 1-1: config 0 descriptor?? [ 490.151107][T17985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.256616][ T5906] usb 1-1: USB disconnect, device number 68 [ 490.780979][ T5906] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 490.863960][ T5913] IPVS: starting estimator thread 0... [ 490.960532][T18010] IPVS: using max 29 ests per chain, 69600 per kthread [ 490.974205][ T5906] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 490.990315][ T5906] usb 3-1: config 0 has no interface number 0 [ 491.003953][ T5906] usb 3-1: config 0 interface 101 has no altsetting 0 [ 491.019755][ T5906] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 491.029596][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.049141][ T5906] usb 3-1: config 0 descriptor?? [ 491.078232][ T5906] cp210x 3-1:0.101: cp210x converter detected [ 491.484849][ T5906] cp210x 3-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 491.511943][ T781] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 491.681647][ T781] usb 1-1: Using ep0 maxpacket: 32 [ 491.703901][ T781] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 491.737984][ T5906] cp210x 3-1:0.101: GPIO initialisation failed: -19 [ 491.755345][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.774175][ T5906] usb 3-1: cp210x converter now attached to ttyUSB0 [ 491.796351][ T781] usb 1-1: config 0 descriptor?? [ 491.949370][T11183] usb 3-1: USB disconnect, device number 59 [ 491.959668][T11183] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.970051][T11183] cp210x 3-1:0.101: device disconnected [ 492.043058][ T781] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 492.062727][ T781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.095570][ T781] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 492.106863][ T781] usb 1-1: media controller created [ 492.135438][ T781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.244359][ T781] az6027: usb out operation failed. (-71) [ 492.268689][ T781] az6027: usb out operation failed. (-71) [ 492.276551][ T781] stb0899_attach: Driver disabled by Kconfig [ 492.290171][ T781] az6027: no front-end attached [ 492.290171][ T781] [ 492.307927][ T781] az6027: usb out operation failed. (-71) [ 492.317746][ T781] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 492.348241][ T781] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input98 [ 492.366576][ T781] dvb-usb: schedule remote query interval to 400 msecs. [ 492.375873][ T781] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 492.406233][ T781] usb 1-1: USB disconnect, device number 69 [ 492.617804][ T781] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 492.880183][T11183] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 492.953634][T18052] input: syz1 as /devices/virtual/input/input99 [ 492.960511][ T5933] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 493.073746][T18057] syz.0.4850 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 493.083471][T11183] usb 5-1: config 0 has no interfaces? [ 493.100498][T11183] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 493.109563][T11183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.148533][T11183] usb 5-1: config 0 descriptor?? [ 493.160902][ T5933] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 493.169630][ T5933] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 493.228147][ T5933] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.262836][ T5933] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 493.288104][ T5933] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 493.300517][ T5906] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 493.353984][ T5933] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 493.430285][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.438330][ T5933] usb 7-1: Product: syz [ 493.480978][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 493.498462][ T5906] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 493.500279][ T5933] usb 7-1: Manufacturer: syz [ 493.517231][ T5906] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 493.535956][ T5933] cdc_wdm 7-1:1.0: skipping garbage [ 493.540851][ T5906] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 493.550255][ T5933] cdc_wdm 7-1:1.0: skipping garbage [ 493.554257][ T5933] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 493.561879][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.568733][ T5933] cdc_wdm 7-1:1.0: Unknown control protocol [ 493.573626][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.590005][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 493.590457][T11183] usb 5-1: USB disconnect, device number 68 [ 493.604151][ T5906] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 493.621298][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.646233][ T5906] usb 6-1: config 0 descriptor?? [ 493.771469][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.778106][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.784520][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.791571][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.798318][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.804964][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.812343][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.819051][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.825661][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.832309][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.839382][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.846008][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.854176][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.860824][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.867158][ T5933] usb 7-1: USB disconnect, device number 42 [ 493.873249][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 493.873274][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 493.873291][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 493.926961][ T5906] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 494.153797][ C0] usblp0: nonzero read bulk status received: -71 [ 494.162210][ T1213] usb 6-1: USB disconnect, device number 49 [ 494.418759][T18054] usblp0: removed [ 494.890527][ T1213] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 495.102222][ T1213] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 495.112510][ T1213] usb 3-1: config 0 has no interface number 0 [ 495.125807][ T1213] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 495.139135][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.148763][ T1213] usb 3-1: Product: syz [ 495.178942][ T1213] usb 3-1: Manufacturer: syz [ 495.184770][ T1213] usb 3-1: SerialNumber: syz [ 495.196342][ T1213] usb 3-1: config 0 descriptor?? [ 495.212424][ T1213] yurex 3-1:0.50: Could not find endpoints [ 495.440550][ T781] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 495.446830][T18087] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 495.446849][T18087] kvm: kvm [18086]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 495.501662][T18087] kvm: kvm [18086]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 495.595148][ T1213] usb 3-1: USB disconnect, device number 60 [ 495.630246][ T781] usb 6-1: Using ep0 maxpacket: 32 [ 495.650674][ T781] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 495.677633][ T781] usb 6-1: config 2 has no interface number 0 [ 495.708031][ T781] usb 6-1: config 2 interface 88 has no altsetting 0 [ 495.760445][ T781] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 495.790483][ T781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.818916][ T781] usb 6-1: Product: syz [ 495.830725][ T781] usb 6-1: Manufacturer: syz [ 495.835695][ T781] usb 6-1: SerialNumber: syz [ 497.108087][ T781] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 497.120361][ T781] asix 6-1:2.88: probe with driver asix failed with error -71 [ 497.137019][ T781] usb 6-1: USB disconnect, device number 50 [ 497.171263][ T5933] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 497.340678][ T5933] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 497.359516][ T5933] usb 1-1: config 0 has no interface number 0 [ 497.378049][ T5933] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 497.413118][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.452144][ T5933] usb 1-1: Product: syz [ 497.461998][ T5933] usb 1-1: Manufacturer: syz [ 497.466706][ T5933] usb 1-1: SerialNumber: syz [ 497.496961][ T5933] usb 1-1: config 0 descriptor?? [ 497.543703][ T5933] yurex 1-1:0.50: Could not find endpoints [ 497.817334][T18169] kvm: kvm [18167]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 497.847111][T18183] netlink: 'syz.5.4904': attribute type 1 has an invalid length. [ 497.863833][T18169] kvm: kvm [18167]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 497.975954][ T5933] usb 1-1: USB disconnect, device number 70 [ 498.025820][T18190] netlink: 67 bytes leftover after parsing attributes in process `syz.6.4906'. [ 498.034057][T18183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.075431][T18186] bond1: (slave gretap2): making interface the new active one [ 498.088688][T18186] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 499.149476][T18228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.582485][T18244] netlink: 'syz.6.4928': attribute type 1 has an invalid length. [ 499.634767][T18244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.684252][T18248] bond0: (slave ip6erspan0): making interface the new active one [ 499.703042][T18248] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 499.731331][ T1213] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 499.926954][ T1213] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.955822][ T1213] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 499.998770][ T1213] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.015221][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.023397][ T1213] usb 5-1: Product: syz [ 500.028048][ T1213] usb 5-1: Manufacturer: syz [ 500.035224][ T1213] usb 5-1: SerialNumber: syz [ 500.275355][T18239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.390395][ T781] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 500.561923][ T781] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 500.581514][ T781] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 500.603345][ T781] usb 7-1: config 150 has no interface number 0 [ 500.619171][ T781] usb 7-1: config 150 interface 204 has no altsetting 0 [ 500.634149][ T781] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 500.654870][ T781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.689722][ T781] usb 7-1: Product: syz [ 500.701296][ T781] usb 7-1: Manufacturer: syz [ 500.705941][ T781] usb 7-1: SerialNumber: syz [ 500.900423][T18239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.968065][ T781] xr_serial 7-1:150.204: skipping garbage [ 500.984000][ T781] xr_serial 7-1:150.204: xr_serial converter detected [ 501.121584][ T1213] cdc_ncm 5-1:1.0: failed to get mac address [ 501.323801][ T1213] cdc_ncm 5-1:1.0: bind() failure [ 501.361855][ T1213] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 501.386856][ T1213] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 501.417809][ T1213] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 501.447024][ T1213] usb 5-1: USB disconnect, device number 69 [ 501.480721][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487067][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.772166][ T781] usb 7-1: xr_serial converter now attached to ttyUSB0 [ 501.983807][ T781] usb 7-1: USB disconnect, device number 43 [ 502.001509][ T781] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 502.031254][ T781] xr_serial 7-1:150.204: device disconnected [ 502.612979][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4942'. [ 503.230910][ T781] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 503.414844][ T781] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.447962][ T781] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.490886][ T781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 503.533453][ T781] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 503.560293][ T781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.598980][T18300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 503.662399][ T781] hub 6-1:1.0: bad descriptor, ignoring hub [ 503.701487][ T781] hub 6-1:1.0: probe with driver hub failed with error -5 [ 503.742410][ T781] cdc_wdm 6-1:1.0: skipping garbage [ 503.764225][ T781] cdc_wdm 6-1:1.0: skipping garbage [ 503.800489][ T781] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 503.818880][ T781] cdc_wdm 6-1:1.0: Unknown control protocol [ 504.309194][T18300] usb 6-1: reset full-speed USB device number 51 using dummy_hcd [ 504.510054][T18300] usb 6-1: device firmware changed [ 504.556436][ T781] usb 6-1: USB disconnect, device number 51 [ 504.565079][T18300] cdc_wdm 6-1:1.0: Error autopm - -16 [ 504.720644][ T781] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 504.925410][ T781] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.976666][ T781] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 504.996925][ T781] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.023663][ T781] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 505.080152][ T781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.119038][T18324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 505.137526][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4965'. [ 505.165077][ T781] hub 6-1:1.0: bad descriptor, ignoring hub [ 505.175842][T18347] input: syz1 as /devices/virtual/input/input100 [ 505.223591][ T781] hub 6-1:1.0: probe with driver hub failed with error -5 [ 505.248890][ T781] cdc_wdm 6-1:1.0: skipping garbage [ 505.263316][ T781] cdc_wdm 6-1:1.0: skipping garbage [ 505.284010][ T781] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 505.590711][ T1213] usb 6-1: USB disconnect, device number 52 [ 505.818451][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.836185][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.855268][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.872821][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.890988][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.909582][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.928177][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.944619][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 505.944634][ T30] audit: type=1326 audit(1764736956.167:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18362 comm="syz.0.4972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd51598f749 code=0x0 [ 505.946003][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.981082][ T5913] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 505.991436][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 505.998935][ T1213] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 506.014835][ T1213] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [sy] on syz0 [ 506.152851][ T5913] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 506.163995][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.209485][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.248692][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 506.281372][T18371] netlink: 'syz.6.4975': attribute type 2 has an invalid length. [ 506.295276][T18371] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4975'. [ 506.306676][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 506.319504][ T5913] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 506.338631][ T5913] usb 3-1: Manufacturer: syz [ 506.358476][ T5913] usb 3-1: config 0 descriptor?? [ 506.833972][ T5913] appleir 0003:05AC:8243.004E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 506.903155][T18391] GUP no longer grows the stack in syz.6.4984 (18391): 200000011000-200000018000 (20000000e000) [ 506.919234][T18391] CPU: 1 UID: 0 PID: 18391 Comm: syz.6.4984 Not tainted syzkaller #0 PREEMPT(full) [ 506.919262][T18391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.919280][T18391] Call Trace: [ 506.919292][T18391] [ 506.919301][T18391] dump_stack_lvl+0x189/0x250 [ 506.919330][T18391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.919350][T18391] ? __pfx__printk+0x10/0x10 [ 506.919378][T18391] ? find_vma+0xe7/0x160 [ 506.919409][T18391] __get_user_pages+0x2470/0x2a00 [ 506.919468][T18391] get_user_pages_remote+0x2f1/0xac0 [ 506.919494][T18391] ? __pfx_mtree_load+0x10/0x10 [ 506.919521][T18391] ? __pfx_get_user_pages_remote+0x10/0x10 [ 506.919549][T18391] ? __access_remote_vm+0x367/0x7d0 [ 506.919572][T18391] __access_remote_vm+0x211/0x7d0 [ 506.919599][T18391] ? __pfx___access_remote_vm+0x10/0x10 [ 506.919621][T18391] ? alloc_pages_noprof+0xbe/0x190 [ 506.919647][T18391] proc_pid_cmdline_read+0x430/0x810 [ 506.919675][T18391] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 506.919700][T18391] ? rw_verify_area+0x2a6/0x4d0 [ 506.919722][T18391] vfs_readv+0x5aa/0x850 [ 506.919745][T18391] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 506.919764][T18391] ? __pfx_vfs_readv+0x10/0x10 [ 506.919801][T18391] ? __fget_files+0x2a/0x420 [ 506.919828][T18391] ? __fget_files+0x3a0/0x420 [ 506.919849][T18391] ? __fget_files+0x2a/0x420 [ 506.919880][T18391] __x64_sys_preadv+0x197/0x2a0 [ 506.919903][T18391] ? __pfx___x64_sys_preadv+0x10/0x10 [ 506.919927][T18391] ? do_syscall_64+0xbe/0xf80 [ 506.919951][T18391] do_syscall_64+0xfa/0xf80 [ 506.919972][T18391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.919990][T18391] ? clear_bhb_loop+0x60/0xb0 [ 506.920011][T18391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.920028][T18391] RIP: 0033:0x7f654d18f749 [ 506.920048][T18391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.920064][T18391] RSP: 002b:00007f654e0d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 506.920081][T18391] RAX: ffffffffffffffda RBX: 00007f654d3e5fa0 RCX: 00007f654d18f749 [ 506.920094][T18391] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 506.920105][T18391] RBP: 00007f654d213f91 R08: 0000000000006a76 R09: 0000000000000000 [ 506.920116][T18391] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 506.920126][T18391] R13: 00007f654d3e6038 R14: 00007f654d3e5fa0 R15: 00007f654d50fa28 [ 506.920154][T18391] [ 507.977929][T18431] input: syz1 as /devices/virtual/input/input101 [ 508.123749][T18437] netlink: 'syz.0.5003': attribute type 3 has an invalid length. [ 508.148817][T18437] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5003'. [ 508.408103][ T30] audit: type=1326 audit(1764736958.627:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18447 comm="syz.0.5009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd51598f749 code=0x0 [ 508.701183][T18458] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 508.713299][T18458] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 508.721826][T18458] CPU: 1 UID: 0 PID: 18458 Comm: syz.6.5012 Not tainted syzkaller #0 PREEMPT(full) [ 508.731209][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.741275][T18458] RIP: 0010:fd_install+0x57/0x3d0 [ 508.746315][T18458] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 508.765942][T18458] RSP: 0018:ffffc9000d617ca0 EFLAGS: 00010202 [ 508.772022][T18458] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 508.780007][T18458] RDX: ffffc90015d59000 RSI: 00000000000000d9 RDI: 00000000000000da [ 508.787986][T18458] RBP: dffffc0000000000 R08: ffff88807d5979b3 R09: 1ffff1100fab2f36 [ 508.795973][T18458] R10: dffffc0000000000 R11: ffffed100fab2f37 R12: 0000000000000003 [ 508.803959][T18458] R13: 0000000000000003 R14: 0000000000000001 R15: ffff888031fe9680 [ 508.811939][T18458] FS: 00007f654e0d06c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 508.820878][T18458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.827478][T18458] CR2: 00007f654e0cff98 CR3: 000000004b9aa000 CR4: 00000000003526f0 [ 508.835465][T18458] Call Trace: [ 508.838743][T18458] [ 508.841664][T18458] ? do_mq_open+0x595/0x770 [ 508.846198][T18458] do_mq_open+0x5a0/0x770 [ 508.850525][T18458] ? __pfx_do_mq_open+0x10/0x10 [ 508.855364][T18458] ? count_memcg_event_mm+0x21/0x260 [ 508.860677][T18458] ? count_memcg_event_mm+0x21/0x260 [ 508.865985][T18458] __x64_sys_mq_open+0x16a/0x1c0 [ 508.870971][T18458] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 508.876419][T18458] ? do_syscall_64+0xbe/0xf80 [ 508.881089][T18458] do_syscall_64+0xfa/0xf80 [ 508.885581][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.891910][T18458] ? clear_bhb_loop+0x60/0xb0 [ 508.896589][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.902474][T18458] RIP: 0033:0x7f654d18f749 [ 508.906966][T18458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.926566][T18458] RSP: 002b:00007f654e0d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 508.934977][T18458] RAX: ffffffffffffffda RBX: 00007f654d3e5fa0 RCX: 00007f654d18f749 [ 508.942951][T18458] RDX: 0000000000000000 RSI: 0000000000000842 RDI: 0000200000000040 [ 508.950907][T18458] RBP: 00007f654d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 508.958864][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.966824][T18458] R13: 00007f654d3e6038 R14: 00007f654d3e5fa0 R15: 00007f654d50fa28 [ 508.974788][T18458] [ 508.977817][T18458] Modules linked in: [ 508.982538][T18458] ---[ end trace 0000000000000000 ]--- [ 509.019707][T18458] RIP: 0010:fd_install+0x57/0x3d0 [ 509.029567][T18458] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 509.076187][T18458] RSP: 0018:ffffc9000d617ca0 EFLAGS: 00010202 [ 509.090962][T18458] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 509.133932][T18458] RDX: ffffc90015d59000 RSI: 00000000000000d9 RDI: 00000000000000da [ 509.164244][T18458] RBP: dffffc0000000000 R08: ffff88807d5979b3 R09: 1ffff1100fab2f36 [ 509.174072][T18458] R10: dffffc0000000000 R11: ffffed100fab2f37 R12: 0000000000000003 [ 509.182927][T18458] R13: 0000000000000003 R14: 0000000000000001 R15: ffff888031fe9680 [ 509.191311][T18458] FS: 00007f654e0d06c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 509.200686][T18458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.207511][T18458] CR2: 0000000000000000 CR3: 000000004b9aa000 CR4: 00000000003526f0 [ 509.248558][T18458] Kernel panic - not syncing: Fatal exception [ 509.255173][T18458] Kernel Offset: disabled [ 509.259522][T18458] Rebooting in 86400 seconds..