last executing test programs: 13m36.617811412s ago: executing program 1 (id=3542): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000480)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e21, @broadcast}], 0x48) 13m36.519935002s ago: executing program 1 (id=3546): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 13m36.402835574s ago: executing program 1 (id=3549): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x97, 0x8000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 13m36.075948576s ago: executing program 1 (id=3557): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/49, 0x31) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file7\x00', 0x0) getdents64(r0, 0x0, 0x0) 13m35.893369752s ago: executing program 1 (id=3562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 13m35.562126813s ago: executing program 1 (id=3574): r0 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e1d, 0x8000000, @empty}, 0x1c) 13m35.354307927s ago: executing program 32 (id=3574): r0 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e1d, 0x8000000, @empty}, 0x1c) 11m32.021248367s ago: executing program 0 (id=5931): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) writev(r0, &(0x7f0000000140), 0x0) 11m32.019572509s ago: executing program 0 (id=5933): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11m30.945613231s ago: executing program 0 (id=5942): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000001500)=""/4080, 0xff0) getdents64(r1, 0x0, 0x0) 11m30.83826376s ago: executing program 0 (id=5944): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 11m30.605413856s ago: executing program 0 (id=5948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="16", 0x1, 0x4081, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380), 0x4) recvfrom$inet(r0, &(0x7f0000000440)=""/72, 0x48, 0x0, 0x0, 0x0) 11m30.100579153s ago: executing program 0 (id=5952): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x1022002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000480)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 11m29.552954986s ago: executing program 33 (id=5952): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x1022002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000480)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 12.817975709s ago: executing program 2 (id=14873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000640)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.991359364s ago: executing program 2 (id=14890): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 6.922579642s ago: executing program 2 (id=14893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x8012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.8413852s ago: executing program 4 (id=14894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fcfeffff7f20000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 6.823971955s ago: executing program 5 (id=14896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000480)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3df974a52f", 0x5}], 0x1}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000640)='<', 0x381, 0x805, 0x0, 0x0) 6.761873542s ago: executing program 4 (id=14897): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0xf5ff, 0x2404c804, 0x0, 0x0) 6.709594175s ago: executing program 4 (id=14899): syz_usb_connect(0x0, 0x4b, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000580), 0x1, 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000740)={0x15b, {"9f9c48ba902bd7fda300d201fc903cf1", "6a5d2af90d76e831ad9f104b9fdd0433", "41a95d66b0c08fc84e6c43aacb9dfb56"}, 0xfffff000, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000780)={0x100, 0x0, 0x1, 0x0, 0x4}) 6.692966526s ago: executing program 5 (id=14900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000640)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.541539224s ago: executing program 6 (id=14901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000680)=@ccm_128={{0x303}, "1c0000008000", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000740)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000800)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f00000008c0)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000980)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000009c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000017c0)=0xffff1884, 0x4) 6.443811174s ago: executing program 6 (id=14902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a80), 0x56) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.927129967s ago: executing program 2 (id=14903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$tun(r0, 0x0, 0xfdef) 3.647369785s ago: executing program 4 (id=14911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000a80), 0x56) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200e61114120600002fb96dbcf706e105", 0x13}], 0x1}, 0x0) 1.632623101s ago: executing program 5 (id=14912): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000007c0), 0x2d, 0x20040040) 1.579284062s ago: executing program 2 (id=14913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x8012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.578795379s ago: executing program 6 (id=14914): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000d40)={0x2, 0x0, 0x2f, 0x520ea3af}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d80)=ANY=[@ANYBLOB="1201000000000010bd2871000000000000010902"], 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 1.577499909s ago: executing program 5 (id=14915): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000780)=""/179, 0x22fe0}], 0x12}, 0x0) 1.463412688s ago: executing program 4 (id=14916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020080084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000001508000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.448807931s ago: executing program 4 (id=14918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x2, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/221) 1.401116411s ago: executing program 3 (id=14919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x170bd29, 0x35dfdbff, {0xa, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x3, 0xf}, [@FRA_SRC={0x14, 0x2, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x40) 1.365749463s ago: executing program 3 (id=14920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.331882483s ago: executing program 3 (id=14921): socket(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 1.300840481s ago: executing program 3 (id=14922): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000640)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.258570658s ago: executing program 3 (id=14923): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 1.143928738s ago: executing program 3 (id=14924): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xcd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x12, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x96, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 641.717169ms ago: executing program 5 (id=14925): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES8], 0x44}}, 0x2000800) 634.671471ms ago: executing program 5 (id=14926): mkdir(&(0x7f0000000400)='./control\x00', 0x171) close(0xffffffffffffffff) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000440)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000580)='./control\x00') r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x6, &(0x7f00000004c0)=@any_dev={0x6, 0xe28, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac4, 0x8000, 0x10ffffff, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x205}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) 628.788149ms ago: executing program 2 (id=14927): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x57, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 189.605888ms ago: executing program 6 (id=14928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020080084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000001508000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 98.682681ms ago: executing program 6 (id=14929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, 'H\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 0s ago: executing program 6 (id=14930): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d00060905"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) ioctl$EVIOCGMASK(r4, 0x541b, 0x0) kernel console output (not intermixed with test programs): SerialNumber=3 [ 1810.834169][T24747] usb 3-1: Product: syz [ 1810.834183][T24747] usb 3-1: Manufacturer: syz [ 1810.834197][T24747] usb 3-1: SerialNumber: syz [ 1810.890093][T24747] usb 3-1: config 0 descriptor?? [ 1811.123120][T24747] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1811.139664][T24747] cx231xx 3-1:0.1: Failed to read PCB config [ 1811.139727][T24747] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1811.142725][T24747] usb 3-1: USB disconnect, device number 50 [ 1811.626110][T24739] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1811.627324][T24739] ath9k_htc: Failed to initialize the device [ 1811.631347][ T5683] usb 7-1: ath9k_htc: USB layer deinitialized [ 1811.649066][T24747] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1811.815721][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1811.817094][T24747] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1811.818366][T24747] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1811.818390][T24747] usb 3-1: config 0 has no interface number 0 [ 1811.818427][T24747] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1811.818446][T24747] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1811.820368][T24747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.820391][T24747] usb 3-1: Product: syz [ 1811.820405][T24747] usb 3-1: Manufacturer: syz [ 1811.820418][T24747] usb 3-1: SerialNumber: syz [ 1811.825799][T24747] usb 3-1: config 0 descriptor?? [ 1811.955839][ T5683] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1812.109704][ T5683] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1812.110840][ T5683] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1812.110871][ T5683] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1812.113280][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.113301][ T5683] usb 7-1: Product: syz [ 1812.113309][ T5683] usb 7-1: Manufacturer: syz [ 1812.113317][ T5683] usb 7-1: SerialNumber: syz [ 1812.182122][T24747] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1812.218358][T24747] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1812.326211][T24747] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1812.326634][T24747] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1812.327238][T24747] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1812.333032][T24747] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1812.333442][T24747] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1812.333461][T24747] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 1812.407202][T24747] i2c i2c-2: Added multiplexed i2c bus 4 [ 1812.412908][T24747] i2c i2c-2: Added multiplexed i2c bus 5 [ 1812.422009][T24747] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1812.422045][T24747] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1812.493181][T24747] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1812.508910][T24747] usb 3-1: USB disconnect, device number 51 [ 1812.581109][ T8607] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1812.581496][T24750] usb 7-1: USB disconnect, device number 51 [ 1812.612546][T24750] usb 7-1: ath9k_htc: USB layer deinitialized [ 1813.585885][ T8607] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1813.745305][ T8607] usb 3-1: Using ep0 maxpacket: 8 [ 1813.748100][ T8607] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1813.748147][ T8607] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1813.750913][ T8607] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1813.788985][ T8607] usb 3-1: string descriptor 0 read error: -22 [ 1813.789084][ T8607] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1813.850067][ T8607] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1813.876664][ T8607] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1813.877033][ T8607] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1813.877074][ T8607] usb 3-1: media controller created [ 1813.983408][ T8607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1814.078773][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13969'. [ 1815.356071][ T8607] zl10353_read_register: readreg error (reg=127, ret==0) [ 1815.430066][T11570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13983'. [ 1815.525365][ T8607] usb 3-1: USB disconnect, device number 52 [ 1815.756623][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13989'. [ 1815.760300][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13989'. [ 1816.055907][ T8607] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1816.234977][ T8607] usb 4-1: Using ep0 maxpacket: 32 [ 1816.258443][ T8607] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1816.258505][ T8607] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1816.263465][ T8607] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1816.263492][ T8607] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1816.263511][ T8607] usb 4-1: config 14 has no interface number 0 [ 1816.263526][ T8607] usb 4-1: config 14 has no interface number 1 [ 1816.263575][ T8607] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1816.263587][ T8607] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1816.263600][ T8607] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1816.263612][ T8607] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1816.263625][ T8607] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1816.263638][ T8607] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.263651][ T8607] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1816.263660][ T8607] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1816.310705][ T8607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.310733][ T8607] usb 4-1: Product: syz [ 1816.310747][ T8607] usb 4-1: Manufacturer: syz [ 1816.310760][ T8607] usb 4-1: SerialNumber: syz [ 1816.580416][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13998'. [ 1816.885157][ T8607] legousbtower 4-1:14.57: interrupt endpoints not found [ 1817.015822][T24747] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1817.099137][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14004'. [ 1817.100881][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14004'. [ 1817.176023][T24747] usb 3-1: Using ep0 maxpacket: 8 [ 1817.178861][T24747] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1817.180199][T24747] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1817.180229][T24747] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1817.180241][T24747] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1817.180254][T24747] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1817.180276][T24747] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1817.180313][T24747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.314119][ T8607] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1817.317820][ T8607] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1817.463532][T24747] usb 3-1: GET_CAPABILITIES returned 0 [ 1817.463563][T24747] usbtmc 3-1:16.0: can't read capabilities [ 1817.770577][T24747] usb 3-1: USB disconnect, device number 53 [ 1817.977813][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14011'. [ 1818.002462][T24747] usb 4-1: USB disconnect, device number 125 [ 1818.004142][T11637] usb 4-1: LEGO USB Tower reset control request failed [ 1818.016513][T24747] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1818.305907][T24750] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1818.456576][T24750] usb 7-1: Using ep0 maxpacket: 8 [ 1818.461089][T24750] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1818.461120][T24750] usb 7-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=8a.b2 [ 1818.461919][T24750] usb 7-1: config 206 has an invalid interface number: 205 but max is 0 [ 1818.461938][T24750] usb 7-1: config 206 has no interface number 0 [ 1818.461954][T24750] usb 7-1: config 206 interface 205 has no altsetting 0 [ 1818.466547][T24750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.466571][T24750] usb 7-1: Product: syz [ 1818.466584][T24750] usb 7-1: Manufacturer: syz [ 1818.466597][T24750] usb 7-1: SerialNumber: syz [ 1818.601448][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1818.603387][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1818.795264][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14022'. [ 1819.042789][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1819.090806][T24750] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in warm state. [ 1819.093653][T24750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1819.094195][T24750] dvbdev: DVB: registering new adapter (YUAN High-Tech DiBcom STK7700D) [ 1819.094227][T24750] usb 7-1: media controller created [ 1819.109324][T24750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1819.165980][T24750] DVB: Unable to find symbol dib7000p_attach() [ 1819.165998][T24750] dvb-usb: no frontend was attached by 'YUAN High-Tech DiBcom STK7700D' [ 1819.166011][T24750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1819.171004][T24750] dvbdev: DVB: registering new adapter (YUAN High-Tech DiBcom STK7700D) [ 1819.171060][T24750] usb 7-1: media controller created [ 1819.217934][T24750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1819.398835][T24750] DVB: Unable to find symbol dib7000p_attach() [ 1819.398852][T24750] dvb-usb: no frontend was attached by 'YUAN High-Tech DiBcom STK7700D' [ 1819.497833][T24750] rc_core: IR keymap rc-dib0700-rc5 not found [ 1819.497854][T24750] Registered IR keymap rc-empty [ 1819.498167][T24750] dvb-usb: could not initialize remote control. [ 1819.498176][T24750] dvb-usb: YUAN High-Tech DiBcom STK7700D successfully initialized and connected. [ 1819.530722][T24750] usb 7-1: USB disconnect, device number 52 [ 1819.646753][T24750] dvb-usb: YUAN High-Tech DiBcom STK7700D successfully deinitialized and disconnected. [ 1819.718244][ T7908] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1819.877559][ T7908] usb 6-1: Using ep0 maxpacket: 32 [ 1819.880074][ T7908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1819.880123][ T7908] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1819.881282][ T7908] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1819.881305][ T7908] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1819.881325][ T7908] usb 6-1: config 14 has no interface number 0 [ 1819.881340][ T7908] usb 6-1: config 14 has no interface number 1 [ 1819.881398][ T7908] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1819.881420][ T7908] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1819.881443][ T7908] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1819.881468][ T7908] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1819.881492][ T7908] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1819.881515][ T7908] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.881539][ T7908] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1819.881555][ T7908] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1819.883896][ T7908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.883919][ T7908] usb 6-1: Product: syz [ 1819.883933][ T7908] usb 6-1: Manufacturer: syz [ 1819.883947][ T7908] usb 6-1: SerialNumber: syz [ 1820.349162][ T7908] legousbtower 6-1:14.57: interrupt endpoints not found [ 1820.548810][T11720] __nla_validate_parse: 3 callbacks suppressed [ 1820.548830][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14046'. [ 1820.728348][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14049'. [ 1820.728376][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14049'. [ 1820.729734][T11727] netlink: 'syz.6.14049': attribute type 2 has an invalid length. [ 1820.729757][T11727] netlink: 'syz.6.14049': attribute type 2 has an invalid length. [ 1820.750537][ T7908] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1820.753141][ T7908] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1821.095999][T24739] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1821.245747][T24739] usb 7-1: Using ep0 maxpacket: 32 [ 1821.246358][T24739] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1821.247304][T24739] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1821.247318][T24739] usb 7-1: config 0 has no interface number 0 [ 1821.247342][T24739] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1821.249587][T24739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.249612][T24739] usb 7-1: Product: syz [ 1821.249626][T24739] usb 7-1: Manufacturer: syz [ 1821.249639][T24739] usb 7-1: SerialNumber: syz [ 1821.251951][T24739] usb 7-1: config 0 descriptor?? [ 1821.331676][ T5683] usb 6-1: USB disconnect, device number 44 [ 1821.331737][ C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1821.344375][T11738] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 1821.367498][ T5683] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1821.545570][T11740] fuse: Unknown parameter 'fd0x0000000000000003' [ 1821.740062][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14057'. [ 1822.275857][ T8607] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1822.357037][ T5683] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1822.391766][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14069'. [ 1822.426767][ T8607] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1822.430505][ T8607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.430530][ T8607] usb 3-1: Product: syz [ 1822.430545][ T8607] usb 3-1: Manufacturer: syz [ 1822.430557][ T8607] usb 3-1: SerialNumber: syz [ 1822.434481][ T8607] usb 3-1: config 0 descriptor?? [ 1822.506267][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 1822.507023][ T5683] usb 6-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 1822.510310][ T5683] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.510411][ T5683] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1822.510559][ T5683] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1822.510582][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.516159][ T5683] usb 6-1: config 0 descriptor?? [ 1822.665861][ T8607] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1822.768601][T11779] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14072'. [ 1823.038481][ T5683] microsoft 0003:045E:00DC.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.5-1/input0 [ 1823.309906][T24739] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1823.310059][T24739] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1823.310137][T24739] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1823.311943][T24739] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1823.350612][T11788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14076'. [ 1823.369439][T24739] usb 7-1: USB disconnect, device number 53 [ 1823.401046][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1823.401087][ T31] audit: type=1326 audit(1792101510.114:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11787 comm="syz.4.14076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1823.854417][T24750] usb 6-1: USB disconnect, device number 45 [ 1824.476293][T24739] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1824.592479][T11809] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14085'. [ 1824.626669][T24739] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1824.627954][T24739] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.627996][T24739] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1824.628020][T24739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1824.628042][T24739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1824.628084][T24739] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1824.631317][T24739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1824.631340][T24739] usb 7-1: Product: syz [ 1824.631377][T24739] usb 7-1: Manufacturer: syz [ 1824.631392][T24739] usb 7-1: SerialNumber: syz [ 1824.748925][T24739] usb 7-1: config 0 descriptor?? [ 1825.016224][T11818] random: crng reseeded on system resumption [ 1825.020255][T24739] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1825.020281][T24739] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1825.106387][T11820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1825.221676][T24739] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1825.221704][T24739] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1825.221722][T24739] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1825.354942][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14093'. [ 1825.381445][ T31] audit: type=1326 audit(1792101512.094:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11829 comm="syz.4.14093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1825.426288][T24739] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1825.542116][ T8607] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1825.559432][ T8607] usb 3-1: USB disconnect, device number 54 [ 1826.084788][T11838] binder: 11836:11838 ioctl c0306201 0 returned -14 [ 1826.101299][T11837] binder: 11836:11837 ioctl c0306201 0 returned -14 [ 1826.232161][T24739] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1826.249007][T24739] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1826.268630][T24739] usb 7-1: USB disconnect, device number 54 [ 1826.287344][T11506] udevd[11506]: setting owner of /dev/bus/usb/007/054 to uid=0, gid=0 failed: No such file or directory [ 1826.435728][T24736] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1826.516904][T11844] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14100'. [ 1826.587039][T24736] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1826.588172][T24736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.588216][T24736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.646011][T24736] usb 3-1: config 0 descriptor?? [ 1826.757994][T11853] tipc: Started in network mode [ 1826.758016][T11853] tipc: Node identity 805e0004, cluster identity 4711 [ 1826.758027][T11853] tipc: Node number set to 2153644036 [ 1826.898425][T24736] usbhid 3-1:0.0: can't add hid device: -71 [ 1826.898526][T24736] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1826.905715][T24736] usb 3-1: USB disconnect, device number 55 [ 1827.070708][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14109'. [ 1827.086529][ T31] audit: type=1326 audit(1792101513.804:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11864 comm="syz.4.14109" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1827.125770][ T8607] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1827.273070][T11870] syzkaller1: entered promiscuous mode [ 1827.273086][T11870] syzkaller1: entered allmulticast mode [ 1827.275885][ T8607] usb 7-1: Using ep0 maxpacket: 8 [ 1827.294425][ T8607] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1827.294456][ T8607] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1827.313992][ T8607] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1827.324563][ T8607] usb 7-1: string descriptor 0 read error: -22 [ 1827.324632][ T8607] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1827.351463][ T8607] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1827.387463][ T8607] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1827.387801][ T8607] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1827.387845][ T8607] usb 7-1: media controller created [ 1827.425174][ T8607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1827.446723][T24736] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1827.597962][T24736] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1827.599093][T24736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.599127][T24736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.603669][T24736] usb 3-1: config 0 descriptor?? [ 1827.967711][T24750] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1828.115876][T24750] usb 4-1: Using ep0 maxpacket: 32 [ 1828.118829][T24750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1828.118876][T24750] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1828.122759][T24750] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1828.122787][T24750] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1828.122807][T24750] usb 4-1: config 14 has no interface number 0 [ 1828.122821][T24750] usb 4-1: config 14 has no interface number 1 [ 1828.122878][T24750] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1828.122899][T24750] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1828.122920][T24750] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1828.122943][T24750] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1828.122977][T24750] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1828.123000][T24750] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1828.123037][T24750] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1828.123052][T24750] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1828.132025][T24750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.132049][T24750] usb 4-1: Product: syz [ 1828.132063][T24750] usb 4-1: Manufacturer: syz [ 1828.132076][T24750] usb 4-1: SerialNumber: syz [ 1828.374696][T11887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14119'. [ 1828.416934][T24736] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1828.420291][T24736] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 1828.497742][ T8607] zl10353_read_register: readreg error (reg=127, ret==0) [ 1828.604036][T24750] legousbtower 4-1:14.57: interrupt endpoints not found [ 1828.618136][ T8607] usb 7-1: USB disconnect, device number 55 [ 1828.780407][ T5683] usb 3-1: USB disconnect, device number 56 [ 1828.780519][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1829.019867][T24750] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1829.023041][T24750] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1829.098928][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14125'. [ 1829.099897][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14125'. [ 1829.100444][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14125'. [ 1829.100923][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14125'. [ 1829.101380][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14125'. [ 1829.172783][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14126'. [ 1829.206039][ T31] audit: type=1326 audit(1792101515.924:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11900 comm="syz.6.14126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x0 [ 1829.548155][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14131'. [ 1829.809451][T24750] usb 4-1: USB disconnect, device number 126 [ 1829.843295][T24750] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1830.817304][ T31] audit: type=1326 audit(1792101517.534:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.2.14150" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f590ec code=0x0 [ 1831.541810][ T31] audit: type=1326 audit(1792101518.254:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.6.14161" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x0 [ 1832.705955][ T5683] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1832.847125][T24736] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1832.855837][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 1832.864003][ T5683] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1832.879574][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.879592][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.879604][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1832.879667][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.881721][ T5683] usb 3-1: config 0 descriptor?? [ 1833.006152][T24736] usb 6-1: Using ep0 maxpacket: 16 [ 1833.007621][T24736] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1833.008654][T24736] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.008668][T24736] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1833.011911][T24736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.011925][T24736] usb 6-1: Product: syz [ 1833.011939][T24736] usb 6-1: Manufacturer: syz [ 1833.011947][T24736] usb 6-1: SerialNumber: syz [ 1833.090377][T24736] usb 6-1: 0:2 : does not exist [ 1833.289533][T24736] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1833.316155][ T5683] hid_parser_main: 91 callbacks suppressed [ 1833.316179][ T5683] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1833.316208][ T5683] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 1833.373202][ T5683] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input38 [ 1833.417773][T24736] usb 6-1: USB disconnect, device number 46 [ 1833.494633][ T5683] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1833.524473][T12056] __nla_validate_parse: 2 callbacks suppressed [ 1833.524493][T12056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14191'. [ 1833.559829][ T5683] usb 3-1: USB disconnect, device number 57 [ 1833.620575][T11472] udevd[11472]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1833.690127][ T31] audit: type=1326 audit(1792101520.404:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.14191" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x0 [ 1833.725207][T12060] fido_id[12060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1834.195971][ T5683] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1834.345815][ T5683] usb 7-1: Using ep0 maxpacket: 8 [ 1834.346544][ T5683] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1834.348294][ T5683] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1834.348323][ T5683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1834.348345][ T5683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1834.348367][ T5683] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1834.348405][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.575939][ T5683] usb 7-1: GET_CAPABILITIES returned 0 [ 1834.575986][ T5683] usbtmc 7-1:16.0: can't read capabilities [ 1834.724138][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14210'. [ 1834.784465][ T5683] usb 7-1: USB disconnect, device number 56 [ 1834.982211][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14214'. [ 1835.028611][ T31] audit: type=1326 audit(1792101521.744:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.3.14214" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x0 [ 1835.145172][T12119] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14216'. [ 1835.386104][ T7908] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1835.525969][T24750] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1835.545704][ T7908] usb 6-1: Using ep0 maxpacket: 16 [ 1835.547737][ T7908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1835.547782][ T7908] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1835.548799][ T7908] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1835.551264][ T7908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.551288][ T7908] usb 6-1: Product: syz [ 1835.551301][ T7908] usb 6-1: Manufacturer: syz [ 1835.551315][ T7908] usb 6-1: SerialNumber: syz [ 1835.679504][T24750] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1835.680726][T24750] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1835.680754][T24750] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.680793][T24750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.778315][ T7908] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1835.778958][ T7908] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1835.900477][T24750] usb 3-1: usb_control_msg returned -32 [ 1835.900525][T24750] usbtmc 3-1:16.0: can't read capabilities [ 1836.203640][ T7908] usb 6-1: USB disconnect, device number 47 [ 1836.215827][ T8607] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1836.247393][T11506] udevd[11506]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.345794][ T8607] usb 4-1: device descriptor read/64, error -71 [ 1836.476534][ T7908] usb 3-1: USB disconnect, device number 58 [ 1836.586659][ T8607] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1836.715755][ T8607] usb 4-1: device descriptor read/64, error -71 [ 1836.827288][ T8607] usb usb4-port1: attempt power cycle [ 1836.877447][T12174] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14239'. [ 1836.922291][ T31] audit: type=1326 audit(1792101523.634:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.6.14239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x0 [ 1837.027039][ T5683] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1837.165889][ T8607] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1837.185233][ T5683] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1837.196973][ T8607] usb 4-1: device descriptor read/8, error -71 [ 1837.197145][ T5683] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 70, using maximum allowed: 30 [ 1837.197167][ T5683] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.197180][ T5683] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 70 [ 1837.197195][ T5683] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1837.197213][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.198948][ T5683] usb 6-1: config 0 descriptor?? [ 1837.435746][ T8607] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1837.457186][ T8607] usb 4-1: device descriptor read/8, error -71 [ 1837.566246][ T8607] usb usb4-port1: unable to enumerate USB device [ 1837.621732][ T5683] input: HID 060b:500a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:060B:500A.001E/input/input39 [ 1837.730279][ T5683] cougar 0003:060B:500A.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.5-1/input0 [ 1838.089295][ T5683] usb 6-1: USB disconnect, device number 48 [ 1838.376565][T24750] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1838.526740][T24750] usb 3-1: Using ep0 maxpacket: 32 [ 1838.527228][T24750] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1838.528057][T24750] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1838.529804][T24750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.529819][T24750] usb 3-1: Product: syz [ 1838.529829][T24750] usb 3-1: Manufacturer: syz [ 1838.529837][T24750] usb 3-1: SerialNumber: syz [ 1838.531865][T24750] usb 3-1: config 0 descriptor?? [ 1838.535961][T24750] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1838.536008][T24750] dvb-usb: bulk message failed: -22 (2/0) [ 1838.538688][T24750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1838.539342][T24750] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1838.539390][T24750] usb 3-1: media controller created [ 1838.550857][T24750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1838.567753][T24750] usb 3-1: selecting invalid altsetting 7 [ 1838.567774][T24750] cxusb: set interface failed [ 1838.567786][T24750] dvb-usb: bulk message failed: -22 (1/0) [ 1838.673143][T24750] DVB: Unable to find symbol lgdt330x_attach() [ 1838.673160][T24750] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1838.745583][T12199] dvb-usb: bulk message failed: -22 (3/0) [ 1838.765829][T24750] rc_core: IR keymap rc-dvico-portable not found [ 1838.765846][T24750] Registered IR keymap rc-empty [ 1838.767193][T24750] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1838.776368][T24750] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input40 [ 1838.779156][T24750] dvb-usb: schedule remote query interval to 100 msecs. [ 1838.779177][T24750] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1838.788187][T24750] usb 3-1: USB disconnect, device number 59 [ 1838.899338][T12212] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14255'. [ 1838.925935][T24750] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1838.969725][ T31] audit: type=1326 audit(1792101525.684:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.6.14255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x0 [ 1839.146324][T24747] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1839.305954][T24747] usb 6-1: Using ep0 maxpacket: 16 [ 1839.311375][T24747] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1839.312593][T24747] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.312617][T24747] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1839.316167][T24747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.316189][T24747] usb 6-1: Product: syz [ 1839.316202][T24747] usb 6-1: Manufacturer: syz [ 1839.316216][T24747] usb 6-1: SerialNumber: syz [ 1839.337950][T24747] usb 6-1: 0:2 : does not exist [ 1839.461486][ T8607] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1839.536234][T24747] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1839.592005][T24747] usb 6-1: USB disconnect, device number 49 [ 1839.605937][ T8607] usb 4-1: Using ep0 maxpacket: 16 [ 1839.612644][ T8607] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1839.614892][ T8607] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1839.614918][ T8607] usb 4-1: config 0 has no interface number 0 [ 1839.614956][ T8607] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1839.614977][ T8607] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1839.651147][T11506] udevd[11506]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.691363][ T8607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.691391][ T8607] usb 4-1: Product: syz [ 1839.691399][ T8607] usb 4-1: Manufacturer: syz [ 1839.691406][ T8607] usb 4-1: SerialNumber: syz [ 1839.695359][ T8607] usb 4-1: config 0 descriptor?? [ 1839.700683][T12217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1839.700788][T12217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1839.921943][T12217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1839.922072][T12217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1840.244464][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14273'. [ 1840.268967][T24747] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1840.309703][ T31] audit: type=1326 audit(1792101527.024:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.14273" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f590ec code=0x0 [ 1840.425917][T24747] usb 7-1: Using ep0 maxpacket: 8 [ 1840.427035][T24747] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1840.430511][T24747] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.430558][T24747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.436996][T24747] usb 7-1: config 0 descriptor?? [ 1840.443342][T24747] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1840.669553][T12264] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14279'. [ 1841.149754][ T8607] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1841.149785][ T8607] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1841.150007][ T8607] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1841.188860][ T8607] usb 4-1: USB disconnect, device number 5 [ 1841.488224][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14284'. [ 1842.058588][T24747] gspca_vc032x: reg_w err -71 [ 1842.058670][T24747] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1842.066978][T24747] usb 7-1: USB disconnect, device number 57 [ 1842.209349][T12289] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14290'. [ 1842.332597][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14292'. [ 1842.390952][ T31] audit: type=1326 audit(1792101529.104:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.3.14292" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ef0ec code=0x0 [ 1842.635840][T24747] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1842.786393][T24747] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1842.787410][T24747] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1842.787458][T24747] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1842.789530][T24747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.789560][T24747] usb 6-1: Product: syz [ 1842.789573][T24747] usb 6-1: Manufacturer: syz [ 1842.789586][T24747] usb 6-1: SerialNumber: syz [ 1842.810591][ T7908] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1842.996060][ T8607] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1843.030346][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.044714][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.079614][T24736] usb 6-1: USB disconnect, device number 50 [ 1843.155976][ T8607] usb 7-1: Using ep0 maxpacket: 16 [ 1843.156716][ T8607] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1843.157885][ T8607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.157911][ T8607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.157930][ T8607] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1843.157969][ T8607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.160966][ T8607] usb 7-1: config 0 descriptor?? [ 1843.241330][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14304'. [ 1843.306152][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14303'. [ 1843.580349][ T8607] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1843.580385][ T8607] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 1843.607875][ T8607] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001F/input/input41 [ 1843.627855][T24739] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1843.651830][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14309'. [ 1843.690111][ T8607] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1843.716177][T24747] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1843.785700][T24739] usb 4-1: Using ep0 maxpacket: 32 [ 1843.791720][T24739] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1843.802002][T24739] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1843.802028][T24739] usb 4-1: config 0 has no interface number 0 [ 1843.802067][T24739] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1843.804734][T24739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.804759][T24739] usb 4-1: Product: syz [ 1843.804772][T24739] usb 4-1: Manufacturer: syz [ 1843.804785][T24739] usb 4-1: SerialNumber: syz [ 1843.808932][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.811663][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.859600][ T7908] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1843.859779][ T7908] ath9k_htc: Failed to initialize the device [ 1843.867571][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1843.868935][T24747] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1843.868972][T24747] usb 3-1: no configurations [ 1843.868984][T24747] usb 3-1: can't read configurations, error -22 [ 1843.887941][T24736] usb 6-1: ath9k_htc: USB layer deinitialized [ 1843.898852][T24750] usb 7-1: USB disconnect, device number 58 [ 1843.933255][T24739] usb 4-1: config 0 descriptor?? [ 1844.005715][T24747] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1844.155747][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1844.156421][T24747] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1844.156458][T24747] usb 3-1: no configurations [ 1844.156470][T24747] usb 3-1: can't read configurations, error -22 [ 1844.156848][T24747] usb usb3-port1: attempt power cycle [ 1844.285758][T24736] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1844.447569][T24736] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1844.448671][T24736] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1844.448722][T24736] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1844.451148][T24736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.451182][T24736] usb 6-1: Product: syz [ 1844.451190][T24736] usb 6-1: Manufacturer: syz [ 1844.451197][T24736] usb 6-1: SerialNumber: syz [ 1844.496148][T24747] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1844.517438][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1844.517961][T24747] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1844.517997][T24747] usb 3-1: no configurations [ 1844.518008][T24747] usb 3-1: can't read configurations, error -22 [ 1844.553232][T24739] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1844.553261][T24739] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1844.646873][T24747] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1844.668227][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1844.668973][T24747] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1844.669011][T24747] usb 3-1: no configurations [ 1844.669022][T24747] usb 3-1: can't read configurations, error -22 [ 1844.671603][T24747] usb usb3-port1: unable to enumerate USB device [ 1844.708711][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14294'. [ 1844.710894][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14313'. [ 1844.744208][ T31] audit: type=1326 audit(1792101531.454:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.4.14313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1844.844564][ T8607] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1844.844948][T24736] usb 6-1: USB disconnect, device number 51 [ 1844.867108][T24736] usb 6-1: ath9k_htc: USB layer deinitialized [ 1845.582987][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14315'. [ 1845.911835][T12363] sg_write: data in/out 475100/136 bytes for SCSI command 0x0-- guessing data in; [ 1845.911835][T12363] program syz.4.14320 not setting count and/or reply_len properly [ 1845.989397][T24739] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1845.989416][T24739] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1845.989427][T24739] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1845.989568][T24739] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1845.993797][T24739] usb 4-1: USB disconnect, device number 6 [ 1846.457354][T12376] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14326'. [ 1846.505928][T24739] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1846.540464][ T31] audit: type=1326 audit(1792101533.254:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.6.14326" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ff0ec code=0x0 [ 1846.614710][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14328'. [ 1846.656000][T24739] usb 6-1: Using ep0 maxpacket: 32 [ 1846.658221][T24739] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1846.658268][T24739] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1846.663402][T24739] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1846.663441][T24739] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1846.663460][T24739] usb 6-1: config 14 has no interface number 0 [ 1846.663475][T24739] usb 6-1: config 14 has no interface number 1 [ 1846.663540][T24739] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1846.663561][T24739] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1846.663584][T24739] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1846.663609][T24739] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1846.663633][T24739] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1846.663656][T24739] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1846.663679][T24739] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1846.663699][T24739] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1846.665879][T24739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.665903][T24739] usb 6-1: Product: syz [ 1846.665916][T24739] usb 6-1: Manufacturer: syz [ 1846.665929][T24739] usb 6-1: SerialNumber: syz [ 1846.914321][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14331'. [ 1847.095731][T24736] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1847.246131][T24736] usb 4-1: Using ep0 maxpacket: 32 [ 1847.246779][T24736] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1847.247801][T24736] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1847.247815][T24736] usb 4-1: config 0 has no interface number 0 [ 1847.247839][T24736] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1847.253597][T24736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.253613][T24736] usb 4-1: Product: syz [ 1847.253621][T24736] usb 4-1: Manufacturer: syz [ 1847.253628][T24736] usb 4-1: SerialNumber: syz [ 1847.270410][T24736] usb 4-1: config 0 descriptor?? [ 1847.287426][ T8607] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1847.353721][T24739] legousbtower 6-1:14.57: interrupt endpoints not found [ 1847.475832][ T8607] usb 3-1: Using ep0 maxpacket: 32 [ 1847.482831][ T8607] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1847.485376][ T8607] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1847.485401][ T8607] usb 3-1: config 0 has no interface number 0 [ 1847.485478][ T8607] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1847.489933][ T8607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.489959][ T8607] usb 3-1: Product: syz [ 1847.489972][ T8607] usb 3-1: Manufacturer: syz [ 1847.489985][ T8607] usb 3-1: SerialNumber: syz [ 1847.496931][ T8607] usb 3-1: config 0 descriptor?? [ 1847.766032][T24739] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1847.773577][T24739] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1847.865735][ T5683] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1847.870559][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1848.026313][ T5683] usb 7-1: Using ep0 maxpacket: 32 [ 1848.026982][ T5683] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1848.027044][ T5683] usb 7-1: no configurations [ 1848.027057][ T5683] usb 7-1: can't read configurations, error -22 [ 1848.115331][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1848.115366][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1848.155942][ T5683] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1848.305724][ T5683] usb 7-1: Using ep0 maxpacket: 32 [ 1848.306487][ T5683] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1848.306559][ T5683] usb 7-1: no configurations [ 1848.306572][ T5683] usb 7-1: can't read configurations, error -22 [ 1848.306920][ T5683] usb usb7-port1: attempt power cycle [ 1848.358480][T12419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14346'. [ 1848.364080][ T31] audit: type=1326 audit(1792101535.074:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.4.14346" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1848.645774][ T5683] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1848.668269][ T5683] usb 7-1: Using ep0 maxpacket: 32 [ 1848.668793][ T5683] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1848.668816][ T5683] usb 7-1: no configurations [ 1848.668823][ T5683] usb 7-1: can't read configurations, error -22 [ 1848.795876][ T5683] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1848.817426][ T5683] usb 7-1: Using ep0 maxpacket: 32 [ 1848.817998][ T5683] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1848.818032][ T5683] usb 7-1: no configurations [ 1848.818039][ T5683] usb 7-1: can't read configurations, error -22 [ 1848.818333][ T5683] usb usb7-port1: unable to enumerate USB device [ 1849.344718][ T8604] usb 6-1: USB disconnect, device number 52 [ 1849.370131][ T8604] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1849.592379][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14352'. [ 1849.756274][ T8604] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1849.793094][T12442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14357'. [ 1849.807680][ T31] audit: type=1326 audit(1792101536.524:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.4.14357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1849.916480][ T8604] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1849.919472][ T8604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.919498][ T8604] usb 6-1: Product: syz [ 1849.919507][ T8604] usb 6-1: Manufacturer: syz [ 1849.919534][ T8604] usb 6-1: SerialNumber: syz [ 1849.924470][T24736] f81534 4-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 1849.924526][T24736] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1849.924543][T24736] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1849.924649][T24736] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1849.984369][ T8604] usb 6-1: config 0 descriptor?? [ 1850.000727][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 1850.000745][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 1850.000755][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1850.000764][ T8607] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1850.000916][ T8607] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1850.062647][T24736] usb 4-1: USB disconnect, device number 7 [ 1850.065822][ T8607] usb 3-1: USB disconnect, device number 64 [ 1850.202323][ T8604] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1850.697134][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14363'. [ 1850.796724][ T7908] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1850.947093][ T7908] usb 3-1: Using ep0 maxpacket: 32 [ 1850.950829][ T7908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1850.950879][ T7908] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1850.951883][ T7908] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1850.951906][ T7908] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1850.951923][ T7908] usb 3-1: config 14 has no interface number 0 [ 1850.951938][ T7908] usb 3-1: config 14 has no interface number 1 [ 1850.952010][ T7908] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1850.952032][ T7908] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1850.952055][ T7908] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1850.952080][ T7908] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1850.952105][ T7908] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1850.952128][ T7908] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1850.952152][ T7908] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1850.952169][ T7908] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1851.022375][ T7908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.022402][ T7908] usb 3-1: Product: syz [ 1851.022414][ T7908] usb 3-1: Manufacturer: syz [ 1851.022428][ T7908] usb 3-1: SerialNumber: syz [ 1851.449129][T24747] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1851.545028][ T7908] legousbtower 3-1:14.57: interrupt endpoints not found [ 1851.606639][T24747] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1851.607892][T24747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.611070][T24747] usb 4-1: config 0 descriptor?? [ 1851.816857][T24747] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1851.944268][ T7908] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1851.955001][ T7908] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1852.037166][T24747] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1852.037205][T24747] [drm] Initialized udl on minor 1 [ 1852.221640][T24747] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1852.224586][T24747] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1852.245832][T24747] usb 4-1: USB disconnect, device number 8 [ 1852.262116][T24750] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1852.274354][ T7908] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1852.417319][ T7908] usb 7-1: Using ep0 maxpacket: 32 [ 1852.418021][ T7908] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1852.419113][ T7908] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 1852.419136][ T7908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.419152][ T7908] usb 7-1: config 0 has no interfaces? [ 1852.421131][ T7908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.421152][ T7908] usb 7-1: Product: syz [ 1852.421166][ T7908] usb 7-1: Manufacturer: syz [ 1852.421180][ T7908] usb 7-1: SerialNumber: syz [ 1852.424160][ T7908] usb 7-1: config 0 descriptor?? [ 1852.636221][ T8607] usb 7-1: USB disconnect, device number 63 [ 1852.854159][T12484] netlink: 'syz.3.14376': attribute type 10 has an invalid length. [ 1852.867480][T12484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.869125][T12484] bond0: (slave team0): Enslaving as an active interface with an up link [ 1853.052783][ T8604] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1853.053074][ T8604] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1853.053107][ T8604] usb 6-1: media controller created [ 1853.054495][ T8604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1853.068921][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.068958][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.077020][ T8604] dvb_usb_rtl28xxu 6-1:0.0: unknown tuner NONE [ 1853.155740][ T8607] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1853.280409][ T8604] usb 6-1: USB disconnect, device number 53 [ 1853.307060][ T8607] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1853.309630][ T8607] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.309669][ T8607] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1853.309692][ T8607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.558508][ T8604] usb 3-1: USB disconnect, device number 65 [ 1853.575437][ T8604] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1853.726426][ T8607] usb 4-1: unable to init card! (ret=-110) [ 1853.726877][ T8607] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1853.845709][ T7908] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1853.846586][T12506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14387'. [ 1853.924746][T24747] usb 4-1: USB disconnect, device number 9 [ 1853.933403][T12508] syzkaller0: entered promiscuous mode [ 1853.933435][T12508] syzkaller0: entered allmulticast mode [ 1853.935177][T23252] syzkaller0: tun_net_xmit 48 [ 1853.967052][T12508] syzkaller0: tun_net_xmit 1 [ 1853.999072][ T7908] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 1854.003299][ T7908] usb 7-1: too many endpoints for config 0 interface 0 altsetting 2: 198, using maximum allowed: 30 [ 1854.003339][ T7908] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.003353][ T7908] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 198 [ 1854.003366][ T7908] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1854.003385][ T7908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.007948][ T7908] usb 7-1: config 0 descriptor?? [ 1854.026211][ T8604] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1854.206424][ T8604] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1854.207394][ T8604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.207438][ T8604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1854.207457][ T8604] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1854.207478][ T8604] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.207515][ T8604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.493396][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.493886][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494007][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494035][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494059][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494083][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494108][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494130][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494153][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.494173][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: unknown main item tag 0x0 [ 1854.518187][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:0a30] on usb-dummy_hcd.6-1/input0 [ 1854.678277][T24747] hid-corsair-void 0003:1B1C:0A30.0020: failed to request battery (reason: -71) [ 1854.679496][ T8607] usb 7-1: USB disconnect, device number 64 [ 1854.757135][ T7908] hid-corsair-void 0003:1B1C:0A30.0020: failed to request firmware (reason: -71) [ 1855.260990][ T8604] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 1855.670252][ T8604] Console: switching to colour frame buffer device 128x48 [ 1855.713728][ T8604] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 1855.727189][ T8604] usb 3-1: USB disconnect, device number 66 [ 1855.848826][ T8604] Console: switching to colour VGA+ 80x25 [ 1859.154564][T12525] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14393'. [ 1859.308901][T12540] netlink: 'syz.5.14398': attribute type 10 has an invalid length. [ 1859.395917][ T7908] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1859.535841][ T7908] usb 4-1: Using ep0 maxpacket: 32 [ 1859.538829][ T7908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1859.538881][ T7908] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1859.540253][ T7908] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1859.540276][ T7908] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1859.540295][ T7908] usb 4-1: config 14 has no interface number 0 [ 1859.540310][ T7908] usb 4-1: config 14 has no interface number 1 [ 1859.540369][ T7908] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1859.540391][ T7908] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1859.540413][ T7908] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1859.540437][ T7908] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1859.540460][ T7908] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1859.540484][ T7908] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.540507][ T7908] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1859.540523][ T7908] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1859.542931][ T7908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.542963][ T7908] usb 4-1: Product: syz [ 1859.542977][ T7908] usb 4-1: Manufacturer: syz [ 1859.542991][ T7908] usb 4-1: SerialNumber: syz [ 1859.668187][T23250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.738746][T23250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.741720][T23250] bond0 (unregistering): Released all slaves [ 1859.750482][T23250] bond1 (unregistering): Released all slaves [ 1859.771242][T23250] bond2 (unregistering): Released all slaves [ 1859.802584][T23250] bond3 (unregistering): Released all slaves [ 1859.829742][T23250] bond4 (unregistering): Released all slaves [ 1859.986426][T23250] ovs-dp0: left promiscuous mode [ 1860.083309][T23250] tipc: Disabling bearer [ 1860.083455][T23250] tipc: Left network mode [ 1860.202351][T12558] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1860.217876][ T7908] legousbtower 4-1:14.57: interrupt endpoints not found [ 1860.623497][ T7908] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1860.641351][ T7908] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1860.836609][T23250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1860.865253][T23250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1860.898913][T12529] usb 4-1: LEGO USB Tower reset control request failed [ 1860.904337][ T7908] usb 4-1: USB disconnect, device number 10 [ 1860.929067][ T7908] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1861.635258][T23250] team0 (unregistering): Port device team_slave_1 removed [ 1861.674238][T23250] team0 (unregistering): Port device team_slave_0 removed [ 1862.349285][T12594] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14420'. [ 1862.555306][T23250] IPVS: stop unused estimator thread 0... [ 1862.566929][T12604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1862.597976][T24751] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1862.696220][T12609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14427'. [ 1862.728762][ T31] audit: type=1326 audit(1792101549.444:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.5.14427" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740f0ec code=0x0 [ 1862.766189][T24751] usb 7-1: Using ep0 maxpacket: 8 [ 1862.767566][T24751] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1862.769142][T24751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1862.769169][T24751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.773628][T24751] usb 7-1: config 0 descriptor?? [ 1862.966600][ T8607] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1863.028748][T24751] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1863.125698][ T8607] usb 4-1: Using ep0 maxpacket: 8 [ 1863.126693][ T8607] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1863.128503][ T8607] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1863.128554][ T8607] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1863.128580][ T8607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1863.128601][ T8607] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1863.128625][ T8607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1863.128647][ T8607] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1863.128686][ T8607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.346498][ T8607] usb 4-1: usb_control_msg returned -32 [ 1863.346549][ T8607] usbtmc 4-1:16.0: can't read capabilities [ 1863.517136][T24751] usb 7-1: USB disconnect, device number 65 [ 1864.489944][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14444'. [ 1864.519704][T12646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.584335][ T31] audit: type=1326 audit(1792101551.294:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.14444" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f590ec code=0x0 [ 1864.780592][T12646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.959876][T12646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.269283][T12646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.779864][ T3828] usb 4-1: USB disconnect, device number 11 [ 1866.150653][T12692] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14460'. [ 1866.195082][ T31] audit: type=1326 audit(1792101552.904:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.14460" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740f0ec code=0x0 [ 1866.342342][T12706] netlink: 112 bytes leftover after parsing attributes in process `syz.6.14466'. [ 1866.343110][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14466'. [ 1867.435750][T24751] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1867.595869][T24751] usb 7-1: Using ep0 maxpacket: 32 [ 1867.598144][T24751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1867.598193][T24751] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1867.599493][T24751] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1867.599517][T24751] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1867.599536][T24751] usb 7-1: config 14 has no interface number 0 [ 1867.599552][T24751] usb 7-1: config 14 has no interface number 1 [ 1867.599612][T24751] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1867.599633][T24751] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1867.599656][T24751] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1867.599680][T24751] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1867.599704][T24751] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1867.599735][T24751] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.599759][T24751] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1867.599776][T24751] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1867.602852][T24751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.602875][T24751] usb 7-1: Product: syz [ 1867.602890][T24751] usb 7-1: Manufacturer: syz [ 1867.602903][T24751] usb 7-1: SerialNumber: syz [ 1868.109016][ T31] audit: type=1326 audit(1792101554.814:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.4.14485" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73df0ec code=0x0 [ 1868.357433][T24751] legousbtower 7-1:14.57: interrupt endpoints not found [ 1868.756003][ T3828] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1868.758793][T24751] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1868.760977][T24751] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1868.919942][ T3828] usb 6-1: Using ep0 maxpacket: 32 [ 1868.925377][ T3828] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1868.936324][ T3828] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1868.936350][ T3828] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1868.939948][ T3828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.939983][ T3828] usb 6-1: Product: syz [ 1868.939998][ T3828] usb 6-1: Manufacturer: syz [ 1868.940011][ T3828] usb 6-1: SerialNumber: syz [ 1868.943512][ T3828] usb 6-1: config 0 descriptor?? [ 1869.050448][T12730] usb 7-1: LEGO USB Tower reset control request failed [ 1869.050452][ T3828] usb 7-1: USB disconnect, device number 66 [ 1869.104255][ T3828] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1869.179305][ T8607] usb 6-1: USB disconnect, device number 54 [ 1869.654504][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14501'. [ 1870.616123][ T8607] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1870.768385][ T8607] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1870.769681][ T8607] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1870.769713][ T8607] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1870.773615][ T8607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.773630][ T8607] usb 3-1: Product: syz [ 1870.773638][ T8607] usb 3-1: Manufacturer: syz [ 1870.773645][ T8607] usb 3-1: SerialNumber: syz [ 1870.865723][T24751] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1870.893484][ T3828] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1871.027127][T24751] usb 4-1: Using ep0 maxpacket: 32 [ 1871.027858][T24751] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1871.029178][T24751] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1871.029203][T24751] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1871.033335][T24751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.033359][T24751] usb 4-1: Product: syz [ 1871.033373][T24751] usb 4-1: Manufacturer: syz [ 1871.033386][T24751] usb 4-1: SerialNumber: syz [ 1871.094210][T24751] usb 4-1: config 0 descriptor?? [ 1871.112438][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.116813][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.321978][ T8607] usb 3-1: USB disconnect, device number 67 [ 1871.397480][ T8604] usb 4-1: USB disconnect, device number 12 [ 1871.433851][T24751] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1871.565712][T24751] usb 6-1: device descriptor read/64, error -71 [ 1871.807184][T24751] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1871.946752][T24751] usb 6-1: device descriptor read/64, error -71 [ 1872.017238][ T3828] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1872.017350][ T3828] ath9k_htc: Failed to initialize the device [ 1872.017834][ T8607] usb 3-1: ath9k_htc: USB layer deinitialized [ 1872.045728][ T8604] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1872.056764][T24751] usb usb6-port1: attempt power cycle [ 1872.206551][ T8604] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1872.209743][ T8604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.209759][ T8604] usb 7-1: Product: syz [ 1872.209767][ T8604] usb 7-1: Manufacturer: syz [ 1872.209774][ T8604] usb 7-1: SerialNumber: syz [ 1872.365774][ T8607] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1872.426057][T24751] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1872.456492][T24751] usb 6-1: device descriptor read/8, error -71 [ 1872.526777][ T8607] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1872.528213][ T8607] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1872.528269][ T8607] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1872.530786][ T8607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.530810][ T8607] usb 3-1: Product: syz [ 1872.530823][ T8607] usb 3-1: Manufacturer: syz [ 1872.530861][ T8607] usb 3-1: SerialNumber: syz [ 1872.686504][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1872.686590][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1872.716153][T24751] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1872.741262][T24751] usb 6-1: device descriptor read/8, error -71 [ 1872.813750][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14509'. [ 1872.846208][T24751] usb usb6-port1: unable to enumerate USB device [ 1872.923211][T24736] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1872.923767][T24747] usb 3-1: USB disconnect, device number 68 [ 1872.942158][T24747] usb 3-1: ath9k_htc: USB layer deinitialized [ 1873.898950][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1873.899521][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1874.065763][T24747] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1874.216883][T24747] usb 3-1: Using ep0 maxpacket: 32 [ 1874.217661][T24747] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1874.218787][T24747] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1874.218802][T24747] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1874.221466][T24747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.221487][T24747] usb 3-1: Product: syz [ 1874.221500][T24747] usb 3-1: Manufacturer: syz [ 1874.221514][T24747] usb 3-1: SerialNumber: syz [ 1874.226381][T24747] usb 3-1: config 0 descriptor?? [ 1874.301875][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1874.301934][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1874.346203][ T8604] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1874.368092][ T8604] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1874.384637][ T8604] usb 7-1: USB disconnect, device number 67 [ 1874.444409][ T7908] usb 3-1: USB disconnect, device number 69 [ 1874.755908][T24747] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1874.901214][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14539'. [ 1874.921563][T24747] usb 6-1: Using ep0 maxpacket: 8 [ 1874.931237][T24747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1874.931283][T24747] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1874.934176][T24747] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1874.934212][T24747] usb 6-1: can't read configurations, error -61 [ 1875.056363][T24747] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1875.225848][T24747] usb 6-1: Using ep0 maxpacket: 8 [ 1875.231208][T24747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1875.231258][T24747] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1875.276542][T24747] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1875.276577][T24747] usb 6-1: can't read configurations, error -61 [ 1875.276892][T24747] usb usb6-port1: attempt power cycle [ 1875.346951][T24751] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1875.496639][T24751] usb 3-1: Using ep0 maxpacket: 16 [ 1875.497454][T24751] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1875.498677][T24751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.498704][T24751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.498723][T24751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1875.498759][T24751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.501395][T24751] usb 3-1: config 0 descriptor?? [ 1875.625735][T24747] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1875.647347][T24747] usb 6-1: Using ep0 maxpacket: 8 [ 1875.649933][T24747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1875.649994][T24747] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1875.652405][T24747] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1875.652441][T24747] usb 6-1: can't read configurations, error -61 [ 1875.762183][T12906] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14552'. [ 1875.785793][T24747] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1875.806985][T24747] usb 6-1: Using ep0 maxpacket: 8 [ 1875.809881][T24747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1875.809948][T24747] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1875.812268][T24747] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1875.812308][T24747] usb 6-1: can't read configurations, error -61 [ 1875.812903][T24747] usb usb6-port1: unable to enumerate USB device [ 1875.925992][T24751] hid_parser_main: 14 callbacks suppressed [ 1875.926027][T24751] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 1875.926056][T24751] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 1875.969525][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14554'. [ 1875.984929][T24751] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0021/input/input42 [ 1876.053524][T24751] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1876.185165][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.196031][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.204750][ T8607] usb 3-1: USB disconnect, device number 70 [ 1876.278570][T12913] fido_id[12913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1876.669096][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14559'. [ 1876.819100][T12930] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14562'. [ 1877.116964][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14563'. [ 1877.465763][T24747] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1877.467089][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14568'. [ 1877.640491][T24747] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1877.644176][T24747] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1877.644200][T24747] usb 4-1: config 1 has no interface number 0 [ 1877.665805][T24747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.665832][T24747] usb 4-1: Product: syz [ 1877.665845][T24747] usb 4-1: Manufacturer: syz [ 1877.665859][T24747] usb 4-1: SerialNumber: syz [ 1877.697872][T24747] usb 4-1: 3:0 : does not exist [ 1877.697887][T24747] usb 4-1: 3:0 : does not exist [ 1877.739177][ T7908] bond_slave_0: entered promiscuous mode [ 1877.739205][ T7908] bond_slave_1: entered promiscuous mode [ 1878.047548][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14571'. [ 1878.130733][ T8604] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1878.199208][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14577'. [ 1878.275765][ T8604] usb 6-1: Using ep0 maxpacket: 16 [ 1878.277200][ T8604] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1878.279306][ T8604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.279324][ T8604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.279336][ T8604] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1878.279359][ T8604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.287073][ T8604] usb 6-1: config 0 descriptor?? [ 1878.472783][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14579'. [ 1878.789053][ T8604] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1878.789088][ T8604] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max [ 1878.831761][ T8604] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0022/input/input43 [ 1878.910516][ T8604] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1879.072648][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.078117][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.098681][ T7908] usb 6-1: USB disconnect, device number 63 [ 1879.200682][T12980] fido_id[12980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1880.060831][T13004] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1880.201400][T13006] __nla_validate_parse: 6 callbacks suppressed [ 1880.201423][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14595'. [ 1880.246542][ T8607] usb 4-1: USB disconnect, device number 13 [ 1880.905500][T13024] netlink: 'syz.2.14602': attribute type 2 has an invalid length. [ 1880.905528][T13024] netlink: 'syz.2.14602': attribute type 2 has an invalid length. [ 1881.555835][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14604'. [ 1881.555858][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14604'. [ 1881.651095][T13037] netlink: 'syz.6.14606': attribute type 1 has an invalid length. [ 1881.691016][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14601'. [ 1881.739456][T13037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1881.794976][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14609'. [ 1882.525826][ T7908] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1882.567409][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14617'. [ 1882.696498][ T7908] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1882.697685][ T7908] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 1882.697735][ T7908] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.697753][ T7908] usb 7-1: config 4 has no interface number 0 [ 1882.697788][ T7908] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1882.700702][ T7908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.700726][ T7908] usb 7-1: Product: syz [ 1882.700738][ T7908] usb 7-1: Manufacturer: syz [ 1882.700750][ T7908] usb 7-1: SerialNumber: syz [ 1882.838022][T13064] Set syz1 is full, maxelem 6117 reached [ 1882.940762][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14622'. [ 1883.121918][ T7908] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1883.135170][ T7908] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1883.146473][ T7908] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1883.146524][ T7908] usb 7-1: media controller created [ 1883.148883][ T7908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1883.195906][ T8604] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1883.269534][ T7908] DVB: Unable to find symbol dib7000p_attach() [ 1883.269551][ T7908] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1883.347157][ T8604] usb 3-1: Using ep0 maxpacket: 16 [ 1883.352495][ T8604] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1883.353333][ T8604] usb 3-1: config 0 has no interfaces? [ 1883.356767][ T8604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.356814][ T8604] usb 3-1: Product: syz [ 1883.356828][ T8604] usb 3-1: Manufacturer: syz [ 1883.356841][ T8604] usb 3-1: SerialNumber: syz [ 1883.370152][ T7908] rc_core: IR keymap rc-dib0700-rc5 not found [ 1883.370171][ T7908] Registered IR keymap rc-empty [ 1883.381488][ T8604] usb 3-1: config 0 descriptor?? [ 1883.422143][ T7908] dvb-usb: could not initialize remote control. [ 1883.422158][ T7908] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1883.618238][ T7908] usb 7-1: USB disconnect, device number 68 [ 1883.630720][ T8604] usb 3-1: USB disconnect, device number 71 [ 1883.671834][ T7908] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1884.118132][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14628'. [ 1884.414333][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14634'. [ 1885.476398][T13140] fuse: Bad value for 'fd' [ 1886.042574][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14652'. [ 1886.701996][T13190] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14662'. [ 1887.359794][ T7908] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1887.540976][ T7908] usb 4-1: Using ep0 maxpacket: 32 [ 1887.541724][ T7908] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1887.542667][ T7908] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1887.544866][ T7908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.544891][ T7908] usb 4-1: Product: syz [ 1887.544905][ T7908] usb 4-1: Manufacturer: syz [ 1887.544919][ T7908] usb 4-1: SerialNumber: syz [ 1887.591737][ T7908] usb 4-1: config 0 descriptor?? [ 1887.606311][ T7908] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1887.606340][ T7908] dvb-usb: bulk message failed: -22 (2/0) [ 1887.608710][ T7908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1887.609435][ T7908] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1887.609486][ T7908] usb 4-1: media controller created [ 1887.681192][ T7908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1887.716789][ T7908] usb 4-1: selecting invalid altsetting 7 [ 1887.716811][ T7908] cxusb: set interface failed [ 1887.716823][ T7908] dvb-usb: bulk message failed: -22 (1/0) [ 1887.779108][ T7908] DVB: Unable to find symbol lgdt330x_attach() [ 1887.779133][ T7908] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1887.895909][ T7908] rc_core: IR keymap rc-dvico-portable not found [ 1887.895928][ T7908] Registered IR keymap rc-empty [ 1887.897274][ T7908] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1887.932403][ T7908] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input45 [ 1887.934597][ T7908] dvb-usb: schedule remote query interval to 100 msecs. [ 1887.934617][ T7908] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1887.965145][ T7908] usb 4-1: USB disconnect, device number 14 [ 1888.053608][ T7908] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1892.079422][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14686'. [ 1892.129996][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14688'. [ 1892.201584][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14691'. [ 1892.411625][T24751] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1892.556804][T24751] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1892.557959][T24751] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1892.558010][T24751] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1892.561670][T24751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.561694][T24751] usb 6-1: Product: syz [ 1892.561708][T24751] usb 6-1: Manufacturer: syz [ 1892.561722][T24751] usb 6-1: SerialNumber: syz [ 1892.646589][T24747] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1892.650109][T13282] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14698'. [ 1892.909032][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.909514][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.912591][ T8607] usb 6-1: USB disconnect, device number 64 [ 1893.010724][T17828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1893.021496][T17828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1893.030407][T17828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1893.051847][T17828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1893.071338][T17828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1893.096274][T16514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1893.096909][T16514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1893.097441][T16514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1893.100951][T16514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1893.101777][T16514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1893.247029][T13293] syz.2.14701 (13293): drop_caches: 2 [ 1893.317510][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14702'. [ 1893.699539][T24747] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1893.699660][T24747] ath9k_htc: Failed to initialize the device [ 1893.700222][ T8607] usb 6-1: ath9k_htc: USB layer deinitialized [ 1894.053274][ T8607] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1894.248996][ T8607] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1894.250437][ T8607] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1894.250488][ T8607] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1894.252431][ T8607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.252456][ T8607] usb 6-1: Product: syz [ 1894.252470][ T8607] usb 6-1: Manufacturer: syz [ 1894.252485][ T8607] usb 6-1: SerialNumber: syz [ 1894.541308][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14689'. [ 1895.141417][T17828] Bluetooth: hci0: command tx timeout [ 1895.390772][ T8607] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1895.556568][ T8607] usb 6-1: ath9k_htc: USB layer deinitialized [ 1897.220717][T17828] Bluetooth: hci0: command tx timeout [ 1897.743437][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14700'. [ 1898.011091][ T7908] usb 6-1: USB disconnect, device number 65 [ 1898.190253][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14712'. [ 1898.230983][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.345161][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14714'. [ 1898.345419][T13316] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14713'. [ 1898.539530][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.739858][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14724'. [ 1899.299311][T17828] Bluetooth: hci0: command tx timeout [ 1899.452771][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14725'. [ 1901.376122][T17828] Bluetooth: hci0: command tx timeout [ 1903.005560][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14726'. [ 1903.185476][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.366436][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.544928][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14734'. [ 1903.971940][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14736'. [ 1904.057206][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14737'. [ 1904.063963][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.064126][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.064268][T13291] bridge_slave_0: entered allmulticast mode [ 1904.066503][T13291] bridge_slave_0: entered promiscuous mode [ 1904.162567][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.162726][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.162832][T13291] bridge_slave_1: entered allmulticast mode [ 1904.165944][T13291] bridge_slave_1: entered promiscuous mode [ 1904.182531][T13396] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14739'. [ 1904.900868][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14744'. [ 1908.864599][ T60] bridge_slave_1: left allmulticast mode [ 1908.864619][ T60] bridge_slave_1: left promiscuous mode [ 1908.864771][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.873498][ T60] bridge_slave_0: left allmulticast mode [ 1908.873523][ T60] bridge_slave_0: left promiscuous mode [ 1908.873764][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.151832][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1909.153564][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1909.155243][ T60] bond0 (unregistering): (slave team0): Releasing backup interface [ 1909.167284][ T60] bond0 (unregistering): Released all slaves [ 1909.188424][ T60] bond1 (unregistering): (slave veth3): Releasing active interface [ 1909.189621][ T60] bond1 (unregistering): Released all slaves [ 1909.279350][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.301188][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.414770][ T60] tipc: Disabling bearer [ 1909.414905][ T60] tipc: Left network mode [ 1909.437710][T13291] team0: Port device team_slave_0 added [ 1909.445322][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14747'. [ 1909.462261][T13291] team0: Port device team_slave_1 added [ 1909.641664][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.641681][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.641715][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.737105][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.737122][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.737147][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.743087][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14750'. [ 1909.960587][T13291] hsr_slave_0: entered promiscuous mode [ 1909.969509][T13291] hsr_slave_1: entered promiscuous mode [ 1909.973494][T13291] debugfs: 'hsr0' already exists in 'hsr' [ 1909.973517][T13291] Cannot create hsr debugfs directory [ 1910.028849][ T60] hsr_slave_0: left promiscuous mode [ 1910.031060][ T60] hsr_slave_1: left promiscuous mode [ 1910.031950][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1910.031970][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.034996][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1910.035015][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.080280][ T60] veth1_macvtap: left promiscuous mode [ 1910.080320][ T60] veth0_macvtap: left promiscuous mode [ 1910.080420][ T60] veth1_vlan: left promiscuous mode [ 1910.080484][ T60] veth0_vlan: left promiscuous mode [ 1910.081503][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14754'. [ 1910.083084][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14754'. [ 1910.083104][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14754'. [ 1910.262855][T13448] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14755'. [ 1910.262889][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14755'. [ 1910.565767][ T8607] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1910.661913][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1910.690745][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1910.719433][ T8607] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 1910.720761][ T8607] usb 7-1: config 7 has an invalid descriptor of length 102, skipping remainder of the config [ 1910.720786][ T8607] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1910.722494][ T8607] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1910.722517][ T8607] usb 7-1: Product: syz [ 1910.722531][ T8607] usb 7-1: SerialNumber: syz [ 1910.761444][ T8607] rndis_host 7-1:7.0: ACM capabilities 30, not really RNDIS? [ 1910.771986][ T8607] option 7-1:7.0: GSM modem (1-port) converter detected [ 1910.988115][T13461] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14757'. [ 1910.989588][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1911.000527][ T3828] usb 7-1: USB disconnect, device number 69 [ 1911.003250][ T3828] option 7-1:7.0: device disconnected [ 1911.140549][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14765'. [ 1911.141890][T13483] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14765'. [ 1912.411839][T13520] fuse: Bad value for 'group_id' [ 1912.411860][T13520] fuse: Bad value for 'group_id' [ 1913.795032][ T3828] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1913.930384][ T3828] usb 7-1: device descriptor read/64, error -71 [ 1914.188049][ T3828] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1914.330958][ T3828] usb 7-1: device descriptor read/64, error -71 [ 1914.436188][ T3828] usb usb7-port1: attempt power cycle [ 1914.513614][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.513679][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.789040][ T3828] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1914.820905][ T3828] usb 7-1: device descriptor read/8, error -71 [ 1915.093852][ T3828] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1915.124493][ T3828] usb 7-1: device descriptor read/8, error -71 [ 1915.242048][ T3828] usb usb7-port1: unable to enumerate USB device [ 1917.671282][ T60] IPVS: stop unused estimator thread 0... [ 1918.551737][T24751] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1918.565731][ T7908] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1918.721489][ T7908] usb 6-1: device descriptor read/64, error -71 [ 1918.729166][T24751] usb 7-1: Using ep0 maxpacket: 32 [ 1918.757440][T24751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1918.757492][T24751] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1918.761047][T24751] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1918.761082][T24751] usb 7-1: can't read configurations, error -71 [ 1918.976023][ T7908] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1919.107003][ T7908] usb 6-1: device descriptor read/64, error -71 [ 1919.124563][T13291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1919.129919][T13291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1919.131089][T13291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1919.150149][T13291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1919.154339][T13291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1919.164003][T13291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1919.165325][T13291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1919.185463][T13291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1919.216197][ T7908] usb usb6-port1: attempt power cycle [ 1919.381715][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.421050][T13629] __nla_validate_parse: 5 callbacks suppressed [ 1919.421069][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14807'. [ 1919.438672][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.461720][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.461856][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.501200][T23250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.501328][T23250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.556179][ T7908] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1919.577607][ T7908] usb 6-1: device descriptor read/8, error -71 [ 1919.723465][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.818186][ T7908] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1919.848268][ T7908] usb 6-1: device descriptor read/8, error -71 [ 1919.873867][T13291] veth0_vlan: entered promiscuous mode [ 1919.902444][T13291] veth1_vlan: entered promiscuous mode [ 1919.966226][ T7908] usb usb6-port1: unable to enumerate USB device [ 1920.025118][T13291] veth0_macvtap: entered promiscuous mode [ 1920.049416][T13291] veth1_macvtap: entered promiscuous mode [ 1920.105089][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.155515][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.355776][T23252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.356050][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.356087][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.356122][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.699051][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.699074][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.766969][T23250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.766991][T23250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.831782][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14819'. [ 1920.887065][ T8604] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1921.036850][ T8604] usb 3-1: Using ep0 maxpacket: 32 [ 1921.050016][ T8604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1921.050064][ T8604] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1921.051134][ T8604] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1921.051166][ T8604] usb 3-1: can't read configurations, error -71 [ 1921.219006][T13693] random: crng reseeded on system resumption [ 1921.456160][T24751] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1921.606898][T24751] usb 7-1: Using ep0 maxpacket: 8 [ 1921.622956][T24751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1921.623012][T24751] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1921.624751][T24751] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1921.624785][T24751] usb 7-1: can't read configurations, error -71 [ 1921.955714][ T8607] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1922.085793][ T8607] usb 4-1: device descriptor read/64, error -71 [ 1922.325848][ T8607] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1922.455839][ T8607] usb 4-1: device descriptor read/64, error -71 [ 1922.522603][T13746] macsec0: entered promiscuous mode [ 1922.523399][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14850'. [ 1922.524960][T13746] macsec0 (unregistering): left promiscuous mode [ 1922.565977][ T8607] usb usb4-port1: attempt power cycle [ 1922.695839][ T7908] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1922.765791][T24751] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1922.855847][ T7908] usb 6-1: Using ep0 maxpacket: 32 [ 1922.855882][ T8604] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1922.857704][ T7908] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1922.858708][ T7908] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1922.858724][ T7908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.858734][ T7908] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1922.860405][ T7908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.860420][ T7908] usb 6-1: Product: syz [ 1922.860427][ T7908] usb 6-1: Manufacturer: syz [ 1922.860434][ T7908] usb 6-1: SerialNumber: syz [ 1922.862591][ T7908] usb 6-1: config 0 descriptor?? [ 1922.926327][ T8607] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1922.935671][T24751] usb 7-1: Using ep0 maxpacket: 32 [ 1922.959976][ T8607] usb 4-1: device descriptor read/8, error -71 [ 1922.960571][T24751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1922.960618][T24751] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1922.961443][T24751] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1922.961475][T24751] usb 7-1: can't read configurations, error -71 [ 1923.035694][ T8604] usb 3-1: Using ep0 maxpacket: 8 [ 1923.041784][ T8604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1923.041834][ T8604] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1923.042682][ T8604] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1923.042717][ T8604] usb 3-1: can't read configurations, error -71 [ 1923.070721][ T7908] usb 6-1: USB disconnect, device number 70 [ 1923.215953][ T8607] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1923.236409][ T8607] usb 4-1: device descriptor read/8, error -71 [ 1923.346746][ T8607] usb usb4-port1: unable to enumerate USB device [ 1923.628224][T13756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1924.698725][T13781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1924.775879][T24751] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1924.925702][T24751] usb 3-1: Using ep0 maxpacket: 32 [ 1924.942792][T24751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1924.942826][T24751] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1924.943542][T24751] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1924.943562][T24751] usb 3-1: can't read configurations, error -71 [ 1925.105712][ T8604] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1925.176020][ T3828] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1925.255923][ T8604] usb 6-1: Using ep0 maxpacket: 8 [ 1925.259389][ T8604] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1925.259438][ T8604] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1925.262477][ T8604] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1925.268372][ T8604] usb 6-1: string descriptor 0 read error: -22 [ 1925.268456][ T8604] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1925.278952][ T8604] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1925.282091][ T8604] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1925.282414][ T8604] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1925.282456][ T8604] usb 6-1: media controller created [ 1925.326145][ T3828] usb 4-1: Using ep0 maxpacket: 32 [ 1925.329773][ T3828] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1925.331945][ T3828] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1925.331969][ T3828] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1925.334077][ T3828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.334099][ T3828] usb 4-1: Product: syz [ 1925.334112][ T3828] usb 4-1: Manufacturer: syz [ 1925.334126][ T3828] usb 4-1: SerialNumber: syz [ 1925.340506][ T8604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1925.344879][ T3828] usb 4-1: config 0 descriptor?? [ 1925.546714][ T8604] zl10353_read_register: readreg error (reg=127, ret==0) [ 1925.626320][T13786] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 1925.660387][T24747] usb 4-1: USB disconnect, device number 19 [ 1925.743193][ T8604] usb 6-1: USB disconnect, device number 71 [ 1925.776116][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1925.908715][T13789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1925.908733][T13789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1925.909781][T13789] vhci_hcd vhci_hcd.0: Device attached [ 1925.910979][T13794] vhci_hcd: connection closed [ 1925.915217][T23252] vhci_hcd vhci_hcd.2: stop threads [ 1925.915234][T23252] vhci_hcd vhci_hcd.2: release socket [ 1925.916705][T23252] vhci_hcd vhci_hcd.2: disconnect device [ 1926.005434][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14871'. [ 1926.028653][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14871'. [ 1926.028676][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14871'. [ 1926.225118][T13803] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14873'. [ 1926.679121][T24751] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1926.707632][T13822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14881'. [ 1926.876574][T24751] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1926.877827][T24751] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1926.877858][T24751] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64 [ 1926.877883][T24751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1926.881575][T24751] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1926.881600][T24751] usb 4-1: Product: syz [ 1926.881614][T24751] usb 4-1: Manufacturer: syz [ 1926.881627][T24751] usb 4-1: SerialNumber: syz [ 1926.953566][T24751] usb 4-1: config 0 descriptor?? [ 1926.965269][T13816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1926.979447][T24751] usb 4-1: selecting invalid altsetting 0 [ 1927.246488][ T8604] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1927.406232][ T8604] usb 7-1: New USB device found, idVendor=2a39, idProduct=3f54, bcdDevice= 0.40 [ 1927.413909][ T8604] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1927.413936][ T8604] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1927.419144][ T8604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.419169][ T8604] usb 7-1: Product: syz [ 1927.419183][ T8604] usb 7-1: Manufacturer: syz [ 1927.419196][ T8604] usb 7-1: SerialNumber: syz [ 1927.508850][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1927.539953][T13828] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1927.541039][T13832] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1927.541056][T13832] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1927.558720][ T3828] usb 4-1: USB disconnect, device number 20 [ 1927.985800][ T8607] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1928.135775][ T8607] usb 6-1: Using ep0 maxpacket: 8 [ 1928.139761][ T8607] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1928.139810][ T8607] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1928.140962][ T8607] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1928.144145][ T8607] usb 6-1: string descriptor 0 read error: -22 [ 1928.144227][ T8607] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1928.160771][ T8607] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1928.168541][ T8607] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1928.168926][ T8607] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1928.168974][ T8607] usb 6-1: media controller created [ 1928.216588][ T8607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1928.364573][ T8607] zl10353_read_register: readreg error (reg=127, ret==0) [ 1928.440102][ T8607] usb 6-1: USB disconnect, device number 72 [ 1929.499688][ T8604] usb 7-1: USB disconnect, device number 80 [ 1931.829113][T13816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14878'. [ 1932.104248][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14894'. [ 1932.108605][T13857] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14894'. [ 1932.108626][T13857] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14894'. [ 1932.298278][T13871] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14900'. [ 1933.310190][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14907'. [ 1933.311839][T13891] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14907'. [ 1933.311859][T13891] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14907'. [ 1933.535903][ T31] audit: type=1326 audit(1792101620.254:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.3.14909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f260ec code=0x0 [ 1937.621141][T13933] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14922'. [ 1937.696063][T24751] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1937.845689][T24751] usb 7-1: Using ep0 maxpacket: 16 [ 1937.846183][T24751] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1937.846796][T24751] usb 7-1: config 0 has no interfaces? [ 1937.846827][T24751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.848771][T24751] usb 7-1: config 0 descriptor?? [ 1938.005709][T24744] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1938.132485][T24751] usb 7-1: USB disconnect, device number 81 [ 1938.155793][T24744] usb 4-1: Using ep0 maxpacket: 16 [ 1938.156523][T24744] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 1938.157440][T24744] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1938.157466][T24744] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1938.157480][T24744] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1938.157498][T24744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.159304][T24744] usb 4-1: config 0 descriptor?? [ 1938.535756][T24751] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1938.584084][T24744] saitek 0003:06A3:0CD7.0023: unknown main item tag 0x0 [ 1938.584121][T24744] saitek 0003:06A3:0CD7.0023: unknown main item tag 0x0 [ 1938.584147][T24744] saitek 0003:06A3:0CD7.0023: unknown main item tag 0x0 [ 1938.584174][T24744] saitek 0003:06A3:0CD7.0023: unknown main item tag 0x0 [ 1938.584234][T24744] saitek 0003:06A3:0CD7.0023: unknown main item tag 0x0 [ 1938.627117][T24744] saitek 0003:06A3:0CD7.0023: hiddev0,hidraw0: USB HID v0.96 Device [HID 06a3:0cd7] on usb-dummy_hcd.3-1/input0 [ 1938.686379][T24751] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1938.686420][T24751] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 1938.710764][T24751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.710797][T24751] usb 3-1: Product: syz [ 1938.710810][T24751] usb 3-1: Manufacturer: syz [ 1938.710823][T24751] usb 3-1: SerialNumber: syz [ 1939.167159][T24751] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1939.167219][T24751] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1939.186164][T24744] usb 7-1: new high-speed USB device number 82 using dummy_hcd ** replaying previous printk message ** [ 1939.186164][T24744] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1939.209303][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 1939.232557][ C1] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 1939.240987][ C1] CPU: 1 UID: 0 PID: 6542 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1939.252007][ C1] Tainted: [L]=SOFTLOCKUP [ 1939.256349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1939.266440][ C1] RIP: 0010:saitek_event+0x51/0x2b0 [ 1939.271812][ C1] Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fd 67 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 e0 67 1b f9 49 8b 06 48 89 04 24 [ 1939.291514][ C1] RSP: 0018:ffffc90000a18830 EFLAGS: 00010006 [ 1939.297660][ C1] RAX: 0000000000000003 RBX: ffff8880a2223488 RCX: 0000000000040000 [ 1939.305627][ C1] RDX: ffffc90002071000 RSI: 0000000000000020 RDI: 0000000000000021 [ 1939.313586][ C1] RBP: 000000000000003a R08: 0000000000000000 R09: 0000000000000000 [ 1939.321543][ C1] R10: ffff8880a22234a8 R11: ffffffff891d8880 R12: ffffffff910c0d28 [ 1939.329517][ C1] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff888044870000 [ 1939.337582][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0063) knlGS:0000000057602480 [ 1939.346513][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1939.353090][ C1] CR2: 000000005760e21c CR3: 0000000064eaa000 CR4: 00000000003526f0 [ 1939.361097][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1939.369064][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1939.377590][ C1] Call Trace: [ 1939.380879][ C1] [ 1939.383775][ C1] ? hid_process_event+0x18f/0x620 [ 1939.389012][ C1] hid_process_event+0x436/0x620 [ 1939.394563][ C1] ? hidraw_report_event+0x37e/0x3a0 [ 1939.399876][ C1] ? __pfx_saitek_event+0x10/0x10 [ 1939.404926][ C1] hid_report_raw_event+0xf6a/0x1900 [ 1939.410242][ C1] __hid_input_report+0x454/0x580 [ 1939.415377][ C1] ? __pfx_saitek_raw_event+0x10/0x10 [ 1939.420919][ C1] hid_ctrl+0x204/0x580 [ 1939.425173][ C1] ? usb_anchor_suspend_wakeups+0x3b/0x50 [ 1939.431120][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 1939.436514][ C1] dummy_timer+0xa91/0x4cc0 [ 1939.441198][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1939.446581][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1939.452453][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1939.457490][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1939.462850][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1939.468067][ C1] handle_softirqs+0x226/0x860 [ 1939.473036][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1939.478160][ C1] __irq_exit_rcu+0xcb/0x220 [ 1939.482767][ C1] irq_exit_rcu+0x9/0x30 [ 1939.487013][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1939.492737][ C1] [ 1939.495675][ C1] [ 1939.498665][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1939.504663][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 1939.509784][ C1] Code: 01 00 00 00 e9 5c e5 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 [ 1939.529390][ C1] RSP: 0018:ffffc9000400f8d8 EFLAGS: 00000246 [ 1939.535484][ C1] RAX: ffffc9000400fa80 RBX: ffffc9000400fa38 RCX: 1ffff92000801f01 [ 1939.543449][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000400fa38 [ 1939.551419][ C1] RBP: 1ffffffff2422d82 R08: ffffc9000400fa80 R09: 0000000000000000 [ 1939.559386][ C1] R10: ffffc9000400fa38 R11: fffff52000801f49 R12: dffffc0000000000 [ 1939.567351][ C1] R13: ffffffff92116c0c R14: ffffc9000400f9e8 R15: ffffc9000400fa30 [ 1939.575330][ C1] unwind_next_frame+0xd04/0x2550 [ 1939.580394][ C1] ? arch_stack_walk+0xe3/0x150 [ 1939.585280][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1939.590455][ C1] __unwind_start+0x514/0x660 [ 1939.595244][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1939.601414][ C1] arch_stack_walk+0xe3/0x150 [ 1939.606100][ C1] ? stack_trace_save+0xa9/0x100 [ 1939.611040][ C1] stack_trace_save+0xa9/0x100 [ 1939.615809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1939.621197][ C1] ? __lock_acquire+0x747/0x2de0 [ 1939.626180][ C1] kasan_save_track+0x3e/0x80 [ 1939.630906][ C1] ? user_path_at+0xd4/0x160 [ 1939.635513][ C1] kasan_save_free_info+0x40/0x50 [ 1939.640543][ C1] __kasan_slab_free+0x5c/0x80 [ 1939.645314][ C1] kmem_cache_free+0x182/0x650 [ 1939.650234][ C1] user_path_at+0xd4/0x160 [ 1939.654668][ C1] __ia32_sys_umount+0xf6/0x170 [ 1939.659549][ C1] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1939.665017][ C1] __do_fast_syscall_32+0x27a/0x6b0 [ 1939.670274][ C1] ? do_fast_syscall_32+0x33/0x70 [ 1939.675337][ C1] ? irqentry_exit+0x10f/0x920 [ 1939.680111][ C1] ? trace_irq_disable+0x3b/0x140 [ 1939.685144][ C1] do_fast_syscall_32+0x33/0x70 [ 1939.690005][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1939.696332][ C1] RIP: 0023:0xf740f0ec [ 1939.700412][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1939.720037][ C1] RSP: 002b:00000000f755ecd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 1939.728464][ C1] RAX: ffffffffffffffda RBX: 00000000f755ed80 RCX: 0000000000000009 [ 1939.736448][ C1] RDX: 00000000f73faff4 RSI: 00000000f7231e5d RDI: 00000000f755fe14 [ 1939.744425][ C1] RBP: 00000000f755ed80 R08: 0000000000000000 R09: 0000000000000000 [ 1939.752417][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1939.760493][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1939.768472][ C1] [ 1939.771509][ C1] Modules linked in: [ 1939.775409][ C1] ---[ end trace 0000000000000000 ]--- [ 1939.780875][ C1] RIP: 0010:saitek_event+0x51/0x2b0 [ 1939.780917][ C1] Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fd 67 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 e0 67 1b f9 49 8b 06 48 89 04 24 [ 1939.780935][ C1] RSP: 0018:ffffc90000a18830 EFLAGS: 00010006 [ 1939.780954][ C1] RAX: 0000000000000003 RBX: ffff8880a2223488 RCX: 0000000000040000 [ 1939.780968][ C1] RDX: ffffc90002071000 RSI: 0000000000000020 RDI: 0000000000000021 [ 1939.780980][ C1] RBP: 000000000000003a R08: 0000000000000000 R09: 0000000000000000 [ 1939.780991][ C1] R10: ffff8880a22234a8 R11: ffffffff891d8880 R12: ffffffff910c0d28 [ 1939.781005][ C1] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff888044870000 [ 1939.781018][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0063) knlGS:0000000057602480 [ 1939.781033][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1939.781046][ C1] CR2: 000000005760e21c CR3: 0000000064eaa000 CR4: 00000000003526f0 [ 1939.781061][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1939.781073][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1939.781109][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1939.898915][ C1] Kernel Offset: disabled [ 1939.903251][ C1] Rebooting in 86400 seconds..