last executing test programs: 7.504401442s ago: executing program 1 (id=797): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="0030ea0000000373887d87815d6d36"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00df25070000000000", @ANYRES32=0x0, @ANYBLOB="31020500001002000800230002000000080004000100000008000d00e62200000a0001000180c2000002"], 0x4c}, 0x1, 0x0, 0x0, 0x20044850}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 6.76590407s ago: executing program 1 (id=801): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) eventfd2(0x42000006, 0x801) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = memfd_create(&(0x7f0000000440)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nTO\x1d\xaf', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r5) sendfile(r6, r6, 0x0, 0xa13a) sendfile(r5, r6, 0x0, 0x24002deb) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) r7 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r7, 0x7, 0x2, r4}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x8001, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.570279166s ago: executing program 2 (id=822): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="0030ea0000000373887d87815d6d36"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00df250700"/15, @ANYRES32=0x0, @ANYBLOB="31020500001002000800230002000000080004000100000008000d00e62200000a0001000180c2000002"], 0x4c}, 0x1, 0x0, 0x0, 0x20044850}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 4.099147971s ago: executing program 4 (id=818): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3.897727024s ago: executing program 2 (id=820): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0x6, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x27fd, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, 0x0, 0x0, 0x94) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 3.875826194s ago: executing program 0 (id=821): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) close(0x3) 3.854298424s ago: executing program 4 (id=823): r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_virt_wifi\x00', {'ip_vti0\x00'}, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close_range(r3, r7, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = getpid() syz_pidfd_open(r10, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r11) getcwd(&(0x7f0000000140)=""/4096, 0x1000) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_p'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r12, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.286368101s ago: executing program 0 (id=824): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000000076a4155c2c86e09100"/31], &(0x7f0000000080)=0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.156445742s ago: executing program 1 (id=825): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x48, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x20, 0x9, 0x0, 0xfffffe0000000001, 0x800fa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0x0, [0x5, 0x4, 0x4, 0xae15, 0x7, 0x2, 0x9, 0xf, 0xf000, 0x7ff, 0x4, 0x5, 0x5, 0x9, 0x100, 0x3, 0x1, 0x4, 0x9, 0x6, 0x8, 0x0, 0x3, 0x4a, 0x1, 0x1, 0x5, 0x7f, 0x7, 0x9dce, 0x31, 0x2, 0x2, 0x7ff, 0x9, 0x427, 0x3, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x3, 0x4, 0xefdc, 0x8000, 0x569e, 0x6], 0x8}}) poll(0x0, 0x0, 0x8) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto(r0, &(0x7f0000000480), 0x0, 0x20060854, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x1, 0x8001, 0x1, 0x3}}, 0x80) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x100, 0x40}, 0x0, 0x0, 0x3ff, 0x2, 0x1, 0x2000008000, 0x44, 0x7d04}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x3}, 0x0, 0x0, 0x6, 0x6, 0x3ff, 0x6, 0x44, 0x7}}], 0xb0, 0x8004}, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xb}, 0x94) 2.47688608s ago: executing program 4 (id=826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/94, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) r3 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) 2.360246262s ago: executing program 0 (id=827): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b0", 0xcc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1", 0x4a}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b96", 0x6d}], 0x2}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) 2.312965703s ago: executing program 3 (id=828): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.263406213s ago: executing program 1 (id=829): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r1, &(0x7f0000006180)='./mnt\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.083282275s ago: executing program 1 (id=830): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 2.066418215s ago: executing program 2 (id=831): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="0030ea0000000373887d87815d6d36"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00df250700"/15, @ANYRES32=0x0, @ANYBLOB="31020500001002000800230002000000080004000100000008000d00e62200000a0001000180c2000002"], 0x4c}, 0x1, 0x0, 0x0, 0x20044850}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.987849816s ago: executing program 3 (id=832): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3ff, 0xa3b, 0x7, 'snmp\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c", 0x3f}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000840)="6ced934268ab56916503fd6ed70cd033c7a23c15337cb847c22a08fde5201ca239788dfa0b56c654f8a069092dedb74e816e7d6a0ffa0025055f465b90bfa7da7da96869e31ea5e171325eec3923750a5272e6edd9e8f90a584cae714a382260973d39cd74d03538e0486a4f4b07930e097538adff531a528d54e90d7bef220b363a375dd28188c6b82abfdf53ca3b3f2f803239342cdc9b2c7020bb2d6792850bdf238fa32c6a0aeffdafff50761c904fb3", 0xb2}, {&(0x7f0000000640)="48a96f9d9b0a823a6803de349db4596ef07488c9c5fa1d57a2c7a092f5c65a2db9487a474ec7db2e5ffc3515cdc9c1f33a031788a536a64bb6eeb8a181ce3137ed3b2b8579de995f291162968236cfa9d036321f587bae", 0x57}], 0x3}}, {{&(0x7f0000000700)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.355111073s ago: executing program 4 (id=833): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000080) pipe(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x6, 0x2, 0x100, 0x6, 0x180107, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.354020234s ago: executing program 0 (id=843): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3ff, 0xa3b, 0x7, 'snmp\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c", 0x3f}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000840)="6ced934268ab56916503fd6ed70cd033c7a23c15337cb847c22a08fde5201ca239788dfa0b56c654f8a069092dedb74e816e7d6a0ffa0025055f465b90bfa7da7da96869e31ea5e171325eec3923750a5272e6edd9e8f90a584cae714a382260973d39cd74d03538e0486a4f4b07930e097538adff531a528d54e90d7bef220b363a375dd28188c6b82abfdf53ca3b3f2f803239342cdc9b2c7020bb2d6792850bdf238fa32c6a0aeffdafff50761c904fb3", 0xb2}, {&(0x7f0000000640)="48a96f9d9b0a823a6803de349db4596ef07488c9c5fa1d57a2c7a092f5c65a2db9487a474ec7db2e5ffc3515cdc9c1f33a031788a536a64bb6eeb8a181ce3137ed3b2b8579de995f291162968236cfa9d036321f587bae", 0x57}], 0x3}}, {{&(0x7f0000000700)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.353717734s ago: executing program 1 (id=834): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x4, &(0x7f00000001c0)=[{0x3ff, 0x70, 0x6, 0x34c}, {0x401, 0x5, 0x0, 0x2}, {0x7f, 0xf, 0x4, 0x4}, {0x681e, 0x2, 0xff, 0x4}]}) r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1.353625454s ago: executing program 3 (id=835): close(0x3) 1.290314564s ago: executing program 2 (id=836): r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_virt_wifi\x00', {'ip_vti0\x00'}, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close_range(r3, r7, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = getpid() syz_pidfd_open(r10, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r11) getcwd(&(0x7f0000000140)=""/4096, 0x1000) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_p'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r12, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.290014544s ago: executing program 3 (id=837): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000000076a4155c2c86e09100"/31], &(0x7f0000000080)=0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.241560065s ago: executing program 0 (id=838): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000000000002) 893.537669ms ago: executing program 4 (id=839): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x48, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x20, 0x9, 0x0, 0xfffffe0000000001, 0x800fa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0x0, [0x5, 0x4, 0x4, 0xae15, 0x7, 0x2, 0x9, 0xf, 0xf000, 0x7ff, 0x4, 0x5, 0x5, 0x9, 0x100, 0x3, 0x1, 0x4, 0x9, 0x6, 0x8, 0x0, 0x3, 0x4a, 0x1, 0x1, 0x5, 0x7f, 0x7, 0x9dce, 0x31, 0x2, 0x2, 0x7ff, 0x9, 0x427, 0x3, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x3, 0x4, 0xefdc, 0x8000, 0x569e, 0x6], 0x8}}) poll(0x0, 0x0, 0x8) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto(r0, &(0x7f0000000480), 0x0, 0x20060854, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x1, 0x8001, 0x1, 0x3}}, 0x80) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x100, 0x40}, 0x0, 0x0, 0x3ff, 0x2, 0x1, 0x2000008000, 0x44, 0x7d04}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x3}, 0x0, 0x0, 0x6, 0x6, 0x3ff, 0x6, 0x44, 0x7}}], 0xb0, 0x8004}, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xb}, 0x94) 389.015995ms ago: executing program 3 (id=840): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r1, &(0x7f0000006180)='./mnt\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 236.890427ms ago: executing program 3 (id=841): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0x6, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x27fd, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, 0x0, 0x0, 0x94) r6 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 184.633997ms ago: executing program 2 (id=842): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3ff, 0xa3b, 0x7, 'snmp\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c", 0x3f}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000840)="6ced934268ab56916503fd6ed70cd033c7a23c15337cb847c22a08fde5201ca239788dfa0b56c654f8a069092dedb74e816e7d6a0ffa0025055f465b90bfa7da7da96869e31ea5e171325eec3923750a5272e6edd9e8f90a584cae714a382260973d39cd74d03538e0486a4f4b07930e097538adff531a528d54e90d7bef220b363a375dd28188c6b82abfdf53ca3b3f2f803239342cdc9b2c7020bb2d6792850bdf238fa32c6a0aeffdafff50761c904fb3d54efcac711239a23fc0f55ed49c4ab7c2acc6a06f41a145898063e81ec13e696481f9811246eb9560a3429843fdc72ff951bf2c", 0xe6}, {&(0x7f0000000640)="48a96f9d9b0a823a6803de349db4596ef07488c9c5fa1d57a2c7a092f5c65a2db9487a474ec7db2e5ffc3515cdc9c1f33a031788a536a64bb6eeb8a181ce3137ed3b2b8579de995f291162968236cfa9d036321f587bae468a5a1c98", 0x5c}], 0x3}}, {{&(0x7f0000000700)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 114.227548ms ago: executing program 2 (id=844): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/94, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) r3 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) 60.831499ms ago: executing program 0 (id=845): syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffff7, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) clock_gettime(0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x38, 0x107, 0x70bd2c, 0x25dfdbfe, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24008811}, 0x8010) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0xea3b}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000568000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x1e, 0x4, 0x3) socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 4 (id=846): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) kernel console output (not intermixed with test programs): Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 136.411077][ T4233] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 136.541201][ T4233] usb 2-1: device descriptor read/8, error -71 [ 136.660997][ T4234] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 136.669063][ T4233] usb usb2-port1: unable to enumerate USB device [ 136.810954][ T4238] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.200866][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 137.402166][ T4234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.441974][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.777234][ T26] audit: type=1800 audit(1778009348.055:3): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.229" name="/" dev="fuse" ino=4 res=0 errno=0 [ 137.881291][ T4238] usb 1-1: Using ep0 maxpacket: 32 [ 137.991186][ T4234] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.001056][ T4238] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 138.019958][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.030159][ T4238] usb 1-1: config 0 has no interface number 1 [ 138.040256][ T4234] usb 4-1: Product: syz [ 138.076695][ T4234] usb 4-1: Manufacturer: syz [ 138.086952][ T4234] usb 4-1: SerialNumber: syz [ 138.191018][ T4238] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 138.208432][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.235441][ T4238] usb 1-1: Product: syz [ 138.245576][ T4238] usb 1-1: Manufacturer: syz [ 138.260906][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 138.266124][ T4238] usb 1-1: SerialNumber: syz [ 138.299946][ T4238] usb 1-1: config 0 descriptor?? [ 138.413952][ T4234] usb 4-1: 0:2 : does not exist [ 138.480623][ T4234] usb 4-1: USB disconnect, device number 15 [ 138.762151][ T4238] snd-usb-6fire 1-1:0.111: unknown device firmware state received from device: [ 138.765140][ T4545] udevd[4545]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.812565][ T4238] 31 db 99 aa dd 09 f1 37 [ 138.851895][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.852821][ T4238] snd-usb-6fire: probe of 1-1:0.111 failed with error -5 [ 138.868806][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.915890][ T23] usb 5-1: Product: syz [ 138.941136][ T23] usb 5-1: Manufacturer: syz [ 138.970098][ T23] usb 5-1: SerialNumber: syz [ 139.320106][ T5163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.228'. [ 139.363648][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 139.460915][ T4234] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.460992][ T4277] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 139.501180][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.680984][ T4234] usb 4-1: device descriptor read/64, error -71 [ 139.831039][ T4277] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.841486][ T4277] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.854649][ T4277] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.865215][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.970936][ T4234] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.141019][ T4277] usb 2-1: usb_control_msg returned -32 [ 140.147210][ T4277] usbtmc 2-1:16.0: can't read capabilities [ 140.175389][ T4234] usb 4-1: device descriptor read/64, error -71 [ 140.312479][ T4234] usb usb4-port1: attempt power cycle [ 140.409326][ T4233] usb 1-1: USB disconnect, device number 9 [ 140.447077][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 140.906949][ T1107] usb 2-1: USB disconnect, device number 16 [ 140.913463][ T4234] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 141.032140][ T4234] usb 4-1: device descriptor read/8, error -71 [ 141.500973][ T4234] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.641314][ T4234] usb 4-1: device descriptor read/8, error -71 [ 141.788862][ T4234] usb usb4-port1: unable to enumerate USB device [ 141.919827][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 142.010934][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.060966][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -71 [ 142.091425][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 142.161003][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 142.210286][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 142.264758][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 142.281148][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 142.320955][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 142.361792][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 142.384144][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.399405][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.411007][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 142.427490][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.469538][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 142.551032][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.567440][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.577336][ T7] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.596589][ T7] usb 1-1: Manufacturer: syz [ 142.642515][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 142.663070][ T7] usb 1-1: config 0 descriptor?? [ 142.682904][ T23] usb 5-1: USB disconnect, device number 13 [ 143.599291][ T7] usb 1-1: USB disconnect, device number 10 [ 143.661824][ T5213] device syzkaller0 entered promiscuous mode [ 144.050902][ T4277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 144.301430][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 144.421408][ T4277] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 144.443858][ T4277] usb 3-1: config 0 has no interface number 1 [ 144.621222][ T4277] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 144.636224][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.654497][ T4277] usb 3-1: Product: syz [ 144.659614][ T4277] usb 3-1: Manufacturer: syz [ 144.664720][ T4277] usb 3-1: SerialNumber: syz [ 144.691580][ T4277] usb 3-1: config 0 descriptor?? [ 144.860858][ T4178] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.949790][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.050929][ T4178] usb 1-1: device descriptor read/64, error -71 [ 145.151116][ T4277] snd-usb-6fire 3-1:0.111: unknown device firmware state received from device: [ 145.163677][ T4277] 31 db 99 aa dd 09 f1 37 [ 145.168265][ T4277] snd-usb-6fire: probe of 3-1:0.111 failed with error -5 [ 145.300970][ T4270] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 145.330947][ T4178] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.361384][ T5216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.257'. [ 145.399729][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 145.433209][ T4277] usb 3-1: USB disconnect, device number 14 [ 145.531001][ T4178] usb 1-1: device descriptor read/64, error -71 [ 145.661070][ T4178] usb usb1-port1: attempt power cycle [ 145.721137][ T4270] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.740087][ T4270] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 145.761391][ T4270] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.783596][ T4270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.810967][ T4270] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 145.820176][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.866937][ T4270] usb 5-1: config 0 descriptor?? [ 145.921164][ T5242] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 146.599146][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.850326][ T5253] device syzkaller0 entered promiscuous mode [ 146.881026][ T4270] usbhid 5-1:0.0: can't add hid device: -71 [ 146.887614][ T4270] usbhid: probe of 5-1:0.0 failed with error -71 [ 146.900952][ T4178] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.945106][ T4270] usb 5-1: USB disconnect, device number 14 [ 147.001099][ T4178] usb 1-1: device descriptor read/8, error -71 [ 147.150965][ T1107] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.270957][ T4178] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.300972][ T4277] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 147.361094][ T4178] usb 1-1: device descriptor read/8, error -71 [ 147.410953][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 147.481119][ T4178] usb usb1-port1: unable to enumerate USB device [ 147.540898][ T4277] usb 3-1: Using ep0 maxpacket: 16 [ 147.661087][ T4277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.672458][ T4277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.711122][ T1107] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 147.723637][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.732300][ T1107] usb 2-1: Product: syz [ 147.737182][ T1107] usb 2-1: Manufacturer: syz [ 147.742696][ T1107] usb 2-1: SerialNumber: syz [ 147.759782][ T1107] usb 2-1: config 0 descriptor?? [ 147.813556][ T1107] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 147.826644][ T1107] dvb-usb: bulk message failed: -22 (4/0) [ 147.833426][ T1107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 147.841104][ T4277] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.849192][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 147.858848][ T1107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 147.889956][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.893565][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.898810][ T4277] usb 3-1: Product: syz [ 147.912760][ T4277] usb 3-1: Manufacturer: syz [ 147.917518][ T4277] usb 3-1: SerialNumber: syz [ 147.936864][ T1107] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 147.946904][ T1107] usb 2-1: media controller created [ 147.968239][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.005608][ T1107] usb 2-1: selecting invalid altsetting 3 [ 148.014856][ T5255] dvb-usb: bulk message failed: -22 (7/0) [ 148.021036][ T1107] ttusb2: set interface to alts=3 failed [ 148.026799][ T5255] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 148.040369][ T5255] ttusb2: i2c transfer failed. [ 148.094135][ T1107] DVB: Unable to find symbol tda10086_attach() [ 148.101310][ T1107] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 148.155474][ T1107] dvb-usb: bulk message failed: -22 (4/0) [ 148.161431][ T1107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.173759][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 148.179659][ T1107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.193274][ T1107] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 148.226435][ T1107] usb 2-1: USB disconnect, device number 17 [ 148.251200][ T4277] usb 3-1: 0:2 : does not exist [ 148.284287][ T1107] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 148.327458][ T4277] usb 3-1: USB disconnect, device number 15 [ 148.599874][ T4545] udevd[4545]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.191123][ T4233] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.230892][ T4277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 149.471277][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 149.480972][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 149.601234][ T4277] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 149.601390][ T4233] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 149.609683][ T4277] usb 4-1: config 0 has no interface number 0 [ 149.609725][ T4277] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.672244][ T4233] usb 3-1: config 0 has no interface number 1 [ 149.802327][ T4277] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 149.825218][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.870965][ T4277] usb 4-1: Product: syz [ 149.883444][ T4277] usb 4-1: Manufacturer: syz [ 149.902323][ T4277] usb 4-1: SerialNumber: syz [ 149.911425][ T4233] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 149.932312][ T4277] usb 4-1: config 0 descriptor?? [ 149.950210][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.971338][ T4233] usb 3-1: Product: syz [ 149.974573][ T4277] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 149.987875][ T4233] usb 3-1: Manufacturer: syz [ 149.992952][ T4233] usb 3-1: SerialNumber: syz [ 150.015582][ T4277] em28xx 4-1:0.132: Video interface 132 found: [ 150.041638][ T4233] usb 3-1: config 0 descriptor?? [ 150.411041][ T4277] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 150.422920][ T5297] device syzkaller0 entered promiscuous mode [ 150.529275][ T4233] snd-usb-6fire 3-1:0.111: unknown device firmware state received from device: [ 150.572567][ T4233] 31 db 99 aa dd 09 f1 37 [ 150.597705][ T4233] snd-usb-6fire: probe of 3-1:0.111 failed with error -5 [ 150.733841][ T5285] netlink: 44 bytes leftover after parsing attributes in process `syz.2.279'. [ 150.784465][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 150.830068][ T23] usb 3-1: USB disconnect, device number 16 [ 151.100952][ T4233] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 151.101051][ T4277] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 151.121517][ T4178] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.160171][ T4277] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 151.168069][ T4277] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 151.270845][ T4277] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 151.282348][ T4277] em28xx 4-1:0.132: analog set to bulk mode. [ 151.298000][ T4232] em28xx 4-1:0.132: Registering V4L2 extension [ 151.331174][ T4277] usb 4-1: USB disconnect, device number 20 [ 151.347149][ T4233] usb 5-1: device descriptor read/64, error -71 [ 151.360905][ T4178] usb 2-1: Using ep0 maxpacket: 32 [ 151.366577][ T4277] em28xx 4-1:0.132: Disconnecting em28xx [ 151.481326][ T4178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.660911][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.711145][ T4178] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 151.730032][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.798284][ T4232] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 151.812275][ T4178] usb 2-1: Product: syz [ 151.816503][ T4178] usb 2-1: Manufacturer: syz [ 151.830910][ T4232] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 151.842438][ T4178] usb 2-1: SerialNumber: syz [ 151.848807][ T4232] em28xx 4-1:0.132: No AC97 audio processor [ 151.863398][ T4178] usb 2-1: config 0 descriptor?? [ 151.876055][ T4232] usb 4-1: Decoder not found [ 151.910958][ T4233] usb 5-1: device descriptor read/64, error -71 [ 151.916979][ T4178] usb 2-1: bad CDC descriptors [ 151.922660][ T4232] em28xx 4-1:0.132: failed to create media graph [ 151.938168][ T4178] usb 2-1: unsupported MDLM descriptors [ 151.944867][ T4232] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 151.979538][ T4232] em28xx 4-1:0.132: Remote control support is not available for this card. [ 152.000574][ T4277] em28xx 4-1:0.132: Closing input extension [ 152.031346][ T4233] usb usb5-port1: attempt power cycle [ 152.037006][ T4277] em28xx 4-1:0.132: Freeing device [ 152.143342][ T23] usb 2-1: USB disconnect, device number 18 [ 152.360893][ T4232] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 152.410874][ T4277] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 152.470861][ T4233] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.561239][ T4233] usb 5-1: device descriptor read/8, error -71 [ 152.630995][ T4234] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 152.650985][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 152.721173][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 152.732315][ T4232] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.821161][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.831020][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.839034][ T4232] usb 1-1: SerialNumber: syz [ 152.851039][ T4233] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.861625][ T5318] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 152.941079][ T4277] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 152.950647][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.961307][ T4233] usb 5-1: device descriptor read/8, error -71 [ 152.964411][ T4277] usb 4-1: Product: syz [ 152.972116][ T4277] usb 4-1: Manufacturer: syz [ 152.976977][ T4277] usb 4-1: SerialNumber: syz [ 152.985105][ T4277] usb 4-1: config 0 descriptor?? [ 153.022882][ T4277] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 153.030940][ T4277] dvb-usb: bulk message failed: -22 (4/0) [ 153.036975][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.047339][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 153.053154][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.061178][ T4234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.070473][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.075660][ T4234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.089022][ T5318] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 153.100448][ T4233] usb usb5-port1: unable to enumerate USB device [ 153.110443][ T4234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.120074][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.125364][ T4277] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 153.136979][ T4277] usb 4-1: media controller created [ 153.152057][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.178257][ T4277] usb 4-1: selecting invalid altsetting 3 [ 153.184619][ T4277] ttusb2: set interface to alts=3 failed [ 153.210068][ T4277] DVB: Unable to find symbol tda10086_attach() [ 153.217317][ T4277] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 153.229231][ T5315] dvb-usb: bulk message failed: -22 (7/0) [ 153.237925][ T5315] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 153.250027][ T5315] ttusb2: i2c transfer failed. [ 153.261121][ T4277] dvb-usb: bulk message failed: -22 (4/0) [ 153.267290][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.278429][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 153.284389][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 153.294827][ T4277] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 153.306579][ T4277] usb 4-1: USB disconnect, device number 21 [ 153.327883][ T4277] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 153.421032][ T4234] usb 3-1: usb_control_msg returned -32 [ 153.426907][ T4234] usbtmc 3-1:16.0: can't read capabilities [ 153.586180][ T4232] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 153.919939][ T5339] device syzkaller0 entered promiscuous mode [ 154.039461][ T4234] usb 3-1: USB disconnect, device number 17 [ 154.161148][ T4232] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.551263][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.582161][ T4232] usb 2-1: config 0 has no interfaces? [ 154.742849][ T7] usb 1-1: USB disconnect, device number 15 [ 154.766663][ T7] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 154.791084][ T4232] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 154.829529][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.844351][ T4205] Bluetooth: hci0: Unknown advertising packet type: 0x33 [ 154.862921][ T4232] usb 2-1: Product: syz [ 154.919055][ T4232] usb 2-1: Manufacturer: syz [ 154.942399][ T4232] usb 2-1: SerialNumber: syz [ 154.987393][ T4232] usb 2-1: config 0 descriptor?? [ 155.279852][ T4178] usb 2-1: USB disconnect, device number 19 [ 156.802193][ T5410] device syzkaller0 entered promiscuous mode [ 157.241073][ T4233] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 157.278517][ T5426] loop2: detected capacity change from 0 to 7 [ 157.335790][ T5426] Dev loop2: unable to read RDB block 7 [ 157.380388][ T5426] loop2: unable to read partition table [ 157.441004][ T5426] loop2: partition table beyond EOD, truncated [ 157.454784][ T5426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.503273][ T3561] Dev loop2: unable to read RDB block 7 [ 157.505368][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 157.519532][ T3561] loop2: unable to read partition table [ 157.534985][ T3561] loop2: partition table beyond EOD, truncated [ 157.631061][ T4233] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.659223][ T4233] usb 4-1: config 179 has no interface number 0 [ 157.688675][ T4233] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 157.739825][ T4233] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 157.792128][ T4233] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 157.846395][ T4233] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 157.901992][ T4233] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.975183][ T4233] usb 4-1: config 179 interface 65 has no altsetting 0 [ 158.009533][ T4233] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 158.067493][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.166205][ T4233] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 158.674199][ T4270] usb 4-1: USB disconnect, device number 22 [ 158.680895][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.726519][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 158.742908][ T4270] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 159.062926][ T5467] device syzkaller0 entered promiscuous mode [ 159.131220][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.149596][ T23] usb 1-1: config 0 has no interfaces? [ 159.311103][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 159.330847][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.339294][ T23] usb 1-1: Product: syz [ 159.349501][ T23] usb 1-1: Manufacturer: syz [ 159.354718][ T23] usb 1-1: SerialNumber: syz [ 159.380196][ T23] usb 1-1: config 0 descriptor?? [ 159.759709][ T4233] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 159.962904][ T23] usb 1-1: USB disconnect, device number 16 [ 160.222891][ T4233] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.400872][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.414138][ T4233] usb 3-1: config 0 descriptor?? [ 160.420944][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.452881][ T4233] cp210x 3-1:0.0: cp210x converter detected [ 160.546299][ T5493] program syz.4.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.680880][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 160.817729][ T7] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.835188][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.857255][ T7] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 160.872084][ T5475] udc-core: couldn't find an available UDC or it's busy [ 160.881096][ T5475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.890937][ T4233] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 160.896105][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.930394][ T7] usb 4-1: config 0 descriptor?? [ 160.946829][ T4233] usb 3-1: cp210x converter now attached to ttyUSB0 [ 161.143739][ T4233] usb 3-1: USB disconnect, device number 18 [ 161.150988][ T4234] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 161.167272][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.184953][ T4233] cp210x 3-1:0.0: device disconnected [ 161.410848][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 161.456450][ T7] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 161.531103][ T4234] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 161.580695][ T4234] usb 2-1: config 0 has no interface number 1 [ 161.741117][ T4234] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 161.763331][ T5514] device syzkaller0 entered promiscuous mode [ 161.769535][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.818140][ T4234] usb 2-1: Product: syz [ 161.845802][ T4234] usb 2-1: Manufacturer: syz [ 161.862405][ T4277] usb 4-1: USB disconnect, device number 23 [ 161.885837][ T4234] usb 2-1: SerialNumber: syz [ 161.906129][ T4234] usb 2-1: config 0 descriptor?? [ 162.391065][ T4234] snd-usb-6fire 2-1:0.111: unknown device firmware state received from device: [ 162.440333][ T4234] 31 db 99 aa dd 09 f1 37 [ 162.483341][ T4234] snd-usb-6fire: probe of 2-1:0.111 failed with error -5 [ 162.947189][ T5525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.326'. [ 163.620849][ T4277] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 164.661060][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 164.772240][ T23] usb 2-1: USB disconnect, device number 20 [ 164.826880][ T4277] usb 4-1: config 8 has an invalid interface number: 97 but max is 0 [ 164.860917][ T4277] usb 4-1: config 8 has no interface number 0 [ 164.867549][ T4277] usb 4-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 164.910296][ T4277] usb 4-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 164.946061][ T4277] usb 4-1: config 8 interface 97 has no altsetting 0 [ 165.161773][ T4277] usb 4-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 165.182458][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.218110][ T4277] usb 4-1: Product: syz [ 165.254953][ T4277] usb 4-1: Manufacturer: syz [ 165.279232][ T5554] device syzkaller0 entered promiscuous mode [ 165.289146][ T4277] usb 4-1: SerialNumber: syz [ 166.041429][ T4277] hub 4-1:8.97: bad descriptor, ignoring hub [ 166.057752][ T4277] hub: probe of 4-1:8.97 failed with error -5 [ 166.085810][ T4277] sierra 4-1:8.97: Sierra USB modem converter detected [ 166.148387][ T4277] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 166.170131][ T4277] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 166.223807][ T4277] usb 4-1: USB disconnect, device number 24 [ 167.168365][ T4277] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 167.198461][ T4277] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 167.208076][ T4277] sierra 4-1:8.97: device disconnected [ 167.281801][ T4232] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 167.440970][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.450996][ T23] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 167.606410][ T5594] device syzkaller0 entered promiscuous mode [ 167.711014][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.721382][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 167.860950][ T7] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 167.861740][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.869187][ T7] usb 5-1: config 0 has no interface number 1 [ 167.931247][ T4232] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 167.940391][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.950770][ T4232] usb 1-1: Product: syz [ 167.954446][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 167.955205][ T4232] usb 1-1: Manufacturer: syz [ 167.968189][ T4232] usb 1-1: SerialNumber: syz [ 167.981781][ T4232] usb 1-1: config 0 descriptor?? [ 168.051010][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 168.056556][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 220, changing to 4 [ 168.074998][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.098212][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.107371][ T7] usb 5-1: Product: syz [ 168.112654][ T7] usb 5-1: Manufacturer: syz [ 168.117305][ T7] usb 5-1: SerialNumber: syz [ 168.137030][ T7] usb 5-1: config 0 descriptor?? [ 168.248283][ T4232] usb 1-1: USB disconnect, device number 17 [ 168.301148][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 168.313812][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.322229][ T23] usb 2-1: Product: 䗖烎ڜ㌴伞榈챽èŸå®¶è±½ï‡»ë² ê±¥ëµ¸åœŒë–´à²‡áœ£î»ç™¼íŠµïŽ·ï„•ì°’酭낵惆䵤̓宷篣ꙿ漛ì‰îªá¼ˆí„„⦨鰡㬑츃ä˜ãžé¯‚톒뷅眯銡኷⅘倮ç¥îŠŒç€¨å‘¤î¼â‘䖂乺 [ 168.344954][ T23] usb 2-1: Manufacturer: ÑŽ [ 168.349507][ T23] usb 2-1: SerialNumber: 儔勡眹뾶ㅼ⻊현몮ç㯤ﭙç©éœ«î¬’屘ꫮ䔒祚ᮿۖã£åŒ˜è¬è’‚ゾ蒻镅朊샓뱅缇`玺暈욛䗧怉嚃꿸槑ä¬äŠ«è‡¸â€Šå–€ä¤¹ê”±ç«£ì­å‰¤èˆäŒŒéº—ⶬ㯦塄⾙๎⇱쩞ꔱ꠼áƒëŒ¾æ‰î¿¯à¡œá”‚욪륌쿶焛埠毖皚瓈缒⭈襎ꮊ㕼﹉罕äŸå¿«â–郤뇦ä‹ì½„ᩔ蹮í»à¿Šå‡¿Ô¯ã½§à¨†ç·ˆê¢·ÝšáŽä€„ê¼â² æ”¤é‹á¯“㴿柔滢觕ᇜ [ 168.611113][ T7] snd-usb-6fire 5-1:0.111: unknown device firmware state received from device: [ 168.620329][ T7] 31 db 99 aa dd 09 f1 37 [ 168.625065][ T7] snd-usb-6fire: probe of 5-1:0.111 failed with error -5 [ 168.749114][ T5580] udc-core: couldn't find an available UDC or it's busy [ 168.758318][ T5580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.925771][ T23] usb 2-1: USB disconnect, device number 21 [ 169.189145][ T5616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.347'. [ 169.199920][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 169.276903][ T5617] unsupported nla_type 36 [ 170.361722][ T7] usb 5-1: USB disconnect, device number 19 [ 170.382132][ T5625] tmpfs: Unknown parameter 'ÿ' [ 170.426154][ T5627] device syzkaller0 entered promiscuous mode [ 170.542289][ T5631] batman_adv: batadv0: Adding interface: dummy0 [ 170.562529][ T5631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.661041][ T5631] batman_adv: batadv0: Interface activated: dummy0 [ 170.691082][ T4277] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 170.700538][ T5634] batadv0: mtu less than device minimum [ 170.713779][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.726098][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.738097][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.749682][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.761847][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.773518][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.785556][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.797522][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.809606][ T5634] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.040839][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 171.161423][ T4277] usb 1-1: config 8 has an invalid interface number: 97 but max is 0 [ 171.186129][ T4277] usb 1-1: config 8 has no interface number 0 [ 171.209725][ T4277] usb 1-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 171.267119][ T4277] usb 1-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 171.304477][ T4277] usb 1-1: config 8 interface 97 has no altsetting 0 [ 171.490986][ T4277] usb 1-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 171.505263][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.525129][ T4277] usb 1-1: Product: syz [ 171.534642][ T4277] usb 1-1: Manufacturer: syz [ 171.543561][ T4277] usb 1-1: SerialNumber: syz [ 171.791110][ T4233] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 172.154499][ T4277] hub 1-1:8.97: bad descriptor, ignoring hub [ 172.161119][ T4233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.178649][ T4277] hub: probe of 1-1:8.97 failed with error -5 [ 172.204643][ T4277] sierra 1-1:8.97: Sierra USB modem converter detected [ 173.147170][ T4277] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 173.191056][ T4277] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 173.231065][ T4233] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 173.260224][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.287782][ T4233] usb 3-1: Product: syz [ 173.291579][ T4277] usb 1-1: USB disconnect, device number 18 [ 173.295300][ T4233] usb 3-1: Manufacturer: syz [ 173.308775][ T4233] usb 3-1: SerialNumber: syz [ 173.316377][ T4277] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 173.317560][ T4233] usb 3-1: config 0 descriptor?? [ 173.368514][ T4277] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 173.380398][ T4277] sierra 1-1:8.97: device disconnected [ 173.594415][ T4233] usb 3-1: USB disconnect, device number 19 [ 173.637227][ T5680] batman_adv: batadv0: Adding interface: dummy0 [ 173.643808][ T5680] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.670457][ T5680] batman_adv: batadv0: Interface activated: dummy0 [ 173.800970][ T4277] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.075262][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 174.191156][ T4277] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 174.207528][ T4277] usb 1-1: config 0 has no interface number 1 [ 174.373409][ T4277] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 174.386433][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.402402][ T4277] usb 1-1: Product: syz [ 174.410196][ T4277] usb 1-1: Manufacturer: syz [ 174.416174][ T4277] usb 1-1: SerialNumber: syz [ 174.430184][ T4277] usb 1-1: config 0 descriptor?? [ 175.660933][ T4277] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 175.672728][ T4277] snd-usb-6fire: probe of 1-1:0.111 failed with error -110 [ 175.810161][ T5702] device syzkaller0 entered promiscuous mode [ 176.047152][ T4233] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 176.311526][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 176.372764][ T5713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.375'. [ 176.385700][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 176.441834][ T4233] usb 5-1: config 8 has an invalid interface number: 97 but max is 0 [ 176.450684][ T4233] usb 5-1: config 8 has no interface number 0 [ 176.457216][ T4233] usb 5-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 176.468452][ T4233] usb 5-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 176.479519][ T4233] usb 5-1: config 8 interface 97 has no altsetting 0 [ 176.681320][ T4233] usb 5-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 176.721122][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.757392][ T4233] usb 5-1: Product: syz [ 176.772360][ T4233] usb 5-1: Manufacturer: syz [ 176.777211][ T4233] usb 5-1: SerialNumber: syz [ 176.866285][ T5722] batman_adv: batadv0: Adding interface: dummy0 [ 176.876037][ T5722] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.908425][ T5722] batman_adv: batadv0: Interface activated: dummy0 [ 176.924568][ T5723] net_ratelimit: 30 callbacks suppressed [ 176.924585][ T5723] batadv0: mtu less than device minimum [ 176.950883][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.963849][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.977009][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.990072][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.003061][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.015981][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.028801][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.041655][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.054582][ T5723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.321534][ T4233] hub 5-1:8.97: bad descriptor, ignoring hub [ 177.328480][ T4233] hub: probe of 5-1:8.97 failed with error -5 [ 177.337575][ T4233] sierra 5-1:8.97: Sierra USB modem converter detected [ 177.381752][ T4233] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 177.393654][ T4233] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 177.456597][ T4232] usb 1-1: USB disconnect, device number 19 [ 177.476508][ T4233] usb 5-1: USB disconnect, device number 20 [ 177.509526][ T4233] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 177.557132][ T4233] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 177.567738][ T4233] sierra 5-1:8.97: device disconnected [ 178.352667][ T5746] device syzkaller0 entered promiscuous mode [ 178.990968][ T4233] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 179.056681][ T5761] fuse: Unknown parameter '0xffffffffffffffff' [ 179.415422][ T4233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.427232][ T4233] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.444431][ T4233] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.460472][ T4233] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.621046][ T4233] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.635660][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.648987][ T4233] usb 3-1: Product: syz [ 179.656757][ T4233] usb 3-1: Manufacturer: syz [ 179.664514][ T4233] usb 3-1: SerialNumber: syz [ 179.682825][ T4233] usb 3-1: config 0 descriptor?? [ 179.860951][ T4232] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.941004][ T4233] usb 3-1: Can not set alternate setting to 1, error: -71 [ 179.954666][ T4233] synaptics_usb: probe of 3-1:0.0 failed with error -71 [ 179.981993][ T4233] usb 3-1: USB disconnect, device number 20 [ 180.007604][ T5768] batman_adv: batadv0: Adding interface: dummy0 [ 180.014521][ T4234] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 180.019076][ T5768] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.050424][ T5768] batman_adv: batadv0: Interface activated: dummy0 [ 180.260864][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 180.301821][ T4232] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.311368][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.321072][ T4232] usb 2-1: config 0 descriptor?? [ 180.381003][ T4234] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 180.382094][ T4232] cp210x 2-1:0.0: cp210x converter detected [ 180.390012][ T4234] usb 5-1: config 0 has no interface number 1 [ 180.561068][ T4234] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 180.570324][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.578729][ T4234] usb 5-1: Product: syz [ 180.583074][ T4234] usb 5-1: Manufacturer: syz [ 180.587770][ T4234] usb 5-1: SerialNumber: syz [ 180.595701][ T4234] usb 5-1: config 0 descriptor?? [ 181.622124][ T5764] udc-core: couldn't find an available UDC or it's busy [ 181.630938][ T4232] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 181.642807][ T5764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.730941][ T4234] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 181.740233][ T4232] usb 2-1: cp210x converter now attached to ttyUSB0 [ 181.748801][ T4234] snd-usb-6fire: probe of 5-1:0.111 failed with error -110 [ 181.966765][ T4232] usb 2-1: USB disconnect, device number 22 [ 181.988771][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.019879][ T4232] cp210x 2-1:0.0: device disconnected [ 182.208056][ T5791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.406'. [ 182.266078][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 183.364499][ T4234] usb 5-1: USB disconnect, device number 21 [ 184.031033][ T4234] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 184.800871][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 184.921047][ T4234] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 184.944867][ T4234] usb 5-1: config 0 has no interface number 0 [ 184.961908][ T4234] usb 5-1: config 0 interface 12 has no altsetting 0 [ 185.131193][ T4234] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 185.191929][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.248248][ T4234] usb 5-1: Product: syz [ 185.287393][ T4234] usb 5-1: Manufacturer: syz [ 185.318140][ T4234] usb 5-1: SerialNumber: syz [ 185.382162][ T4234] usb 5-1: config 0 descriptor?? [ 185.531022][ T4277] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 185.961085][ T4277] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 186.003934][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.032838][ T4277] usb 3-1: config 0 descriptor?? [ 187.413446][ T4234] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 187.428227][ T4234] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 187.447322][ T4234] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 187.458169][ T4234] f81534: probe of 5-1:0.12 failed with error -71 [ 187.478713][ T4234] usb 5-1: USB disconnect, device number 22 [ 187.891041][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 188.151025][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 188.281074][ T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 188.299753][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 188.311738][ T4277] usb 3-1: Cannot set autoneg [ 188.316657][ T4277] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 188.344381][ T4277] usb 3-1: USB disconnect, device number 21 [ 188.351658][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 188.366647][ T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 188.400394][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.570977][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 188.581321][ T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 188.590040][ T7] usb 2-1: Product: syz [ 188.595189][ T7] usb 2-1: Manufacturer: syz [ 188.613039][ T7] usb 2-1: SerialNumber: syz [ 188.632832][ T7] usb 2-1: config 0 descriptor?? [ 188.682513][ T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 188.685518][ T5882] trusted_key: encrypted_key: insufficient parameters specified [ 188.706188][ T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 188.888882][ T4238] usb 2-1: USB disconnect, device number 23 [ 188.901015][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 188.910424][ T4238] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 189.858532][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 189.953985][ T5897] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 191.051277][ T5908] IPv6: Can't replace route, no match found [ 191.071061][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 191.084942][ T5908] IPv6: Can't replace route, no match found [ 191.092176][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 191.281188][ T7] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 191.300857][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.314623][ T7] usb 5-1: Product: syz [ 191.322059][ T7] usb 5-1: Manufacturer: syz [ 191.326881][ T7] usb 5-1: SerialNumber: syz [ 191.337611][ T7] usb 5-1: config 0 descriptor?? [ 191.361185][ T5882] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.378088][ T5882] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.393571][ T5777] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.401733][ T7] usb 5-1: ucan: probing device on interface #0 [ 191.411819][ T7] usb 5-1: ucan: invalid EP count (1) [ 191.412751][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 191.417443][ T7] usb 5-1: ucan: probe failed; try to update the device firmware [ 191.448550][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 191.610974][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 191.690881][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 191.830961][ T5777] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 191.848495][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.868462][ T5777] usb 3-1: config 0 descriptor?? [ 191.890941][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 191.898268][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 191.915124][ T5777] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 191.924183][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 191.982093][ T7] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 191.992159][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.004430][ T7] usb 1-1: config 0 descriptor?? [ 193.432814][ T4178] usb 5-1: USB disconnect, device number 23 [ 193.461999][ T4232] usb 3-1: USB disconnect, device number 22 [ 193.911050][ T7] usb 1-1: Cannot set autoneg [ 193.915921][ T7] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 193.951047][ T7] usb 1-1: USB disconnect, device number 20 [ 194.450312][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456930][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.860868][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.110890][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 195.181058][ T4178] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 195.231088][ T7] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.239250][ T7] usb 1-1: config 0 has no interface number 0 [ 195.283506][ T7] usb 1-1: config 0 interface 12 has no altsetting 0 [ 196.261019][ T7] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 196.270527][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.310840][ T7] usb 1-1: Product: syz [ 196.325339][ T7] usb 1-1: Manufacturer: syz [ 196.330441][ T7] usb 1-1: SerialNumber: syz [ 196.372648][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 196.382570][ T7] usb 1-1: config 0 descriptor?? [ 196.401082][ T4178] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 196.410197][ T4238] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 196.433249][ T4178] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.621039][ T4178] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 196.630249][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.660823][ T4178] usb 5-1: Product: syz [ 196.665292][ T4178] usb 5-1: Manufacturer: syz [ 196.669937][ T4178] usb 5-1: SerialNumber: syz [ 196.681079][ T4238] usb 4-1: Using ep0 maxpacket: 16 [ 196.722167][ T4178] usb 5-1: config 0 descriptor?? [ 196.763119][ T4178] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 196.769457][ T4178] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 196.801185][ T4238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.981236][ T4238] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 196.990468][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.008311][ T23] usb 5-1: USB disconnect, device number 24 [ 197.028321][ T4238] usb 4-1: Product: syz [ 197.036330][ T4238] usb 4-1: Manufacturer: syz [ 197.044985][ T4238] usb 4-1: SerialNumber: syz [ 197.054833][ T4238] usb 4-1: config 0 descriptor?? [ 197.161274][ T4238] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 197.346269][ T4232] usb 4-1: USB disconnect, device number 25 [ 197.353169][ T4256] usb 4-1: Failed to submit usb control message: -71 [ 197.360654][ T4256] usb 4-1: unable to send the bmi data to the device: -71 [ 197.389283][ T4256] usb 4-1: unable to get target info from device [ 197.396443][ T4256] usb 4-1: could not get target info (-71) [ 197.407656][ T4256] usb 4-1: could not probe fw (-71) [ 197.711152][ T7] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 197.725850][ T7] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 197.733937][ T7] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 197.747025][ T7] f81534: probe of 1-1:0.12 failed with error -71 [ 197.760337][ T7] usb 1-1: USB disconnect, device number 21 [ 198.266829][ T6030] fuse: Bad value for 'user_id' [ 198.994058][ T6044] device syzkaller0 entered promiscuous mode [ 198.996441][ T4205] Bluetooth: hci0: Unknown advertising packet type: 0x2070 [ 199.001998][ T4205] Bluetooth: hci0: Unknown advertising packet type: 0xfb [ 199.401390][ T4234] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 199.690953][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 199.811025][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.840845][ T4232] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 200.011221][ T4234] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 200.027271][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.048523][ T4234] usb 2-1: Product: syz [ 200.064751][ T4234] usb 2-1: Manufacturer: syz [ 200.072739][ T4234] usb 2-1: SerialNumber: syz [ 200.090972][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 200.100251][ T4234] usb 2-1: config 0 descriptor?? [ 200.172757][ T4234] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 200.211052][ T4232] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 200.219568][ T4232] usb 1-1: config 0 has no interface number 1 [ 200.380206][ T4234] usb 2-1: USB disconnect, device number 24 [ 200.381078][ T4232] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 200.386747][ T3069] usb 2-1: Failed to submit usb control message: -71 [ 200.395451][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.395477][ T4232] usb 1-1: Product: syz [ 200.416302][ T4232] usb 1-1: Manufacturer: syz [ 200.421117][ T4232] usb 1-1: SerialNumber: syz [ 200.429852][ T3069] usb 2-1: unable to send the bmi data to the device: -71 [ 200.438122][ T4232] usb 1-1: config 0 descriptor?? [ 200.448643][ T3069] usb 2-1: unable to get target info from device [ 200.455241][ T3069] usb 2-1: could not get target info (-71) [ 200.462605][ T3069] usb 2-1: could not probe fw (-71) [ 200.902097][ T4232] snd-usb-6fire 1-1:0.111: unknown device firmware state received from device: [ 200.918203][ T4232] 31 db 99 aa dd 09 f1 37 [ 200.928355][ T4232] snd-usb-6fire: probe of 1-1:0.111 failed with error -5 [ 201.021199][ T7] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 201.273025][ T26] audit: type=1326 audit(1778009411.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.4.508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25bbbcdd9 code=0x0 [ 201.297132][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 201.421131][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 201.436105][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 201.463084][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.501'. [ 201.480376][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 201.508916][ T7] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 201.547417][ T7] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 201.564743][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.741070][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 201.750985][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 201.759659][ T7] usb 3-1: Product: syz [ 201.764164][ T7] usb 3-1: Manufacturer: syz [ 201.768780][ T7] usb 3-1: SerialNumber: syz [ 201.776165][ T7] usb 3-1: config 0 descriptor?? [ 201.822323][ T7] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 201.838873][ T7] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 202.063602][ T7] usb 3-1: USB disconnect, device number 23 [ 202.083406][ T7] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 202.229819][ T6107] fuse: Unknown parameter '0xffffffffffffffff' [ 202.595874][ T2284] usb 1-1: USB disconnect, device number 22 [ 202.602178][ T4234] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 202.991074][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 203.010115][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.131126][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.156317][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.195252][ T4234] usb 5-1: SerialNumber: syz [ 203.222067][ T6111] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.252344][ T2284] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 203.457093][ T6111] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.521147][ T2284] usb 3-1: Using ep0 maxpacket: 32 [ 203.652773][ T2284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.666708][ T2284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.677587][ T2284] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.687874][ T2284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.699695][ T2284] usb 3-1: config 0 descriptor?? [ 203.753249][ T2284] hub 3-1:0.0: USB hub found [ 203.820988][ T7] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 203.951086][ T4234] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 203.981031][ T2284] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 204.060865][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 204.160992][ T4234] usb 5-1: USB disconnect, device number 25 [ 204.182086][ T7] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 204.351107][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.360670][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.369816][ T7] usb 1-1: Product: syz [ 204.374814][ T7] usb 1-1: Manufacturer: syz [ 204.384905][ T7] usb 1-1: SerialNumber: syz [ 204.405832][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 204.415777][ T2284] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 204.431279][ T2284] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 204.891039][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 204.902582][ T7] r8152-cfgselector 1-1: bad CDC descriptors [ 204.949763][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 204.981138][ T7] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 205.123507][ T6121] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 205.448090][ T6121] usb 3-1: device firmware changed [ 205.460181][ T4277] usb 3-1: USB disconnect, device number 24 [ 205.660828][ T4277] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 205.870418][ T6153] device syzkaller0 entered promiscuous mode [ 205.900895][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 206.041080][ T4277] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 206.049140][ T4277] usb 3-1: can't read configurations, error -71 [ 206.513939][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 206.890879][ T4232] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 207.150942][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 207.200846][ T4234] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 207.431161][ T4232] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 207.447625][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.459555][ T4232] usb 5-1: Product: syz [ 207.466947][ T4232] usb 5-1: Manufacturer: syz [ 207.474031][ T4232] usb 5-1: SerialNumber: syz [ 207.480662][ T4232] usb 5-1: config 0 descriptor?? [ 207.523857][ T4232] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 207.611338][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.622994][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.633845][ T4234] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 207.643791][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.655879][ T4234] usb 2-1: config 0 descriptor?? [ 207.731175][ T5777] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 207.861048][ T4277] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 207.990951][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 208.133044][ T4234] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 208.140531][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.153932][ T4234] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 208.167095][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.181312][ T5777] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.191121][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.207272][ T5777] usb 4-1: config 0 descriptor?? [ 208.221234][ T4277] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 208.251732][ T4277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.272279][ T5777] hub 4-1:0.0: USB hub found [ 208.284951][ T4277] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.304729][ T4277] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 208.314687][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.328937][ T4277] usb 1-1: config 0 descriptor?? [ 208.371913][ T4277] usb-storage 1-1:0.0: USB Mass Storage device detected [ 208.393746][ T4277] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 208.411301][ T4234] cp2112 0003:10C4:EA90.0007: error requesting version [ 208.423921][ T4234] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 208.434952][ T4234] usb 2-1: USB disconnect, device number 25 [ 208.482083][ T5777] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 208.508887][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.575097][ T4277] usb 1-1: USB disconnect, device number 24 [ 208.672362][ T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 208.913211][ T5777] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 208.925826][ T5777] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 208.951757][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 209.116992][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 209.312763][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.321015][ T4277] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 209.322435][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.338813][ T23] usb 3-1: Product: syz [ 209.343146][ T23] usb 3-1: Manufacturer: syz [ 209.347856][ T23] usb 3-1: SerialNumber: syz [ 209.355007][ T23] usb 3-1: config 0 descriptor?? [ 209.561324][ T6184] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 209.736982][ T4277] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 209.746089][ T4277] usb 2-1: config 201 has no interface number 0 [ 209.753374][ T4277] usb 2-1: config 201 interface 249 altsetting 4 has an invalid endpoint with address 0xF1, skipping [ 209.764937][ T4277] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 209.776798][ T4277] usb 2-1: config 201 interface 249 has no altsetting 0 [ 209.841182][ T6184] usb 4-1: device firmware changed [ 209.847039][ T4234] usb 4-1: USB disconnect, device number 26 [ 209.960980][ T4232] gspca_sonixj: reg_w1 err -71 [ 209.966319][ T4277] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 209.977258][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.986299][ T4277] usb 2-1: Product: syz [ 209.990577][ T4277] usb 2-1: Manufacturer: syz [ 209.995764][ T4277] usb 2-1: SerialNumber: syz [ 210.020929][ T4234] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 210.030934][ T4232] sonixj: probe of 5-1:0.0 failed with error -71 [ 210.039211][ T4232] usb 5-1: USB disconnect, device number 26 [ 210.270978][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 210.391137][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.408214][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.429342][ T4234] usb 4-1: New USB device found, idVendor=6172, idProduct=2377, bcdDevice= 0.00 [ 210.440031][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.467897][ T4234] usb 4-1: config 0 descriptor?? [ 210.480421][ T6201] udc-core: couldn't find an available UDC or it's busy [ 210.490930][ T6201] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.510778][ C1] raw-gadget.2 gadget: ignoring, device is not running [ 210.531277][ T4234] usb 4-1: can't set config #0, error -32 [ 210.551814][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 210.554467][ T4234] usb 4-1: USB disconnect, device number 27 [ 210.690956][ T4277] usb 2-1: USB disconnect, device number 26 [ 211.403790][ T4234] usb 3-1: USB disconnect, device number 27 [ 211.491031][ T4178] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 211.579400][ T6234] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.556'. [ 211.731025][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 211.860933][ T4178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.868990][ T4178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.879933][ T4178] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.970944][ T4178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.978435][ T4178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.994725][ T4178] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 212.081263][ T4178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 212.088855][ T4178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.100964][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.107460][ T4178] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 212.112861][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.133000][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.146338][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.156264][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.166603][ T23] usb 4-1: config 0 descriptor?? [ 212.361032][ T4178] usb 2-1: string descriptor 0 read error: -22 [ 212.384676][ T4178] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.397523][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.461819][ T4178] adutux 2-1:168.0: interrupt endpoints not found [ 212.490880][ T4277] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 212.643739][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.656751][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.670782][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.679170][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.687255][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.695650][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.703503][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.711755][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.719925][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.727952][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.736898][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 212.738052][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.750448][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.758358][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.767498][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.777628][ T23] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.787240][ T23] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 212.817834][ T23] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 212.866732][ T23] usb 2-1: USB disconnect, device number 27 [ 212.941918][ T4232] usb 4-1: USB disconnect, device number 28 [ 212.981646][ T6247] fido_id[6247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.031093][ T4277] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 213.050643][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.070813][ T4277] usb 1-1: Product: syz [ 213.077665][ T4277] usb 1-1: Manufacturer: syz [ 213.083380][ T4277] usb 1-1: SerialNumber: syz [ 213.092055][ T4277] usb 1-1: config 0 descriptor?? [ 213.132760][ T4277] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 213.506214][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 213.781020][ T4178] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 214.141059][ T4178] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.153364][ T4178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.178130][ T4178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.202334][ T4178] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.351279][ T4178] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.367485][ T4178] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.402497][ T4178] usb 4-1: Product: syz [ 214.414837][ T4178] usb 4-1: Manufacturer: syz [ 214.472301][ T4178] cdc_wdm 4-1:1.0: skipping garbage [ 214.485609][ T4178] cdc_wdm 4-1:1.0: skipping garbage [ 214.498119][ T4178] cdc_wdm 4-1:1.0: skipping garbage [ 214.510056][ T4178] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 214.677265][ T5777] usb 4-1: USB disconnect, device number 29 [ 215.540875][ T4277] gspca_sonixj: reg_w1 err -71 [ 215.555979][ T26] audit: type=1804 audit(1778009425.835:5): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.577" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 215.601489][ T4277] sonixj: probe of 1-1:0.0 failed with error -71 [ 215.635590][ T4277] usb 1-1: USB disconnect, device number 25 [ 216.460914][ T4178] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 216.841823][ T4178] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 216.865185][ T4178] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.051061][ T4178] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 217.124458][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.158876][ T4178] usb 1-1: Product: syz [ 217.165075][ T4178] usb 1-1: Manufacturer: syz [ 217.205847][ T4178] usb 1-1: SerialNumber: syz [ 217.257625][ T4178] usb 1-1: config 0 descriptor?? [ 217.322843][ T4178] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 217.338131][ T4178] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 217.544234][ T4178] usb 1-1: USB disconnect, device number 26 [ 217.830837][ T4277] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 218.070828][ T4277] usb 4-1: Using ep0 maxpacket: 32 [ 218.191094][ T4277] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 218.223207][ T4277] usb 4-1: config 0 has no interface number 1 [ 218.391179][ T4277] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 218.400984][ T4178] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 218.417083][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.448950][ T4277] usb 4-1: Product: syz [ 218.467691][ T4277] usb 4-1: Manufacturer: syz [ 218.487552][ T4277] usb 4-1: SerialNumber: syz [ 218.506137][ T4277] usb 4-1: config 0 descriptor?? [ 218.700826][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 218.791260][ T4277] snd-usb-6fire 4-1:0.111: unknown device firmware state received from device: [ 218.800449][ T4277] 31 db 99 aa dd 09 f1 37 [ 218.831225][ T4277] snd-usb-6fire: probe of 4-1:0.111 failed with error -5 [ 219.001249][ T4178] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 219.015277][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.040867][ T4178] usb 2-1: Product: syz [ 219.050854][ T4178] usb 2-1: Manufacturer: syz [ 219.066098][ T4178] usb 2-1: SerialNumber: syz [ 219.082813][ T4178] usb 2-1: config 0 descriptor?? [ 219.142983][ T4178] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 219.349578][ T6352] netlink: 44 bytes leftover after parsing attributes in process `syz.3.586'. [ 219.364953][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 219.910894][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 220.053793][ T23] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 220.270989][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.282329][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.292680][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.306186][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.315603][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.326958][ T7] usb 1-1: config 0 descriptor?? [ 220.481123][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 220.490222][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.498392][ T5777] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 220.508067][ T23] usb 5-1: config 0 descriptor?? [ 220.553216][ T23] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 220.560693][ T4232] usb 4-1: USB disconnect, device number 30 [ 220.813193][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.821235][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.828784][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.836428][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.844064][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.852032][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.859800][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.867491][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.875231][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.882771][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.890697][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.891499][ T5777] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 220.898272][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.898302][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.898323][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.898345][ T7] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 220.898858][ T7] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 220.945929][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.964886][ T7] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 221.112908][ T7] usb 1-1: USB disconnect, device number 27 [ 221.141102][ T5777] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 221.154811][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.165215][ T5777] usb 3-1: Product: syz [ 221.169505][ T5777] usb 3-1: Manufacturer: syz [ 221.177977][ T5777] usb 3-1: SerialNumber: syz [ 221.185345][ T5777] usb 3-1: config 0 descriptor?? [ 221.227455][ T5777] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 221.234316][ T5777] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 221.391000][ T4178] gspca_sonixj: reg_w1 err -71 [ 221.444376][ T5777] usb 3-1: USB disconnect, device number 28 [ 221.461008][ T4178] sonixj: probe of 2-1:0.0 failed with error -71 [ 221.485441][ T4178] usb 2-1: USB disconnect, device number 28 [ 221.661079][ T23] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 221.706587][ T26] audit: type=1804 audit(1778009431.985:6): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.608" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 222.201164][ T23] STV06xx: probe of 5-1:0.0 failed with error -71 [ 222.217901][ T23] usb 5-1: USB disconnect, device number 27 [ 222.281321][ T4178] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 222.651200][ T4178] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.660251][ T4178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.676060][ T4178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.686925][ T4178] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.831029][ T4178] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.840627][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.849040][ T4178] usb 2-1: Product: syz [ 222.853489][ T4178] usb 2-1: Manufacturer: syz [ 222.903314][ T4178] cdc_wdm 2-1:1.0: skipping garbage [ 222.909295][ T4178] cdc_wdm 2-1:1.0: skipping garbage [ 222.914807][ T4178] cdc_wdm 2-1:1.0: skipping garbage [ 222.920372][ T4178] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 223.017121][ T2284] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 223.139597][ T23] usb 2-1: USB disconnect, device number 29 [ 223.380888][ T4178] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 223.450939][ T2284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.470514][ T2284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.483772][ T2284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.503867][ T2284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.517003][ T2284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.533065][ T2284] usb 5-1: config 0 descriptor?? [ 223.620926][ T4178] usb 1-1: Using ep0 maxpacket: 8 [ 223.901160][ T4178] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 223.911002][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.928832][ T4178] usb 1-1: Product: syz [ 223.942909][ T4178] usb 1-1: Manufacturer: syz [ 223.947685][ T4178] usb 1-1: SerialNumber: syz [ 223.963790][ T4178] usb 1-1: config 0 descriptor?? [ 224.002550][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.010287][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.018312][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.018803][ T4178] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 224.033800][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.048199][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.091080][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.120980][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.128457][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.197116][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.253286][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.290141][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.330079][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.367518][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.389136][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.411083][ T2284] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 224.446286][ T2284] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 224.497943][ T2284] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 224.599861][ T2284] usb 5-1: USB disconnect, device number 28 [ 225.265523][ T6453] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 225.295397][ T6453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.328506][ T6453] bond1: (slave veth3): Enslaving as an active interface with a down link [ 225.357993][ T6453] device veth0_to_bond entered promiscuous mode [ 225.371573][ T6453] device veth0_to_bond left promiscuous mode [ 225.379778][ T6453] bond1: (slave vlan2): making interface the new active one [ 225.390606][ T6453] device veth0_to_bond entered promiscuous mode [ 225.398423][ T6453] device vlan2 entered promiscuous mode [ 225.407131][ T6453] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 225.416682][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 225.820962][ T7] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 226.180953][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.200902][ T4178] gspca_sonixj: reg_w1 err -71 [ 226.217445][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.266634][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.276109][ T4178] sonixj: probe of 1-1:0.0 failed with error -71 [ 226.303818][ T4178] usb 1-1: USB disconnect, device number 28 [ 226.323280][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.471054][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.492377][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.546799][ T7] usb 3-1: Product: syz [ 226.560531][ T7] usb 3-1: Manufacturer: syz [ 226.611808][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 226.617463][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 226.630393][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 226.643385][ T7] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 226.796427][ T6475] Cannot find del_set index 4 as target [ 226.892147][ T7] usb 3-1: USB disconnect, device number 29 [ 227.100982][ T4234] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 227.481915][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.514016][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.571057][ T4234] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 227.606942][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.636037][ T4234] usb 1-1: config 0 descriptor?? [ 228.222870][ T4234] usb 1-1: string descriptor 0 read error: -71 [ 228.257769][ T4234] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 228.305892][ T4234] usb 1-1: USB disconnect, device number 29 [ 228.570892][ T4178] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 228.846270][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 229.182687][ T4178] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 229.216095][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.243293][ T4178] usb 2-1: Product: syz [ 229.250041][ T4178] usb 2-1: Manufacturer: syz [ 229.257696][ T4178] usb 2-1: SerialNumber: syz [ 229.290097][ T4178] usb 2-1: config 0 descriptor?? [ 229.353360][ T4178] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 229.481036][ T4234] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 229.871110][ T4234] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 229.891141][ T4234] usb 5-1: config 160 has no interface number 0 [ 229.925355][ T4234] usb 5-1: config 160 interface 200 has no altsetting 0 [ 230.092427][ T6541] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 230.111208][ T4234] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 230.119620][ T6541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.132786][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.167296][ T4234] usb 5-1: Product: syz [ 230.191910][ T4234] usb 5-1: Manufacturer: syz [ 230.204270][ T4234] usb 5-1: SerialNumber: syz [ 230.217806][ T6541] bond1: (slave veth3): Enslaving as an active interface with a down link [ 230.235038][ T6543] device veth0_to_bond entered promiscuous mode [ 230.242179][ T6543] device veth0_to_bond left promiscuous mode [ 230.249952][ T6543] bond1: (slave vlan2): making interface the new active one [ 230.258411][ T6543] device veth0_to_bond entered promiscuous mode [ 230.267244][ T6543] device vlan2 entered promiscuous mode [ 230.273945][ T6543] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 230.291792][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 230.611153][ T4234] usb 5-1: MIDIStreaming interface descriptor not found [ 230.662915][ T4234] usb 5-1: USB disconnect, device number 29 [ 231.014440][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.121101][ T4238] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 231.521138][ T4178] gspca_sonixj: reg_w1 err -71 [ 231.541211][ T4238] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.554059][ T4238] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.564598][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.580180][ T4238] usb 4-1: config 0 descriptor?? [ 231.585663][ T4178] sonixj: probe of 2-1:0.0 failed with error -71 [ 231.603010][ T4178] usb 2-1: USB disconnect, device number 30 [ 232.085827][ T6575] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 232.095337][ T6575] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 232.166868][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 232.182929][ T6581] device vlan2 entered promiscuous mode [ 232.188935][ T6581] device bond0 entered promiscuous mode [ 232.196491][ T4205] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 232.200983][ T6581] device bond_slave_0 entered promiscuous mode [ 232.230689][ T6581] device bond_slave_1 entered promiscuous mode [ 232.910511][ T6590] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 232.936528][ T6590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.038053][ T6590] bond1: (slave veth3): Enslaving as an active interface with a down link [ 233.054341][ T6594] device veth0_to_bond entered promiscuous mode [ 233.061609][ T6594] device veth0_to_bond left promiscuous mode [ 233.072524][ T6594] bond1: (slave vlan2): making interface the new active one [ 233.082699][ T6594] device veth0_to_bond entered promiscuous mode [ 233.090129][ T6594] device vlan2 entered promiscuous mode [ 233.096576][ T6594] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 233.105722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 233.170895][ T4234] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 233.350238][ T6605] binder_alloc: 6604: pid 6604 spamming oneway? 1 buffers allocated for a total size of 4096 [ 233.420874][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 233.701050][ T4234] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 233.720846][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.729458][ T4234] usb 3-1: Product: syz [ 233.734394][ T4234] usb 3-1: Manufacturer: syz [ 233.739492][ T4234] usb 3-1: SerialNumber: syz [ 233.760825][ T4234] usb 3-1: config 0 descriptor?? [ 233.823509][ T4234] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 233.849767][ T4276] usb 4-1: USB disconnect, device number 31 [ 234.041112][ T4234] gspca_topro: reg_w err -71 [ 234.081028][ T4234] gspca_topro: Sensor soi763a [ 234.111198][ T4234] usb 3-1: USB disconnect, device number 30 [ 234.565521][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 235.680991][ T7] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 235.921086][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 236.041216][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 236.208267][ T6655] loop4: detected capacity change from 0 to 7 [ 236.215139][ T7] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 236.225818][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.240842][ T6655] Dev loop4: unable to read RDB block 7 [ 236.245221][ T7] usb 5-1: Product: syz [ 236.254235][ T7] usb 5-1: Manufacturer: syz [ 236.259441][ T7] usb 5-1: SerialNumber: syz [ 236.278439][ T6655] loop4: AHDI p1 p2 p3 [ 236.278511][ T7] usb 5-1: config 0 descriptor?? [ 236.302017][ T6643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.318803][ T6655] loop4: partition table partially beyond EOD, truncated [ 236.400990][ T6655] loop4: p1 start 1601398130 is beyond EOD, truncated [ 236.453147][ T6655] loop4: p2 start 1702059890 is beyond EOD, truncated [ 236.491194][ T4256] device vlan2 left promiscuous mode [ 236.537264][ T7] usb 5-1: USB disconnect, device number 30 [ 236.921078][ T4178] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 237.031300][ T4276] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 237.322134][ T4234] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 237.431093][ T4276] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.440992][ T4178] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.446000][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.459546][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.466908][ T4276] usb 1-1: config 0 descriptor?? [ 237.472304][ T4178] usb 2-1: Product: syz [ 237.480298][ T4178] usb 2-1: Manufacturer: syz [ 237.485497][ T4178] usb 2-1: SerialNumber: syz [ 237.515039][ T4276] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 237.692363][ T6675] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 237.705601][ T6675] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 237.791252][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 237.805533][ T6677] device vlan2 entered promiscuous mode [ 237.811893][ T6677] device bond0 entered promiscuous mode [ 237.817568][ T6677] device bond_slave_0 entered promiscuous mode [ 237.824886][ T6677] device bond_slave_1 entered promiscuous mode [ 237.921155][ T4234] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 237.930558][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.950905][ T4234] usb 3-1: Product: syz [ 237.960978][ T4234] usb 3-1: Manufacturer: syz [ 237.973720][ T4234] usb 3-1: SerialNumber: syz [ 237.981210][ T4178] net_ratelimit: 30 callbacks suppressed [ 237.981234][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 237.986148][ T4234] usb 3-1: config 0 descriptor?? [ 238.063673][ T4234] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 238.679710][ T4276] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 238.871035][ T23] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 238.930943][ T7] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 239.170889][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 239.201160][ T4276] STV06xx: probe of 1-1:0.0 failed with error -71 [ 239.209401][ T4276] usb 1-1: USB disconnect, device number 30 [ 239.251264][ T23] usb 4-1: config 3 has an invalid interface number: 16 but max is 1 [ 239.259569][ T23] usb 4-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config [ 239.270279][ T23] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 239.279297][ T23] usb 4-1: config 3 has no interface number 0 [ 239.286051][ T23] usb 4-1: config 3 interface 16 has no altsetting 0 [ 239.291074][ T7] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 239.301631][ T7] usb 5-1: config 0 has no interface number 1 [ 239.461086][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 239.470329][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.478548][ T7] usb 5-1: Product: syz [ 239.482892][ T7] usb 5-1: Manufacturer: syz [ 239.488045][ T7] usb 5-1: SerialNumber: syz [ 239.491055][ T23] usb 4-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 239.504759][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.509714][ T7] usb 5-1: config 0 descriptor?? [ 239.513167][ T23] usb 4-1: Product: syz [ 239.522510][ T23] usb 4-1: Manufacturer: syz [ 239.527140][ T23] usb 4-1: SerialNumber: syz [ 239.784623][ T6682] udc-core: couldn't find an available UDC or it's busy [ 239.792119][ T6682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.882098][ T23] hub 4-1:3.16: bad descriptor, ignoring hub [ 239.890351][ T23] hub: probe of 4-1:3.16 failed with error -5 [ 239.931786][ T23] usb 4-1: USB disconnect, device number 32 [ 239.971235][ T7] snd-usb-6fire 5-1:0.111: unknown device firmware state received from device: [ 239.980575][ T7] 31 db 99 aa dd 09 f1 37 [ 239.985250][ T7] snd-usb-6fire: probe of 5-1:0.111 failed with error -5 [ 240.001063][ T4234] gspca_stk1135: reg_w 0x200 err -71 [ 240.015420][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.027622][ T4234] gspca_stk1135: Sensor write failed [ 240.035696][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.042313][ T4234] gspca_stk1135: Sensor write failed [ 240.047757][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.054607][ T4234] gspca_stk1135: Sensor read failed [ 240.059918][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.066367][ T4234] gspca_stk1135: Sensor read failed [ 240.074163][ T4234] gspca_stk1135: Detected sensor type unknown (0x0) [ 240.080898][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.087392][ T4234] gspca_stk1135: Sensor read failed [ 240.092790][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.099559][ T4234] gspca_stk1135: Sensor read failed [ 240.105184][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.113186][ T4234] gspca_stk1135: Sensor write failed [ 240.118649][ T4234] gspca_stk1135: serial bus timeout: status=0x00 [ 240.125473][ T4234] gspca_stk1135: Sensor write failed [ 240.130970][ T4234] stk1135: probe of 3-1:0.0 failed with error -71 [ 240.146078][ T4234] usb 3-1: USB disconnect, device number 31 [ 240.460935][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 240.491037][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 240.528441][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 240.544205][ T6696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.715'. [ 240.570897][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 240.612200][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 240.694160][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 240.731122][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 240.793924][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 240.828580][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 240.856411][ T4178] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 240.868088][ T26] audit: type=1326 audit(1778009451.145:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 240.903706][ T4178] lan78xx: probe of 2-1:1.0 failed with error -71 [ 240.930114][ T26] audit: type=1326 audit(1778009451.175:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 240.942467][ T4178] usb 2-1: USB disconnect, device number 31 [ 240.990033][ T26] audit: type=1326 audit(1778009451.175:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.119042][ T26] audit: type=1326 audit(1778009451.175:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.225096][ T26] audit: type=1326 audit(1778009451.175:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.264910][ T26] audit: type=1326 audit(1778009451.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.300197][ T26] audit: type=1326 audit(1778009451.175:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.351216][ T26] audit: type=1326 audit(1778009451.175:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.409006][ T26] audit: type=1326 audit(1778009451.175:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.433514][ T144] device vlan2 left promiscuous mode [ 241.470993][ T26] audit: type=1326 audit(1778009451.175:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.0.720" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97166e1dd9 code=0x50000 [ 241.691988][ T23] usb 5-1: USB disconnect, device number 31 [ 241.850909][ T4234] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 242.097796][ T6715] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 242.113192][ T6715] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 242.150826][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 242.207213][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 242.226080][ T6720] device vlan3 entered promiscuous mode [ 242.251079][ T6720] device bond0 entered promiscuous mode [ 242.258111][ T6720] device bond_slave_0 entered promiscuous mode [ 242.281913][ T4234] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 242.291935][ T6720] device bond_slave_1 entered promiscuous mode [ 242.298508][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.321506][ T4234] usb 1-1: config 0 descriptor?? [ 242.383264][ T4234] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 242.472205][ T23] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 242.911077][ T23] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 242.911125][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.911157][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 242.911186][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 243.011266][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.033069][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.051384][ T23] usb 4-1: SerialNumber: syz [ 243.102328][ T6717] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 243.345667][ T23] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 243.373235][ T23] usb 4-1: USB disconnect, device number 33 [ 243.451219][ T4234] gspca_vc032x: reg_w err -71 [ 243.456484][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.467745][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.476737][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.483095][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.489733][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.495985][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.503348][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.508893][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.515202][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.521047][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.526643][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.532858][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.538455][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.546752][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.554770][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.560282][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.566713][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.572368][ T4234] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.577916][ T4234] gspca_vc032x: Unknown sensor... [ 243.583738][ T4234] vc032x: probe of 1-1:0.0 failed with error -22 [ 243.607973][ T4234] usb 1-1: USB disconnect, device number 31 [ 243.777044][ T6744] loop4: detected capacity change from 0 to 7 [ 243.799781][ T4545] Dev loop4: unable to read RDB block 7 [ 243.806626][ T4545] loop4: AHDI p1 p2 p3 [ 243.815854][ T4545] loop4: partition table partially beyond EOD, truncated [ 243.829583][ T4545] loop4: p1 start 1601398130 is beyond EOD, truncated [ 243.839767][ T4545] loop4: p2 start 1702059890 is beyond EOD, truncated [ 243.856093][ T6744] Dev loop4: unable to read RDB block 7 [ 243.867607][ T6744] loop4: AHDI p1 p2 p3 [ 243.889135][ T6744] loop4: partition table partially beyond EOD, truncated [ 243.928496][ T6744] loop4: p1 start 1601398130 is beyond EOD, truncated [ 244.000959][ T6744] loop4: p2 start 1702059890 is beyond EOD, truncated [ 244.183174][ T4309] device vlan2 left promiscuous mode [ 244.510858][ T4178] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 244.750894][ T4178] usb 5-1: Using ep0 maxpacket: 8 [ 245.031552][ T4178] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 245.048502][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.073228][ T4178] usb 5-1: Product: syz [ 245.090780][ T4178] usb 5-1: Manufacturer: syz [ 245.108334][ T4178] usb 5-1: SerialNumber: syz [ 245.127062][ T4178] usb 5-1: config 0 descriptor?? [ 245.182451][ T4178] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 245.191065][ T4234] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.380881][ T4276] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 245.591326][ T4234] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 245.601164][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.612310][ T4234] usb 1-1: config 0 descriptor?? [ 245.654251][ T4234] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 245.751097][ T4276] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 245.770917][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 245.779151][ T4276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.799144][ T4276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 245.811269][ T4276] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 245.921026][ T4276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.930505][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.958894][ T4276] usb 2-1: SerialNumber: syz [ 246.001420][ T6777] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 246.091090][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 246.221121][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.234935][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.245111][ T4276] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 246.251821][ T4278] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 246.268970][ T4276] usb 2-1: USB disconnect, device number 32 [ 246.431168][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.440671][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.449200][ T23] usb 4-1: Product: syz [ 246.453547][ T23] usb 4-1: Manufacturer: syz [ 246.458637][ T23] usb 4-1: SerialNumber: syz [ 246.621026][ T4278] usb 3-1: config 34 has an invalid interface number: 116 but max is 0 [ 246.629577][ T4278] usb 3-1: config 34 has no interface number 0 [ 246.635836][ T4278] usb 3-1: config 34 interface 116 has no altsetting 0 [ 246.801140][ T23] usb 4-1: 0:2 : does not exist [ 246.806331][ T4234] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 246.825769][ T4278] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 246.836522][ T23] usb 4-1: USB disconnect, device number 34 [ 246.843353][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.858563][ T4278] usb 3-1: Product: syz [ 246.869977][ T4278] usb 3-1: Manufacturer: syz [ 246.875134][ T4278] usb 3-1: SerialNumber: syz [ 247.081653][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.150962][ T4178] gspca_sonixj: reg_r err -71 [ 247.212475][ T4178] sonixj: probe of 5-1:0.0 failed with error -71 [ 247.220526][ T4178] usb 5-1: USB disconnect, device number 32 [ 247.271156][ T4278] comedi comedi5: could not set alternate setting 3 in high speed [ 247.280909][ T4278] usbdux 3-1:34.116: driver 'usbdux' failed to auto-configure device. [ 247.293248][ T4278] usbdux: probe of 3-1:34.116 failed with error -71 [ 247.301985][ T4278] usb 3-1: USB disconnect, device number 32 [ 247.353300][ T4234] STV06xx: probe of 1-1:0.0 failed with error -71 [ 247.374621][ T4234] usb 1-1: USB disconnect, device number 32 [ 247.721041][ T4238] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 247.970979][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 248.090975][ T4238] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 248.281171][ T4238] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 248.311806][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.350949][ T4238] usb 2-1: Product: syz [ 248.362311][ T4238] usb 2-1: Manufacturer: syz [ 248.375286][ T4238] usb 2-1: SerialNumber: syz [ 248.422420][ T4238] usb 2-1: config 0 descriptor?? [ 248.461048][ T6799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.746178][ T6822] ODEBUG: Out of memory. ODEBUG disabled [ 248.761284][ T4238] usb 2-1: USB disconnect, device number 33 [ 249.236564][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 249.490870][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 249.670849][ T4238] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 249.780979][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 249.794930][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.810769][ T4278] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 249.818671][ T7] usb 1-1: Product: syz [ 249.827699][ T7] usb 1-1: Manufacturer: syz [ 249.837812][ T7] usb 1-1: SerialNumber: syz [ 249.859428][ T7] usb 1-1: config 0 descriptor?? [ 249.912983][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 250.041062][ T4238] usb 2-1: config 34 has an invalid interface number: 116 but max is 0 [ 250.049782][ T4238] usb 2-1: config 34 has no interface number 0 [ 250.056408][ T4238] usb 2-1: config 34 interface 116 has no altsetting 0 [ 250.229161][ T4238] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 250.247030][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.262461][ T4238] usb 2-1: Product: syz [ 250.268296][ T4238] usb 2-1: Manufacturer: syz [ 250.273794][ T4238] usb 2-1: SerialNumber: syz [ 250.420993][ T4278] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.432436][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.460780][ T4278] usb 5-1: Product: syz [ 250.465021][ T4278] usb 5-1: Manufacturer: syz [ 250.469650][ T4278] usb 5-1: SerialNumber: syz [ 250.621079][ T4238] comedi comedi5: could not set alternate setting 3 in high speed [ 250.629154][ T4238] usbdux 2-1:34.116: driver 'usbdux' failed to auto-configure device. [ 250.644092][ T4238] usbdux: probe of 2-1:34.116 failed with error -71 [ 250.654505][ T4238] usb 2-1: USB disconnect, device number 34 [ 250.961174][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 250.964047][ T6860] binder: 6859:6860 ioctl c0306201 2000000003c0 returned -14 [ 251.417756][ T6870] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 251.426843][ T6870] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 251.500111][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 251.543510][ T6872] device vlan2 entered promiscuous mode [ 251.738317][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 251.777811][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.901018][ T7] gspca_sonixj: reg_r err -71 [ 251.967008][ T7] sonixj: probe of 1-1:0.0 failed with error -71 [ 251.977784][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.001065][ T7] usb 1-1: USB disconnect, device number 33 [ 252.608901][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.791'. [ 252.621366][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.791'. [ 252.672897][ T6887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.791'. [ 253.000919][ T7] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 253.260966][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 253.381124][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3845, setting to 64 [ 253.431076][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 253.443090][ T4234] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 253.484013][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 253.525097][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 253.554958][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 253.571093][ T7] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 253.580469][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.588572][ T7] usb 3-1: Product: syz [ 253.590887][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 253.593095][ T7] usb 3-1: Manufacturer: syz [ 253.609699][ T7] usb 3-1: SerialNumber: syz [ 253.631229][ T7] usb 3-1: config 0 descriptor?? [ 253.644104][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 253.673751][ T7] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 253.690991][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 253.708498][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 253.731484][ T4278] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 253.748500][ T4278] lan78xx: probe of 5-1:1.0 failed with error -71 [ 253.759865][ T4278] usb 5-1: USB disconnect, device number 33 [ 253.779307][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 253.795961][ T6912] device vlan2 entered promiscuous mode [ 253.801873][ T6912] device gretap0 entered promiscuous mode [ 253.871252][ T4234] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 253.878447][ T4238] usb 3-1: USB disconnect, device number 33 [ 253.882651][ T4234] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.911128][ T3069] usb 3-1: Failed to submit usb control message: -71 [ 253.918525][ T3069] usb 3-1: unable to send the bmi data to the device: -71 [ 253.927650][ T4234] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 253.955296][ T4234] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 253.979896][ T3069] usb 3-1: unable to get target info from device [ 253.982667][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 253.986854][ T3069] usb 3-1: could not get target info (-71) [ 253.999306][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.009194][ T3069] usb 3-1: could not probe fw (-71) [ 254.015225][ T6916] batadv0: mtu less than device minimum [ 254.023067][ T6916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.122186][ T4234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.136139][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.144861][ T4278] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 254.152794][ T4234] usb 1-1: SerialNumber: syz [ 254.188287][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.196189][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 254.400857][ T4278] usb 2-1: Using ep0 maxpacket: 8 [ 254.444687][ T4234] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 254.496123][ T4234] usb 1-1: USB disconnect, device number 34 [ 254.722216][ T4278] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 254.738045][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.747476][ T4278] usb 2-1: Product: syz [ 254.753201][ T4278] usb 2-1: Manufacturer: syz [ 254.757848][ T4278] usb 2-1: SerialNumber: syz [ 254.777776][ T4278] usb 2-1: config 0 descriptor?? [ 254.823166][ T4278] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 254.841583][ T4238] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 255.371043][ T4238] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 255.380506][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.396371][ T4238] usb 4-1: Product: syz [ 255.402095][ T4238] usb 4-1: Manufacturer: syz [ 255.407062][ T4238] usb 4-1: SerialNumber: syz [ 255.416060][ T4238] usb 4-1: config 0 descriptor?? [ 255.463431][ T4238] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 255.882780][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.889390][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091051][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 256.108889][ T6945] device vlan2 entered promiscuous mode [ 256.114948][ T6945] device gretap0 entered promiscuous mode [ 256.278168][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 256.300331][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.308757][ T6952] net_ratelimit: 18 callbacks suppressed [ 256.308774][ T6952] batadv0: mtu less than device minimum [ 256.322982][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.336101][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.349252][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.362614][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.375764][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.388047][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.400387][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.413906][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.426043][ T6952] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.496485][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.574388][ T6956] device syzkaller0 entered promiscuous mode [ 256.890836][ T4278] gspca_sonixj: reg_r err -71 [ 256.960826][ T4278] sonixj: probe of 2-1:0.0 failed with error -71 [ 257.007062][ T4278] usb 2-1: USB disconnect, device number 35 [ 257.661446][ T4238] gspca_stk1135: reg_w 0x203 err -71 [ 257.671518][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.698512][ T4238] gspca_stk1135: Sensor write failed [ 257.719105][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.749289][ T4238] gspca_stk1135: Sensor write failed [ 257.770562][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.797291][ T4238] gspca_stk1135: Sensor read failed [ 257.825913][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.855215][ T4238] gspca_stk1135: Sensor read failed [ 257.874753][ T4238] gspca_stk1135: Detected sensor type unknown (0x0) [ 257.898789][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.905882][ T4238] gspca_stk1135: Sensor read failed [ 257.911463][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.919012][ T4238] gspca_stk1135: Sensor read failed [ 257.925146][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.933209][ T4238] gspca_stk1135: Sensor write failed [ 257.939279][ T4238] gspca_stk1135: serial bus timeout: status=0x00 [ 257.946519][ T4238] gspca_stk1135: Sensor write failed [ 257.952481][ T4238] stk1135: probe of 4-1:0.0 failed with error -71 [ 257.978017][ T4238] usb 4-1: USB disconnect, device number 35 [ 258.344508][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 258.414306][ T6992] device vlan2 entered promiscuous mode [ 259.293783][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 259.343952][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.504019][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.551757][ T4276] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 260.091058][ T4276] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.104792][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.121185][ T4276] usb 2-1: Product: syz [ 260.130065][ T4276] usb 2-1: Manufacturer: syz [ 260.140479][ T4276] usb 2-1: SerialNumber: syz [ 260.232271][ T4276] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 260.617918][ T7036] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 260.629928][ T7036] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 260.649436][ T7036] ------------[ cut here ]------------ [ 260.656104][ T7036] WARNING: CPU: 1 PID: 7036 at arch/x86/kvm/x86.c:10372 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 260.667406][ T7036] Modules linked in: [ 260.672750][ T7036] CPU: 1 PID: 7036 Comm: syz.0.845 Not tainted syzkaller #0 [ 260.682016][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.708527][ T7036] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 260.717744][ T7036] Code: e8 a1 18 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 86 18 af 00 e9 c8 ed ff ff e8 dc f9 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 260.744823][ T7036] RSP: 0018:ffffc90004d2fc30 EFLAGS: 00010283 [ 260.758091][ T7036] RAX: ffffffff810f3ab4 RBX: ffff888061ca4000 RCX: 0000000000080000 [ 260.777602][ T7036] RDX: ffffc90005b51000 RSI: 0000000000000625 RDI: 0000000000000626 [ 260.800895][ T7036] RBP: 0000000000000000 R08: ffffffff8d89f02f R09: 1ffffffff1b13e05 [ 260.824520][ T7036] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: ffff8880550f6001 [ 260.846082][ T7036] R13: 1ffff1100c39481e R14: ffff888061ca40f0 R15: ffff8880550f6000 [ 260.870271][ T7036] FS: 00007f971493b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 260.880095][ T4276] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.891079][ T4238] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 260.929717][ T7036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.950228][ T7036] CR2: 0000200000078030 CR3: 00000000737ec000 CR4: 00000000003526e0 [ 260.968352][ T7036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.979009][ T7036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.999573][ T7036] Call Trace: [ 261.027542][ T7036] [ 261.031119][ T7036] ? __lock_acquire+0x7d10/0x7d10 [ 261.036633][ T7036] kvm_vcpu_ioctl+0x8f7/0xc10 [ 261.053792][ T7036] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 261.080071][ T7036] ? bpf_lsm_file_ioctl+0x5/0x10 [ 261.103652][ T7036] ? security_file_ioctl+0x7c/0xa0 [ 261.117833][ T7036] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 261.134412][ T7036] __se_sys_ioctl+0xfa/0x170 [ 261.150851][ T7036] do_syscall_64+0x4c/0xa0 [ 261.160175][ T7036] ? clear_bhb_loop+0x30/0x80 [ 261.180997][ T7036] ? clear_bhb_loop+0x30/0x80 [ 261.195804][ T7036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.220980][ T7036] RIP: 0033:0x7f97166e1dd9 [ 261.239831][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.291691][ T4238] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 261.309677][ T7036] RSP: 002b:00007f971493b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.348006][ T7036] RAX: ffffffffffffffda RBX: 00007f971695afa0 RCX: 00007f97166e1dd9 [ 261.359296][ T7036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 261.384781][ T7036] RBP: 00007f9716777d69 R08: 0000000000000000 R09: 0000000000000000 [ 261.404270][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.424827][ T7036] R13: 00007f971695b038 R14: 00007f971695afa0 R15: 00007fff5758b4f8 [ 261.434700][ T7036] [ 261.437980][ T7036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.445448][ T7036] CPU: 1 PID: 7036 Comm: syz.0.845 Not tainted syzkaller #0 [ 261.453150][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.463495][ T7036] Call Trace: [ 261.466888][ T7036] [ 261.469952][ T7036] dump_stack_lvl+0x188/0x250 [ 261.474702][ T7036] ? show_regs_print_info+0x20/0x20 [ 261.480061][ T7036] ? load_image+0x400/0x400 [ 261.484859][ T7036] panic+0x2e5/0x810 [ 261.488909][ T7036] ? bpf_jit_dump+0xd0/0xd0 [ 261.493476][ T7036] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 261.499324][ T7036] __warn+0x248/0x2b0 [ 261.503523][ T7036] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 261.509368][ T7036] report_bug+0x1b7/0x2e0 [ 261.514175][ T7036] handle_bug+0x3a/0x70 [ 261.518729][ T7036] exc_invalid_op+0x16/0x40 [ 261.523228][ T7036] asm_exc_invalid_op+0x16/0x20 [ 261.528079][ T7036] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 261.535201][ T7036] Code: e8 a1 18 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 86 18 af 00 e9 c8 ed ff ff e8 dc f9 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 261.555477][ T7036] RSP: 0018:ffffc90004d2fc30 EFLAGS: 00010283 [ 261.561826][ T7036] RAX: ffffffff810f3ab4 RBX: ffff888061ca4000 RCX: 0000000000080000 [ 261.569850][ T7036] RDX: ffffc90005b51000 RSI: 0000000000000625 RDI: 0000000000000626 [ 261.577833][ T7036] RBP: 0000000000000000 R08: ffffffff8d89f02f R09: 1ffffffff1b13e05 [ 261.586247][ T7036] R10: dffffc0000000000 R11: fffffbfff1b13e06 R12: ffff8880550f6001 [ 261.594528][ T7036] R13: 1ffff1100c39481e R14: ffff888061ca40f0 R15: ffff8880550f6000 [ 261.602514][ T7036] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 261.608335][ T7036] ? __lock_acquire+0x7d10/0x7d10 [ 261.613559][ T7036] kvm_vcpu_ioctl+0x8f7/0xc10 [ 261.618246][ T7036] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 261.623928][ T7036] ? bpf_lsm_file_ioctl+0x5/0x10 [ 261.628885][ T7036] ? security_file_ioctl+0x7c/0xa0 [ 261.633997][ T7036] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 261.639740][ T7036] __se_sys_ioctl+0xfa/0x170 [ 261.644536][ T7036] do_syscall_64+0x4c/0xa0 [ 261.648951][ T7036] ? clear_bhb_loop+0x30/0x80 [ 261.653646][ T7036] ? clear_bhb_loop+0x30/0x80 [ 261.658388][ T7036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.661333][ T4238] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 261.664438][ T7036] RIP: 0033:0x7f97166e1dd9 [ 261.677986][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.697841][ T7036] RSP: 002b:00007f971493b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.706438][ T7036] RAX: ffffffffffffffda RBX: 00007f971695afa0 RCX: 00007f97166e1dd9 [ 261.714518][ T7036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 261.722848][ T7036] RBP: 00007f9716777d69 R08: 0000000000000000 R09: 0000000000000000 [ 261.730879][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.738878][ T7036] R13: 00007f971695b038 R14: 00007f971695afa0 R15: 00007fff5758b4f8 [ 261.746865][ T7036] [ 261.750382][ T7036] Kernel Offset: disabled [ 261.754957][ T7036] Rebooting in 86400 seconds..