last executing test programs: 3m28.219152656s ago: executing program 2 (id=837): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) syz_open_dev$dri(0x0, 0x1ff, 0x20840) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 3m26.164235884s ago: executing program 2 (id=846): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xdcc4, 0x0, 0x0, 0x1e4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7) 3m22.051800723s ago: executing program 2 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 3m20.472239326s ago: executing program 2 (id=867): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m19.393308087s ago: executing program 2 (id=869): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f804090581"], 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 3m19.091921539s ago: executing program 2 (id=872): socket$unix(0x1, 0x5, 0x0) socket(0x21, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m18.794205336s ago: executing program 32 (id=872): socket$unix(0x1, 0x5, 0x0) socket(0x21, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2m3.064977064s ago: executing program 5 (id=1232): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.967621805s ago: executing program 5 (id=1236): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x6c, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m0.347075734s ago: executing program 5 (id=1241): syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f449470fe919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.241678291s ago: executing program 5 (id=1243): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r0) 1m58.508024943s ago: executing program 5 (id=1246): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.084344599s ago: executing program 5 (id=1250): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x3, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47b9, 0x95e5, 0x60, 0x0, 0x0) 1m57.110154325s ago: executing program 33 (id=1250): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x3, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47b9, 0x95e5, 0x60, 0x0, 0x0) 10.691540055s ago: executing program 1 (id=1658): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.440610898s ago: executing program 0 (id=1660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x54840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) fanotify_init(0x1, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) 9.38778326s ago: executing program 4 (id=1663): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 8.537879037s ago: executing program 4 (id=1666): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x450002, 0x1c0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0x0, 0x3d2}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.444432001s ago: executing program 3 (id=1667): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1f3, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r1, &(0x7f0000000200)=""/131, 0x83, 0x12121, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x2, 0x0, 0x62, 0xffff0000, '\x00', '\x00', '\x00', 0x5, 0x2, 0x4, 0x2, "476fa107cc9e6cba4c574ed8226553ae"}) 7.363402183s ago: executing program 3 (id=1668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) 7.261546874s ago: executing program 0 (id=1670): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x170, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "b99e99605c559ce285bbe0a128fedd794ce892fc407634bb3031f200afd06cbf65b4c1d98e1d4db4ca11435b6ad52b63c9c15237992f768533bd59a7c96ea70a996ecedf748f8b6b8974a7eb3af1d5c9ef1725a0f8e99f7687c1bdc2f83436e1eab1c617aed1d0f11a0f7f44b389134b51f5acaf7c50adf4726c1f2cfa26b7359ee87543e03ddea62911d9987e9a140de9477817dc1528c2401c60632be16628aa5bb579a3390401366d9c9806dca8ea1ef31d0ca2"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659ca6fabcbe6607ed00e0c670c10e5548530b2f24cd72cbf7f8cae46a10a4c28f75c6e504bba06f53632c656ac837934e71b1756037e7a7c19a913ac5b8bb76e205b0a9a0b"}]}, 0x170}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0xac, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0x8c, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @from_mac=@broadcast, {0x0, 0x226}, @value=@ver_80211n={0x0, 0x100, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x29, {0x37, 0x52, {0xde, 0x0, "89afeda33f8365b08a87cbdabfe86176", "94c6f8b98fc791ff98bdbf904d1d7fcbcb8276055badd46a823c2e1ed1e78dd5", "c16595490462bc8a1e67a3ef24693ef731ec405b552af55321261c7e507282ff"}}, {0x65, 0x12}}}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 7.138519522s ago: executing program 1 (id=1671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/133, 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800090047000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in=@private=0xa010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) close(r4) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xf, "4ba06b6e"}]}}, 0x0}, 0x0) 6.727905125s ago: executing program 0 (id=1672): socket(0x2d, 0x2, 0x0) mbind(&(0x7f0000b31000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x9, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 5.362059498s ago: executing program 3 (id=1674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0xb, 0x0, 0x0) 4.325316302s ago: executing program 4 (id=1675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x1000f) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.867752536s ago: executing program 1 (id=1676): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x400, 0x2, 0x6, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.553445827s ago: executing program 0 (id=1677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket(0x10, 0x80002, 0x0) 3.179811559s ago: executing program 1 (id=1678): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0xc9) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x410, 0x9}, 0x18, 0x3) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) 2.483791516s ago: executing program 3 (id=1679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) 2.206386405s ago: executing program 3 (id=1680): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_clone3(&(0x7f0000000840)={0x80020000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1}, 0x58) 2.142053646s ago: executing program 6 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0x11, 0x4, 0x3, 0x0, 0x0, 0x58, 0x8, 0x6, 0x4, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.976857259s ago: executing program 4 (id=1682): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = io_uring_setup(0xd71, &(0x7f0000001240)={0x0, 0x0, 0x2, 0x2, 0x1000}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) msgget(0x0, 0xdb) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.745718313s ago: executing program 6 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x60002000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.620982575s ago: executing program 3 (id=1684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r3) 1.459720135s ago: executing program 1 (id=1685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0x4, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0xffffffffffffffab}], 0x1, 0x2c, 0x0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.046190878s ago: executing program 4 (id=1686): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000140)=0x1000007, 0x2) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 959.282993ms ago: executing program 0 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0x4, 0x7000, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 708.05335ms ago: executing program 4 (id=1688): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = fsmount(r0, 0x0, 0x1) statx(r2, &(0x7f0000000040)='.\x00', 0x0, 0x40, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000800)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, 0x0}) 551.811949ms ago: executing program 6 (id=1689): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) mknod(0x0, 0x10, 0xa96c) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) unshare(0x20000400) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 470.021246ms ago: executing program 6 (id=1690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 387.636047ms ago: executing program 1 (id=1691): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) 342.068987ms ago: executing program 6 (id=1692): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787d, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x35cb, 0x0, 0x0, 0x0) 315.920866ms ago: executing program 0 (id=1693): syz_clone(0xc0004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 6 (id=1694): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x1, "a23cfa355c349d2900", '\x00', "02050201", "50fb45c5", ["8b0b35cb03004900004000", "8e1500", "1c2a4d743c970f00", "ff81000000008000"]}) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r2 = io_uring_setup(0x622a, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d1}) r3 = io_uring_setup(0x66b7, &(0x7f0000000600)={0x0, 0x653f, 0x83, 0x0, 0x28e, 0x0, r2}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) kernel console output (not intermixed with test programs): r -19) [ 300.992392][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 301.159455][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 301.170246][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 301.176422][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.196979][ T5926] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 301.203290][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.214248][ T5885] usb 4-1: config 0 has no interface number 0 [ 301.230877][ T5885] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 301.251618][ T24] usb 5-1: USB disconnect, device number 12 [ 301.258461][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.279318][ T5885] usb 4-1: Product: syz [ 301.283742][ T5885] usb 4-1: Manufacturer: syz [ 301.299101][ T5885] usb 4-1: SerialNumber: syz [ 301.321040][ T5885] usb 4-1: config 0 descriptor?? [ 301.335987][ T5885] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 301.359727][ T5885] usb 4-1: selecting invalid altsetting 1 [ 301.365545][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 301.400372][ T5926] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 301.411330][ T5926] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 301.418929][ T5885] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.442536][ T5926] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 301.464317][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 301.474256][ T5926] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 301.486130][ T5885] usb 4-1: media controller created [ 301.496161][ T5926] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 301.509308][ T5926] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 301.531000][ T5926] usb 6-1: USB disconnect, device number 2 [ 301.537558][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.686868][ T9140] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 301.693631][ T9140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.746999][ T9140] vhci_hcd vhci_hcd.0: Device attached [ 301.789208][ T9164] vhci_hcd: connection closed [ 301.792087][ T6111] vhci_hcd vhci_hcd.3: stop threads [ 301.804244][ T5885] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 301.820409][ T5885] zl10353_read_register: readreg error (reg=127, ret==-71) [ 301.828614][ T6111] vhci_hcd vhci_hcd.3: release socket [ 301.844800][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 301.860645][ T6111] vhci_hcd vhci_hcd.3: disconnect device [ 301.919447][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 301.946097][ T5885] usb 4-1: USB disconnect, device number 16 [ 302.422255][ T5898] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.545318][ T9192] syzkaller1: entered promiscuous mode [ 302.571435][ T9192] syzkaller1: entered allmulticast mode [ 302.579031][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 302.592723][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.613637][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.634111][ T5898] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 302.643653][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.651935][ T5898] usb 6-1: Product: syz [ 302.656355][ T5898] usb 6-1: Manufacturer: syz [ 302.663004][ T5898] usb 6-1: SerialNumber: syz [ 302.672593][ T5898] usb 6-1: config 0 descriptor?? [ 302.680918][ T5898] hub 6-1:0.0: bad descriptor, ignoring hub [ 302.686983][ T5898] hub 6-1:0.0: probe with driver hub failed with error -5 [ 302.711439][ T5898] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 302.727294][ T6105] usb 6-1: Failed to submit usb control message: -71 [ 302.737190][ T6105] usb 6-1: unable to send the bmi data to the device: -71 [ 302.772890][ T6105] usb 6-1: unable to get target info from device [ 302.799431][ T6105] usb 6-1: could not get target info (-71) [ 302.805332][ T6105] usb 6-1: could not probe fw (-71) [ 302.829037][ T5926] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.007855][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 303.028756][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.039108][ T5926] usb 4-1: Product: syz [ 303.048994][ T5926] usb 4-1: Manufacturer: syz [ 303.054174][ T5926] usb 4-1: SerialNumber: syz [ 303.569607][ T5926] net_ratelimit: 94 callbacks suppressed [ 303.569636][ T5926] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 303.616875][ T5926] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 303.839209][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.028967][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 304.051990][ T5898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 304.061974][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.088818][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.119753][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.143231][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.187197][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.199098][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.284044][ T5885] usb 6-1: USB disconnect, device number 3 [ 304.431396][ T5898] usb 5-1: GET_CAPABILITIES returned 0 [ 304.439048][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 304.651728][ T5885] usb 5-1: USB disconnect, device number 13 [ 305.022176][ T9242] netlink: 'syz.0.963': attribute type 3 has an invalid length. [ 305.042646][ T5898] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 305.210021][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 305.214191][ T5898] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 305.233016][ T5898] usb 6-1: config 0 has no interface number 0 [ 305.233193][ T5898] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.233277][ T5898] usb 6-1: config 0 interface 89 has no altsetting 0 [ 305.238442][ T5898] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 305.238475][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.238498][ T5898] usb 6-1: Product: syz [ 305.238528][ T5898] usb 6-1: Manufacturer: syz [ 305.238544][ T5898] usb 6-1: SerialNumber: syz [ 305.279167][ T5926] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 305.279244][ T5926] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 305.280293][ T5926] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 305.290834][ T5898] usb 6-1: config 0 descriptor?? [ 305.295396][ T5898] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 305.295431][ T5898] em28xx 6-1:0.89: Video interface 89 found: [ 305.308672][ T5926] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 305.351355][ T5926] usb 4-1: USB disconnect, device number 17 [ 306.225863][ T9265] binder: 9263:9265 ioctl c0306201 200000004a40 returned -22 [ 306.292113][ T5898] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 306.999090][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 307.168986][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 307.443123][ T9298] netlink: 88 bytes leftover after parsing attributes in process `syz.1.974'. [ 307.705620][ T9305] kvm: MONITOR instruction emulated as NOP! [ 307.724629][ T5898] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 307.741623][ T5898] em28xx 6-1:0.89: board has no eeprom [ 307.856929][ T5898] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 307.885384][ T5898] em28xx 6-1:0.89: analog set to bulk mode. [ 307.891531][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.917816][ T5899] em28xx 6-1:0.89: Registering V4L2 extension [ 307.928109][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 307.938391][ T5898] usb 6-1: USB disconnect, device number 4 [ 307.953719][ T9] usb 5-1: can't read configurations, error -71 [ 307.961724][ T5898] em28xx 6-1:0.89: Disconnecting em28xx [ 308.198745][ T5899] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 308.209231][ T5899] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 308.209264][ T5926] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 308.243523][ T5899] em28xx 6-1:0.89: No AC97 audio processor [ 308.252096][ T5899] usb 6-1: Decoder not found [ 308.257041][ T5899] em28xx 6-1:0.89: failed to create media graph [ 308.263748][ T5899] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 308.275975][ T5899] em28xx 6-1:0.89: Registering snapshot button... [ 308.284444][ T5899] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input18 [ 308.298343][ T5899] em28xx 6-1:0.89: Remote control support is not available for this card. [ 308.307702][ T5898] em28xx 6-1:0.89: Closing input extension [ 308.313734][ T5898] em28xx 6-1:0.89: Deregistering snapshot button [ 308.442332][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 308.489851][ T29] audit: type=1800 audit(1773359582.591:8): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.979" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 308.528988][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.540238][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.552655][ T5926] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 308.564909][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.593013][ T5898] em28xx 6-1:0.89: Freeing device [ 308.800069][ T5926] usb 2-1: config 0 descriptor?? [ 309.029036][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 309.199023][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 309.210466][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.221063][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 309.232509][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.249890][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.259459][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.267511][ T5898] usb 6-1: Product: syz [ 309.272372][ T5898] usb 6-1: Manufacturer: syz [ 309.282050][ T5898] usb 6-1: SerialNumber: syz [ 309.292637][ T5926] kye 0003:0458:5016.0007: control desc unexpectedly large [ 309.327197][ T5926] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0007/input/input19 [ 309.391090][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 309.405139][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.432046][ T9] usb 5-1: config 0 descriptor?? [ 309.514193][ T5926] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0007/input/input20 [ 309.566407][ T5898] usb 6-1: 0:2 : does not exist [ 309.598306][ T5898] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 309.705525][ T5926] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 310.033420][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 310.073979][ T5898] usb 6-1: USB disconnect, device number 5 [ 310.189551][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 310.197657][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.216305][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.231012][ T5927] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.243519][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.284214][ T5927] usb 4-1: config 0 descriptor?? [ 310.298184][ T5927] hub 4-1:0.0: USB hub found [ 310.492634][ C1] kye 0003:0458:5016.0007: usb_submit_urb(ctrl) failed: -1 [ 310.511014][ T5927] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 310.709021][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 310.892408][ T5898] usb 6-1: config 0 has no interfaces? [ 310.898501][ T5898] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.907730][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.928509][ T5927] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 310.954146][ T5898] usb 6-1: config 0 descriptor?? [ 310.969443][ T5927] hid-generic 0003:046D:C31C.0008: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 311.202990][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.248018][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.271436][ T5927] usb 6-1: USB disconnect, device number 6 [ 311.318257][ T5831] usb 2-1: USB disconnect, device number 23 [ 311.336585][ T5898] usb 4-1: USB disconnect, device number 18 [ 311.730372][ T5898] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 311.789089][ T797] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 311.800108][ T9] usb 5-1: Cannot set autoneg [ 311.805130][ T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 311.823311][ T9] usb 5-1: USB disconnect, device number 16 [ 311.908965][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 311.916646][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.928182][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.941426][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 311.951524][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.965325][ T5898] usb 4-1: config 0 descriptor?? [ 311.971053][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 311.984561][ T797] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.996121][ T797] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.007634][ T5898] hub 4-1:0.0: USB hub found [ 312.021682][ T797] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 312.031225][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.039401][ T797] usb 6-1: Product: syz [ 312.044097][ T797] usb 6-1: Manufacturer: syz [ 312.048785][ T797] usb 6-1: SerialNumber: syz [ 312.218455][ T5898] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 312.435190][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 312.455960][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.469106][ T797] usb 6-1: 0:2 : does not exist [ 312.490640][ T5898] usb 4-1: USB disconnect, device number 19 [ 313.462582][ T9385] fuse: Unknown parameter ' ' [ 313.481772][ T797] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 313.561646][ T797] usb 6-1: USB disconnect, device number 7 [ 313.652944][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.686552][ T9392] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 313.695032][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 313.716269][ T9392] dummy0: entered promiscuous mode [ 313.724183][ T9392] bridge0: port 3(dummy0) entered blocking state [ 313.733731][ T9392] bridge0: port 3(dummy0) entered disabled state [ 313.740635][ T9392] dummy0: entered allmulticast mode [ 313.925018][ T9395] loop5: detected capacity change from 0 to 3 [ 313.935424][ T9395] loop5: [POWERTEC] p1 p2 p3 [ 313.946886][ T9395] loop5: p1 start 536870912 is beyond EOD, truncated [ 313.957175][ T9395] loop5: p2 size 327680 extends beyond EOD, truncated [ 313.967561][ T9395] loop5: p3 size 393216 extends beyond EOD, truncated [ 314.009702][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 314.019596][ T797] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 314.038858][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 314.361384][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 314.393139][ T797] usb 2-1: config 6 has an invalid interface number: 84 but max is 0 [ 314.401658][ T797] usb 2-1: config 6 has no interface number 0 [ 314.532820][ T797] usb 2-1: config 6 interface 84 has no altsetting 0 [ 314.549295][ T797] usb 2-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=27.70 [ 314.559196][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.572485][ T797] usb 2-1: Product: syz [ 314.578330][ T797] usb 2-1: Manufacturer: syz [ 314.585774][ T797] usb 2-1: SerialNumber: syz [ 314.970904][ T797] gspca_main: spca501-2.14.0 probing 1776:501c [ 314.978719][ T797] gspca_spca501: reg write: error -71 [ 314.987967][ T797] spca501 2-1:6.84: Reg write failed for 0x02,0x07,0x05 [ 314.999513][ T797] spca501 2-1:6.84: probe with driver spca501 failed with error -22 [ 315.040943][ T797] usb 2-1: USB disconnect, device number 24 [ 315.658494][ T9420] syzkaller0: entered promiscuous mode [ 315.670696][ T9420] syzkaller0: entered allmulticast mode [ 316.198999][ T5927] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 316.384946][ T5927] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 316.416483][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.453216][ T5927] usb 5-1: config 0 descriptor?? [ 316.459220][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 316.650163][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.658219][ T9] usb 2-1: config 0 has no interface number 0 [ 316.679951][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 316.699000][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.735620][ T9] usb 2-1: config 0 descriptor?? [ 316.783936][ T9] usb 2-1: selecting invalid altsetting 1 [ 316.812789][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 316.838916][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 316.903252][ T5927] usb 5-1: Cannot set MAC address [ 316.923456][ T5927] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 316.968787][ T5927] usb 5-1: USB disconnect, device number 17 [ 317.007593][ T9] DVB: Unable to find symbol cx22700_attach() [ 317.052668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.059102][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.148342][ T9] DVB: Unable to find symbol tda10046_attach() [ 317.154758][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 317.310105][ T9] usb 2-1: USB disconnect, device number 25 [ 317.584928][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1020'. [ 317.754766][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 318.441254][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 318.607982][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.628725][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 318.682209][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 318.689851][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 318.739640][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 318.769151][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.816943][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 318.828109][ T9485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.829196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 318.861702][ T9] usb 2-1: Product: syz [ 318.871990][ T9] usb 2-1: Manufacturer: syz [ 318.880533][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.887236][ T9] usb 2-1: SerialNumber: syz [ 318.910800][ T9] usb 2-1: config 0 descriptor?? [ 318.920149][ T5926] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.942699][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'. [ 318.954065][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.979473][ T5926] usb 5-1: config 0 descriptor?? [ 318.996250][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 319.027951][ T9485] IPv6: Can't replace route, no match found [ 319.138662][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 319.153262][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 319.346743][ T9] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 319.379486][ T9] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 319.405194][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.405387][ T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 319.428618][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 319.460970][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.527030][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.539247][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.563820][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 319.584908][ T9] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 319.591768][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 319.621712][ T5926] pwc: recv_control_msg error -32 req 02 val 2100 [ 319.870603][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 320.000802][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 320.007750][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 320.206239][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 320.233690][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 320.250388][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 320.275119][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 320.702585][ T5926] pwc: Registered as video103. [ 320.712410][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 320.861210][ T5926] usb 5-1: USB disconnect, device number 18 [ 321.042080][ T9519] kvm: pic: non byte write [ 321.226958][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 321.248719][ T9] usb 2-1: USB disconnect, device number 26 [ 323.333434][ T9554] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 323.347933][ T9554] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 324.041717][ T5831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 324.196029][ T9582] mmap: syz.1.1066 (9582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 324.292115][ T5831] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.319259][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.393679][ T5831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.434992][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.457492][ T5831] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.468613][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.477041][ T5831] usb 5-1: Product: syz [ 324.483851][ T5831] usb 5-1: Manufacturer: syz [ 324.789038][ T5831] cdc_wdm 5-1:1.0: skipping garbage [ 324.794331][ T5831] cdc_wdm 5-1:1.0: skipping garbage [ 324.822885][ T5831] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 324.825464][ T9584] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 324.836784][ T5831] cdc_wdm 5-1:1.0: Unknown control protocol [ 324.991234][ T5831] usb 5-1: USB disconnect, device number 19 [ 325.027734][ T9584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.150490][ T9622] batadv_slave_0: entered promiscuous mode [ 327.921742][ T9641] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 327.949021][ T9641] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 329.826476][ T9653] syzkaller0: entered promiscuous mode [ 329.841037][ T9653] syzkaller0: entered allmulticast mode [ 329.898333][ T9656] tipc: Started in network mode [ 329.906883][ T9656] tipc: Node identity 4a615fae6b1b, cluster identity 4711 [ 329.924007][ T9656] tipc: Enabled bearer , priority 0 [ 330.026000][ T9651] tipc: Resetting bearer [ 330.156494][ T9651] tipc: Disabling bearer [ 332.959974][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.967481][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.227271][ T9696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.277877][ T9696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.566480][ T6118] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.589978][ T6118] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.629524][ T6118] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.715759][ T9721] binder: BINDER_SET_CONTEXT_MGR already set [ 333.742387][ T9727] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1111'. [ 333.762102][ T9721] binder: 9720:9721 ioctl 4018620d 200000000040 returned -16 [ 333.774877][ T9727] unsupported nlmsg_type 40 [ 334.055460][ T6118] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.207258][ T9733] netlink: 'syz.5.1113': attribute type 1 has an invalid length. [ 334.310284][ T9733] bond1: entered promiscuous mode [ 334.315979][ T9733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.470103][ T9736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.493429][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 334.513779][ T9736] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 334.551096][ T9736] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 334.827853][ T9736] bond1: (slave wireguard0): making interface the new active one [ 334.839057][ T9736] wireguard0: entered promiscuous mode [ 334.854178][ T9736] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 335.201011][ T9733] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 335.601899][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 335.894030][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 335.905286][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.905306][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.922912][ T5928] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.922934][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.922948][ T5928] usb 5-1: Product: syz [ 335.922959][ T5928] usb 5-1: Manufacturer: syz [ 335.922969][ T5928] usb 5-1: SerialNumber: syz [ 335.951970][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 336.223410][ T5928] usb 5-1: 0:2 : does not exist [ 336.235047][ T5928] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 336.598428][ T9763] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 336.629262][ T9763] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 336.631769][ T5928] usb 5-1: USB disconnect, device number 20 [ 336.670702][ T9763] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 336.710891][ T9763] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 336.757656][ T9763] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 336.815110][ T9763] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 336.848355][ T9763] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 336.995139][ T9763] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 337.156843][ T9769] batman_adv: batadv0: Adding interface: macsec1 [ 337.224313][ T9763] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 337.324968][ T9763] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 337.380383][ T9769] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.488460][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.624562][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.668963][ T9769] batman_adv: batadv0: Interface activated: macsec1 [ 337.709078][ T5928] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.140501][ T5928] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 338.178948][ T5928] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 338.202090][ T9805] binder_alloc: 9804: pid 9804 spamming oneway? 1 buffers allocated for a total size of 4096 [ 338.213167][ T9805] binder_alloc: 9804: pid 9804 spamming oneway? 2 buffers allocated for a total size of 5120 [ 338.239296][ T5928] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 338.269035][ T5928] usb 5-1: config 220 has no interface number 2 [ 338.288553][ T5928] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 338.332697][ T5928] usb 5-1: config 220 interface 0 has no altsetting 0 [ 338.355326][ T5928] usb 5-1: config 220 interface 76 has no altsetting 0 [ 338.366192][ T5928] usb 5-1: config 220 interface 1 has no altsetting 0 [ 338.383442][ T5928] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 338.392772][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.410805][ T5928] usb 5-1: Product: syz [ 338.421208][ T5928] usb 5-1: Manufacturer: syz [ 338.458961][ T5928] usb 5-1: SerialNumber: syz [ 338.702791][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 339.105005][ T5928] usb 5-1: selecting invalid altsetting 0 [ 339.119476][ T5928] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 339.159716][ T5928] uvcvideo 5-1:220.0: No valid video chain found. [ 339.193693][ T5928] usb 5-1: selecting invalid altsetting 0 [ 339.221737][ T5928] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 339.284838][ T5928] usb 5-1: USB disconnect, device number 21 [ 340.269118][ T5906] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 340.496442][ T5906] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 340.551405][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.602232][ T5906] usb 4-1: Product: syz [ 340.611854][ T5906] usb 4-1: Manufacturer: syz [ 340.642560][ T5906] usb 4-1: SerialNumber: syz [ 341.006985][ T9846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.148850][ T5906] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 341.200559][ T5906] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 342.064526][ T9865] netlink: 'syz.1.1144': attribute type 10 has an invalid length. [ 342.091146][ T9865] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.122244][ T9865] bond0: (slave team0): Enslaving as an active interface with an up link [ 342.235639][ T9871] binder_alloc: 9870: pid 9870 spamming oneway? 1 buffers allocated for a total size of 4096 [ 342.438847][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 342.450501][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 342.690831][ T5906] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 342.753543][ T5906] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 342.810581][ T5906] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 342.886031][ T5906] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 342.954600][ T5906] usb 4-1: USB disconnect, device number 20 [ 343.852790][ T9894] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 343.946567][ T9894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.061786][ T9900] bond3: (slave ip6gretap1): making interface the new active one [ 344.107841][ T9900] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 344.253160][ T9901] veth3: entered promiscuous mode [ 344.288380][ T9901] bond3: (slave veth3): Enslaving as an active interface with a down link [ 344.376689][ T9894] erspan0: entered allmulticast mode [ 344.434756][ T9894] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 345.968023][ T9933] batadv_slave_0: entered promiscuous mode [ 346.274126][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 346.631763][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 346.902587][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 347.061084][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 347.086727][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.096393][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 347.127446][ T5914] usb 5-1: config 0 descriptor?? [ 347.162103][ T5914] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 347.269136][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 347.288788][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.325775][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.373695][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.420193][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 347.457666][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.506325][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.535420][ T5906] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.581709][ T5906] usb 2-1: Manufacturer: syz [ 347.637291][ T5906] usb 2-1: config 0 descriptor?? [ 347.777956][ T9965] syzkaller0: entered promiscuous mode [ 347.786005][ T9965] syzkaller0: entered allmulticast mode [ 348.089356][ T5906] rc_core: IR keymap rc-hauppauge not found [ 348.095375][ T5906] Registered IR keymap rc-empty [ 348.131041][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.161486][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.197553][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 348.249972][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 348.304635][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.384961][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.429167][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.469034][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.509050][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.539012][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.579029][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.609283][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.649719][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.694932][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.749520][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.789378][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.830525][ T5906] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 96 [ 348.878901][ T5906] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.949257][ T5906] usb 2-1: USB disconnect, device number 27 [ 349.091295][ T5914] usb 5-1: USB disconnect, device number 22 [ 349.672237][ T9997] syzkaller0: entered promiscuous mode [ 349.714840][ T9997] syzkaller0: entered allmulticast mode [ 350.089291][T10003] create_pit_timer: 2 callbacks suppressed [ 350.089310][T10003] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 350.138690][T10003] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 350.156018][T10003] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 350.185506][T10003] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 350.217985][T10003] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 350.246910][T10003] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 350.275375][T10003] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 350.314043][T10003] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 350.364916][T10003] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 350.419167][T10003] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 354.438740][T10047] netlink: 'syz.1.1197': attribute type 11 has an invalid length. [ 355.749271][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 355.949375][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 355.963672][ T5885] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 355.969581][ T5914] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 356.007151][ T5914] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 356.046766][ T5914] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.092425][ T5914] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 356.118746][ T5914] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.145222][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.169194][ T5914] usb 2-1: Product: syz [ 356.173469][ T5914] usb 2-1: Manufacturer: syz [ 356.173499][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 356.180566][ T5914] usb 2-1: SerialNumber: syz [ 356.212904][ T5885] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 356.226276][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 356.239650][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.255005][ T5914] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input23 [ 356.258207][ T5885] usb 6-1: Product: syz [ 356.288952][ T5885] usb 6-1: Manufacturer: syz [ 356.293699][ T5885] usb 6-1: SerialNumber: syz [ 356.324900][ T5885] usb 6-1: config 0 descriptor?? [ 356.350821][ T5885] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 356.428958][ T5914] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 356.437269][ T5914] (id 0x00) [ 356.539449][ T5914] rc_core: IR keymap rc-imon-pad not found [ 356.545332][ T5914] Registered IR keymap rc-empty [ 356.562681][ T5914] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 356.584024][ T5914] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 356.643727][ T5914] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 356.674427][ T5914] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input24 [ 356.703462][ T5914] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:28> initialized [ 356.929104][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 356.981668][ T5885] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 356.991896][ T5885] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 357.012015][ T5885] usb 6-1: USB disconnect, device number 8 [ 357.088987][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 357.096351][ T42] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 357.106857][ T42] usb 4-1: config 0 has no interface number 0 [ 357.113625][ T42] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 357.127410][ T42] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 357.136903][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.145005][ T42] usb 4-1: Product: syz [ 357.149497][ T42] usb 4-1: Manufacturer: syz [ 357.154134][ T42] usb 4-1: SerialNumber: syz [ 357.162219][ T42] usb 4-1: config 0 descriptor?? [ 357.168721][T10074] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 357.260453][T10080] imon:send_packet: task interrupted [ 357.266178][T10080] imon:send_packet: packet tx failed (-512) [ 357.273526][T10080] imon:vfd_write: send packet #1 failed [ 357.282936][T10080] imon:send_packet: packet tx failed (-32) [ 357.289918][T10080] imon:vfd_write: send packet #0 failed [ 357.301718][T10080] imon:display_open: display port is already open [ 357.384205][T10074] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 357.456210][ T5906] usb 2-1: USB disconnect, device number 28 [ 357.638958][ T5914] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 357.799048][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 357.806009][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.814157][ T5914] usb 5-1: config 0 has no interface number 0 [ 357.823272][ T5914] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 357.832526][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.840825][ T5914] usb 5-1: Product: syz [ 357.845088][ T5914] usb 5-1: Manufacturer: syz [ 357.849789][ T5914] usb 5-1: SerialNumber: syz [ 357.857921][ T5914] usb 5-1: config 0 descriptor?? [ 357.868478][ T5914] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 358.113017][T10094] input: syz1 as /devices/virtual/input/input25 [ 358.442559][T10104] syzkaller0: entered promiscuous mode [ 358.448141][T10104] syzkaller0: entered allmulticast mode [ 358.461293][T10104] tipc: Started in network mode [ 358.466290][T10104] tipc: Node identity 261e8ac64667, cluster identity 4711 [ 358.475152][T10104] tipc: Enabled bearer , priority 0 [ 358.484736][T10103] tipc: Resetting bearer [ 358.504470][T10103] tipc: Disabling bearer [ 358.529020][ T5885] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 358.638107][T10106] binder_alloc: 10105: binder_alloc_buf, no vma [ 358.680385][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 358.701915][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 358.719895][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 358.736831][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 358.746485][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.755459][ T5885] usb 2-1: Product: syz [ 358.760282][ T5885] usb 2-1: Manufacturer: syz [ 358.768326][ T5885] usb 2-1: SerialNumber: syz [ 358.784240][ T5885] usb 2-1: config 0 descriptor?? [ 358.794478][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 358.803980][ T5885] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 359.419121][ T5885] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 359.443268][ T5885] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 359.643394][ T42] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 359.674519][ T42] asix 4-1:0.188: probe with driver asix failed with error -71 [ 359.716374][ T42] usb 4-1: USB disconnect, device number 21 [ 359.830361][T10115] syzkaller0: entered promiscuous mode [ 359.836127][T10115] syzkaller0: entered allmulticast mode [ 359.861873][T10115] tipc: Enabled bearer , priority 0 [ 359.871528][T10114] tipc: Resetting bearer [ 359.890816][T10114] tipc: Disabling bearer [ 360.078116][ T5885] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 360.097216][ T5885] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 360.349882][ T5906] usb 5-1: USB disconnect, device number 23 [ 360.379843][ T5914] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 360.552220][ T5885] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 360.561365][ T5885] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 360.573305][ T5885] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 360.611411][ T5885] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 360.638504][ T5885] usb 2-1: USB disconnect, device number 29 [ 360.804741][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.831653][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 360.849008][ T5914] usb 6-1: can't read configurations, error -71 [ 360.871969][T10124] syzkaller0: entered promiscuous mode [ 360.908947][T10124] syzkaller0: entered allmulticast mode [ 362.062559][T10156] kvm: pic: non byte write [ 363.352727][ T5885] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 363.519986][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 363.527796][ T5885] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 363.557636][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.568971][ T5885] usb 6-1: config 0 has no interface number 0 [ 363.592289][ T5885] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.617209][ T5885] usb 6-1: config 0 interface 196 has no altsetting 0 [ 363.636370][ T5885] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 363.660584][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.681464][ T5885] usb 6-1: Product: syz [ 363.688032][ T5885] usb 6-1: Manufacturer: syz [ 363.695900][ T5885] usb 6-1: SerialNumber: syz [ 363.705273][ T5885] usb 6-1: config 0 descriptor?? [ 363.932453][ T5885] ipheth 6-1:0.196: Unable to find endpoints [ 363.957733][ T5885] usb 6-1: USB disconnect, device number 11 [ 364.851058][T10187] kvm: pic: non byte write [ 366.710754][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 366.877445][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 366.899981][ T6105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.143786][ T6105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.289072][ T5899] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 367.334201][ T6105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.460010][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 367.501016][ T6105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.516847][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.551166][ T5899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.605861][ T5899] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 367.649472][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.672890][ T5899] usb 2-1: Product: syz [ 367.677113][ T5899] usb 2-1: Manufacturer: syz [ 367.711623][ T5899] usb 2-1: SerialNumber: syz [ 367.760304][ T5899] usb 2-1: config 0 descriptor?? [ 367.992376][ T6105] bridge_slave_1: left allmulticast mode [ 368.027940][ T6105] bridge_slave_1: left promiscuous mode [ 368.051525][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.145222][ T6105] bridge_slave_0: left allmulticast mode [ 368.166821][ T6105] bridge_slave_0: left promiscuous mode [ 368.202320][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.336866][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.345929][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.354040][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.377360][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.385279][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.644133][T10230] binder: transaction release 209 bad handle 1, ret = -22 [ 369.287627][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.385448][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.500070][ T6105] bond0 (unregistering): Released all slaves [ 369.636568][ T6105] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 369.712572][ T6105] wireguard0: left promiscuous mode [ 369.822809][ T6105] bond1 (unregistering): Released all slaves [ 370.408983][ T5828] Bluetooth: hci4: command tx timeout [ 370.409300][ T5914] usb 2-1: USB disconnect, device number 30 [ 370.488706][ T6105] tipc: Left network mode [ 371.469432][ T6105] hsr_slave_0: left promiscuous mode [ 371.510170][ T6105] hsr_slave_1: left promiscuous mode [ 371.557912][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.602648][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.664032][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.690357][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.733689][ T6105] veth1_macvtap: left promiscuous mode [ 371.766836][ T6105] veth0_macvtap: left promiscuous mode [ 371.782746][ T6105] veth1_vlan: left promiscuous mode [ 371.798331][ T6105] veth0_vlan: left promiscuous mode [ 371.805724][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 372.489066][ T5828] Bluetooth: hci4: command tx timeout [ 372.780752][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 372.871098][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 373.456391][T10227] chnl_net:caif_netlink_parms(): no params data found [ 374.034645][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.071989][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.109188][T10227] bridge_slave_0: entered allmulticast mode [ 374.137498][T10227] bridge_slave_0: entered promiscuous mode [ 374.159953][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.169157][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.201170][T10227] bridge_slave_1: entered allmulticast mode [ 374.239009][T10227] bridge_slave_1: entered promiscuous mode [ 374.412378][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.463724][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.581008][ T5828] Bluetooth: hci4: command tx timeout [ 374.649212][ T5899] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 374.666228][T10227] team0: Port device team_slave_0 added [ 374.704867][T10227] team0: Port device team_slave_1 added [ 374.840321][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.856423][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 374.871503][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.925410][ T5899] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 374.937319][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.958904][ T5899] usb 4-1: Product: syz [ 374.963227][ T5899] usb 4-1: Manufacturer: syz [ 374.967850][ T5899] usb 4-1: SerialNumber: syz [ 374.972945][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.009101][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.016131][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.072557][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.093111][ T5899] usb 4-1: config 0 descriptor?? [ 375.290015][T10227] hsr_slave_0: entered promiscuous mode [ 375.297333][T10227] hsr_slave_1: entered promiscuous mode [ 375.304418][T10227] debugfs: 'hsr0' already exists in 'hsr' [ 375.310455][T10227] Cannot create hsr debugfs directory [ 375.333139][ T5899] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 022 [ 376.013764][T10330] i2c i2c-1: failure reading status [ 376.044452][T10227] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.095737][T10227] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.125614][T10227] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.155538][T10227] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.375908][T10227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.428763][T10227] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.457557][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.464809][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.495701][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.502929][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.645948][T10227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.652924][ T5828] Bluetooth: hci4: command tx timeout [ 376.782499][T10227] veth0_vlan: entered promiscuous mode [ 376.825288][T10227] veth1_vlan: entered promiscuous mode [ 376.932612][T10227] veth0_macvtap: entered promiscuous mode [ 377.019613][T10227] veth1_macvtap: entered promiscuous mode [ 377.197882][T10227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.246634][T10227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.281167][ T6113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.314080][ T6113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.356493][ T6113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.383007][ T6113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.433745][ T5899] usb 4-1: USB disconnect, device number 22 [ 377.647020][T10395] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 377.749322][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.771047][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.870866][T10395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.013684][T10400] bond1: (slave veth5): Enslaving as an active interface with a down link [ 378.126953][T10404] vlan0: entered allmulticast mode [ 378.143606][T10404] veth0_to_bond: entered allmulticast mode [ 378.166679][T10404] veth0_to_bond: entered promiscuous mode [ 378.186068][T10404] veth0_to_bond: left promiscuous mode [ 378.202892][T10404] bond1: (slave vlan0): making interface the new active one [ 378.222734][T10404] veth0_to_bond: entered promiscuous mode [ 378.236120][T10404] vlan0: entered promiscuous mode [ 378.247524][T10404] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 378.337687][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.354403][ T5885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 378.376062][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.494931][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.503190][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.539472][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 378.589499][ T5885] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 378.609879][ T5885] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 378.643322][ T5885] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.671260][ T5885] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 378.703607][ T5885] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 378.723406][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.753943][ T5885] usb 2-1: Product: syz [ 378.774301][ T5885] usb 2-1: Manufacturer: syz [ 378.788566][ T5885] usb 2-1: SerialNumber: syz [ 378.864469][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 378.890355][ T5885] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input26 [ 379.099438][ T5885] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 379.175001][ T5885] (id 0x00) [ 379.419311][ T930] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 379.469219][ T5885] rc_core: IR keymap rc-imon-pad not found [ 379.494664][ T5885] Registered IR keymap rc-empty [ 379.513794][ T5885] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 379.560242][ T5885] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 379.614966][ T5885] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 379.636844][ T930] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 379.668403][ T930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.687367][ T5885] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input27 [ 379.717786][ T930] usb 5-1: config 0 has no interface number 0 [ 379.740323][ T930] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 379.753930][ T5885] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:31> initialized [ 379.781009][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.845220][ T930] usb 5-1: config 0 descriptor?? [ 380.130518][ T6107] syzkaller0: tun_net_xmit 76 [ 380.139487][ T6107] syzkaller0: tun_net_xmit 48 [ 380.159206][ T930] syzkaller0: tun_net_xmit 76 [ 380.181859][T10453] syzkaller0: create flow: hash 2156723362 index 1 [ 380.258720][T10453] syzkaller0: delete flow: hash 2156723362 index 1 [ 381.453669][ T5906] usb 2-1: USB disconnect, device number 31 [ 382.134088][ T5906] usb 5-1: USB disconnect, device number 24 [ 382.693136][ T5906] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 382.859148][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 382.866458][ T5906] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.877886][ T5906] usb 7-1: config 0 has no interface number 0 [ 382.897652][ T5906] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 382.908958][ T5906] usb 7-1: config 0 interface 1 has no altsetting 0 [ 382.918604][ T5906] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 382.928330][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.937692][ T5906] usb 7-1: Product: syz [ 382.943245][ T5906] usb 7-1: Manufacturer: syz [ 382.947931][ T5906] usb 7-1: SerialNumber: syz [ 382.961155][ T5906] usb 7-1: config 0 descriptor?? [ 383.183942][ T5906] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 383.193977][ T5906] cx231xx 7-1:0.1: Failed to read PCB config [ 383.200173][ T5906] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 383.213853][ T5906] usb 7-1: USB disconnect, device number 2 [ 383.689014][ T5906] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 383.868988][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 383.902701][ T5906] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.955626][ T5906] usb 7-1: config 0 has no interface number 0 [ 383.983156][ T5906] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 383.999810][T10491] veth3: left promiscuous mode [ 384.031781][ T5906] usb 7-1: config 0 interface 1 has no altsetting 0 [ 384.057765][ T5906] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 384.057796][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.057816][ T5906] usb 7-1: Product: syz [ 384.057834][ T5906] usb 7-1: Manufacturer: syz [ 384.057845][ T5906] usb 7-1: SerialNumber: syz [ 384.065714][ T5906] usb 7-1: config 0 descriptor?? [ 384.290821][ T5906] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 384.333904][ T5906] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 384.465469][ T5906] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 384.483388][ T5906] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 384.529577][ T5906] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 384.669318][ T5906] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 384.741918][ T5906] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -110 [ 384.843499][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 384.875272][ T5906] i2c i2c-2: Added multiplexed i2c bus 4 [ 384.930660][ T5906] i2c i2c-2: Added multiplexed i2c bus 5 [ 384.958623][T10507] syzkaller0: entered promiscuous mode [ 384.966899][ T5906] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 384.981624][T10507] syzkaller0: entered allmulticast mode [ 385.009816][ T5906] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 385.044648][T10507] tipc: Started in network mode [ 385.083119][T10507] tipc: Node identity 461642d87c7b, cluster identity 4711 [ 385.140105][T10507] tipc: Enabled bearer , priority 0 [ 385.151455][ T5906] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 385.170384][ T5906] usb 7-1: USB disconnect, device number 3 [ 385.170922][T10506] tipc: Resetting bearer [ 385.321880][T10506] tipc: Disabling bearer [ 385.644734][T10520] syzkaller0: entered promiscuous mode [ 385.652445][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 385.681967][T10520] syzkaller0: entered allmulticast mode [ 385.864874][T10522] bond1: (slave vcan1): refused to change device type [ 385.971829][ T930] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 386.177657][ T930] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 386.202761][ T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.214162][ T930] usb 2-1: Product: syz [ 386.224874][ T930] usb 2-1: Manufacturer: syz [ 386.230211][ T930] usb 2-1: SerialNumber: syz [ 386.629017][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 386.664775][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 386.679201][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 386.681043][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 386.780139][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 386.792014][ T42] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 386.801332][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.810153][ T42] usb 5-1: Product: syz [ 386.814395][ T42] usb 5-1: Manufacturer: syz [ 386.820848][ T42] usb 5-1: SerialNumber: syz [ 386.828246][ T42] usb 5-1: config 0 descriptor?? [ 386.837534][ T42] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 386.839337][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 386.854312][ T5906] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 386.863620][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.871773][ T5906] usb 4-1: Product: syz [ 386.876055][ T5906] usb 4-1: Manufacturer: syz [ 386.880994][ T5906] usb 4-1: SerialNumber: syz [ 387.112103][ T5906] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 387.141116][ T5906] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 387.165215][ T5906] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 387.199128][ T5906] usb 4-1: media controller created [ 387.291344][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.544363][ T5906] zl10353_read_register: readreg error (reg=127, ret==-71) [ 387.760678][ T5906] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 387.826524][ T5906] usb 4-1: USB disconnect, device number 23 [ 387.927051][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 388.399867][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 388.467419][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 388.520633][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 388.556693][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 388.606662][ T930] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 388.664849][ T930] usb 2-1: USB disconnect, device number 32 [ 388.765135][T10559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.106861][ T42] gspca_ov534_9: sccb_write failed [ 389.315891][ T42] gspca_ov534_9: reg_w failed -71 [ 389.511224][ T6099] vlan0: left promiscuous mode [ 389.609384][ T42] gspca_ov534_9: Unknown sensor 0000 [ 389.609498][ T42] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 389.683576][ T42] usb 5-1: USB disconnect, device number 25 [ 390.355130][T10583] ip6gre1: entered promiscuous mode [ 390.405582][T10583] ip6gre1: entered allmulticast mode [ 390.439061][T10586] netlink: 'syz.4.1331': attribute type 6 has an invalid length. [ 390.477839][T10586] netlink: 'syz.4.1331': attribute type 7 has an invalid length. [ 390.525533][T10586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1331'. [ 391.272713][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.280154][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.547318][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.576091][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.806616][ T6099] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.828558][ T6099] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.951902][T10612] netlink: 'syz.0.1336': attribute type 10 has an invalid length. [ 392.772173][T10611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.863394][ T6099] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.891440][ T6099] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.919505][ T6099] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.963562][T10612] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 393.005927][ T6099] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.043916][ T6099] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.059060][ T930] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 393.084105][ T6099] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.242515][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 393.261287][ T930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 393.296863][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.353988][ T930] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.393739][ T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.425812][ T930] usb 2-1: Product: syz [ 393.446091][ T930] usb 2-1: Manufacturer: syz [ 393.480575][ T930] usb 2-1: SerialNumber: syz [ 393.520161][ T930] usb 2-1: config 0 descriptor?? [ 393.552775][ T930] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 393.583139][ T930] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 393.780488][T10643] sctp: [Deprecated]: syz.0.1345 (pid 10643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.780488][T10643] Use struct sctp_sack_info instead [ 394.141541][ T930] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 394.161770][ T930] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 395.036528][T10670] syzkaller0: entered promiscuous mode [ 395.051953][T10670] syzkaller0: entered allmulticast mode [ 395.209110][ T930] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 395.409327][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 395.609054][ T930] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 395.636045][ T5928] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 395.645924][ T930] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 395.686687][T10684] geneve2: entered promiscuous mode [ 395.724365][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.734891][ T6099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 46593 - 0 [ 395.754297][ T930] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 395.784389][ T930] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 395.792318][ T5928] usb 5-1: Product: syz [ 395.807467][ T6099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 46593 - 0 [ 395.829054][ T5928] usb 5-1: Manufacturer: syz [ 395.837837][ T930] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 395.855739][ T5928] usb 5-1: SerialNumber: syz [ 395.862079][ T930] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 395.868675][ T6099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 46593 - 0 [ 395.947582][ T930] usb 2-1: USB disconnect, device number 33 [ 395.974288][ T6099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 46593 - 0 [ 396.444705][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 396.497130][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 398.029046][ T42] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 398.054169][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 398.095033][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 398.131089][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 398.175134][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 398.229602][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 398.252510][ T5928] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 398.290986][ T42] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.312168][ T42] usb 2-1: config 0 has no interface number 0 [ 398.340674][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.357389][ T5928] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 398.369668][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.387229][ T42] usb 2-1: Product: syz [ 398.397763][ T5928] usb 5-1: USB disconnect, device number 26 [ 398.407481][ T42] usb 2-1: Manufacturer: syz [ 398.437058][ T42] usb 2-1: SerialNumber: syz [ 398.498367][ T42] usb 2-1: config 0 descriptor?? [ 398.653699][T10734] create_pit_timer: 3 callbacks suppressed [ 398.653719][T10734] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 398.668015][T10734] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 399.035502][ T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 399.069772][ T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 399.933656][ T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 399.962499][ T42] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 400.736206][T10766] tipc: Started in network mode [ 400.748677][T10766] tipc: Node identity 9e9ad54074ad, cluster identity 4711 [ 400.776880][T10766] tipc: Enabled bearer , priority 0 [ 400.813664][T10768] syzkaller0: entered promiscuous mode [ 400.833766][T10768] syzkaller0: entered allmulticast mode [ 400.898179][T10766] tipc: Resetting bearer [ 400.945538][T10765] tipc: Resetting bearer [ 401.020970][ T5928] usb 2-1: USB disconnect, device number 34 [ 401.059533][T10765] tipc: Disabling bearer [ 401.228028][T10775] binder_alloc: 10773: pid 10773 spamming oneway? 1 buffers allocated for a total size of 4096 [ 401.493483][T10779] netlink: 'syz.6.1378': attribute type 1 has an invalid length. [ 401.519221][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 401.543228][T10780] netlink: 'syz.1.1380': attribute type 7 has an invalid length. [ 401.576506][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1378'. [ 401.579887][T10780] netlink: 'syz.1.1380': attribute type 8 has an invalid length. [ 401.592662][T10782] loop5: detected capacity change from 0 to 7 [ 401.621733][T10779] ipvlan0: entered promiscuous mode [ 401.625994][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 401.651360][T10782] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 401.659226][T10779] ipvlan0: entered allmulticast mode [ 401.680182][T10782] loop5: p1 start 771753728 is beyond EOD, truncated [ 401.695927][T10779] veth0_vlan: entered allmulticast mode [ 401.722210][T10782] loop5: p2 start 1818846767 is beyond EOD, truncated [ 401.765094][T10782] loop5: p3 start 1764718181 is beyond EOD, truncated [ 401.791354][T10782] loop5: p4 size 2863267840 extends beyond EOD, truncated [ 401.805104][T10786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 401.850477][T10782] loop5: p5 start 1009845767 is beyond EOD, truncated [ 401.868435][T10782] loop5: p6 start 3875569436 is beyond EOD, truncated [ 402.060162][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 402.278976][ T5913] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 402.439038][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 402.457162][ T5913] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 402.471756][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.491378][ T5913] usb 7-1: Product: syz [ 402.503596][ T5913] usb 7-1: Manufacturer: syz [ 402.514899][ T5913] usb 7-1: SerialNumber: syz [ 402.533071][ T5913] usb 7-1: config 0 descriptor?? [ 402.550918][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 403.896845][T10812] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1391'. [ 404.862742][ T5913] gspca_sonixj: reg_w1 err -71 [ 404.949019][ T5913] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 405.133106][ T5913] usb 7-1: USB disconnect, device number 4 [ 405.466891][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1397'. [ 405.580528][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 405.649708][T10832] bond2: entered promiscuous mode [ 405.669015][T10832] bond2: entered allmulticast mode [ 405.714892][T10832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.821646][T10835] erspan1: entered allmulticast mode [ 405.870417][T10835] erspan1: entered promiscuous mode [ 405.876373][T10835] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 406.206216][T10836] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 406.236004][T10836] erspan1: left promiscuous mode [ 406.316626][T10836] bond2 (unregistering): Released all slaves [ 407.252868][T10874] netlink: ct family unspecified [ 407.271677][T10874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.348957][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 407.439147][ T5913] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 407.564942][ T5899] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.606143][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.643627][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.659863][ T5899] usb 4-1: Product: syz [ 407.680736][ T5899] usb 4-1: Manufacturer: syz [ 407.700835][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.711874][ T5899] usb 4-1: SerialNumber: syz [ 407.772712][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 407.838171][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 407.949736][ T5913] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 408.003482][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.037149][ T5913] usb 7-1: Product: syz [ 408.068971][ T5913] usb 7-1: Manufacturer: syz [ 408.099569][ T5913] usb 7-1: SerialNumber: syz [ 408.135804][ T5913] usb 7-1: config 0 descriptor?? [ 408.167758][ T5913] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 408.197455][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 408.222921][ T5913] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 408.242035][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 408.263032][ T5913] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 408.883629][ T5914] usb 7-1: USB disconnect, device number 5 [ 408.978591][ T5914] garmin_gps 7-1:0.0: device disconnected [ 409.494676][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 409.949344][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 410.016225][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 410.079205][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 410.174106][ T5899] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.254010][ T5899] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 410.294199][ T5899] usb 4-1: USB disconnect, device number 24 [ 410.648238][T10910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 416.107252][T10980] input: syz0 as /devices/virtual/input/input29 [ 416.572926][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 416.759093][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 416.790379][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 416.817522][ T5928] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 416.840351][ T5928] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 416.851038][ T5928] usb 4-1: Product: syz [ 416.862053][ T5928] usb 4-1: Manufacturer: syz [ 416.866716][ T5928] usb 4-1: SerialNumber: syz [ 417.117257][ T5928] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 417.140423][ T5928] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 417.157111][ T5928] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 417.321337][ T5928] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 417.340458][ T5928] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 417.382842][ T5928] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 417.400762][ T5928] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 417.460436][ T5928] usb 4-1: USB disconnect, device number 25 [ 417.495611][ T5928] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 417.555601][ T5928] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 417.653450][ T5928] visor 4-1:1.0: device disconnected [ 420.169012][ T5914] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 420.333866][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.362303][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 420.409606][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.454799][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.492702][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.516144][T11050] syzkaller0: entered promiscuous mode [ 420.525155][T11050] syzkaller0: entered allmulticast mode [ 420.533571][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.547676][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 420.559111][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.571081][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.582498][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.595107][ T5914] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.602692][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 420.613544][ T5914] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.625331][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.636794][ T5914] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.653883][ T5914] usb 2-1: string descriptor 0 read error: -22 [ 420.660378][ T5914] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 420.669623][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.699663][ T5914] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 421.104557][ T5928] usb 2-1: USB disconnect, device number 35 [ 421.471268][T11059] kvm: pic: non byte write [ 421.648956][ T5914] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 421.869543][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 421.905271][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 421.964947][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.056794][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 422.123571][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.202302][ T5914] usb 5-1: Product: syz [ 422.240612][ T5914] usb 5-1: Manufacturer: syz [ 422.265368][ T5914] usb 5-1: SerialNumber: syz [ 422.307242][ T5914] usb 5-1: config 0 descriptor?? [ 422.329854][T11070] cgroup: fork rejected by pids controller in /syz6 [ 422.363861][ T5914] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 422.419069][ T5914] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 422.870657][T11394] syzkaller0: entered promiscuous mode [ 422.896680][T11394] syzkaller0: entered allmulticast mode [ 422.977691][ T5914] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 423.009615][ T5914] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 423.638589][ T5914] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 423.894729][ T5914] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 423.950880][ T5914] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 424.008270][ T5914] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 424.062174][ T5914] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 424.133302][ T5914] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 424.249887][ T5914] usb 5-1: USB disconnect, device number 27 [ 425.794240][T11436] syzkaller0: entered promiscuous mode [ 425.827450][T11436] syzkaller0: entered allmulticast mode [ 426.152349][T11442] binder_alloc: 11441: binder_alloc_buf, no vma [ 428.543032][T11464] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 428.599120][ T5913] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 428.609753][T11462] kvm: pic: non byte write [ 428.809733][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 428.822349][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.837212][T11473] syzkaller0: entered promiscuous mode [ 428.846756][ T5913] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 428.856227][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.864395][T11473] syzkaller0: entered allmulticast mode [ 428.867341][ T5913] usb 5-1: Product: syz [ 428.877160][ T5913] usb 5-1: Manufacturer: syz [ 428.885981][ T5913] usb 5-1: SerialNumber: syz [ 428.914303][ T5913] usb 5-1: config 0 descriptor?? [ 428.951058][ T5913] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 429.281063][ T5913] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 429.288056][ T5913] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 429.510919][ T42] usb 5-1: USB disconnect, device number 28 [ 430.869474][T11490] cgroup: fork rejected by pids controller in /syz4 [ 431.380091][T11766] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 432.102630][T11766] bond1: entered promiscuous mode [ 432.109697][T11766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.129561][T11809] macvtap1: entered allmulticast mode [ 432.203089][T11882] bond1: (slave bridge1): making interface the new active one [ 432.216022][T11882] bridge1: entered promiscuous mode [ 432.234329][T11882] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 434.953789][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.455863][T11936] loop2: detected capacity change from 0 to 7 [ 435.501890][T11936] loop2: [ 435.512339][T11936] loop2: partition table partially beyond EOD, truncated [ 436.711074][T11951] syzkaller0: entered promiscuous mode [ 436.717633][T11951] syzkaller0: entered allmulticast mode [ 438.730582][T11983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1513'. [ 439.223529][T11994] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1516'. [ 439.272001][T11997] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1516'. [ 439.449208][ T5913] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 439.642407][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 439.652809][ T5913] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 439.660069][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 439.669823][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.686158][T12007] tipc: Started in network mode [ 439.701165][T12007] tipc: Node identity 080211000001, cluster identity 4711 [ 439.711974][ T5913] usb 7-1: config 0 descriptor?? [ 439.737598][T12007] tipc: Enabled bearer , priority 0 [ 439.836636][T12013] syzkaller0: entered promiscuous mode [ 439.842609][T12013] syzkaller0: entered allmulticast mode [ 439.859365][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 439.866791][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.889740][ T5885] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 439.903101][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.925420][ T5913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 439.935503][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.941986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.949815][ T5885] usb 2-1: Product: syz [ 439.954028][ T5885] usb 2-1: Manufacturer: syz [ 439.961609][ T5885] usb 2-1: SerialNumber: syz [ 439.973929][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.978330][ T5885] usb 2-1: config 0 descriptor?? [ 439.994234][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 440.006653][ T5913] usb 7-1: media controller created [ 440.012711][ T5885] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 440.029172][ T5885] usb 2-1: selecting invalid altsetting 1 [ 440.038555][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.210854][ T5899] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 440.389999][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 440.400319][ T5899] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 440.408719][ T5899] usb 4-1: config 0 has no interface number 0 [ 440.415429][ T5899] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.426474][ T5899] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 440.438354][ T5899] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 440.450425][ T5899] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.463908][ T5899] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.473313][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.483605][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.495757][ T5899] usb 4-1: config 0 descriptor?? [ 440.500328][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.527176][ T5899] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 440.549942][ T42] usb 2-1: USB disconnect, device number 36 [ 440.730746][ T5899] tipc: Node number set to 134418688 [ 440.821805][ T5885] usb 4-1: USB disconnect, device number 26 [ 440.822010][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 440.850753][T12017] ldusb: No device or device unplugged -19 [ 440.850755][ T5885] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 441.008947][ T5913] stb0899_attach: Driver disabled by Kconfig [ 441.016457][ T5913] az6027: no front-end attached [ 441.016457][ T5913] [ 441.035062][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 441.070595][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 441.115824][ T5913] dvb-usb: schedule remote query interval to 400 msecs. [ 441.124062][ T5913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 442.189025][ T29] audit: type=1800 audit(1773359716.371:9): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1528" name="bus" dev="ramfs" ino=48483 res=0 errno=0 [ 442.342935][ T5899] usb 7-1: USB disconnect, device number 6 [ 442.576114][ T5899] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 442.912290][T12052] syzkaller0: entered promiscuous mode [ 442.923804][T12052] syzkaller0: entered allmulticast mode [ 443.418987][ T5899] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 443.591606][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.630860][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.677552][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.699650][ T5913] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 443.739549][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.810373][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.867347][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.898078][ T5913] usb 7-1: config 0 has no interfaces? [ 443.916514][ T5913] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 443.951466][ T5899] usb 5-1: config 0 descriptor?? [ 443.974473][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.052527][ T5913] usb 7-1: config 0 descriptor?? [ 444.302676][T12054] netlink: 'syz.6.1537': attribute type 39 has an invalid length. [ 444.520458][ T5899] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 444.669416][ T5913] usb 7-1: string descriptor 0 read error: -71 [ 444.718976][ T5913] usb 7-1: USB disconnect, device number 7 [ 445.362049][ T5913] usb 5-1: USB disconnect, device number 29 [ 445.565940][T12083] loop8: detected capacity change from 0 to 524287999 [ 445.640116][ T5847] buffer_io_error: 11 callbacks suppressed [ 445.640139][ T5847] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 445.948980][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 446.102512][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 446.111637][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 446.130784][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 446.169052][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 446.187875][ T42] usb 7-1: config 3 has an invalid interface number: 155 but max is 0 [ 446.198275][T12090] bridge1: port 1(geneve2) entered blocking state [ 446.226831][ T42] usb 7-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 446.258139][T12090] bridge1: port 1(geneve2) entered disabled state [ 446.278305][ T42] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 446.302131][T12090] geneve2: entered allmulticast mode [ 446.340985][T12090] geneve2: entered promiscuous mode [ 446.346324][ T42] usb 7-1: config 3 has no interface number 0 [ 446.395058][ T42] usb 7-1: config 3 interface 155 has no altsetting 0 [ 446.434283][ T42] usb 7-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 446.459298][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.497894][ T42] usb 7-1: Product: syz [ 446.512839][ T42] usb 7-1: Manufacturer: syz [ 446.533988][ T42] usb 7-1: SerialNumber: syz [ 446.539116][T12094] syzkaller0: entered promiscuous mode [ 446.545274][ T5885] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 446.583746][T12094] syzkaller0: entered allmulticast mode [ 446.759029][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 446.789334][ T5885] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 446.819074][ T5885] usb 2-1: config 0 has no interface number 0 [ 446.839742][ T42] uvcvideo 7-1:3.155: probe with driver uvcvideo failed with error -22 [ 446.858711][ T5885] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 446.898363][ T42] usb 7-1: USB disconnect, device number 8 [ 446.907611][ T5885] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 446.959381][ T5885] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 446.978687][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.997220][ T5885] usb 2-1: Product: syz [ 447.027544][ T5885] usb 2-1: Manufacturer: syz [ 447.037683][ T5885] usb 2-1: SerialNumber: syz [ 447.077264][ T5885] usb 2-1: config 0 descriptor?? [ 447.119535][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 46593 - 0 [ 447.161909][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 46593 - 0 [ 447.232381][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 46593 - 0 [ 447.259471][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 46593 - 0 [ 447.639788][ T5885] radio-si470x 2-1:0.35: this is not a si470x device. [ 447.673355][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1555'. [ 447.701005][ T5885] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 447.717265][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1555'. [ 447.898988][ T5913] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 448.086139][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.096633][ T5913] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.106132][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.137260][ T5913] usb 7-1: config 0 descriptor?? [ 448.156646][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 448.569686][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 448.583430][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 448.605680][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 448.621503][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 448.637208][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 448.652921][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 448.668363][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 448.682346][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 448.700049][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 448.715641][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 448.800377][ T5899] usb 2-1: USB disconnect, device number 37 [ 448.933983][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 448.964178][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 448.982134][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 449.005017][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 449.029417][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 449.066863][ T5913] pwc: Registered as video103. [ 449.099171][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 449.176203][ T5913] usb 7-1: USB disconnect, device number 9 [ 453.735507][ T29] audit: type=1804 audit(1773359727.891:10): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1575" name="/newroot/43/file0" dev="fuse" ino=1 res=1 errno=0 [ 455.566055][T12207] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 455.878948][ T5899] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 456.058988][ T5899] usb 7-1: Using ep0 maxpacket: 32 [ 456.083581][ T5899] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 456.102009][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.141653][ T5899] usb 7-1: config 0 descriptor?? [ 456.168390][ T5899] gspca_main: sunplus-2.14.0 probing 041e:400b [ 456.199329][ T5913] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 456.371529][ T5913] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 456.416611][ T5913] usb 5-1: config 0 has no interface number 0 [ 456.430996][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.459152][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 456.492945][T12221] syzkaller0: entered promiscuous mode [ 456.501920][ T5913] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 456.513085][T12221] syzkaller0: entered allmulticast mode [ 456.536015][ T5913] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 456.549898][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.563042][ T5913] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 456.573032][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.608002][ T5913] usb 5-1: config 0 descriptor?? [ 456.619247][T12214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 456.668496][ T5913] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 456.847735][ T5913] usb 5-1: USB disconnect, device number 30 [ 456.869463][ T5913] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 457.184655][ T5899] gspca_sunplus: reg_r err -71 [ 457.194373][ T5899] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 457.219056][ T5899] usb 7-1: USB disconnect, device number 10 [ 457.930209][T12235] syzkaller0: entered promiscuous mode [ 457.935824][T12235] syzkaller0: entered allmulticast mode [ 458.706077][ T29] audit: type=1800 audit(1773359732.901:11): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1596" name="bus" dev="tmpfs" ino=1669 res=0 errno=0 [ 459.808955][ T5899] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 459.989051][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 460.017603][ T5899] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 460.064281][ T5899] usb 5-1: config 0 has no interface number 0 [ 460.094474][T12262] syzkaller0: entered promiscuous mode [ 460.121575][T12262] syzkaller0: entered allmulticast mode [ 460.142329][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 460.182852][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.227442][ T5899] usb 5-1: Product: syz [ 460.249558][ T5899] usb 5-1: Manufacturer: syz [ 460.265302][ T5899] usb 5-1: SerialNumber: syz [ 460.325617][ T5899] usb 5-1: config 0 descriptor?? [ 460.795585][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 460.821921][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.899230][ T5885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 461.061416][ T5885] usb 7-1: config 0 has no interfaces? [ 461.071878][ T5885] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.081142][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.090210][ T5885] usb 7-1: Product: syz [ 461.094528][ T5885] usb 7-1: Manufacturer: syz [ 461.099471][ T5885] usb 7-1: SerialNumber: syz [ 461.108443][ T5885] usb 7-1: config 0 descriptor?? [ 461.119029][ T29] audit: type=1804 audit(1773359735.321:12): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1604" name="/newroot/324/file1" dev="fuse" ino=1 res=1 errno=0 [ 461.451484][ T5828] Bluetooth: hci4: ISO packet too small [ 461.607341][ T5885] usb 7-1: USB disconnect, device number 11 [ 462.439836][T12293] syzkaller0: entered promiscuous mode [ 462.445398][T12293] syzkaller0: entered allmulticast mode [ 462.880620][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 462.949268][ T5899] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 463.013421][ T5899] usb 5-1: USB disconnect, device number 31 [ 463.587081][T12305] syzkaller0: entered promiscuous mode [ 463.633286][T12305] syzkaller0: entered allmulticast mode [ 463.906153][T12314] syzkaller0: entered promiscuous mode [ 463.933625][T12314] syzkaller0: entered allmulticast mode [ 464.309042][ T5914] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 464.505232][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.578993][ T5914] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.635051][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.697408][ T5914] usb 7-1: config 0 descriptor?? [ 464.730599][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 465.150868][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 465.221754][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 465.290101][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 465.360102][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 465.397928][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 465.630951][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 465.679270][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 465.705109][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 465.941142][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 465.948626][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 466.000845][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 466.027739][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 466.046018][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 466.059654][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 466.088020][ T5914] pwc: Registered as video103. [ 466.106381][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 466.167290][ T5914] usb 7-1: USB disconnect, device number 12 [ 466.211848][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 467.049370][ T5914] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 467.241244][ T5914] usb 7-1: config 0 has no interfaces? [ 467.271523][ T5914] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 467.334495][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.364644][ T5914] usb 7-1: Product: syz [ 467.384939][ T5914] usb 7-1: Manufacturer: syz [ 467.406662][ T5914] usb 7-1: SerialNumber: syz [ 467.441998][ T5914] usb 7-1: config 0 descriptor?? [ 467.932826][ T5828] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 468.069571][ T5914] usb 7-1: USB disconnect, device number 13 [ 468.296801][T12377] syzkaller0: entered promiscuous mode [ 468.317480][T12377] syzkaller0: entered allmulticast mode [ 469.389038][ T42] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 469.599105][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 469.607292][ T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 469.627149][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.681303][ T42] usb 2-1: config 0 descriptor?? [ 469.713859][ T42] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 470.803893][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 471.379266][ T930] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 471.581141][ T930] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 471.603634][T12428] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 471.626546][ T930] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 471.637683][T12428] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 471.649136][ T930] usb 4-1: config 8 has no interface number 0 [ 471.656791][T12428] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 471.669330][ T930] usb 4-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 471.684213][T12428] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 471.694063][T12428] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 471.702197][ T930] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 471.712038][T12428] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 471.721876][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.739193][T12428] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 471.750397][T12428] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 471.765234][ T930] usb 4-1: NFC: intf ffff88801ff84000 id ffffffff8f1d0640 [ 471.779204][T12428] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 471.806177][T12428] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 472.318917][ T5899] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 472.424158][ T42] gspca_sonixj: reg_w1 err -71 [ 472.433668][ T42] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 472.463776][ T42] usb 2-1: USB disconnect, device number 38 [ 472.501284][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 472.511549][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.530692][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.554643][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.578867][ T5899] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.600687][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.619718][ T5914] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 472.637316][ T5899] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.657979][ T5899] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.675473][ T5899] usb 7-1: Manufacturer: syz [ 472.693524][ T5899] usb 7-1: config 0 descriptor?? [ 472.780862][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 472.797510][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.811901][ T5914] usb 5-1: config 0 descriptor?? [ 472.836247][ T5914] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 473.010217][ T5899] rc_core: IR keymap rc-hauppauge not found [ 473.032763][ T5899] Registered IR keymap rc-empty [ 473.047776][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.089674][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.130572][ T5899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 473.151722][ T5899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input34 [ 473.174158][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.199416][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.239773][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.259188][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.288981][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.309364][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.349049][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.389037][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.456757][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.491616][ T5899] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.555290][ T5899] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.641636][ T5899] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.705138][ T5899] usb 7-1: USB disconnect, device number 14 [ 473.737940][T12454] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 473.761065][T12454] veth1_macvtap: left promiscuous mode [ 473.793184][T12454] team0: Device veth1_macvtap failed to register rx_handler [ 474.009281][ T42] usb 4-1: USB disconnect, device number 27 [ 474.529081][ T930] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 474.719566][ T930] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 474.735346][ T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.753165][ T930] usb 2-1: Product: syz [ 474.764303][ T930] usb 2-1: Manufacturer: syz [ 474.774772][ T930] usb 2-1: SerialNumber: syz [ 474.919364][ T5914] usb 5-1: USB disconnect, device number 32 [ 475.210719][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 475.267535][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 475.555022][T12479] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.1663'. [ 475.649023][ T5914] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 475.798946][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 475.805959][ T5914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 475.813831][ T5914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 475.825169][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.836747][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.848705][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.860185][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.872748][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 475.886268][ T5914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 475.894486][ T5914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 475.902027][ T5914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 475.913441][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.924938][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.937064][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.948370][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.959986][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 475.973506][ T5914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 475.983602][ T5914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 475.991217][ T5914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 476.002714][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 476.014384][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.026351][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.037703][ T5914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.049402][ T5914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 476.062929][ T5914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 476.073044][ T5914] usb 7-1: string descriptor 0 read error: -22 [ 476.079459][ T5914] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 476.088585][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.119912][ T5914] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 476.197680][T12481] syzkaller0: entered promiscuous mode [ 476.203329][T12481] syzkaller0: entered allmulticast mode [ 476.406559][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.421153][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.530194][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 476.638966][ T42] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 476.691395][ T5885] usb 7-1: USB disconnect, device number 15 [ 476.812446][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.834241][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 476.856857][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.892914][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 476.921214][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 476.929487][ T42] usb 5-1: Product: syz [ 476.933847][ T42] usb 5-1: Manufacturer: syz [ 476.938595][ T42] usb 5-1: SerialNumber: syz [ 477.157593][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 477.179678][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 477.192326][ T42] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 477.203658][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 477.225688][ T930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 477.257490][ T930] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 477.291063][ T930] usb 2-1: USB disconnect, device number 39 [ 478.119398][ T5914] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 478.319690][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 478.337517][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.382731][ T5914] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 478.423040][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.476603][ T5914] usb 2-1: config 0 descriptor?? [ 478.520115][ T5914] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 480.545148][ T42] usb 5-1: USB disconnect, device number 33 [ 480.871025][ T5914] usblp0: removed [ 480.992087][ T42] usb 2-1: USB disconnect, device number 40 [ 482.108964][ T42] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 482.328950][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.384706][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.441669][ T42] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 482.497034][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.551597][ T42] usb 2-1: config 0 descriptor?? [ 482.574647][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 482.595063][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 482.643433][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 482.696922][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 482.733436][ T42] usb 2-1: media controller created [ 482.764911][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.815445][T12539] dvb-usb: bulk message failed: -22 (2/0) [ 482.862195][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 482.868306][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 482.937340][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 482.979366][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 483.002546][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 483.021917][ T42] usb 2-1: USB disconnect, device number 41 [ 483.096367][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 483.708924][ T42] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 483.930769][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 483.962042][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.014099][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.044060][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 484.054682][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.076512][ T42] usb 4-1: config 0 descriptor?? [ 484.093309][ T42] hub 4-1:0.0: USB hub found [ 484.313269][ T42] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 484.388621][ T5914] IPVS: starting estimator thread 0... [ 484.489084][T12573] IPVS: using max 28 ests per chain, 67200 per kthread [ 484.529006][ T930] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 484.708925][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 484.731218][ T930] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 484.752526][ T42] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 484.770383][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.792914][ T930] usb 5-1: Product: syz [ 484.805362][ T930] usb 5-1: Manufacturer: syz [ 484.820804][ T930] usb 5-1: SerialNumber: syz [ 484.848932][ T5914] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 485.060775][ T930] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 485.071175][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.082736][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.083621][ T930] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 485.102871][ T5914] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 485.102898][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.123021][ T930] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 485.132209][ T930] usb 5-1: media controller created [ 485.142631][ T5914] usb 2-1: config 0 descriptor?? [ 485.153823][ T930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.167108][ T5914] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 485.175408][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 485.185103][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 485.196827][ T5914] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 485.204806][ T5914] usb 2-1: media controller created [ 485.213467][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.227436][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 485.236603][ T5914] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 485.254099][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 485.268113][ T5914] dvb-usb: schedule remote query interval to 150 msecs. [ 485.276084][ T5914] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 485.390299][ T930] zl10353_read_register: readreg error (reg=127, ret==-110) [ 485.397855][T12577] ------------[ cut here ]------------ [ 485.403678][T12577] usb 5-1: BOGUS control dir, pipe 80002280 doesn't match bRequestType c0 [ 485.412369][T12577] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.1.1691/12577 [ 485.423001][T12577] Modules linked in: [ 485.427311][T12577] CPU: 1 UID: 0 PID: 12577 Comm: syz.1.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.438475][T12577] Tainted: [L]=SOFTLOCKUP [ 485.443801][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 485.449269][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 485.454033][T12577] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 485.466339][T12577] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 485.486149][T12577] RSP: 0018:ffffc9000c02f8c8 EFLAGS: 00010246 [ 485.492619][T12577] RAX: 0000000000000000 RBX: ffff888032a10c00 RCX: 0000000080002280 [ 485.500895][T12577] RDX: ffff88802a3f3180 RSI: ffffffff8c7f0de0 RDI: ffffffff901ed0a0 [ 485.508967][T12577] RBP: 1ffff110053220d4 R08: 00000000000000c0 R09: 0000000000000000 [ 485.516978][T12577] R10: ffffc9000c02f9c0 R11: fffff52001805f44 R12: ffff888032893100 [ 485.519054][ T5914] dvb-usb: error while querying for an remote control event. [ 485.525053][T12577] R13: ffff8880299106a0 R14: 0000000080002280 R15: ffff88802a3f3180 [ 485.525085][T12577] FS: 00007f14094fe6c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 485.549831][T12577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.556478][T12577] CR2: 000000110c40d909 CR3: 0000000055d4e000 CR4: 00000000003526f0 [ 485.564964][T12577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 485.573356][T12577] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 485.581443][T12577] Call Trace: [ 485.584832][T12577] [ 485.587856][T12577] ? __init_swait_queue_head+0xa9/0x150 [ 485.593603][T12577] usb_start_wait_urb+0x12b/0x510 [ 485.598677][T12577] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 485.604333][T12577] usb_control_msg+0x232/0x3e0 [ 485.609214][T12577] gl861_ctrl_msg+0x207/0x420 [ 485.614039][T12577] ? lockdep_hardirqs_on+0x7a/0x110 [ 485.619357][T12577] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 485.624649][T12577] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 485.629887][T12577] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 485.635403][T12577] gl861_i2c_master_xfer+0x439/0x6a0 [ 485.640824][T12577] __i2c_transfer+0x79a/0x2020 [ 485.645765][T12577] ? i2c_transfer+0xc8/0x2d0 [ 485.650458][T12577] i2c_transfer+0x1cc/0x2d0 [ 485.655029][T12577] i2cdev_ioctl_rdwr+0x460/0x740 [ 485.660133][T12577] i2cdev_ioctl+0x6a5/0x880 [ 485.665117][T12577] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 485.670558][T12577] ? __fget_files+0x3a0/0x420 [ 485.675355][T12577] ? __fget_files+0x2a/0x420 [ 485.680073][T12577] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.685100][T12577] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 485.690377][T12577] __se_sys_ioctl+0xfc/0x170 [ 485.695022][T12577] do_syscall_64+0x14d/0xf80 [ 485.699760][T12577] ? trace_irq_disable+0x3b/0x150 [ 485.704848][T12577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.711048][T12577] ? clear_bhb_loop+0x40/0x90 [ 485.715768][T12577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.721812][T12577] RIP: 0033:0x7f140859c799 [ 485.726297][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.729153][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 485.745994][T12577] RSP: 002b:00007f14094fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.746022][T12577] RAX: ffffffffffffffda RBX: 00007f1408815fa0 RCX: 00007f140859c799 [ 485.746038][T12577] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 485.746053][T12577] RBP: 00007f1408632c99 R08: 0000000000000000 R09: 0000000000000000 [ 485.746067][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.746080][T12577] R13: 00007f1408816038 R14: 00007f1408815fa0 R15: 00007f140893fa48 [ 485.746115][T12577] [ 485.746138][T12577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 485.746175][T12577] CPU: 1 UID: 0 PID: 12577 Comm: syz.1.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.746274][T12577] Tainted: [L]=SOFTLOCKUP [ 485.746289][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 485.746327][T12577] Call Trace: [ 485.746353][T12577] [ 485.746380][T12577] vpanic+0x56c/0xa60 [ 485.746496][T12577] ? __pfx__printk+0x10/0x10 [ 485.746547][T12577] ? __pfx_vpanic+0x10/0x10 [ 485.746622][T12577] ? is_bpf_text_address+0x292/0x2b0 [ 485.746678][T12577] ? is_bpf_text_address+0x26/0x2b0 [ 485.746748][T12577] panic+0xc5/0xd0 [ 485.746823][T12577] ? __pfx_panic+0x10/0x10 [ 485.746932][T12577] __warn+0x315/0x4f0 [ 485.747004][T12577] ? usb_submit_urb+0x1052/0x18b0 [ 485.747089][T12577] ? usb_submit_urb+0x1052/0x18b0 [ 485.747175][T12577] __report_bug+0x29a/0x540 [ 485.747289][T12577] ? usb_submit_urb+0x1052/0x18b0 [ 485.747384][T12577] ? __pfx___report_bug+0x10/0x10 [ 485.747448][T12577] ? lockdep_hardirqs_on+0x7a/0x110 [ 485.747502][T12577] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 485.747642][T12577] report_bug_entry+0x19a/0x290 [ 485.747713][T12577] ? usb_submit_urb+0x1114/0x18b0 [ 485.747800][T12577] ? usb_submit_urb+0x1119/0x18b0 [ 485.747873][T12577] handle_bug+0xce/0x200 [ 485.747936][T12577] exc_invalid_op+0x1a/0x50 [ 485.747980][T12577] asm_exc_invalid_op+0x1a/0x20 [ 485.748033][T12577] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 485.748107][T12577] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 485.748151][T12577] RSP: 0018:ffffc9000c02f8c8 EFLAGS: 00010246 [ 485.748196][T12577] RAX: 0000000000000000 RBX: ffff888032a10c00 RCX: 0000000080002280 [ 485.748233][T12577] RDX: ffff88802a3f3180 RSI: ffffffff8c7f0de0 RDI: ffffffff901ed0a0 [ 485.748271][T12577] RBP: 1ffff110053220d4 R08: 00000000000000c0 R09: 0000000000000000 [ 485.748301][T12577] R10: ffffc9000c02f9c0 R11: fffff52001805f44 R12: ffff888032893100 [ 485.748337][T12577] R13: ffff8880299106a0 R14: 0000000080002280 R15: ffff88802a3f3180 [ 485.748399][T12577] ? usb_submit_urb+0x10a3/0x18b0 [ 485.748507][T12577] ? __init_swait_queue_head+0xa9/0x150 [ 485.748574][T12577] usb_start_wait_urb+0x12b/0x510 [ 485.748641][T12577] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 485.748747][T12577] usb_control_msg+0x232/0x3e0 [ 485.748843][T12577] gl861_ctrl_msg+0x207/0x420 [ 485.748930][T12577] ? lockdep_hardirqs_on+0x7a/0x110 [ 485.749003][T12577] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 485.749098][T12577] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 485.749188][T12577] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 485.749282][T12577] gl861_i2c_master_xfer+0x439/0x6a0 [ 485.749358][T12577] __i2c_transfer+0x79a/0x2020 [ 485.749466][T12577] ? i2c_transfer+0xc8/0x2d0 [ 485.749569][T12577] i2c_transfer+0x1cc/0x2d0 [ 485.749674][T12577] i2cdev_ioctl_rdwr+0x460/0x740 [ 485.749760][T12577] i2cdev_ioctl+0x6a5/0x880 [ 485.749863][T12577] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 485.749960][T12577] ? __fget_files+0x3a0/0x420 [ 485.750051][T12577] ? __fget_files+0x2a/0x420 [ 485.750144][T12577] ? bpf_lsm_file_ioctl+0x9/0x20 [ 485.750218][T12577] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 485.750311][T12577] __se_sys_ioctl+0xfc/0x170 [ 485.750385][T12577] do_syscall_64+0x14d/0xf80 [ 485.750471][T12577] ? trace_irq_disable+0x3b/0x150 [ 485.750578][T12577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.750644][T12577] ? clear_bhb_loop+0x40/0x90 [ 485.750719][T12577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.750775][T12577] RIP: 0033:0x7f140859c799 [ 485.750847][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.750911][T12577] RSP: 002b:00007f14094fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.750970][T12577] RAX: ffffffffffffffda RBX: 00007f1408815fa0 RCX: 00007f140859c799 [ 485.751011][T12577] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 485.751044][T12577] RBP: 00007f1408632c99 R08: 0000000000000000 R09: 0000000000000000 [ 485.751083][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.751116][T12577] R13: 00007f1408816038 R14: 00007f1408815fa0 R15: 00007f140893fa48 [ 485.751206][T12577] [ 485.752448][T12577] Kernel Offset: disabled