last executing test programs: 6.391547155s ago: executing program 3 (id=1284): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="6802"], 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x62ce413073074058) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 5.000082456s ago: executing program 4 (id=1288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xc, 0x51, {0x51, 0x2, "605da7b67492c5beda230826566384149eb5e58b58c52741469462027c00f6995e16b86319973a6e0e84c07c7a510d7fe794aa7635061acbb439c578949d0d221d7297607edb00b216428915e452e4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x30, 0xc, "4b7562ee0bb2577c788873be"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xa7}, &(0x7f0000000240)={0x20, 0x81, 0x1, "84"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "daed98"}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 'F2'}, &(0x7f0000000300)={0x20, 0x84, 0x2, "7590"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "f30d75"}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.982042357s ago: executing program 3 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060010000100000006001200010000000cfe130082848b960c12182419dce824fa3e461f3a9ab4d681b1756a"], 0x44}}, 0x0) 4.977891358s ago: executing program 2 (id=1290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 4.799549122s ago: executing program 3 (id=1293): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x5, @loopback, 0x7}, 0x17) 4.78819789s ago: executing program 2 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2b, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000001c0)={0x0}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 4.559971304s ago: executing program 3 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x6, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xa, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4, 0x2, [@TCA_CAKE_AUTORATE={0x0, 0x9, 0x6}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0x10000}]}}]}, 0x34}}, 0x20000001) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) close(r7) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xdf5, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x100005, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x11], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r12 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r12, 0x41, 0x1ff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x40, 0x4, 0x4, 0x2, 0x9, 0x2, 0x6, 0x0, 0x4b, 0x7, 0xd6, 0x9, 0x1}, {0x3a, 0x2, 0x8, 0x2, 0x7, 0xff, 0x5, 0x4, 0x8, 0xf9, 0x1, 0x4, 0x4f2000000}, {0x3bc, 0x0, 0x2, 0x5, 0xd, 0x4, 0xff, 0x9, 0x8, 0x81, 0x3, 0x2, 0xd}], 0x8}) 4.164429232s ago: executing program 3 (id=1298): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket(0x400000000010, 0x3, 0x2) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x11, 0xf1, {0xd, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) close(0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 3.156147175s ago: executing program 4 (id=1301): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2.68082042s ago: executing program 4 (id=1302): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) 2.586435069s ago: executing program 1 (id=1303): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x40800, &(0x7f0000000280)={0xa, 0x0, 0x6, @mcast1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0xb}, 0x11}], 0x621, 0x10162, 0x0) 2.334145393s ago: executing program 4 (id=1304): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0xf, 0x4) sendto$inet(r0, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2.314024951s ago: executing program 2 (id=1305): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0xf, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 2.191580176s ago: executing program 1 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xc}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.093691424s ago: executing program 2 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x6, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xa, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4, 0x2, [@TCA_CAKE_AUTORATE={0x0, 0x9, 0x6}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0x10000}]}}]}, 0x34}}, 0x20000001) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) close(r7) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xdf5, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x100005, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x11], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r12 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r12, 0x41, 0x1ff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x40, 0x4, 0x4, 0x2, 0x9, 0x2, 0x6, 0x0, 0x4b, 0x7, 0xd6, 0x9, 0x1}, {0x3a, 0x2, 0x8, 0x2, 0x7, 0xff, 0x5, 0x4, 0x8, 0xf9, 0x1, 0x4, 0x4f2000000}, {0x3bc, 0x0, 0x2, 0x5, 0xd, 0x4, 0xff, 0x9, 0x8, 0x81, 0x3, 0x2, 0xd}], 0x8}) 2.016044191s ago: executing program 4 (id=1309): socket(0x1e, 0x4, 0xfffffffd) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r4, 0x1) recvmmsg(r4, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x400, 0xfffffffd}, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r6, 0x0, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x401, 0xe50, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, 0x0) syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x8329, 0x10, 0xffffffff, 0x2c9, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000180)) 2.01555659s ago: executing program 1 (id=1310): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) dup(r1) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 1.794185408s ago: executing program 2 (id=1311): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000001000030429bd7000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="202f010000900000440012800b00010062726964676500003400028005002c0001000000050019000400000005001900040000000500260001000000080005"], 0x6c}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000) 1.786176717s ago: executing program 0 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 1.557181567s ago: executing program 2 (id=1313): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket(0x400000000010, 0x3, 0x2) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x11, 0xf1, {0xd, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) close(0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.553666312s ago: executing program 1 (id=1314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) 1.491136404s ago: executing program 0 (id=1315): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 1.373887654s ago: executing program 0 (id=1316): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r1}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @mcast2, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 1.160985577s ago: executing program 0 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c9f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4bb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b160600000000000000fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f02558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f52dac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151d8c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe517892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b56e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a006d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504af58464e433ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6a781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f716d17df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x10}) r3 = dup(0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000280)="dc8daf8d", 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x5, 0x4, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x34565348, 0x7, 0xb, [{0x8, 0xaf}, {0x2a9, 0x8}, {0x4000002, 0x8}, {0x1, 0xa3d}, {0x5}, {0x1, 0xff}, {0x0, 0xa}, {0x7ff, 0xa}], 0x6, 0x3, 0x1, 0x2}}, 0x1}) 1.077376637s ago: executing program 1 (id=1318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) personality(0x619641b6fb4b8591) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 1.015778701s ago: executing program 4 (id=1319): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 803.562711ms ago: executing program 1 (id=1320): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) pread64(r1, 0x0, 0x0, 0x100000000) 554.267777ms ago: executing program 0 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) close(0x3) 259.775149ms ago: executing program 0 (id=1322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x6, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xa, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4, 0x2, [@TCA_CAKE_AUTORATE={0x0, 0x9, 0x6}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0x10000}]}}]}, 0x34}}, 0x20000001) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) close(r7) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xdf5, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x100005, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x11], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r12 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r12, 0x41, 0x1ff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x40, 0x4, 0x4, 0x2, 0x9, 0x2, 0x6, 0x0, 0x4b, 0x7, 0xd6, 0x9, 0x1}, {0x3a, 0x2, 0x8, 0x2, 0x7, 0xff, 0x5, 0x4, 0x8, 0xf9, 0x1, 0x4, 0x4f2000000}, {0x3bc, 0x0, 0x2, 0x5, 0xd, 0x4, 0xff, 0x9, 0x8, 0x81, 0x3, 0x2, 0xd}], 0x8}) 0s ago: executing program 3 (id=1323): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2b, 0x0, 0x31) kernel console output (not intermixed with test programs): d limited to 200000 ns [ 423.030727][ T8948] tipc: Enabling of bearer rejected, failed to enable media [ 423.046164][ T8950] netlink: 'syz.3.678': attribute type 13 has an invalid length. [ 423.134322][ T8948] tipc: Enabling of bearer rejected, already enabled [ 423.387290][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.693229][ T993] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 423.844073][ T993] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 423.850538][ T993] usb 3-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 423.850583][ T993] usb 3-1: too many endpoints for config 50 interface 0 altsetting 7: 155, using maximum allowed: 30 [ 423.850626][ T993] usb 3-1: config 50 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 155 [ 423.850655][ T993] usb 3-1: config 50 interface 0 has no altsetting 0 [ 423.850690][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.943654][ T993] usbhid 3-1:50.0: couldn't find an input interrupt endpoint [ 423.954798][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.433500][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.564790][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 424.657825][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 425.464183][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.780279][ T8994] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 425.930603][ T8994] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 425.997403][ T8998] tipc: Enabling of bearer rejected, failed to enable media [ 426.113607][ T8998] tipc: Enabling of bearer rejected, already enabled [ 426.485554][ T9004] SET target dimension over the limit! [ 426.503639][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.670890][ T6747] usb 3-1: USB disconnect, device number 21 [ 426.758312][ T9008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.984309][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.172703][ T9022] bridge0: port 1(syz_tun) entered blocking state [ 427.182375][ T9022] bridge0: port 1(syz_tun) entered disabled state [ 427.182534][ T9022] syz_tun: entered allmulticast mode [ 427.209208][ T9022] syz_tun: entered promiscuous mode [ 427.216770][ T9022] bridge0: port 1(syz_tun) entered blocking state [ 427.216838][ T9022] bridge0: port 1(syz_tun) entered forwarding state [ 427.314022][ T6747] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 427.464168][ T6747] usb 3-1: Using ep0 maxpacket: 8 [ 427.466644][ T6747] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 427.468196][ T6747] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 427.496843][ T6747] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 427.496865][ T6747] usb 3-1: Product: syz [ 427.496876][ T6747] usb 3-1: Manufacturer: syz [ 427.496886][ T6747] usb 3-1: SerialNumber: syz [ 427.552359][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.766614][ T6747] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 427.766637][ T6747] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 427.766651][ T6747] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 427.970158][ T6747] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 427.970244][ T6747] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 428.004147][ T6747] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 428.032371][ T6747] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 428.049470][ T6747] usb 3-1: USB disconnect, device number 22 [ 428.092945][ T6747] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 428.149421][ T6747] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 428.150092][ T6747] visor 3-1:1.0: device disconnected [ 428.279931][ T9029] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 428.427465][ T9029] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 428.474940][ T9033] tipc: Enabling of bearer rejected, already enabled [ 428.518881][ T9033] tipc: Enabling of bearer rejected, already enabled [ 428.587764][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.000666][ T9045] netlink: 'syz.0.707': attribute type 13 has an invalid length. [ 429.273269][ T6747] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 429.313219][ T5710] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 429.435970][ T6747] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.437373][ T6747] usb 2-1: not running at top speed; connect to a high speed hub [ 429.437407][ T6747] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 429.438771][ T6747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.438797][ T6747] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.441818][ T6747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.441844][ T6747] usb 2-1: Product: syz [ 429.442078][ T6747] usb 2-1: Manufacturer: syz [ 429.442108][ T6747] usb 2-1: SerialNumber: syz [ 429.474332][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 429.487621][ T5710] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 429.528007][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.531104][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.531143][ T5710] usb 5-1: Product: syz [ 429.531160][ T5710] usb 5-1: Manufacturer: syz [ 429.531175][ T5710] usb 5-1: SerialNumber: syz [ 429.582067][ T5710] usb 5-1: config 0 descriptor?? [ 429.586599][ T993] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 429.622225][ T5710] cdc_ether 5-1:0.0: invalid descriptor buffer length [ 429.622256][ T5710] usb 5-1: No union descriptors [ 429.637059][ T5710] usb 5-1: unsupported MDLM descriptors [ 429.643019][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.744558][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 429.746805][ T993] usb 4-1: New USB device found, idVendor=05ac, idProduct=0d69, bcdDevice= 0.00 [ 429.770973][ T993] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.771014][ T993] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.771051][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.818444][ T993] usb 4-1: config 0 descriptor?? [ 429.832663][ T5718] usb 5-1: USB disconnect, device number 31 [ 429.847158][ T6747] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 429.847183][ T6747] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 429.847196][ T6747] usb 2-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 429.873479][ T6747] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 429.891673][ T6747] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 429.908087][ T6747] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 429.924309][ T6747] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 429.947549][ T6747] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 430.034839][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.123183][ T6747] usb 2-1: USB disconnect, device number 32 [ 430.258957][ T6227] udevd[6227]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.671247][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.675422][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.694063][ T9070] tipc: Enabling of bearer rejected, failed to enable media [ 430.731442][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.768244][ T9070] tipc: Enabling of bearer rejected, already enabled [ 430.770873][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.843134][ T6747] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 430.994350][ T6747] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.996308][ T6747] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 430.996368][ T6747] usb 2-1: config 4 has no interface number 0 [ 430.996425][ T6747] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.996541][ T6747] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.996586][ T6747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.072896][ T6747] hub 2-1:4.128: USB hub found [ 431.282418][ T6747] hub 2-1:4.128: 27 ports detected [ 431.283416][ T6747] hub 2-1:4.128: Using single TT (err -22) [ 431.284048][ T6747] hub 2-1:4.128: insufficient power available to use all downstream ports [ 431.476094][ T9084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.490228][ T6747] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 431.554203][ T6747] usb 2-1: USB disconnect, device number 33 [ 431.784594][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.426289][ T9087] tipc: Enabling of bearer rejected, failed to enable media [ 432.824042][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.070478][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.073539][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.181617][ T993] usbhid 4-1:0.0: can't add hid device: -71 [ 433.181740][ T993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 433.211066][ T993] usb 4-1: USB disconnect, device number 24 [ 433.514829][ T9111] tipc: Enabling of bearer rejected, failed to enable media [ 433.592790][ T9111] tipc: Enabling of bearer rejected, already enabled [ 433.714890][ T993] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 433.733564][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 433.867227][ T993] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 433.872844][ T993] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.913951][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 433.913983][ T993] usb 1-1: Product: syz [ 433.913997][ T993] usb 1-1: Manufacturer: syz [ 433.914033][ T993] usb 1-1: SerialNumber: syz [ 434.174778][ T993] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.203693][ T9128] vivid-000: disconnect [ 434.209773][ T9126] vivid-000: reconnect [ 434.422607][ T5710] usb 1-1: USB disconnect, device number 31 [ 434.450498][ T5710] usblp0: removed [ 434.903885][ T6747] net_ratelimit: 3 callbacks suppressed [ 434.903902][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.397834][ T6746] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 435.553981][ T6746] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 435.555903][ T6746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.555923][ T6746] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.562265][ T6746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.562286][ T6746] usb 2-1: Product: syz [ 435.562299][ T6746] usb 2-1: Manufacturer: syz [ 435.562310][ T6746] usb 2-1: SerialNumber: syz [ 435.871248][ T5620] Bluetooth: hci5: unexpected event for opcode 0xf302 [ 435.878347][ T5620] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 435.903210][ T5710] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 435.944064][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.053208][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 436.055557][ T5710] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 436.059009][ T5710] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 436.059039][ T5710] usb 4-1: config 0 has no interface number 0 [ 436.059080][ T5710] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.059106][ T5710] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 436.086702][ T4937] Bluetooth: hci5: CSR: Local version failed (-71) [ 436.123741][ T6746] usb 2-1: USB disconnect, device number 34 [ 436.132341][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.132371][ T5710] usb 4-1: Product: syz [ 436.132386][ T5710] usb 4-1: Manufacturer: syz [ 436.132402][ T5710] usb 4-1: SerialNumber: syz [ 436.193966][ T5710] usb 4-1: config 0 descriptor?? [ 436.214938][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.218768][ T5710] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 436.431701][ T5710] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 436.434005][ T5710] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 436.649078][ T6746] usb 4-1: USB disconnect, device number 25 [ 436.983838][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.062314][ T9156] tipc: Enabling of bearer rejected, already enabled [ 437.096788][ T9156] tipc: Enabling of bearer rejected, already enabled [ 437.264190][ T9161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.541196][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 437.627551][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.749'. [ 437.633422][ T5710] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 437.786458][ T5710] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 0.00 [ 437.792835][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.792866][ T5710] usb 1-1: Product: syz [ 437.792882][ T5710] usb 1-1: Manufacturer: syz [ 437.792898][ T5710] usb 1-1: SerialNumber: syz [ 437.803475][ T993] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 437.989752][ T993] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 437.992529][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.992550][ T993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.024293][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.027808][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.027829][ T993] usb 4-1: Product: syz [ 438.027840][ T993] usb 4-1: Manufacturer: syz [ 438.027852][ T993] usb 4-1: SerialNumber: syz [ 438.256076][ T9180] tipc: Enabling of bearer rejected, failed to enable media [ 438.323369][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 438.325881][ T4937] Bluetooth: hci5: unexpected event for opcode 0xf302 [ 438.371386][ T9180] tipc: Enabling of bearer rejected, already enabled [ 438.536192][ T5620] Bluetooth: hci5: CSR: Local version failed (-71) [ 438.537670][ T5355] usb 4-1: USB disconnect, device number 26 [ 438.816663][ T9184] tipc: Enabling of bearer rejected, failed to enable media [ 438.872493][ T9184] tipc: Enabling of bearer rejected, already enabled [ 439.073566][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.123827][ T5710] ax88179_178a 1-1:1.0: probe with driver ax88179_178a failed with error -71 [ 439.154817][ T5710] usb 1-1: USB disconnect, device number 32 [ 439.224521][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.261498][ T9192] tipc: Enabling of bearer rejected, failed to enable media [ 439.307184][ T9192] tipc: Enabling of bearer rejected, already enabled [ 439.697217][ T5710] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 439.849583][ T5710] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 439.866272][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.897286][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 439.897308][ T5710] usb 5-1: Product: syz [ 439.897319][ T5710] usb 5-1: Manufacturer: syz [ 439.897330][ T5710] usb 5-1: SerialNumber: syz [ 440.098334][ T9215] tipc: Enabling of bearer rejected, already enabled [ 440.112629][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.142669][ T5710] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 440.174673][ T9215] tipc: Enabling of bearer rejected, already enabled [ 440.381010][ T6747] usb 5-1: USB disconnect, device number 32 [ 440.407944][ T6747] usblp0: removed [ 440.923182][ T5355] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 440.947484][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.075799][ T5355] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 441.079199][ T5355] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 441.079266][ T5355] usb 1-1: config 8 has no interface number 0 [ 441.079468][ T5355] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 441.079538][ T5355] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 441.079596][ T5355] usb 1-1: config 8 interface 177 has no altsetting 0 [ 441.079728][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.154892][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.162291][ T9228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.162419][ T9228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.202030][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 441.713456][ T5355] ir_toy 1-1:8.177: could not write reset command: -110 [ 441.714120][ T5355] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 441.745532][ T5355] usb 1-1: USB disconnect, device number 33 [ 442.185441][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.263769][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.631240][ T9245] tipc: Enabling of bearer rejected, already enabled [ 442.709633][ T9245] tipc: Enabling of bearer rejected, already enabled [ 443.093967][ T5710] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 443.166115][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 443.200663][ T9253] tipc: Enabling of bearer rejected, already enabled [ 443.234076][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.243172][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 443.263431][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.263486][ T5710] usb 3-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf [ 443.266107][ T5710] usb 3-1: config 14 has an invalid interface number: 64 but max is 0 [ 443.266139][ T5710] usb 3-1: config 14 has no interface number 0 [ 443.266160][ T5710] usb 3-1: config 14 interface 64 has no altsetting 0 [ 443.269647][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.269677][ T5710] usb 3-1: Product: syz [ 443.269693][ T5710] usb 3-1: Manufacturer: syz [ 443.269709][ T5710] usb 3-1: SerialNumber: syz [ 443.331986][ T5355] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 443.498416][ T5355] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.502139][ T5355] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 443.502161][ T5355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.502190][ T5355] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.502230][ T5355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.558236][ T5355] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.558295][ T5355] usb 5-1: Product: syz [ 443.558313][ T5355] usb 5-1: Manufacturer: syz [ 443.558329][ T5355] usb 5-1: SerialNumber: syz [ 443.592844][ T5355] usb 5-1: config 0 descriptor?? [ 443.614822][ T5355] hub 5-1:0.0: bad descriptor, ignoring hub [ 443.614851][ T5355] hub 5-1:0.0: probe with driver hub failed with error -5 [ 443.656051][ T5710] belkin_sa 3-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 443.657066][ T5710] usb 3-1: bcdDevice: e7cf, bfc: 0 [ 443.686025][ T5710] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 443.712930][ T5710] usb 3-1: USB disconnect, device number 23 [ 443.748616][ T5710] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 443.749152][ T5710] belkin_sa 3-1:14.64: device disconnected [ 443.857887][ T5355] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 443.904411][ T6945] udevd[6945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.013348][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 444.165012][ T43] usb 5-1: USB disconnect, device number 33 [ 444.275799][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.552186][ T9282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.303840][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.322287][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.800974][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 445.837580][ T9292] ip6tnl2: entered allmulticast mode [ 445.870416][ T9292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.786'. [ 445.909243][ T9294] tipc: Enabling of bearer rejected, failed to enable media [ 445.997360][ T9294] tipc: Enabling of bearer rejected, already enabled [ 446.352512][ T9297] tipc: Enabling of bearer rejected, failed to enable media [ 446.361725][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.411863][ T9297] tipc: Enabling of bearer rejected, already enabled [ 446.429910][ T9301] tipc: Enabling of bearer rejected, failed to enable media [ 446.526123][ T9301] tipc: Enabling of bearer rejected, already enabled [ 446.602514][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 446.602535][ T9309] openvswitch: netlink: Flow key attr not present in new flow. [ 446.613438][ T5355] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 446.741051][ T9314] binder: 9311:9314 ioctl 400c620e 0 returned -14 [ 446.782981][ T9312] tipc: Enabling of bearer rejected, failed to enable media [ 446.783807][ T5355] usb 4-1: Using ep0 maxpacket: 16 [ 446.799804][ T5355] usb 4-1: unable to get BOS descriptor or descriptor too short [ 446.799857][ T5355] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 446.813687][ T5355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.813768][ T5355] usb 4-1: Product: syz [ 446.813811][ T5355] usb 4-1: Manufacturer: syz [ 446.813866][ T5355] usb 4-1: SerialNumber: syz [ 446.866876][ T9317] tipc: Enabling of bearer rejected, already enabled [ 446.891964][ T9312] tipc: Enabling of bearer rejected, already enabled [ 446.920176][ T9317] tipc: Enabling of bearer rejected, already enabled [ 447.128692][ T5355] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 447.135840][ T5355] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 447.257738][ T9327] tipc: Enabling of bearer rejected, failed to enable media [ 447.324410][ T5355] usb 4-1: USB disconnect, device number 27 [ 447.345763][ T9327] tipc: Enabling of bearer rejected, already enabled [ 447.394716][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.395462][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.395523][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.496376][ T9332] netlink: 'syz.4.799': attribute type 13 has an invalid length. [ 447.869711][ T9338] nvme_fabrics: unknown parameter or missing value 'd¢•vñ‚ª·–£¨Ú™Ê©Ï+“‘û›µÌgºxé—:Ô4&_C?Au±4ÜâZ;ƒ×S' in ctrl creation request [ 447.920195][ T9339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.145922][ T9347] tipc: Enabling of bearer rejected, failed to enable media [ 448.230550][ T9347] tipc: Enabling of bearer rejected, already enabled [ 448.343471][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.433280][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.687817][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 448.725718][ T9357] ip6tnl2: entered allmulticast mode [ 448.748190][ T9357] netlink: 156 bytes leftover after parsing attributes in process `syz.2.807'. [ 448.863519][ T5710] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 449.002058][ T9361] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 449.013937][ T5710] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 449.015137][ T5710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.015167][ T5710] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 449.015209][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.118842][ T5710] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 449.212006][ T9361] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 449.465571][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.552784][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 449.580967][ T9368] tipc: Enabling of bearer rejected, already enabled [ 449.658963][ T9374] netlink: 'syz.2.814': attribute type 5 has an invalid length. [ 450.513423][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.078521][ T9394] tipc: Enabling of bearer rejected, failed to enable media [ 451.141562][ T9394] tipc: Enabling of bearer rejected, already enabled [ 451.185178][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 451.202709][ T9398] ip6tnl3: entered allmulticast mode [ 451.220053][ T9398] netlink: 156 bytes leftover after parsing attributes in process `syz.4.821'. [ 451.313868][ T6746] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 451.353350][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.393696][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.399314][ T6747] usb 4-1: USB disconnect, device number 28 [ 451.424669][ T6747] idmouse 4-1:1.0: disconnected [ 451.463671][ T6746] usb 1-1: Using ep0 maxpacket: 8 [ 451.464779][ T6746] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 451.468733][ T6746] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 451.468779][ T6746] usb 1-1: config 129 has no interface number 0 [ 451.468812][ T6746] usb 1-1: config 129 interface 164 has no altsetting 0 [ 451.471918][ T6746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.471946][ T6746] usb 1-1: Product: syz [ 451.471962][ T6746] usb 1-1: Manufacturer: syz [ 451.471977][ T6746] usb 1-1: SerialNumber: syz [ 451.543403][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.782858][ T6746] ums_eneub6250 1-1:129.164: USB Mass Storage device detected [ 451.890116][ T6746] usb 1-1: USB disconnect, device number 34 [ 451.988255][ T9414] tipc: Enabling of bearer rejected, failed to enable media [ 452.028977][ T9414] tipc: Enabling of bearer rejected, already enabled [ 452.054004][ T5710] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 452.223780][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 452.226500][ T5710] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 452.227944][ T5710] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 452.227971][ T5710] usb 3-1: config 0 has no interface number 0 [ 452.228001][ T5710] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.230832][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 452.230860][ T5710] usb 3-1: Product: syz [ 452.230871][ T5710] usb 3-1: SerialNumber: syz [ 452.262642][ T5710] usb 3-1: config 0 descriptor?? [ 452.330354][ T5710] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input28 [ 452.423705][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 452.570419][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.572879][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.573232][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.577975][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.578333][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.578680][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.579093][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.579435][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.579752][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.580093][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 452.644720][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.665890][ T5710] usb 3-1: USB disconnect, device number 24 [ 452.665962][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 452.695491][ T5710] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 453.200262][ T9431] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.362126][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'. [ 453.362226][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.834'. [ 453.520703][ T9438] netlink: 'syz.1.832': attribute type 13 has an invalid length. [ 453.690552][ T9447] openvswitch: netlink: nsh attribute has 12 unknown bytes. [ 453.703342][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.722375][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 453.739569][ T9443] netlink: 156 bytes leftover after parsing attributes in process `syz.4.836'. [ 453.849280][ T9451] tipc: Enabling of bearer rejected, already enabled [ 453.866878][ T9451] tipc: Enabling of bearer rejected, already enabled [ 453.964205][ T9454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.974384][ T5718] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 454.145414][ T5718] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 454.147743][ T5718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.147773][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 454.147815][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.218837][ T5718] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 454.423903][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.496959][ T9459] xt_hashlimit: size too large, truncated to 1048576 [ 454.754270][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.224415][ T5710] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 455.350420][ T9471] tipc: Enabling of bearer rejected, failed to enable media [ 455.374412][ T5710] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 455.379300][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.379333][ T5710] usb 1-1: Product: syz [ 455.379349][ T5710] usb 1-1: Manufacturer: syz [ 455.379366][ T5710] usb 1-1: SerialNumber: syz [ 455.417133][ T5710] usb 1-1: config 0 descriptor?? [ 455.430517][ T9471] tipc: Enabling of bearer rejected, already enabled [ 455.443521][ T5710] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 455.482958][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.486902][ T5710] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 455.490038][ T5710] usb 1-1: media controller created [ 455.575234][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.661026][ T9465] dvb-usb: bulk message failed: -22 (7/0) [ 455.783791][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.881505][ T5710] DVB: Unable to find symbol mt352_attach() [ 456.046957][ T5710] DVB: Unable to find symbol nxt6000_attach() [ 456.046973][ T5710] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 456.081622][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 456.111140][ T5710] dvb-usb: schedule remote query interval to 1000 msecs. [ 456.111168][ T5710] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 456.111186][ T5710] dvb-usb: bulk message failed: -22 (7/0) [ 456.111203][ T5710] dvb-usb: bulk message failed: -22 (7/0) [ 456.152909][ T5710] usb 1-1: USB disconnect, device number 35 [ 456.232675][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 456.335516][ T5710] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 456.514592][ T6747] usb 4-1: USB disconnect, device number 29 [ 456.540144][ T6747] idmouse 4-1:1.0: disconnected [ 456.823666][ T6747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.229837][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 457.260344][ T9492] netlink: 'syz.2.850': attribute type 13 has an invalid length. [ 457.260965][ T9495] ip6tnl2: entered allmulticast mode [ 457.292863][ T9495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.851'. [ 457.463418][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.483241][ T5718] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 457.634516][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 457.635319][ T5718] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 457.636770][ T5718] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 457.636822][ T5718] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.641429][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.641455][ T5718] usb 2-1: Product: syz [ 457.641472][ T5718] usb 2-1: Manufacturer: syz [ 457.641487][ T5718] usb 2-1: SerialNumber: syz [ 457.864293][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.920110][ T5718] ljca 2-1:1.0: probe with driver ljca failed with error -71 [ 457.982214][ T5718] usb 2-1: USB disconnect, device number 35 [ 458.142270][ T9509] capability: warning: `syz.3.856' uses deprecated v2 capabilities in a way that may be insecure [ 458.213357][ T6747] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 458.246671][ T9514] tipc: Enabling of bearer rejected, failed to enable media [ 458.305131][ T9514] tipc: Enabling of bearer rejected, already enabled [ 458.393207][ T6747] usb 3-1: Using ep0 maxpacket: 16 [ 458.395678][ T6747] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.398128][ T6747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.398162][ T6747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.398186][ T6747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.398232][ T6747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.462347][ T6747] usb 3-1: config 0 descriptor?? [ 458.893627][ T6748] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 458.913888][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.972359][ T6747] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 459.043675][ T6748] usb 2-1: Using ep0 maxpacket: 32 [ 459.044531][ T6748] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 459.045754][ T6748] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 459.045778][ T6748] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 459.045795][ T6748] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.045821][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.107074][ T6748] usb 2-1: config 0 descriptor?? [ 459.187213][ T5710] usb 3-1: USB disconnect, device number 25 [ 459.536384][ T9531] netlink: 'syz.0.864': attribute type 13 has an invalid length. [ 459.575165][ T6748] hid_parser_main: 4 callbacks suppressed [ 459.575193][ T6748] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 459.575227][ T6748] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 459.575258][ T6748] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 459.575286][ T6748] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 459.575315][ T6748] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 459.638615][ T6748] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 459.724415][ T6748] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -90 [ 459.786032][ T6748] usb 2-1: USB disconnect, device number 36 [ 459.818041][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 459.838106][ T9540] netlink: 156 bytes leftover after parsing attributes in process `syz.4.866'. [ 459.881744][ T9541] fido_id[9541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 459.953358][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.092220][ T9549] tipc: Enabling of bearer rejected, failed to enable media [ 460.116997][ T9549] tipc: Enabling of bearer rejected, already enabled [ 460.592627][ T9561] tipc: Enabling of bearer rejected, failed to enable media [ 460.649901][ T9561] tipc: Enabling of bearer rejected, already enabled [ 460.669883][ T9563] netlink: 'syz.4.874': attribute type 13 has an invalid length. [ 461.104246][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 461.132709][ T9574] gretap0: entered promiscuous mode [ 461.380718][ T9586] tipc: Enabling of bearer rejected, failed to enable media [ 461.428071][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 461.429261][ T9586] tipc: Enabling of bearer rejected, already enabled [ 461.458223][ T9584] netlink: 156 bytes leftover after parsing attributes in process `syz.0.884'. [ 462.216131][ T6746] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 462.355218][ T9604] tipc: Enabling of bearer rejected, already enabled [ 462.371049][ T6746] usb 4-1: Using ep0 maxpacket: 32 [ 462.377107][ T6746] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 462.388954][ T6746] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 462.388991][ T6746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 462.389020][ T6746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 462.389044][ T6746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 462.389070][ T6746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 462.429131][ T6746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.429161][ T6746] usb 4-1: Product: syz [ 462.429178][ T6746] usb 4-1: Manufacturer: syz [ 462.429194][ T6746] usb 4-1: SerialNumber: syz [ 462.489826][ T6746] usb 4-1: config 0 descriptor?? [ 462.509039][ T9604] tipc: Enabling of bearer rejected, already enabled [ 462.595823][ T9609] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 462.707603][ T9609] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 462.908978][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.909114][ T6746] input input31: Device does not respond to id packet M [ 462.911002][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.911591][ T6746] input input31: Device does not respond to id packet P [ 462.939815][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.939878][ T6746] input input31: Device does not respond to id packet B [ 462.942373][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.942427][ T6746] input input31: Device does not respond to id packet N [ 462.972860][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.975199][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.976371][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.979208][ T6746] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 462.979610][ T6746] iforce 4-1:0.0: usb_submit_urb failed -90 [ 462.979739][ T6746] iforce 4-1:0.0: usb_submit_urb failed -90 [ 463.023917][ T6746] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 463.107157][ T6746] usb 4-1: USB disconnect, device number 30 [ 463.163115][ T6747] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 463.232672][ T9619] ip_tables: iptables: counters copy to user failed while replacing table [ 463.323574][ T6747] usb 5-1: Using ep0 maxpacket: 8 [ 463.325301][ T6747] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 463.326486][ T6747] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.326519][ T6747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 463.326555][ T6747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.336188][ T6747] usb 5-1: config 0 descriptor?? [ 463.430566][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 463.430824][ T9623] bridge_slave_0: default FDB implementation only supports local addresses [ 463.587119][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 463.624660][ T9631] netlink: 156 bytes leftover after parsing attributes in process `syz.1.899'. [ 463.740415][ T9634] tipc: Enabling of bearer rejected, failed to enable media [ 463.763279][ T6746] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 463.788334][ T9634] tipc: Enabling of bearer rejected, already enabled [ 463.807342][ T6747] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x2 [ 463.807372][ T6747] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x7 [ 463.913235][ T5718] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 463.931052][ T6746] usb 3-1: Using ep0 maxpacket: 16 [ 463.940509][ T6746] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.942066][ T6746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.942098][ T6746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.942121][ T6746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.942164][ T6746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.006408][ T6746] usb 3-1: config 0 descriptor?? [ 464.021388][ T993] usb 5-1: USB disconnect, device number 34 [ 464.078278][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 464.081400][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.117825][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 464.117856][ T5718] usb 1-1: Product: syz [ 464.117871][ T5718] usb 1-1: Manufacturer: syz [ 464.117886][ T5718] usb 1-1: SerialNumber: syz [ 464.380707][ T5718] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 464.464761][ T6746] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 464.464800][ T6746] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 464.464827][ T6746] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 464.508041][ T9641] tipc: Enabling of bearer rejected, failed to enable media [ 464.534921][ T6746] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input32 [ 464.593871][ T9641] tipc: Enabling of bearer rejected, already enabled [ 464.684901][ T5718] usb 1-1: USB disconnect, device number 36 [ 464.751758][ T5718] usblp0: removed [ 464.785578][ T6746] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 464.856405][ T6746] usb 3-1: USB disconnect, device number 26 [ 465.135539][ T9649] fido_id[9649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 465.365476][ T9654] tipc: Enabling of bearer rejected, failed to enable media [ 465.391044][ T9654] tipc: Enabling of bearer rejected, already enabled [ 465.504549][ T5355] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 465.654167][ T5355] usb 4-1: Using ep0 maxpacket: 16 [ 465.657502][ T5355] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.657570][ T5355] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 465.659189][ T5355] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 465.659208][ T5355] usb 4-1: config 9 has no interface number 0 [ 465.659228][ T5355] usb 4-1: config 9 interface 57 has no altsetting 0 [ 465.665764][ T5355] usb 4-1: string descriptor 0 read error: -22 [ 465.666154][ T5355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.397737][ T5355] video4linux radio48: keene_cmd_set failed (-71) [ 466.397769][ T5355] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 466.422098][ T5355] usb 4-1: USB disconnect, device number 31 [ 466.887135][ T9692] ip6gre1: entered allmulticast mode [ 466.902263][ T8578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.904841][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'. [ 467.823156][ T5355] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 467.941020][ T9718] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 467.977040][ T5355] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 467.981875][ T5355] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.981907][ T5355] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.981934][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.029599][ T5355] usb 1-1: config 0 descriptor?? [ 468.165436][ T9718] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 468.428348][ T9731] ip_tables: iptables: counters copy to user failed while replacing table [ 468.466259][ T5355] ntrig 0003:1B96:0009.000A: item fetching failed at offset 5/7 [ 468.468790][ T5355] ntrig 0003:1B96:0009.000A: parse failed [ 468.468908][ T5355] ntrig 0003:1B96:0009.000A: probe with driver ntrig failed with error -22 [ 468.666321][ T5718] usb 1-1: USB disconnect, device number 37 [ 468.873963][ T5710] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 469.035215][ T5710] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 469.038927][ T5710] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 469.038962][ T5710] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 469.042290][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.042318][ T5710] usb 2-1: Product: syz [ 469.042333][ T5710] usb 2-1: Manufacturer: syz [ 469.042352][ T5710] usb 2-1: SerialNumber: syz [ 469.099576][ T5710] usb 2-1: config 0 descriptor?? [ 469.120912][ T5710] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 469.738137][ T5710] gspca_sunplus: reg_r err -71 [ 469.738554][ T5710] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 469.767809][ T5710] usb 2-1: USB disconnect, device number 37 [ 469.790886][ T9769] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 469.927249][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 470.067433][ T9774] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 470.100772][ T9775] tipc: Enabling of bearer rejected, failed to enable media [ 470.146238][ T9775] tipc: Enabling of bearer rejected, already enabled [ 470.179469][ T9774] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 470.466078][ T9784] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 470.578462][ T9787] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 470.583245][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.875851][ T6748] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 471.036910][ T6748] usb 2-1: Using ep0 maxpacket: 32 [ 471.038045][ T6748] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 471.059457][ T6748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.059487][ T6748] usb 2-1: Product: syz [ 471.059505][ T6748] usb 2-1: Manufacturer: syz [ 471.059516][ T6748] usb 2-1: SerialNumber: syz [ 471.078393][ T6748] usb 2-1: config 0 descriptor?? [ 471.108649][ T6748] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 471.119923][ T6747] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 471.152679][ T9804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.287491][ T9807] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 471.307731][ T6747] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 471.335804][ T6747] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.370346][ T6747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 471.370380][ T6747] usb 4-1: Product: syz [ 471.370396][ T6747] usb 4-1: Manufacturer: syz [ 471.370411][ T6747] usb 4-1: SerialNumber: syz [ 471.505373][ T9807] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.636177][ T6747] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 471.824989][ T6748] gspca_ov534_9: reg_w failed -71 [ 471.875808][ T5710] usb 4-1: USB disconnect, device number 32 [ 471.897003][ T5710] usblp0: removed [ 472.073787][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.955'. [ 472.113164][ T6748] gspca_ov534_9: Unknown sensor 0000 [ 472.113283][ T6748] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 472.118671][ T6748] usb 2-1: USB disconnect, device number 38 [ 472.223279][ T6747] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 472.346771][ T9822] tipc: Enabled bearer , priority 10 [ 472.376731][ T6747] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 472.394318][ T6747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.394346][ T6747] usb 3-1: Product: syz [ 472.394357][ T6747] usb 3-1: Manufacturer: syz [ 472.394368][ T6747] usb 3-1: SerialNumber: syz [ 472.400338][ T6747] usb 3-1: config 0 descriptor?? [ 472.445951][ T6747] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 472.466754][ T6747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.468817][ T6747] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 472.468880][ T6747] usb 3-1: media controller created [ 472.508799][ T6747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.637386][ T9815] dvb-usb: bulk message failed: -22 (7/0) [ 472.681423][ T6747] DVB: Unable to find symbol mt352_attach() [ 472.764728][ T6747] DVB: Unable to find symbol nxt6000_attach() [ 472.764749][ T6747] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 472.769554][ T6747] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 472.802213][ T6747] dvb-usb: schedule remote query interval to 1000 msecs. [ 472.802241][ T6747] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 472.802259][ T6747] dvb-usb: bulk message failed: -22 (7/0) [ 472.802276][ T6747] dvb-usb: bulk message failed: -22 (7/0) [ 472.838054][ T6747] usb 3-1: USB disconnect, device number 27 [ 472.951954][ T6747] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 473.056965][ T9834] netlink: 'syz.3.961': attribute type 13 has an invalid length. [ 473.153996][ T5710] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 473.227992][ T9846] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 473.304699][ T5710] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 473.316048][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 473.334781][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 473.334802][ T5710] usb 1-1: Product: syz [ 473.334813][ T5710] usb 1-1: Manufacturer: syz [ 473.399500][ T9840] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 473.938784][ T9857] tipc: Enabling of bearer rejected, failed to enable media [ 474.048908][ T9861] tipc: MTU too low for tipc bearer [ 474.059266][ T5710] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input34 [ 474.233347][ T5710] usb 1-1: USB disconnect, device number 38 [ 474.541654][ T9868] tipc: Enabled bearer , priority 10 [ 474.966683][ T5710] bridge0: entered promiscuous mode [ 475.138179][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 475.177825][ T9878] tipc: Enabling of bearer rejected, already enabled [ 475.723254][ T6748] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 475.798198][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 475.895066][ T6748] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 475.897754][ T6748] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 475.897779][ T6748] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 475.897798][ T6748] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 475.902964][ T6748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.902986][ T6748] usb 3-1: Product: syz [ 475.902997][ T6748] usb 3-1: Manufacturer: syz [ 475.903171][ T6748] usb 3-1: SerialNumber: syz [ 475.981618][ T6748] usb 3-1: config 0 descriptor?? [ 475.983004][ T9888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.996055][ T9888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.001227][ T6748] usb 3-1: ucan: probing device on interface #0 [ 476.112699][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 476.186076][ T9901] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 476.394254][ T9904] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 476.427230][ T9908] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 476.443305][ T6748] usb 3-1: ucan: device reported invalid device info [ 476.443323][ T6748] usb 3-1: ucan: probe failed; try to update the device firmware [ 476.659748][ T5718] usb 3-1: USB disconnect, device number 28 [ 477.000479][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 477.024824][ T9924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 477.031262][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.031931][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 477.453142][ T5718] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 477.512455][ T9938] netlink: 'syz.2.997': attribute type 13 has an invalid length. [ 477.574598][ T9941] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 477.605093][ T5718] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 477.607369][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.607406][ T5718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.607422][ T5718] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.607442][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.607484][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.700101][ T9941] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.285224][ T5718] gud 1-1:1.0: Failed to add properties (error=-71) [ 478.285253][ T5718] gud 1-1:1.0: probe with driver gud failed with error -71 [ 478.335088][ T5710] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 478.432443][ T5718] usb 1-1: USB disconnect, device number 39 [ 478.484920][ T5710] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 478.486278][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.488830][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.488855][ T5710] usb 2-1: Product: syz [ 478.488874][ T5710] usb 2-1: Manufacturer: syz [ 478.488885][ T5710] usb 2-1: SerialNumber: syz [ 478.743252][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.767354][ T5710] usb 2-1: Limiting number of CPorts to U8_MAX [ 478.772207][ T5710] usb 2-1: Unknown endpoint type found, address 0x03 [ 478.772227][ T5710] usb 2-1: Not enough endpoints found in device, aborting! [ 478.995937][ T6748] usb 2-1: USB disconnect, device number 39 [ 479.071952][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 479.694057][ T5710] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 479.772853][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 479.844130][ T5710] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 479.847439][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.881517][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 479.881555][ T5710] usb 5-1: Product: syz [ 479.881566][ T5710] usb 5-1: Manufacturer: syz [ 479.881577][ T5710] usb 5-1: SerialNumber: syz [ 479.970897][ T9997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 480.121916][ T5710] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 480.371801][ T5710] usb 5-1: USB disconnect, device number 35 [ 480.401105][ T5710] usblp0: removed [ 480.546798][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 480.565163][T10005] ip6tnl3: entered allmulticast mode [ 480.571589][T10005] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1018'. [ 480.913616][ T5718] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 481.076646][ T5718] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 481.096756][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.096781][ T5718] usb 4-1: Product: syz [ 481.096793][ T5718] usb 4-1: Manufacturer: syz [ 481.096807][ T5718] usb 4-1: SerialNumber: syz [ 481.105504][ T5718] usb 4-1: config 0 descriptor?? [ 481.162398][ T5718] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 481.199647][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.216338][ T5718] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 481.216409][ T5718] usb 4-1: media controller created [ 481.301138][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.577854][T10023] netlink: 'syz.4.1021': attribute type 13 has an invalid length. [ 481.615390][ T5718] DVB: Unable to find symbol mt352_attach() [ 481.667731][T10026] tipc: Enabling of bearer rejected, already enabled [ 481.714398][T10026] tipc: Enabling of bearer rejected, already enabled [ 481.774857][ T5718] DVB: Unable to find symbol nxt6000_attach() [ 481.775003][ T5718] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 481.781582][ T5718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 481.819067][ T5718] dvb-usb: schedule remote query interval to 1000 msecs. [ 481.819086][ T5718] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 481.819099][ T5718] dvb-usb: bulk message failed: -22 (7/0) [ 481.819110][ T5718] dvb-usb: bulk message failed: -22 (7/0) [ 481.854039][ T5718] usb 4-1: USB disconnect, device number 33 [ 481.879621][T10029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.988781][ T5718] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 482.615131][ T5718] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 482.691276][T10042] netlink: 'syz.1.1028': attribute type 13 has an invalid length. [ 482.784519][ T5718] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.785859][ T5718] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 482.785912][ T5718] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 482.785930][ T5718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 482.791125][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.791175][ T5718] usb 4-1: Product: syz [ 482.791190][ T5718] usb 4-1: Manufacturer: syz [ 482.791206][ T5718] usb 4-1: SerialNumber: syz [ 482.864638][ T5718] usb 4-1: config 0 descriptor?? [ 482.872879][ T5718] hub 4-1:0.0: bad descriptor, ignoring hub [ 482.872909][ T5718] hub 4-1:0.0: probe with driver hub failed with error -5 [ 482.917193][ T5718] usb 4-1: selecting invalid altsetting 0 [ 483.182482][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 483.354684][ T6733] usb 4-1: USB disconnect, device number 34 [ 483.625413][ T5718] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 483.632673][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 483.691754][T10052] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 483.806073][ T5718] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 483.811917][ T5718] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.840771][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 483.840795][ T5718] usb 3-1: Product: syz [ 483.840806][ T5718] usb 3-1: Manufacturer: syz [ 483.840816][ T5718] usb 3-1: SerialNumber: syz [ 484.108638][ T5718] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 484.166906][T10059] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1037'. [ 484.312976][ T5718] usb 3-1: USB disconnect, device number 29 [ 484.357827][ T5718] usblp0: removed [ 484.617224][T10068] tipc: Enabling of bearer rejected, already enabled [ 485.058072][T10081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.174899][T10086] netlink: 'syz.4.1047': attribute type 7 has an invalid length. [ 485.174919][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 485.174945][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 485.883523][ T5355] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 485.910369][T10102] tipc: Enabling of bearer rejected, already enabled [ 485.984096][ T6748] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 486.034835][ T5355] usb 1-1: Using ep0 maxpacket: 32 [ 486.037351][ T5355] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.041317][ T5355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.041355][ T5355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.041384][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.095599][ T5355] usb 1-1: config 0 descriptor?? [ 486.116106][ T5355] hub 1-1:0.0: USB hub found [ 486.170317][ T6748] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.171522][ T6748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.171571][ T6748] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 486.217658][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.217725][ T6748] usb 2-1: SerialNumber: syz [ 486.260965][ T6748] cdc_ether 2-1:1.0: missing cdc ether descriptor [ 486.335994][ T5355] hub 1-1:0.0: 26 ports detected [ 486.336471][ T5355] hub 1-1:0.0: insufficient power available to use all downstream ports [ 486.435194][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 486.478862][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 486.490923][ T6748] usb 2-1: USB disconnect, device number 40 [ 486.501072][T10107] netlink: 'syz.2.1053': attribute type 13 has an invalid length. [ 486.543435][ T5355] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 486.567951][ T5355] usbhid 1-1:0.0: can't add hid device: -71 [ 486.568064][ T5355] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 486.617073][ T5355] usb 1-1: USB disconnect, device number 40 [ 486.924646][ T5710] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 487.087024][ T5710] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 487.096294][ T5710] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 487.096410][ T5710] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.096500][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 487.096605][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.115456][ T5710] usb 5-1: config 0 descriptor?? [ 487.116175][T10113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 487.392236][T10121] tipc: Enabling of bearer rejected, already enabled [ 487.438760][T10121] tipc: Enabling of bearer rejected, already enabled [ 487.569966][ T5710] kye 0003:0458:501A.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 487.572885][ T5710] hid_parser_main: 12 callbacks suppressed [ 487.572906][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573193][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573225][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573252][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573352][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573421][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573771][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573856][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.573930][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.574004][ T5710] kye 0003:0458:501A.000B: unknown main item tag 0x0 [ 487.650217][ T5710] kye 0003:0458:501A.000B: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 487.652256][ T5710] kye 0003:0458:501A.000B: tablet-enabling feature report not found [ 487.652301][ T5710] kye 0003:0458:501A.000B: tablet enabling failed [ 487.841215][ T5710] usb 5-1: USB disconnect, device number 36 [ 488.031467][T10128] fido_id[10128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 488.632029][T10133] netlink: 'syz.0.1061': attribute type 13 has an invalid length. [ 489.009308][T10146] tipc: Enabling of bearer rejected, failed to enable media [ 489.144937][T10146] tipc: Enabling of bearer rejected, already enabled [ 489.799374][T10156] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 489.960799][T10161] tipc: Enabling of bearer rejected, already enabled [ 490.407880][T10175] ovs-dp0: entered promiscuous mode [ 490.523834][ T5355] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 490.673346][ T5355] usb 4-1: Using ep0 maxpacket: 16 [ 490.675494][ T5355] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 490.680709][ T5355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.680809][ T5355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.680828][ T5355] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 490.680860][ T5355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.731635][ T5355] usb 4-1: config 0 descriptor?? [ 491.221871][ T5355] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input36 [ 491.364078][ T5355] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 491.409384][ T5355] usb 4-1: USB disconnect, device number 35 [ 491.712683][T10185] fido_id[10185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 491.963594][ T5718] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 492.117308][ T5718] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 492.122848][ T5718] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.122887][ T5718] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.122911][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 492.122949][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.159703][ T5718] usb 1-1: config 0 descriptor?? [ 492.423871][ T6733] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 492.588816][ T6733] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 492.603222][ T6733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.603259][ T6733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.603304][ T6733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.649953][ T6733] usb 5-1: config 0 descriptor?? [ 492.671137][ T5718] hid_parser_main: 13 callbacks suppressed [ 492.671165][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x1 [ 492.671251][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x5 [ 492.671282][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x6 [ 492.671313][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.671343][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.671373][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.671402][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.672803][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.672840][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.672870][ T5718] hid-led 0003:0FC5:B080.000D: unknown main item tag 0x0 [ 492.841455][T10200] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 492.890841][ T5718] hid-led 0003:0FC5:B080.000D: probe with driver hid-led failed with error -71 [ 492.923955][ T5718] usb 1-1: USB disconnect, device number 41 [ 492.952367][T10197] netlink: 'syz.2.1080': attribute type 13 has an invalid length. [ 493.000419][T10200] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 493.095773][ T6733] input: HID 1b96:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B96:0004.000E/input/input37 [ 493.134530][ T6733] ntrig 0003:1B96:0004.000E: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 493.323223][ T6733] usb 5-1: USB disconnect, device number 37 [ 493.559659][T10207] tipc: Enabling of bearer rejected, already enabled [ 493.646657][T10209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.907591][T10218] netlink: 'syz.3.1087': attribute type 13 has an invalid length. [ 494.066549][T10226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.103235][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.309481][T10233] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 494.421683][T10233] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 494.713350][ T5355] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 494.864465][ T5355] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 494.866592][ T5355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.866635][ T5355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.870766][ T5355] usb 1-1: config 0 descriptor?? [ 494.883653][ T5710] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 494.915137][ T5355] pwc: Askey VC010 type 2 USB webcam detected. [ 495.034439][ T5710] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 495.036015][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.036079][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 495.036475][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 495.036510][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 495.036526][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 495.039680][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 495.039845][ T5710] usb 5-1: Product: syz [ 495.039857][ T5710] usb 5-1: Manufacturer: syz [ 495.039888][ T5710] usb 5-1: SerialNumber: syz [ 495.069904][ T5710] usb 5-1: config 0 descriptor?? [ 495.165406][T10244] tipc: Enabling of bearer rejected, already enabled [ 495.269541][T10248] tipc: Enabling of bearer rejected, failed to enable media [ 495.290804][T10248] tipc: Enabling of bearer rejected, already enabled [ 495.291631][ T5710] radio-si470x 5-1:0.0: DeviceID=0xf895 ChipID=0xbbaa [ 495.499058][ T5710] radio-si470x 5-1:0.0: software version 248, hardware version 149 [ 495.558574][ T5355] pwc: recv_control_msg error -71 req 02 val 2700 [ 495.559742][ T5355] pwc: recv_control_msg error -71 req 02 val 2c00 [ 495.569891][ T5355] pwc: recv_control_msg error -71 req 04 val 1000 [ 495.574360][ T5355] pwc: recv_control_msg error -71 req 04 val 1300 [ 495.585247][ T5355] pwc: recv_control_msg error -71 req 04 val 1400 [ 495.598915][ T5355] pwc: recv_control_msg error -71 req 02 val 2000 [ 495.601189][ T5355] pwc: recv_control_msg error -71 req 02 val 2100 [ 495.606068][ T5355] pwc: recv_control_msg error -71 req 04 val 1500 [ 495.612646][ T5355] pwc: recv_control_msg error -71 req 02 val 2500 [ 495.628356][ T5355] pwc: recv_control_msg error -71 req 02 val 2400 [ 495.630085][ T5355] pwc: recv_control_msg error -71 req 02 val 2600 [ 495.631236][ T5355] pwc: recv_control_msg error -71 req 02 val 2900 [ 495.631953][ T5355] pwc: recv_control_msg error -71 req 02 val 2800 [ 495.655049][ T5355] pwc: recv_control_msg error -71 req 04 val 1100 [ 495.660417][ T5355] pwc: recv_control_msg error -71 req 04 val 1200 [ 495.705230][ T5710] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 495.705286][ T5710] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 495.705641][ T5710] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 495.705886][ T5710] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 495.742529][ T5355] pwc: Registered as video103. [ 495.760278][ T5710] usb 5-1: USB disconnect, device number 38 [ 495.786220][ T5355] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 495.882627][ T5355] usb 1-1: USB disconnect, device number 42 [ 496.260393][T10257] program syz.0.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.286787][T10255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.386879][T10259] tipc: Enabling of bearer rejected, already enabled [ 496.427473][T10259] tipc: Enabling of bearer rejected, already enabled [ 496.643690][ T6747] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 496.650383][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 496.650408][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1105'. [ 496.704576][ T6733] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 496.805681][ T6747] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.829198][ T6747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.829235][ T6747] usb 2-1: Product: syz [ 496.829246][ T6747] usb 2-1: Manufacturer: syz [ 496.829257][ T6747] usb 2-1: SerialNumber: syz [ 496.858970][ T6733] usb 5-1: Using ep0 maxpacket: 32 [ 496.866227][ T6733] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 496.870451][ T6733] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 496.894726][ T6733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.894784][ T6733] usb 5-1: Product: syz [ 496.894801][ T6733] usb 5-1: Manufacturer: syz [ 496.894816][ T6733] usb 5-1: SerialNumber: syz [ 496.902326][T10271] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 496.958839][ T6733] usb 5-1: config 0 descriptor?? [ 496.980535][ T6733] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 497.000455][ T6733] dvb-usb: bulk message failed: -22 (2/0) [ 497.013677][ T6746] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.046948][ T6733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.048745][ T6733] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 497.048855][ T6733] usb 5-1: media controller created [ 497.129979][ T6733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.187180][ T6733] usb 5-1: selecting invalid altsetting 7 [ 497.187203][ T6733] cxusb: set interface failed [ 497.187216][ T6733] dvb-usb: bulk message failed: -22 (1/0) [ 497.211187][T10269] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 497.236999][T10263] dvb-usb: bulk message failed: -22 (3/0) [ 497.359247][ T6733] DVB: Unable to find symbol lgdt330x_attach() [ 497.359299][ T6733] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 497.523348][ T6733] rc_core: IR keymap rc-dvico-portable not found [ 497.523370][ T6733] Registered IR keymap rc-empty [ 497.524761][ T6733] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 497.562070][ T6733] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input39 [ 497.595230][ T6733] dvb-usb: schedule remote query interval to 100 msecs. [ 497.595249][ T6733] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 497.620692][ T6733] usb 5-1: USB disconnect, device number 39 [ 497.723257][T10279] tipc: Enabling of bearer rejected, already enabled [ 497.756039][ T6733] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 498.044766][T10288] netlink: 'syz.2.1109': attribute type 13 has an invalid length. [ 498.211816][T10292] tipc: Bearer : already 2 bearers with priority 10 [ 498.211833][T10292] tipc: Bearer : trying with adjusted priority [ 498.233982][T10292] tipc: Enabling of bearer rejected, failed to enable media [ 498.294919][T10292] tipc: Enabling of bearer rejected, already enabled [ 498.345433][ T6746] usb 2-1: Service connection timeout for: 256 [ 498.345601][ T6746] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 498.384388][ T6746] ath9k_htc: Failed to initialize the device [ 498.430626][ T6746] usb 2-1: ath9k_htc: USB layer deinitialized [ 498.674860][ T5710] usb 2-1: USB disconnect, device number 41 [ 498.773252][ T6746] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 498.933958][ T6746] usb 4-1: Using ep0 maxpacket: 32 [ 498.936350][ T6746] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 498.942212][ T6746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.942240][ T6746] usb 4-1: Product: syz [ 498.948445][ T6746] usb 4-1: Manufacturer: syz [ 498.948473][ T6746] usb 4-1: SerialNumber: syz [ 498.987962][ T6746] usb 4-1: config 0 descriptor?? [ 499.010683][ T6746] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 499.025916][ T6746] dvb-usb: bulk message failed: -22 (4/0) [ 499.025943][ T6746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 499.026074][ T6746] dvb-usb: bulk message failed: -22 (5/0) [ 499.026091][ T6746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 499.083818][ T6746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.084502][ T6746] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 499.084567][ T6746] usb 4-1: media controller created [ 499.145377][ T6746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.208267][ T6746] usb 4-1: selecting invalid altsetting 3 [ 499.208292][ T6746] ttusb2: set interface to alts=3 failed [ 499.241143][T10300] dvb-usb: bulk message failed: -22 (7/0) [ 499.241165][T10300] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 499.286004][T10300] ttusb2: i2c transfer failed. [ 499.377903][ T6746] DVB: Unable to find symbol tda10086_attach() [ 499.377921][ T6746] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 499.378729][ T6746] dvb-usb: bulk message failed: -22 (4/0) [ 499.378750][ T6746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 499.379122][ T6746] dvb-usb: bulk message failed: -22 (5/0) [ 499.379140][ T6746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 499.379212][ T6746] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 499.410607][ T6746] usb 4-1: USB disconnect, device number 36 [ 499.535277][ T6746] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 499.635444][T10308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.029733][T10316] netlink: 'syz.4.1117': attribute type 13 has an invalid length. [ 500.148683][T10318] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 500.229104][T10318] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 500.317210][T10326] program syz.0.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.322666][T10323] tipc: Enabling of bearer rejected, already enabled [ 500.743289][ T6746] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 500.907302][ T6746] usb 1-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 500.923416][ T6746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.923454][ T6746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.923476][ T6746] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.923521][ T6746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.982536][ T6746] usb 1-1: config 0 descriptor?? [ 501.460610][ T6746] input: HID 046d:c704 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C704.000F/input/input40 [ 501.518492][T10345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.617225][ T6746] logitech 0003:046D:C704.000F: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c704] on usb-dummy_hcd.0-1/input0 [ 501.653444][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 501.662964][ T6746] usb 1-1: USB disconnect, device number 43 [ 501.867686][T10349] fido_id[10349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 502.289237][T10359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.355964][T10361] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 502.501943][T10360] tipc: Enabling of bearer rejected, already enabled [ 502.565607][T10361] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 503.503160][ T6746] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 503.663948][ T6746] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 503.665192][ T6746] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.665225][ T6746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 503.665261][ T6746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.715459][ T6746] usb 2-1: config 0 descriptor?? [ 504.164905][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.164934][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.164954][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.164974][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.164993][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.165013][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.165032][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.165053][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.165073][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.165092][ T6746] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 504.256847][ T6746] viewsonic 0003:0543:E621.0010: hidraw0: USB HID v7f.fd Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 504.398360][ T6746] usb 2-1: USB disconnect, device number 42 [ 504.534520][T10391] fido_id[10391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 505.271406][T10402] program syz.3.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.357352][T10403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.396236][T10406] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 505.659749][T10410] tipc: Enabling of bearer rejected, already enabled [ 505.768154][T10413] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 505.902316][T10413] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 506.158717][T10419] netlink: 'syz.4.1149': attribute type 13 has an invalid length. [ 506.376586][T10427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.877348][T10439] bond0: (slave bond_slave_0): Releasing backup interface [ 506.915259][T10439] bridge0: port 3(syz_tun) entered disabled state [ 506.915465][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.915781][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.933411][T10439] syz_tun: left promiscuous mode [ 506.933740][T10439] bridge0: port 3(syz_tun) entered disabled state [ 506.971672][T10439] bridge_slave_1: left allmulticast mode [ 506.971724][T10439] bridge_slave_1: left promiscuous mode [ 506.971968][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.993947][ T5710] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 507.039814][T10439] bridge_slave_0: left allmulticast mode [ 507.039839][T10439] bridge_slave_0: left promiscuous mode [ 507.040002][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.144613][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 507.146614][ T5710] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 507.154813][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.154908][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.170396][ T5710] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 507.170496][ T5710] usb 3-1: Manufacturer: syz [ 507.210605][ T5710] usb 3-1: config 0 descriptor?? [ 507.644834][T10449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1159'. [ 507.879081][ T5710] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 507.879148][ T5710] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -71 [ 507.911365][ T5710] usb 3-1: USB disconnect, device number 30 [ 508.350044][T10461] tap0: tun_chr_ioctl cmd 1074025677 [ 508.350144][T10461] tap0: linktype set to 1 [ 508.622011][T10466] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 508.711176][T10466] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 508.829321][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.829367][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.142700][T10475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.515717][T10483] tipc: Enabling of bearer rejected, already enabled [ 509.633184][ T5355] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 509.785491][ T5355] usb 5-1: Using ep0 maxpacket: 32 [ 509.787866][ T5355] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 509.791922][ T5355] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 509.791944][ T5355] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 509.791959][ T5355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 509.791975][ T5355] usb 5-1: config 1 has no interface number 0 [ 509.792007][ T5355] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.792026][ T5355] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 509.792058][ T5355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.912519][ T5355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 510.162017][ T5355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 510.605114][ T6748] usb 5-1: USB disconnect, device number 40 [ 510.612324][ T6748] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 511.148336][T10514] netlink: 'syz.0.1178': attribute type 13 has an invalid length. [ 511.445247][T10520] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 511.612116][T10520] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 511.655170][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 512.042773][T10535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.123201][ T5710] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 512.283158][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 512.283943][ T5710] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 512.285812][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.285847][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.285868][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 512.285883][ T5710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 512.285900][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.288038][ T5710] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 512.288065][ T5710] usb 3-1: Manufacturer: syz [ 512.399904][ T5710] usb 3-1: config 0 descriptor?? [ 512.745356][ T5710] rc_core: IR keymap rc-hauppauge not found [ 512.745380][ T5710] Registered IR keymap rc-empty [ 512.745639][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.776657][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.797707][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 512.824588][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 512.847306][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.863562][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.883317][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.904387][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.923336][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.944477][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.963524][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.983182][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 513.004885][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 513.037033][ T5710] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 513.064815][ T5710] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 513.064845][ T5710] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 513.201054][ T6746] usb 3-1: USB disconnect, device number 31 [ 513.543915][ T5355] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 513.703967][ T5355] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 513.705816][ T5355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.705849][ T5355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.707947][ T5355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 513.707973][ T5355] usb 2-1: Product: syz [ 513.707988][ T5355] usb 2-1: Manufacturer: syz [ 513.777166][ T5355] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 514.013677][ T6746] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 514.165715][ T6746] usb 4-1: Using ep0 maxpacket: 16 [ 514.168697][ T6746] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 514.172062][ T6746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.172091][ T6746] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.211694][ T6746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.211724][ T6746] usb 4-1: Product: syz [ 514.211741][ T6746] usb 4-1: Manufacturer: syz [ 514.211757][ T6746] usb 4-1: SerialNumber: syz [ 514.263457][ T6746] usb 4-1: config 0 descriptor?? [ 514.485470][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.488947][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.491799][ T6748] usb 4-1: USB disconnect, device number 37 [ 514.611555][ T5355] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 514.640882][ T5355] usb 2-1: USB disconnect, device number 43 [ 514.656201][ T5355] mos7840 2-1:1.0: device disconnected [ 514.730404][T10580] tipc: Enabling of bearer rejected, already enabled [ 514.767316][T10581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.953169][ T6748] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 515.051167][T10590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1204'. [ 515.104405][ T6748] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 515.107538][ T6748] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 515.107569][ T6748] usb 4-1: config 0 has no interface number 0 [ 515.107616][ T6748] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.110302][ T6748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.110332][ T6748] usb 4-1: Product: syz [ 515.110346][ T6748] usb 4-1: Manufacturer: syz [ 515.110361][ T6748] usb 4-1: SerialNumber: syz [ 515.122265][ T6748] usb 4-1: config 0 descriptor?? [ 515.185046][ T6733] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 515.301387][T10591] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 515.344120][ T6733] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 515.345633][ T6733] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 515.345686][ T6733] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 515.345718][ T6733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.348414][ T6733] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 515.348442][ T6733] usb 5-1: Product: syz [ 515.348458][ T6733] usb 5-1: Manufacturer: syz [ 515.348475][ T6733] usb 5-1: SerialNumber: syz [ 515.357789][ T6733] usb 5-1: config 0 descriptor?? [ 515.424145][ T6733] hub 5-1:0.0: bad descriptor, ignoring hub [ 515.424173][ T6733] hub 5-1:0.0: probe with driver hub failed with error -5 [ 515.446642][ T6733] usb 5-1: selecting invalid altsetting 0 [ 515.455098][ T6748] usb 4-1: USB disconnect, device number 38 [ 515.653707][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'. [ 515.766709][ T6733] usb 5-1: USB disconnect, device number 41 [ 516.074645][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 516.290195][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 516.309241][T10609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1210'. [ 516.408820][T10614] ip_tables: iptables: counters copy to user failed while replacing table [ 516.485996][T10611] netlink: 'syz.3.1209': attribute type 13 has an invalid length. [ 516.785419][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 516.897561][T10618] tipc: Enabling of bearer rejected, already enabled [ 516.899791][T10620] sg_write: data in/out 270376/136 bytes for SCSI command 0x0-- guessing data in; [ 516.899791][T10620] program syz.2.1214 not setting count and/or reply_len properly [ 517.451611][T10632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.528512][T10634] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1220'. [ 517.579600][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 517.605055][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 517.763589][T10641] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 518.046091][T10646] tipc: Enabling of bearer rejected, already enabled [ 519.089414][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 519.773103][ T6746] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 519.924804][ T6746] usb 1-1: Using ep0 maxpacket: 32 [ 519.925944][ T6746] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 519.930759][ T6746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.973653][ T6746] usb 1-1: config 0 descriptor?? [ 520.086283][ T6733] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 520.221280][ T6746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 520.237557][ T6733] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 520.241843][ T6733] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.268194][ T6746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.270873][ T6746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 520.270916][ T6746] usb 1-1: media controller created [ 520.308824][ T6733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 520.308846][ T6733] usb 2-1: Product: syz [ 520.308857][ T6733] usb 2-1: Manufacturer: syz [ 520.308868][ T6733] usb 2-1: SerialNumber: syz [ 520.365829][ T6746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.461115][ T6746] az6027: usb out operation failed. (-71) [ 520.463393][ T6746] az6027: usb out operation failed. (-71) [ 520.463410][ T6746] stb0899_attach: Driver disabled by Kconfig [ 520.463422][ T6746] az6027: no front-end attached [ 520.463422][ T6746] [ 520.465140][ T6746] az6027: usb out operation failed. (-71) [ 520.465182][ T6746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 520.510009][ T6746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 520.533669][ T6746] dvb-usb: schedule remote query interval to 400 msecs. [ 520.533716][ T6746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 520.558905][ T6748] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 520.572334][ T6746] usb 1-1: USB disconnect, device number 44 [ 520.625365][T10680] tipc: Enabling of bearer rejected, already enabled [ 520.628738][ T6733] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 520.710678][ T6748] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 520.724100][ T6748] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 520.724131][ T6748] usb 5-1: config 0 has no interface number 0 [ 520.724172][ T6748] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.773462][ T6748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.773484][ T6748] usb 5-1: Product: syz [ 520.773495][ T6748] usb 5-1: Manufacturer: syz [ 520.773506][ T6748] usb 5-1: SerialNumber: syz [ 520.816346][ T6748] usb 5-1: config 0 descriptor?? [ 520.833065][ T5718] usb 2-1: USB disconnect, device number 44 [ 520.836161][ T5718] usblp0: removed [ 520.986089][ T6746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 520.992132][ T6748] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 521.899536][T10702] netlink: 'syz.3.1243': attribute type 13 has an invalid length. [ 521.973140][ T5718] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 522.123951][ T5718] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 522.123985][ T5718] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 522.129517][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.129571][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.129601][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.131982][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.132033][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.132053][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.142568][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.142638][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.142665][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.178865][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.178951][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.178986][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.254914][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.255475][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.255516][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.291377][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.291436][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.291466][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.313618][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.313697][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.313726][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.350995][ T5718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 522.351119][ T5718] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 522.351150][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.380604][ T5718] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 522.380635][ T5718] usb 3-1: Product: syz [ 522.380653][ T5718] usb 3-1: Manufacturer: syz [ 522.380669][ T5718] usb 3-1: SerialNumber: syz [ 522.409739][ T5718] usb 3-1: config 0 descriptor?? [ 522.433343][ T5718] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 522.688965][ T5718] usb 3-1: USB disconnect, device number 32 [ 523.150028][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 523.167180][ T5718] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 523.169209][ T6748] usb 5-1: USB disconnect, device number 42 [ 523.220898][ T6748] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 523.934082][ T6746] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 524.087500][ T6746] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 524.091143][ T6746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 524.091170][ T6746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 524.125564][ T6746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.125595][ T6746] usb 2-1: Product: syz [ 524.125612][ T6746] usb 2-1: Manufacturer: syz [ 524.125628][ T6746] usb 2-1: SerialNumber: syz [ 524.171586][ T6746] usb 2-1: config 0 descriptor?? [ 524.172325][T10721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.172479][T10721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.305435][T10735] tipc: Bearer : already 2 bearers with priority 10 [ 524.305455][T10735] tipc: Bearer : trying with adjusted priority [ 524.305535][T10735] tipc: Enabling of bearer rejected, failed to enable media [ 524.393479][ T5718] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 524.415593][T10721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.415708][T10721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.418158][T10735] tipc: Enabling of bearer rejected, already enabled [ 524.555436][ T5718] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.556977][ T5718] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 524.557026][ T5718] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.557044][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 524.560855][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 524.560884][ T5718] usb 3-1: Product: syz [ 524.560900][ T5718] usb 3-1: Manufacturer: syz [ 524.560916][ T5718] usb 3-1: SerialNumber: syz [ 524.631035][ T5718] usb 3-1: config 0 descriptor?? [ 524.639362][ T5718] hub 3-1:0.0: bad descriptor, ignoring hub [ 524.639405][ T5718] hub 3-1:0.0: probe with driver hub failed with error -5 [ 524.663619][ T5718] usb 3-1: selecting invalid altsetting 0 [ 524.841145][T10731] __nla_validate_parse: 1 callbacks suppressed [ 524.842209][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 524.865019][ T6746] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 524.973404][ T5718] usb 3-1: USB disconnect, device number 33 [ 525.069576][ T6746] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 525.100243][ T6746] usb 2-1: USB disconnect, device number 45 [ 525.354169][ T6748] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 525.436645][ T6733] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 525.503782][ T6748] usb 5-1: Using ep0 maxpacket: 32 [ 525.504510][ T6748] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 525.505834][ T6748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.509740][ T6748] usb 5-1: config 0 descriptor?? [ 525.587025][ T6733] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 525.589955][ T6733] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.590009][ T6733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 525.614757][ T6733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.614816][ T6733] usb 1-1: Product: syz [ 525.614833][ T6733] usb 1-1: Manufacturer: syz [ 525.614847][ T6733] usb 1-1: SerialNumber: syz [ 525.666743][ T6733] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 525.682805][ T6733] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 525.682805][ T6733] Please send a copy of this message to and [ 525.727324][ T6748] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 525.747595][ T6748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.766819][ T6748] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 525.766880][ T6748] usb 5-1: media controller created [ 525.793628][T10762] tipc: Enabling of bearer rejected, failed to enable media [ 525.820123][ T6748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.834160][ T6746] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 525.871368][T10762] tipc: Enabling of bearer rejected, already enabled [ 525.936687][ T6748] az6027: usb out operation failed. (-71) [ 525.942151][ T6748] az6027: usb out operation failed. (-71) [ 525.942171][ T6748] stb0899_attach: Driver disabled by Kconfig [ 525.942183][ T6748] az6027: no front-end attached [ 525.942183][ T6748] [ 525.949175][ T6748] az6027: usb out operation failed. (-71) [ 525.949280][ T6748] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 525.983571][ T6746] usb 3-1: Using ep0 maxpacket: 16 [ 525.987753][ T6746] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 526.005248][ T6746] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.005319][ T6746] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.005343][ T6746] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 526.005381][ T6746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.005417][ T6746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.010819][ T6746] usb 3-1: config 0 descriptor?? [ 526.050338][ T6748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 526.103361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.124468][ T6748] dvb-usb: schedule remote query interval to 400 msecs. [ 526.124495][ T6748] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 526.156397][ T6748] usb 5-1: USB disconnect, device number 43 [ 526.201961][ T6733] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 526.376491][ T43] usb 1-1: USB disconnect, device number 45 [ 526.399790][ T6748] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 526.700555][ T6748] usb 3-1: USB disconnect, device number 34 [ 526.889786][T10779] netlink: 'syz.4.1272': attribute type 13 has an invalid length. [ 527.313107][ T5710] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 527.483983][ T5710] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.485484][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.491814][ T5710] usb 1-1: config 0 descriptor?? [ 527.517147][ T5710] cp210x 1-1:0.0: cp210x converter detected [ 527.523610][ T5718] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 527.653157][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 527.674160][ T5718] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.675787][ T5718] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.675820][ T5718] usb 4-1: config 0 has no interface number 0 [ 527.675849][ T5718] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 527.675889][ T5718] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 527.675943][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.679803][ T5718] usb 4-1: config 0 descriptor?? [ 527.681978][T10788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 527.703908][ T6748] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 527.768704][ T5718] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 527.814648][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.816037][ T43] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 527.816090][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 527.816116][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 527.820573][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.820602][ T43] usb 3-1: Product: syz [ 527.820619][ T43] usb 3-1: Manufacturer: syz [ 527.820636][ T43] usb 3-1: SerialNumber: syz [ 527.877798][ T43] usb 3-1: config 0 descriptor?? [ 527.883804][ T6748] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 527.904519][ T6748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.909093][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 527.909125][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 527.941088][ T6748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.941121][ T6748] usb 2-1: Product: syz [ 527.941138][ T6748] usb 2-1: Manufacturer: syz [ 527.941154][ T6748] usb 2-1: SerialNumber: syz [ 527.969064][ T43] usb 3-1: selecting invalid altsetting 0 [ 527.985525][ T6748] usb 2-1: config 0 descriptor?? [ 528.011950][ T5710] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 528.037845][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 528.037874][ T6746] usb 4-1: USB disconnect, device number 39 [ 528.063222][ T5710] usb 1-1: cp210x converter now attached to ttyUSB0 [ 528.091567][ T6748] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 528.175144][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1277'. [ 528.256760][ T6733] usb 1-1: USB disconnect, device number 46 [ 528.285517][ T6733] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.288126][ T6733] cp210x 1-1:0.0: device disconnected [ 528.346948][ T43] usb 3-1: USB disconnect, device number 35 [ 528.838111][ T6748] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 528.838240][ T6748] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 528.869235][ T6748] usb 2-1: USB disconnect, device number 46 [ 529.089832][T10798] tipc: Enabling of bearer rejected, already enabled [ 529.163261][ T5717] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 529.314086][ T5717] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 529.318091][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.318131][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.318156][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.318200][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.336555][ T5717] usb 3-1: config 0 descriptor?? [ 529.522328][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 529.527136][ T5710] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 529.599076][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'. [ 529.685044][ T5710] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 529.687591][ T5710] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 529.687677][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.689634][ T5710] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 529.689664][ T5710] usb 4-1: Manufacturer: syz [ 529.738589][ T5710] usb 4-1: config 0 descriptor?? [ 529.891768][ T5717] input: HID 046d:c343 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C343.0013/input/input45 [ 529.936834][ T5710] rc_core: IR keymap rc-hauppauge not found [ 529.936855][ T5710] Registered IR keymap rc-empty [ 529.947572][ T5710] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 529.979079][ T5710] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input44 [ 530.092399][ T5710] usb 4-1: USB disconnect, device number 40 [ 530.106475][ T5717] logitech-hidpp-device 0003:046D:C343.0013: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c343] on usb-dummy_hcd.2-1/input0 [ 530.152922][ T5717] usb 3-1: USB disconnect, device number 36 [ 530.421841][T10815] fido_id[10815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 530.761987][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 530.973211][ T6748] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 531.113165][T10839] random: crng reseeded on system resumption [ 531.133915][ T6748] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 531.139881][ T6748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.171464][ T6748] usb 5-1: config 0 descriptor?? [ 531.569482][T10847] tipc: Enabling of bearer rejected, failed to enable media [ 531.600819][ T6748] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 531.804782][ T6748] [drm:udl_init] *ERROR* Selecting channel failed [ 531.864231][ T6748] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 531.864259][ T6748] [drm] Initialized udl on minor 1 [ 531.865647][ T6748] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 531.866025][ T6748] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 531.908477][T10851] netlink: 'syz.3.1298': attribute type 13 has an invalid length. [ 531.908651][ T6748] usb 5-1: USB disconnect, device number 44 [ 531.931159][ T43] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 532.003492][ T43] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 532.073637][ T5717] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 532.224172][ T5717] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 532.226353][ T5717] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.226374][ T5717] usb 1-1: config 0 has no interface number 0 [ 532.226410][ T5717] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.226429][ T5717] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.226445][ T5717] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.226476][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.232301][ T5717] usb 1-1: config 0 descriptor?? [ 532.328713][T10859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1300'. [ 532.770048][T10861] No such timeout policy "syz1" [ 532.937136][ T5717] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0014/input/input46 [ 533.054296][ T5717] uclogic 0003:28BD:0042.0014: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 533.084532][ T5717] usb 1-1: USB disconnect, device number 47 [ 533.327246][T10864] fido_id[10864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 533.726585][T10878] tipc: Enabling of bearer rejected, failed to enable media [ 533.939922][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 533.939950][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 534.380609][T10898] netlink: 'syz.2.1313': attribute type 13 has an invalid length. [ 534.963959][ T6748] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 535.115455][ T6748] usb 5-1: Using ep0 maxpacket: 16 [ 535.117493][ T6748] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 535.144861][ T6748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.144896][ T6748] usb 5-1: Product: syz [ 535.144915][ T6748] usb 5-1: Manufacturer: syz [ 535.144933][ T6748] usb 5-1: SerialNumber: syz [ 535.233122][ T5710] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 535.383952][ T5710] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 535.385332][ T5710] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.385357][ T5710] usb 2-1: config 0 has no interface number 0 [ 535.412652][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.412707][ T5710] usb 2-1: Product: syz [ 535.412723][ T5710] usb 2-1: Manufacturer: syz [ 535.412737][ T5710] usb 2-1: SerialNumber: syz [ 535.464356][ T5710] usb 2-1: config 0 descriptor?? [ 535.502939][ T6748] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 535.569772][ T6748] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 535.570763][ T6748] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 535.570828][ T6748] usb 5-1: media controller created [ 535.638555][ T6748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.690547][ T5710] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 535.895619][T10910] ------------[ cut here ]------------ [ 535.895639][T10910] usb 5-1: BOGUS control dir, pipe 80002d80 doesn't match bRequestType c0 [ 535.895663][T10910] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.1.1320/10910 [ 535.922595][T10910] Modules linked in: [ 535.926945][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.1.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.937994][T10910] Tainted: [L]=SOFTLOCKUP [ 535.942336][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.953912][T10910] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 535.959621][T10910] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 535.979408][T10910] RSP: 0018:ffffc90008c3f718 EFLAGS: 00010246 [ 535.985566][T10910] RAX: 0000000000000000 RBX: ffff888058f5b800 RCX: 0000000080002d80 [ 535.993615][T10910] RDX: ffff88802a06a920 RSI: ffffffff8cc53540 RDI: ffffffff90881d10 [ 536.001649][T10910] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 536.009855][T10910] R10: ffffc90008c3f800 R11: fffff52001187f0c R12: 1ffff11005315ff8 [ 536.017934][T10910] R13: ffff8880298affc0 R14: ffff88802a06a920 R15: 0000000080002d80 [ 536.026067][T10910] FS: 00007f31e36696c0(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 536.035115][T10910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.041745][T10910] CR2: 00002000000fc000 CR3: 000000007ad0c000 CR4: 00000000003526f0 [ 536.049947][T10910] Call Trace: [ 536.053362][T10910] [ 536.056351][T10910] usb_start_wait_urb+0x13f/0x5b0 [ 536.061427][T10910] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 536.067120][T10910] usb_control_msg+0x234/0x3e0 [ 536.071967][T10910] gl861_ctrl_msg+0x207/0x420 [ 536.076722][T10910] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 536.081946][T10910] ? rt_mutex_slowlock+0x1f2/0x780 [ 536.087152][T10910] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 536.092667][T10910] ? aa_file_perm+0x4ed/0x15f0 [ 536.097522][T10910] gl861_i2c_master_xfer+0x439/0x6a0 [ 536.102846][T10910] __i2c_transfer+0x7bf/0x1fe0 [ 536.107841][T10910] ? rt_mutex_lock_nested+0x167/0x1c0 [ 536.113299][T10910] ? i2c_transfer+0xc7/0x2d0 [ 536.117928][T10910] i2c_transfer+0x1cb/0x2d0 [ 536.122459][T10910] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 536.128154][T10910] ? __lock_acquire+0x747/0x2de0 [ 536.133269][T10910] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 536.139482][T10910] ? i2cdev_read+0xe8/0x250 [ 536.144060][T10910] i2cdev_read+0x10d/0x250 [ 536.148493][T10910] ? __pfx_i2cdev_read+0x10/0x10 [ 536.153505][T10910] vfs_read+0x213/0xa80 [ 536.157728][T10910] ? __pfx_vfs_read+0x10/0x10 [ 536.162433][T10910] ? __fget_files+0x2a/0x420 [ 536.167285][T10910] ? __fget_files+0x2a/0x420 [ 536.171916][T10910] ? __fget_files+0x3a2/0x420 [ 536.176765][T10910] ? __fget_files+0x2a/0x420 [ 536.181429][T10910] __x64_sys_pread64+0x196/0x220 [ 536.186619][T10910] ? __pfx___x64_sys_pread64+0x10/0x10 [ 536.192151][T10910] do_syscall_64+0x166/0x520 [ 536.196901][T10910] ? trace_irq_disable+0x3b/0x140 [ 536.201975][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.208132][T10910] ? clear_bhb_loop+0x70/0xc0 [ 536.212839][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.218819][T10910] RIP: 0033:0x7f31e279e1d9 [ 536.223368][T10910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.243055][T10910] RSP: 002b:00007f31e3669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 536.251524][T10910] RAX: ffffffffffffffda RBX: 00007f31e2a25fa0 RCX: 00007f31e279e1d9 [ 536.259676][T10910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 536.268600][T10910] RBP: 00007f31e2835888 R08: 0000000000000000 R09: 0000000000000000 [ 536.276905][T10910] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.285006][T10910] R13: 00007f31e2a26038 R14: 00007f31e2a25fa0 R15: 00007f31e2b4fa48 [ 536.293088][T10910] [ 536.296181][T10910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 536.303509][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.1.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.314586][T10910] Tainted: [L]=SOFTLOCKUP [ 536.318989][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.329093][T10910] Call Trace: [ 536.332413][T10910] [ 536.335383][T10910] vpanic+0x56d/0xa60 [ 536.339425][T10910] ? __pfx__printk+0x10/0x10 [ 536.344082][T10910] ? __pfx_vpanic+0x10/0x10 [ 536.348637][T10910] ? is_bpf_text_address+0x292/0x2b0 [ 536.354020][T10910] ? is_bpf_text_address+0x26/0x2b0 [ 536.359288][T10910] panic+0xc5/0xd0 [ 536.363072][T10910] ? __pfx_panic+0x10/0x10 [ 536.367574][T10910] __warn+0x315/0x4c0 [ 536.371615][T10910] ? usb_submit_urb+0x1057/0x18b0 [ 536.376702][T10910] ? usb_submit_urb+0x1057/0x18b0 [ 536.381795][T10910] __report_bug+0x276/0x570 [ 536.386363][T10910] ? usb_submit_urb+0x1057/0x18b0 [ 536.391448][T10910] ? __pfx___report_bug+0x10/0x10 [ 536.396547][T10910] ? stack_depot_save_flags+0x404/0x7f0 [ 536.402170][T10910] report_bug_entry+0x19b/0x290 [ 536.407089][T10910] ? usb_submit_urb+0x1100/0x18b0 [ 536.412183][T10910] ? usb_submit_urb+0x1105/0x18b0 [ 536.417268][T10910] handle_bug+0xce/0x200 [ 536.421567][T10910] exc_invalid_op+0x1a/0x50 [ 536.426158][T10910] asm_exc_invalid_op+0x1a/0x20 [ 536.431080][T10910] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 536.436774][T10910] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 536.456426][T10910] RSP: 0018:ffffc90008c3f718 EFLAGS: 00010246 [ 536.462571][T10910] RAX: 0000000000000000 RBX: ffff888058f5b800 RCX: 0000000080002d80 [ 536.470686][T10910] RDX: ffff88802a06a920 RSI: ffffffff8cc53540 RDI: ffffffff90881d10 [ 536.478720][T10910] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 536.486764][T10910] R10: ffffc90008c3f800 R11: fffff52001187f0c R12: 1ffff11005315ff8 [ 536.494770][T10910] R13: ffff8880298affc0 R14: ffff88802a06a920 R15: 0000000080002d80 [ 536.502900][T10910] ? usb_submit_urb+0x1091/0x18b0 [ 536.507988][T10910] usb_start_wait_urb+0x13f/0x5b0 [ 536.513076][T10910] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 536.518710][T10910] usb_control_msg+0x234/0x3e0 [ 536.523542][T10910] gl861_ctrl_msg+0x207/0x420 [ 536.528277][T10910] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 536.533536][T10910] ? rt_mutex_slowlock+0x1f2/0x780 [ 536.538704][T10910] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 536.544222][T10910] ? aa_file_perm+0x4ed/0x15f0 [ 536.549048][T10910] gl861_i2c_master_xfer+0x439/0x6a0 [ 536.554379][T10910] __i2c_transfer+0x7bf/0x1fe0 [ 536.559183][T10910] ? rt_mutex_lock_nested+0x167/0x1c0 [ 536.564582][T10910] ? i2c_transfer+0xc7/0x2d0 [ 536.569199][T10910] i2c_transfer+0x1cb/0x2d0 [ 536.573733][T10910] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 536.579397][T10910] ? __lock_acquire+0x747/0x2de0 [ 536.584353][T10910] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 536.590530][T10910] ? i2cdev_read+0xe8/0x250 [ 536.595063][T10910] i2cdev_read+0x10d/0x250 [ 536.599516][T10910] ? __pfx_i2cdev_read+0x10/0x10 [ 536.604477][T10910] vfs_read+0x213/0xa80 [ 536.608705][T10910] ? __pfx_vfs_read+0x10/0x10 [ 536.613500][T10910] ? __fget_files+0x2a/0x420 [ 536.618128][T10910] ? __fget_files+0x2a/0x420 [ 536.622768][T10910] ? __fget_files+0x3a2/0x420 [ 536.627539][T10910] ? __fget_files+0x2a/0x420 [ 536.632191][T10910] __x64_sys_pread64+0x196/0x220 [ 536.637167][T10910] ? __pfx___x64_sys_pread64+0x10/0x10 [ 536.642658][T10910] do_syscall_64+0x166/0x520 [ 536.647283][T10910] ? trace_irq_disable+0x3b/0x140 [ 536.652330][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.658418][T10910] ? clear_bhb_loop+0x70/0xc0 [ 536.663215][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.669227][T10910] RIP: 0033:0x7f31e279e1d9 [ 536.673673][T10910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.693303][T10910] RSP: 002b:00007f31e3669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 536.701749][T10910] RAX: ffffffffffffffda RBX: 00007f31e2a25fa0 RCX: 00007f31e279e1d9 [ 536.710005][T10910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 536.718007][T10910] RBP: 00007f31e2835888 R08: 0000000000000000 R09: 0000000000000000 [ 536.726005][T10910] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.734002][T10910] R13: 00007f31e2a26038 R14: 00007f31e2a25fa0 R15: 00007f31e2b4fa48 [ 536.742020][T10910] [ 536.745674][T10910] Kernel Offset: disabled [ 536.750017][T10910] Rebooting in 86400 seconds..