last executing test programs: 4m46.289394493s ago: executing program 0 (id=516): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) 4m46.005129161s ago: executing program 0 (id=519): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) fanotify_init(0x1, 0x1000) r1 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m44.953272686s ago: executing program 0 (id=522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="0fb08a00000fc71a2e2626640fc75e00d0c666b9d70b00000f32b89c000f00d8f36ed1ee64a50fc731", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m44.167873065s ago: executing program 0 (id=528): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 4m43.936624995s ago: executing program 0 (id=530): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setresuid(0xffffffffffffffff, 0x0, r1) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') 4m43.129929954s ago: executing program 0 (id=535): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd606062"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000e1"]) 4m42.815242815s ago: executing program 32 (id=535): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd606062"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000e1"]) 6.846130151s ago: executing program 3 (id=3404): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x1008}) 6.388632828s ago: executing program 3 (id=3407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 4.417501892s ago: executing program 3 (id=3436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 3.85244548s ago: executing program 5 (id=3445): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.572118416s ago: executing program 3 (id=3452): sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0x2, 0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.296070045s ago: executing program 3 (id=3458): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 3.095848177s ago: executing program 4 (id=3461): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={r4}) 3.02166602s ago: executing program 4 (id=3464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x3, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.920465609s ago: executing program 5 (id=3465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write$binfmt_script(r4, 0x0, 0xd9) write(r1, 0x0, 0x0) 2.856889888s ago: executing program 4 (id=3468): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open(&(0x7f0000000840)='./file1\x00', 0x2800, 0x71) r1 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r4 = fanotify_init(0x2, 0x40000) fanotify_mark(r4, 0x1, 0x40000022, r0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 2.59061046s ago: executing program 4 (id=3473): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x7, 0x5e, 0x2, 0x7, 0xfff}}, {0x3e}}]}]}, 0x50}}, 0x40000) 2.487854072s ago: executing program 5 (id=3475): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) inotify_rm_watch(r2, r1) 2.300420261s ago: executing program 3 (id=3478): r0 = syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x83, 0x2, '~\''}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x84, 0x2, "46e2"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208102000000b822"], 0x0, 0x0, 0x0, 0x0}) 2.120119548s ago: executing program 2 (id=3480): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfd, 0x1f}, {0x0, 0x0, 0x0, 0x4, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.973813937s ago: executing program 4 (id=3482): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x937, 0x0, 0x0, 0x41000333}, &(0x7f00000006c0)=0x0, &(0x7f00000003c0)=0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 1.955530644s ago: executing program 2 (id=3483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000040)=0xfffffffffffffff7, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.708491859s ago: executing program 4 (id=3487): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x6f, 0x13, 0x3, 0x9, "13146d83b2b82aa82ee39ee156c4cc465a0d795fc3c8b6e5c9adeedf50fcc809"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) 1.030643376s ago: executing program 5 (id=3494): unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 904.440488ms ago: executing program 2 (id=3495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000001100)=""/4091, &(0x7f00000010c0)=0xfffffffffffffee0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x4000000000c, 0x8000000000005, 0x800040068], 0x2000, 0x90}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 833.316037ms ago: executing program 1 (id=3497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) 771.033299ms ago: executing program 2 (id=3498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 616.454436ms ago: executing program 1 (id=3499): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8000, 0x1}}, 0x30) 520.320742ms ago: executing program 1 (id=3500): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 370.253206ms ago: executing program 1 (id=3501): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) 304.475906ms ago: executing program 2 (id=3502): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00001db000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 234.753632ms ago: executing program 5 (id=3503): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='/', 0x1, 0x4000000, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') pread64(r1, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd7) 156.138751ms ago: executing program 2 (id=3504): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0xc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 68.048252ms ago: executing program 1 (id=3505): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x87, 0x800000000008c}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 67.81342ms ago: executing program 5 (id=3506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab2abd7000000000003200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 0s ago: executing program 1 (id=3507): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): r?? [ 275.231994][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.268665][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 275.268750][ T5905] usb 6-1: can't read configurations, error -71 [ 275.659267][ T5906] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 275.682047][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 275.682085][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 275.682581][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 275.682604][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 275.682622][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 275.682636][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 275.682913][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 275.783057][ T31] usb 5-1: USB disconnect, device number 18 [ 275.906722][ T5906] usb 4-1: USB disconnect, device number 21 [ 276.271558][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 276.321583][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.427597][ T5901] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 276.427625][ T5901] usb 3-1: config 0 has no interface number 0 [ 276.427658][ T5901] usb 3-1: config 0 interface 255 has no altsetting 0 [ 276.427691][ T5901] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.427714][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.471769][ T5901] usb 3-1: config 0 descriptor?? [ 276.479990][ T5901] cp210x 3-1:0.255: cp210x converter detected [ 276.495923][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.495958][ T5905] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.496046][ T5905] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.496070][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.566921][ T9031] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 276.593927][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.661896][ T9056] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 276.868212][ T5905] usb 6-1: USB disconnect, device number 9 [ 276.892693][ T5901] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 277.096108][ T5901] cp210x 3-1:0.255: GPIO initialisation failed: -19 [ 277.121828][ T5901] usb 3-1: cp210x converter now attached to ttyUSB0 [ 277.318384][ T5906] usb 3-1: USB disconnect, device number 13 [ 277.336171][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.336766][ T5906] cp210x 3-1:0.255: device disconnected [ 277.753360][ T5904] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 277.905112][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.905139][ T5904] usb 2-1: config 0 has no interface number 0 [ 277.905185][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.905210][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.905246][ T5904] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 277.905327][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.918923][ T5904] usb 2-1: config 0 descriptor?? [ 278.454720][ T5904] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0016/input/input23 [ 278.716725][ T5904] holtek_kbd 0003:04D9:A055.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 278.734817][ T5904] usb 2-1: USB disconnect, device number 17 [ 278.821456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 278.870916][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.719379][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 281.001556][ T5901] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 281.155036][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.155065][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.155085][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.155121][ T5901] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 281.155141][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.159612][ T5901] usb 3-1: config 0 descriptor?? [ 281.161583][ T5906] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.353672][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 281.356215][ T5906] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.356232][ T5906] usb 2-1: config 0 has no interface number 0 [ 281.361561][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 281.388911][ T5906] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.388941][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.388960][ T5906] usb 2-1: Product: syz [ 281.388973][ T5906] usb 2-1: Manufacturer: syz [ 281.388987][ T5906] usb 2-1: SerialNumber: syz [ 281.404729][ T5906] usb 2-1: config 0 descriptor?? [ 281.431306][ T5906] smsc95xx v2.0.0 [ 281.511523][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 281.515981][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.516012][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.516102][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.516124][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.573166][ T5905] usb 4-1: config 0 descriptor?? [ 281.578588][ T5905] hub 4-1:0.0: USB hub found [ 281.803301][ T5905] hub 4-1:0.0: 1 port detected [ 282.022566][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 282.393668][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 282.394478][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.406997][ T31] hub 4-1:0.0: activate --> -90 [ 282.446461][ T5901] usb 3-1: USB disconnect, device number 14 [ 282.658995][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 282.659022][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 282.659445][ T5906] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 282.659677][ T5906] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 282.674413][ T5906] usb 2-1: USB disconnect, device number 18 [ 282.814907][ T31] usb 4-1-port1: cannot reset (err = -71) [ 282.815627][ T5904] usb 4-1: USB disconnect, device number 22 [ 282.816250][ T31] usb 4-1-port1: cannot reset (err = -71) [ 282.816267][ T31] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 282.816782][ T31] usb 4-1-port1: attempt power cycle [ 283.457428][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1303'. [ 283.543487][ T9183] syzkaller1: entered promiscuous mode [ 283.543511][ T9183] syzkaller1: entered allmulticast mode [ 284.401162][ T9211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.361544][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 286.524481][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.524501][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.524514][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.524536][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 286.524548][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.530652][ T31] usb 2-1: config 0 descriptor?? [ 287.072452][ T31] elecom 0003:056E:00FB.0017: unknown main item tag 0x0 [ 287.098874][ T31] elecom 0003:056E:00FB.0017: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 287.246997][ T31] usb 2-1: USB disconnect, device number 19 [ 287.581977][ T9282] use of bytesused == 0 is deprecated and will be removed in the future, [ 287.581991][ T9282] use the actual size instead. [ 288.045244][ T5905] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 288.103173][ T5905] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.882370][ T9304] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 289.930184][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.969032][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.041769][ T9304] usb 2-1: Using ep0 maxpacket: 32 [ 290.044595][ T9304] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 290.044620][ T9304] usb 2-1: config 0 has no interface number 0 [ 290.044665][ T9304] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.048994][ T9304] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 290.049021][ T9304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.049040][ T9304] usb 2-1: Product: syz [ 290.049057][ T9304] usb 2-1: Manufacturer: syz [ 290.049069][ T9304] usb 2-1: SerialNumber: syz [ 290.117595][ T9304] usb 2-1: config 0 descriptor?? [ 290.160045][ T9304] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 290.160078][ T9304] em28xx 2-1:0.132: Video interface 132 found: [ 290.542188][ T9304] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 290.981222][ T9304] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 290.981256][ T9304] em28xx 2-1:0.132: board has no eeprom [ 291.271694][ T9304] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 291.271723][ T9304] em28xx 2-1:0.132: analog set to bulk mode. [ 291.273294][ T9326] em28xx 2-1:0.132: Registering V4L2 extension [ 291.322764][ T9304] usb 2-1: USB disconnect, device number 20 [ 291.325064][ T9304] em28xx 2-1:0.132: Disconnecting em28xx [ 291.556324][ T9326] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 291.556347][ T9326] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 291.556360][ T9326] em28xx 2-1:0.132: No AC97 audio processor [ 291.558688][ T9326] usb 2-1: Decoder not found [ 291.558702][ T9326] em28xx 2-1:0.132: failed to create media graph [ 291.558737][ T9326] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 291.608000][ T9326] em28xx 2-1:0.132: Remote control support is not available for this card. [ 291.608058][ T9304] em28xx 2-1:0.132: Closing input extension [ 291.632100][ T9304] em28xx 2-1:0.132: Freeing device [ 291.684897][ T10] lo speed is unknown, defaulting to 1000 [ 291.685043][ T10] syz2: Port: 1 Link DOWN [ 291.735350][ T1104] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.766581][ T1104] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.781602][ T1104] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.781647][ T1104] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.022080][ T9348] netlink: 'syz.4.1363': attribute type 12 has an invalid length. [ 292.022101][ T9348] netlink: 'syz.4.1363': attribute type 29 has an invalid length. [ 292.022114][ T9348] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1363'. [ 292.022137][ T9348] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 292.022149][ T9348] netlink: 'syz.4.1363': attribute type 2 has an invalid length. [ 292.673628][ T9369] tipc: Started in network mode [ 292.673650][ T9369] tipc: Node identity 4, cluster identity 4711 [ 292.673662][ T9369] tipc: Node number set to 4 [ 293.808714][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 294.051530][ T9326] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.211652][ T9326] usb 4-1: Using ep0 maxpacket: 16 [ 294.230796][ T9326] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 294.230820][ T9326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.230839][ T9326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.270306][ T9326] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.270336][ T9326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.270355][ T9326] usb 4-1: Product: syz [ 294.270369][ T9326] usb 4-1: Manufacturer: syz [ 294.270383][ T9326] usb 4-1: SerialNumber: syz [ 294.702299][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 294.793815][ T9326] usb 4-1: 0:2 : does not exist [ 294.798341][ T9326] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 294.832740][ T9326] usb 4-1: USB disconnect, device number 27 [ 295.063222][ T9439] netlink: 'syz.4.1400': attribute type 30 has an invalid length. [ 295.491077][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'. [ 295.586842][ T9447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.638138][ T9447] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 297.120583][ T37] audit: type=1326 audit(296.948:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9484 comm="syz.3.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa870feec9 code=0x0 [ 298.853053][ T59] Bluetooth: hci1: command 0x0405 tx timeout [ 299.405218][ T9547] Bluetooth: hci0: unsupported parameter 178 [ 299.405239][ T9547] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 299.681695][ T9326] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 299.843387][ T9326] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 299.843423][ T9326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.844526][ T9326] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 299.844542][ T9326] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 299.844552][ T9326] usb 4-1: Manufacturer: syz [ 299.856246][ T9326] usb 4-1: config 0 descriptor?? [ 300.021588][ T9326] rc_core: IR keymap rc-hauppauge not found [ 300.021609][ T9326] Registered IR keymap rc-empty [ 300.029609][ T9326] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 300.085782][ T9326] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 300.097572][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 300.154593][ T9326] usb 4-1: USB disconnect, device number 28 [ 300.965473][ T9574] netlink: 'syz.5.1454': attribute type 3 has an invalid length. [ 301.321620][ T9329] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 301.499205][ T9329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.503148][ T9329] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.503175][ T9329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.503195][ T9329] usb 5-1: Product: syz [ 301.503208][ T9329] usb 5-1: Manufacturer: syz [ 301.503222][ T9329] usb 5-1: SerialNumber: syz [ 302.085947][ T9600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 302.085973][ T9600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.151727][ T9600] vhci_hcd vhci_hcd.0: Device attached [ 302.171653][ T9604] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 302.171678][ T9604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.171730][ T9604] vhci_hcd vhci_hcd.0: Device attached [ 302.315312][ T9604] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 302.315340][ T9604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.330138][ T9604] vhci_hcd vhci_hcd.0: Device attached [ 302.349250][ T9600] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 302.349278][ T9600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 302.349447][ T9600] vhci_hcd vhci_hcd.0: Device attached [ 302.360629][ T9605] vhci_hcd: connection closed [ 302.372131][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 302.384840][ T9602] vhci_hcd: connection closed [ 302.390672][ T9603] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 302.445395][ T9610] vhci_hcd: connection closed [ 302.445850][ T1459] vhci_hcd: stop threads [ 302.449755][ T1459] vhci_hcd: release socket [ 302.469130][ T1459] vhci_hcd: disconnect device [ 302.469198][ T1459] vhci_hcd: stop threads [ 302.469219][ T1459] vhci_hcd: release socket [ 302.484963][ T1459] vhci_hcd: disconnect device [ 302.485311][ T1459] vhci_hcd: stop threads [ 302.485324][ T1459] vhci_hcd: release socket [ 302.488116][ T1459] vhci_hcd: disconnect device [ 302.578117][ T9329] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 302.578144][ T9329] cdc_ncm 5-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 302.578162][ T9329] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 302.633192][ T9611] vhci_hcd: connection closed [ 302.633807][ T142] vhci_hcd: stop threads [ 302.633824][ T142] vhci_hcd: release socket [ 302.634016][ T142] vhci_hcd: disconnect device [ 302.714056][ T9326] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 302.746347][ T9618] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 302.823687][ T9329] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 302.851086][ T9329] usb 5-1: USB disconnect, device number 19 [ 302.856676][ T9329] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 302.906128][ T9326] usb 6-1: Using ep0 maxpacket: 16 [ 302.920205][ T9326] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.920265][ T9326] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 302.920289][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.988721][ T9326] usb 6-1: config 0 descriptor?? [ 303.024326][ T9326] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 303.656093][ T5166] bcm5974 6-1:0.0: could not read from device [ 303.714419][ T9326] usb 6-1: USB disconnect, device number 10 [ 303.951990][ T9321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 304.171626][ T9321] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 304.171683][ T9321] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 304.171706][ T9321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 304.274935][ T9321] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.274964][ T9321] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 304.274984][ T9321] usb 2-1: Product: syz [ 304.274998][ T9321] usb 2-1: Manufacturer: syz [ 304.275012][ T9321] usb 2-1: SerialNumber: syz [ 304.324327][ T9321] usb 2-1: config 0 descriptor?? [ 304.330500][ T9321] hub 2-1:0.0: bad descriptor, ignoring hub [ 304.330538][ T9321] hub 2-1:0.0: probe with driver hub failed with error -5 [ 304.374760][ T9321] usb 2-1: selecting invalid altsetting 0 [ 304.737894][ T9649] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1480'. [ 304.839994][ T9329] usb 2-1: USB disconnect, device number 21 [ 305.322030][ T37] audit: type=1326 audit(305.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9661 comm="syz.2.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbc46eeec9 code=0x0 [ 305.551604][ T9329] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 305.722634][ T9329] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 305.722692][ T9329] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.722713][ T9329] usb 2-1: config 0 interface 0 has no altsetting 0 [ 305.726588][ T9329] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.726616][ T9329] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 305.726637][ T9329] usb 2-1: Product: syz [ 305.726651][ T9329] usb 2-1: Manufacturer: syz [ 305.726665][ T9329] usb 2-1: SerialNumber: syz [ 305.768036][ T9329] usb 2-1: config 0 descriptor?? [ 305.775701][ T9329] hub 2-1:0.0: bad descriptor, ignoring hub [ 305.775738][ T9329] hub 2-1:0.0: probe with driver hub failed with error -5 [ 305.816485][ T9329] usb 2-1: selecting invalid altsetting 0 [ 305.848568][ T9678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.042704][ T9329] usb 2-1: USB disconnect, device number 22 [ 306.291985][ T9319] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 306.477719][ T9319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.477746][ T9319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.482105][ T9319] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.482131][ T9319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.482151][ T9319] usb 5-1: SerialNumber: syz [ 306.757169][ T9319] usb 5-1: 0:2 : does not exist [ 306.790896][ T9319] usb 5-1: USB disconnect, device number 20 [ 307.302726][ T9710] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 307.481623][ T10] vhci_hcd: vhci_device speed not set [ 309.221676][ T9329] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 309.241520][ T9321] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 309.381488][ T9329] usb 6-1: Using ep0 maxpacket: 32 [ 309.388212][ T9329] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 309.388242][ T9329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.399161][ T9329] usb 6-1: config 0 descriptor?? [ 309.425422][ T9321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.428877][ T9321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.428906][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.428926][ T9321] usb 3-1: Product: syz [ 309.428939][ T9321] usb 3-1: Manufacturer: syz [ 309.428952][ T9321] usb 3-1: SerialNumber: syz [ 309.612446][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 309.620167][ T9329] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 309.645567][ T9329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.650159][ T9329] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 309.650215][ T9329] usb 6-1: media controller created [ 309.662149][ T9747] bridge_slave_1: default FDB implementation only supports local addresses [ 309.737704][ T9329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.764870][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 309.764927][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 309.765157][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 309.769788][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 309.770030][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 309.770051][ T10] usb 4-1: Product: syz [ 309.770065][ T10] usb 4-1: Manufacturer: syz [ 309.770079][ T10] usb 4-1: SerialNumber: syz [ 309.839704][ T10] usb 4-1: config 0 descriptor?? [ 309.856127][ T9329] az6027: usb out operation failed. (-71) [ 309.856530][ T9329] az6027: usb out operation failed. (-71) [ 309.856542][ T9329] stb0899_attach: Driver disabled by Kconfig [ 309.856552][ T9329] az6027: no front-end attached [ 309.856552][ T9329] [ 309.856976][ T9329] az6027: usb out operation failed. (-71) [ 309.856990][ T9329] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 309.867999][ T9329] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 309.894091][ T9329] dvb-usb: schedule remote query interval to 400 msecs. [ 309.894110][ T9329] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 309.905870][ T9329] usb 6-1: USB disconnect, device number 11 [ 309.937034][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 309.937122][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 309.976021][ T10] usb 4-1: selecting invalid altsetting 0 [ 310.105645][ T9329] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 310.186111][ T10] usb 4-1: USB disconnect, device number 29 [ 310.378386][ T37] audit: type=1326 audit(310.208:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3274a6eec9 code=0x0 [ 310.516956][ T9321] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 310.516983][ T9321] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 310.517001][ T9321] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 310.671818][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 310.717671][ T9321] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 310.744051][ T9321] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 310.764252][ T9321] usb 3-1: USB disconnect, device number 15 [ 310.767276][ T9321] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 310.841183][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 310.841229][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 310.841249][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.866191][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 310.866207][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 310.866217][ T10] usb 4-1: Product: syz [ 310.866224][ T10] usb 4-1: Manufacturer: syz [ 310.866232][ T10] usb 4-1: SerialNumber: syz [ 310.919869][ T10] usb 4-1: config 0 descriptor?? [ 310.928141][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 310.928166][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 310.952622][ T10] usb 4-1: selecting invalid altsetting 0 [ 311.271984][ T9326] usb 4-1: USB disconnect, device number 30 [ 311.371645][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 311.521752][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 311.538441][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.538456][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.538467][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.578213][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.578232][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.578242][ T10] usb 2-1: Product: syz [ 311.578249][ T10] usb 2-1: Manufacturer: syz [ 311.578257][ T10] usb 2-1: SerialNumber: syz [ 311.981077][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'. [ 311.981106][ T9782] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 311.981119][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1532'. [ 312.144354][ T10] usb 2-1: 0:2 : does not exist [ 312.344799][ T9784] input: syz0 as /devices/virtual/input/input27 [ 312.976816][ T10] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 313.046784][ T10] usb 2-1: USB disconnect, device number 23 [ 314.212505][ T9828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.671578][ T9304] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 314.716780][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 314.758488][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 314.758524][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 314.847900][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.847934][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.847956][ T9304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.847999][ T9304] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.848021][ T9304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.871080][ T9304] usb 4-1: config 0 descriptor?? [ 315.190039][ T9843] bridge0: port 3(vlan2) entered blocking state [ 315.204423][ T9843] bridge0: port 3(vlan2) entered disabled state [ 315.221207][ T9843] vlan2: entered allmulticast mode [ 315.221229][ T9843] bridge0: entered allmulticast mode [ 315.340681][ T9843] vlan2: left allmulticast mode [ 315.340702][ T9843] bridge0: left allmulticast mode [ 315.418503][ T9304] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 315.782615][ T9861] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 315.818293][ T9861] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 316.372937][ T5826] Bluetooth: hci1: connection err: -111 [ 317.263506][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263576][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.361609][ T9304] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 317.384122][ T9319] usb 4-1: USB disconnect, device number 31 [ 317.513901][ T9304] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 317.513947][ T9304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.513967][ T9304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.513984][ T9304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 317.515513][ T9304] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 317.515540][ T9304] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 317.515558][ T9304] usb 5-1: Manufacturer: syz [ 317.518758][ T9304] usb 5-1: config 0 descriptor?? [ 317.834064][ T37] audit: type=1326 audit(317.658:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9906 comm="syz.5.1584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f904164eec9 code=0x0 [ 317.967625][ T9304] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 317.999083][ T9304] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 318.189898][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 318.727896][ T37] audit: type=1326 audit(318.558:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.727947][ T37] audit: type=1326 audit(318.558:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.764182][ T37] audit: type=1326 audit(318.588:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.764234][ T37] audit: type=1326 audit(318.588:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.764273][ T37] audit: type=1326 audit(318.588:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.777069][ T37] audit: type=1326 audit(318.598:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.780095][ T37] audit: type=1326 audit(318.608:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.786802][ T37] audit: type=1326 audit(318.618:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 318.789248][ T37] audit: type=1326 audit(318.618:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9927 comm="syz.5.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904164eec9 code=0x7ffc0000 [ 320.391539][ T9329] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 320.450077][ T9980] input: syz0 as /devices/virtual/input/input28 [ 320.552489][ T9329] usb 5-1: device firmware changed [ 320.598565][ T9304] usb 5-1: USB disconnect, device number 21 [ 320.761719][ T9304] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.881737][ T9319] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 320.913572][ T9304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.913628][ T9304] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.913641][ T9304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.917071][ T9304] usb 5-1: config 0 descriptor?? [ 320.920979][ T9304] pwc: Askey VC010 type 2 USB webcam detected. [ 321.031522][ T9319] usb 4-1: Using ep0 maxpacket: 8 [ 321.041653][ T9319] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 321.041677][ T9319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.041695][ T9319] usb 4-1: Product: syz [ 321.041708][ T9319] usb 4-1: Manufacturer: syz [ 321.041722][ T9319] usb 4-1: SerialNumber: syz [ 321.084435][ T9319] usb 4-1: config 0 descriptor?? [ 321.097711][ T9319] gspca_main: sq905-2.14.0 probing 2770:9120 [ 321.346096][ T9304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.347779][ T9304] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.349014][ T9304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.555189][ T9304] pwc: recv_control_msg error -71 req 04 val 1300 [ 321.557275][ T9304] pwc: recv_control_msg error -71 req 04 val 1400 [ 321.563218][ T9304] pwc: recv_control_msg error -71 req 02 val 2000 [ 321.563694][ T9304] pwc: recv_control_msg error -71 req 02 val 2100 [ 321.567378][ T9304] pwc: recv_control_msg error -71 req 04 val 1500 [ 321.567849][ T9304] pwc: recv_control_msg error -71 req 02 val 2500 [ 321.568654][ T9304] pwc: recv_control_msg error -71 req 02 val 2400 [ 321.569097][ T9304] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.569532][ T9304] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.569958][ T9304] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.570573][ T9304] pwc: recv_control_msg error -71 req 04 val 1100 [ 321.571009][ T9304] pwc: recv_control_msg error -71 req 04 val 1200 [ 321.627338][ T9994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.654195][ T9304] pwc: Registered as video103. [ 321.657770][ T9304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 321.725901][ T9304] usb 5-1: USB disconnect, device number 22 [ 322.070156][T10005] input: syz0 as /devices/virtual/input/input30 [ 322.127049][ T9319] gspca_sq905: bulk read fail (-22) len 0/4 [ 322.127142][ T9319] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 322.345815][ T10] usb 4-1: USB disconnect, device number 32 [ 323.591847][ T9304] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 323.747439][ T9304] usb 3-1: config 0 has no interfaces? [ 323.756756][ T9304] usb 3-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 323.756783][ T9304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.756801][ T9304] usb 3-1: Product: syz [ 323.756814][ T9304] usb 3-1: Manufacturer: syz [ 323.756826][ T9304] usb 3-1: SerialNumber: syz [ 323.766746][ T9304] usb 3-1: config 0 descriptor?? [ 324.155276][ T9304] usb 3-1: USB disconnect, device number 16 [ 324.363211][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 324.363230][ T37] audit: type=1326 audit(324.198:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10072 comm="syz.3.1652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa870feec9 code=0x0 [ 324.411522][ T9329] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 324.568804][ T9329] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 324.568867][ T9329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.571064][ T9329] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 324.571081][ T9329] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 324.571091][ T9329] usb 6-1: Manufacturer: syz [ 324.598366][ T9329] usb 6-1: config 0 descriptor?? [ 324.691819][ T9329] rc_core: IR keymap rc-hauppauge not found [ 324.691840][ T9329] Registered IR keymap rc-empty [ 324.693352][ T9329] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 324.696231][ T9329] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 324.859898][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 324.911197][ T9319] usb 6-1: USB disconnect, device number 12 [ 325.291142][T10096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.421643][ T9329] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 326.571587][ T9329] usb 4-1: Using ep0 maxpacket: 32 [ 326.576969][ T9329] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 326.576996][ T9329] usb 4-1: config 0 has no interface number 0 [ 326.577048][ T9329] usb 4-1: config 0 interface 12 has no altsetting 0 [ 326.583066][ T9329] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 326.583094][ T9329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.583113][ T9329] usb 4-1: Product: syz [ 326.583126][ T9329] usb 4-1: Manufacturer: syz [ 326.583140][ T9329] usb 4-1: SerialNumber: syz [ 326.602185][ T9329] usb 4-1: config 0 descriptor?? [ 326.900342][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1684'. [ 326.900813][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1684'. [ 327.200802][T10151] sctp: [Deprecated]: syz.4.1685 (pid 10151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.200802][T10151] Use struct sctp_sack_info instead [ 327.866734][ T9329] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 327.866803][ T9329] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 327.866820][ T9329] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 327.866913][ T9329] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 327.894255][ T9329] usb 4-1: USB disconnect, device number 33 [ 328.271775][ T9319] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 328.421599][ T9319] usb 5-1: Using ep0 maxpacket: 32 [ 328.428529][T10171] serio: Serial port ptm0 [ 328.429249][ T9319] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 328.429274][ T9319] usb 5-1: config 0 has no interface number 0 [ 328.429321][ T9319] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.452266][ T9319] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 328.452294][ T9319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.452313][ T9319] usb 5-1: Product: syz [ 328.452327][ T9319] usb 5-1: Manufacturer: syz [ 328.452340][ T9319] usb 5-1: SerialNumber: syz [ 328.559393][ T9319] usb 5-1: config 0 descriptor?? [ 328.603449][ T9319] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 328.603483][ T9319] em28xx 5-1:0.132: Video interface 132 found: [ 328.986497][ T9319] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 329.017465][ T9321] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 329.075745][T10187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.180909][ T9321] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 329.181018][ T9321] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 329.181042][ T9321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.206530][ T9321] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.206561][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.206580][ T9321] usb 3-1: Product: syz [ 329.206593][ T9321] usb 3-1: Manufacturer: syz [ 329.207136][ T9321] usb 3-1: SerialNumber: syz [ 329.239115][ T9321] usb 3-1: config 0 descriptor?? [ 329.254165][ T9321] hub 3-1:0.0: bad descriptor, ignoring hub [ 329.254203][ T9321] hub 3-1:0.0: probe with driver hub failed with error -5 [ 329.278576][ T9321] usb 3-1: selecting invalid altsetting 0 [ 329.657490][ T9319] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 329.657522][ T9319] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 329.657565][ T9319] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 329.761662][ T9319] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 329.761690][ T9319] em28xx 5-1:0.132: analog set to bulk mode. [ 329.762796][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 329.792147][ T9319] usb 5-1: USB disconnect, device number 23 [ 329.795786][ T9319] em28xx 5-1:0.132: Disconnecting em28xx [ 330.088496][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 330.088522][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 330.088535][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 330.132835][T10176] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 330.162788][ T10] usb 5-1: Decoder not found [ 330.162807][ T10] em28xx 5-1:0.132: failed to create media graph [ 330.162900][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 330.195773][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 330.199623][ T9319] em28xx 5-1:0.132: Closing input extension [ 330.224310][ T9319] em28xx 5-1:0.132: Freeing device [ 330.609507][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 330.643278][T10176] usb 3-1: failed to restore interface 0 altsetting 251 (error=-71) [ 330.645351][ T9321] usb 3-1: USB disconnect, device number 17 [ 330.980538][T10240] lo speed is unknown, defaulting to 1000 [ 331.804146][T10255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.992865][T10260] block nbd4: not configured, cannot reconfigure [ 332.013732][T10262] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 332.291720][ T9326] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 332.441543][ T9326] usb 3-1: Using ep0 maxpacket: 8 [ 332.441575][ T9322] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 332.467809][ T9326] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 332.467839][ T9326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.467859][ T9326] usb 3-1: Product: syz [ 332.467874][ T9326] usb 3-1: Manufacturer: syz [ 332.467887][ T9326] usb 3-1: SerialNumber: syz [ 332.475256][ T9326] usb 3-1: config 0 descriptor?? [ 332.591484][ T9322] usb 5-1: Using ep0 maxpacket: 16 [ 332.593982][ T9322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.594013][ T9322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.594034][ T9322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.594075][ T9322] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 332.594097][ T9322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.663748][ T9322] usb 5-1: config 0 descriptor?? [ 332.680966][ T9326] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 332.901684][ T9326] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.913528][ T9326] usb 3-1: USB disconnect, device number 18 [ 333.111873][ T9322] hid-multitouch 0003:0457:07DA.001B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 333.131729][T10275] binder: 10274:10275 ioctl 4018620d 0 returned -22 [ 333.364314][ T9321] usb 5-1: USB disconnect, device number 24 [ 335.423384][T10323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.788294][T10340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.803067][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1759'. [ 336.213506][T10358] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1767'. [ 336.226257][T10358] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1767'. [ 336.612505][ T37] audit: type=1326 audit(592.438:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.612989][ T37] audit: type=1326 audit(592.448:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.614620][ T37] audit: type=1326 audit(592.448:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.614889][ T37] audit: type=1326 audit(592.448:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.615544][ T37] audit: type=1326 audit(592.448:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.615587][ T37] audit: type=1326 audit(592.448:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.615627][ T37] audit: type=1326 audit(592.448:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.616045][ T37] audit: type=1326 audit(592.448:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.616310][ T37] audit: type=1326 audit(592.448:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa870feec9 code=0x7ffc0000 [ 336.616728][ T37] audit: type=1326 audit(592.448:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa870fd710 code=0x7ffc0000 [ 337.036250][T10385] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 337.043409][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 337.271550][ T9322] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 337.356019][T10397] evm: overlay not supported [ 337.374761][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 337.425514][ T9322] usb 6-1: Using ep0 maxpacket: 16 [ 337.448466][ T9322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.448520][ T9322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.448546][ T9322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 337.448571][ T9322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.448593][ T9322] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.510304][ T9322] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.510334][ T9322] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.510354][ T9322] usb 6-1: Manufacturer: syz [ 337.537237][ T9322] usb 6-1: config 0 descriptor?? [ 337.581702][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 337.601930][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.602012][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.602051][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 337.602073][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.639113][T10402] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1787'. [ 337.660004][ T10] usb 2-1: config 0 descriptor?? [ 337.675135][ T10] hub 2-1:0.0: USB hub found [ 337.833545][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 337.884389][ T10] hub 2-1:0.0: 1 port detected [ 337.901666][ T9322] rc_core: IR keymap rc-hauppauge not found [ 337.901685][ T9322] Registered IR keymap rc-empty [ 337.906288][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.926969][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.955441][ T9322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 337.985067][ T9322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 338.031582][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.051642][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.081629][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.112010][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.136763][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.153128][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.171579][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.201648][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.221607][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.251925][ T9322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.287032][ T9322] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 338.287057][ T9322] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.321342][T10420] syzkaller1: entered promiscuous mode [ 338.321566][T10420] syzkaller1: entered allmulticast mode [ 338.342154][ T9326] usb 6-1: USB disconnect, device number 13 [ 338.498166][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.509552][ T9322] hub 2-1:0.0: activate --> -90 [ 338.824443][T10431] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 338.917542][ T9329] usb 2-1: USB disconnect, device number 24 [ 338.949109][T10424] lo speed is unknown, defaulting to 1000 [ 339.221964][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 340.113500][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.125336][T10463] netlink: 'syz.1.1810': attribute type 3 has an invalid length. [ 340.125357][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 340.877093][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.071499][ T9322] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 341.243925][ T9322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.243957][ T9322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.243978][ T9322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.244019][ T9322] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.244041][ T9322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.249625][ T9322] usb 6-1: config 0 descriptor?? [ 341.521519][T10490] lo speed is unknown, defaulting to 1000 [ 341.700133][ T9322] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.697963][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.976860][ C1] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1 [ 343.250696][T10536] netlink: 'syz.3.1835': attribute type 12 has an invalid length. [ 343.250709][T10536] netlink: 'syz.3.1835': attribute type 29 has an invalid length. [ 343.250716][T10536] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1835'. [ 343.250730][T10536] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 343.250737][T10536] netlink: 'syz.3.1835': attribute type 2 has an invalid length. [ 343.250743][T10536] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1835'. [ 343.461621][ T9321] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 343.640315][ T9321] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 343.640347][ T9321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.650804][T10544] syz.2.1840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.651338][T10544] CPU: 1 UID: 0 PID: 10544 Comm: syz.2.1840 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.651362][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.651381][T10544] Call Trace: [ 343.651392][T10544] [ 343.651402][T10544] dump_stack_lvl+0x189/0x250 [ 343.651429][T10544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.651448][T10544] ? __pfx__printk+0x10/0x10 [ 343.651479][T10544] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.651504][T10544] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.651531][T10544] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 343.651559][T10544] warn_alloc+0x22e/0x3b0 [ 343.651586][T10544] ? stack_trace_save+0x9c/0xe0 [ 343.651609][T10544] ? xskq_create+0x56/0x170 [ 343.651642][T10544] ? __pfx_warn_alloc+0x10/0x10 [ 343.651674][T10544] ? __kasan_kmalloc+0x93/0xb0 [ 343.651695][T10544] ? __kmalloc_cache_noprof+0x17d/0x2e0 [ 343.651717][T10544] ? xskq_create+0x56/0x170 [ 343.651743][T10544] ? xsk_init_queue+0xb0/0x110 [ 343.651766][T10544] ? xsk_setsockopt+0x57b/0x8d0 [ 343.651790][T10544] ? do_sock_setsockopt+0x179/0x1b0 [ 343.651807][T10544] ? __x64_sys_setsockopt+0x145/0x1b0 [ 343.651824][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.651850][T10544] __vmalloc_node_range_noprof+0x125/0x12f0 [ 343.651907][T10544] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.651941][T10544] ? __kasan_kmalloc+0x93/0xb0 [ 343.651965][T10544] vmalloc_user_noprof+0xad/0xf0 [ 343.651991][T10544] ? xskq_create+0xbf/0x170 [ 343.652019][T10544] xskq_create+0xbf/0x170 [ 343.652050][T10544] xsk_init_queue+0xb0/0x110 [ 343.652079][T10544] xsk_setsockopt+0x57b/0x8d0 [ 343.652107][T10544] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.652140][T10544] ? __fget_files+0x2a/0x420 [ 343.652169][T10544] ? __fget_files+0x2a/0x420 [ 343.652191][T10544] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 343.652217][T10544] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.652245][T10544] do_sock_setsockopt+0x179/0x1b0 [ 343.652267][T10544] __x64_sys_setsockopt+0x145/0x1b0 [ 343.652290][T10544] do_syscall_64+0xfa/0x3b0 [ 343.652308][T10544] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.652335][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.652354][T10544] ? clear_bhb_loop+0x60/0xb0 [ 343.652377][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.652396][T10544] RIP: 0033:0x7fcbc46eeec9 [ 343.652414][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.652431][T10544] RSP: 002b:00007fcbc2956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.652450][T10544] RAX: ffffffffffffffda RBX: 00007fcbc4945fa0 RCX: 00007fcbc46eeec9 [ 343.652471][T10544] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 343.652483][T10544] RBP: 00007fcbc4771f91 R08: 0000000000000004 R09: 0000000000000000 [ 343.652496][T10544] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 343.652508][T10544] R13: 00007fcbc4946038 R14: 00007fcbc4945fa0 R15: 00007ffdde8ee248 [ 343.652542][T10544] [ 343.680258][T10544] Mem-Info: [ 343.680273][T10544] active_anon:263 inactive_anon:23034 isolated_anon:0 [ 343.680273][T10544] active_file:13941 inactive_file:45591 isolated_file:0 [ 343.680273][T10544] unevictable:768 dirty:354 writeback:9 [ 343.680273][T10544] slab_reclaimable:8769 slab_unreclaimable:99827 [ 343.680273][T10544] mapped:29253 shmem:18239 pagetables:1127 [ 343.680273][T10544] sec_pagetables:0 bounce:0 [ 343.680273][T10544] kernel_misc_reclaimable:0 [ 343.680273][T10544] free:1295201 free_pcp:10711 free_cma:0 [ 343.680333][T10544] Node 0 active_anon:1052kB inactive_anon:92136kB active_file:55500kB inactive_file:182364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116956kB dirty:1416kB writeback:36kB shmem:71420kB kernel_stack:12772kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.680383][T10544] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.680426][T10544] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.680490][T10544] lowmem_reserve[]: 0 2516 2517 2517 2517 [ 343.680522][T10544] Node 0 DMA32 free:1265680kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1048kB inactive_anon:92092kB active_file:53720kB inactive_file:182300kB unevictable:1536kB writepending:1452kB present:3129332kB managed:2576460kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:18880kB free_cma:0kB [ 343.680584][T10544] lowmem_reserve[]: 0 0 1 1 1 [ 343.680615][T10544] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 343.680672][T10544] lowmem_reserve[]: 0 0 0 0 0 [ 343.680703][T10544] Node 1 Normal free:3899764kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2964kB local_pcp:2964kB free_cma:0kB [ 343.680760][T10544] lowmem_reserve[]: 0 0 0 0 0 [ 343.680790][T10544] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.684240][T10544] Node 0 DMA32: 592*4kB (UME) 206*8kB (UME) 72*16kB (UME) 226*32kB (UME) 104*64kB (UME) 27*128kB (UME) 14*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 14*2048kB (UME) 294*4096kB (UM) = 1265648kB [ 343.684391][T10544] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.684492][T10544] Node 1 Normal: 223*4kB (UE) 41*8kB (UME) 42*16kB (UME) 199*32kB (UME) 62*64kB (UE) 24*128kB (UME) 10*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 944*4096kB (M) = 3899844kB [ 343.684644][T10544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.684661][T10544] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 343.684678][T10544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.684693][T10544] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 343.684709][T10544] 77769 total pagecache pages [ 343.684721][T10544] 1 pages in swap cache [ 343.684728][T10544] Free swap = 124992kB [ 343.684734][T10544] Total swap = 124996kB [ 343.684742][T10544] 2097051 pages RAM [ 343.684748][T10544] 0 pages HighMem/MovableOnly [ 343.684755][T10544] 420846 pages reserved [ 343.684762][T10544] 0 pages cma reserved [ 343.890138][ T9326] usb 6-1: USB disconnect, device number 14 [ 343.983402][ T9321] usb 5-1: config 0 descriptor?? [ 344.126963][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 344.127161][T10548] openvswitch: netlink: nsh attr 0 has unexpected len 8 expected 0 [ 344.127193][T10548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.425784][ T9321] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 344.457280][ T9321] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 344.457304][ T9321] [drm] Initialized udl on minor 2 [ 344.627023][T10559] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 344.831132][ T9321] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 344.851711][ T9321] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 344.859057][ T9322] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 344.885864][ T9321] usb 5-1: USB disconnect, device number 25 [ 344.887180][ T9322] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 344.887358][ T9322] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 345.073547][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 345.150893][T10577] bridge_slave_1: left allmulticast mode [ 345.150921][T10577] bridge_slave_1: left promiscuous mode [ 345.188514][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.332847][T10577] bridge_slave_0: left allmulticast mode [ 345.332876][T10577] bridge_slave_0: left promiscuous mode [ 345.333128][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.983742][T10617] loop3: detected capacity change from 0 to 1 [ 346.196664][T10626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.521596][ T9326] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 346.701666][ T9326] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.701700][ T9326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 346.701728][ T9326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.701755][ T9326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.701795][ T9326] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.701825][ T9326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.723323][ T9326] usb 4-1: config 0 descriptor?? [ 346.726671][T10632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.797483][T10657] loop2: detected capacity change from 0 to 7 [ 346.822522][T10657] Dev loop2: unable to read RDB block 7 [ 346.822566][T10657] loop2: unable to read partition table [ 346.827907][T10657] loop2: partition table beyond EOD, truncated [ 346.827932][T10657] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 347.166768][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166810][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166835][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166858][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166881][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166905][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166931][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166957][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.166982][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.167007][ T9326] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 347.201881][T10674] Bluetooth: hci0: unsupported parameter 76 [ 347.201902][T10674] Bluetooth: hci0: unsupported parameter 76 [ 347.204858][ T9326] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.457367][ T9321] usb 4-1: USB disconnect, device number 34 [ 348.407778][T10722] pim6reg1: entered promiscuous mode [ 348.407804][T10722] pim6reg1: entered allmulticast mode [ 348.991675][ T37] kauditd_printk_skb: 188 callbacks suppressed [ 348.991691][ T37] audit: type=1326 audit(604.828:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10733 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7fc00000 [ 349.453647][ T37] audit: type=1326 audit(605.288:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10733 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7fc00000 [ 350.302100][T10765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.308508][T10765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.308709][T10765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.308902][T10765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.355185][T10765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.355330][T10765] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 350.881545][ T9322] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 351.031732][ T9322] usb 5-1: Using ep0 maxpacket: 8 [ 351.033942][ T9322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 351.034002][ T9322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.034026][ T9322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.034050][ T9322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.034073][ T9322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.034114][ T9322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.034136][ T9322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.280003][ T9322] usb 5-1: usb_control_msg returned -32 [ 351.280053][ T9322] usbtmc 5-1:16.0: can't read capabilities [ 351.601584][ T9329] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 351.751546][ T9329] usb 6-1: Using ep0 maxpacket: 8 [ 351.770322][ T9329] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 351.770350][ T9329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.770369][ T9329] usb 6-1: Product: syz [ 351.770382][ T9329] usb 6-1: Manufacturer: syz [ 351.770394][ T9329] usb 6-1: SerialNumber: syz [ 351.808075][ T9329] usb 6-1: config 0 descriptor?? [ 351.819397][ T9329] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 351.918582][T10849] hsr0: entered promiscuous mode [ 351.919064][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 351.961667][T10849] hsr_slave_0: left promiscuous mode [ 352.003521][T10849] hsr_slave_1: left promiscuous mode [ 352.096979][T10849] hsr0 (unregistering): left promiscuous mode [ 352.371666][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 352.371752][ T59] Bluetooth: hci1: command 0x0405 tx timeout [ 352.371809][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.371872][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.371921][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.686396][ T9322] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 352.720622][T10870] lo speed is unknown, defaulting to 1000 [ 352.856589][ T9322] usb 4-1: Using ep0 maxpacket: 8 [ 352.858904][ T9322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.858929][ T9322] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.865324][ T9322] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 352.865352][ T9322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.865370][ T9322] usb 4-1: Product: syz [ 352.865383][ T9322] usb 4-1: Manufacturer: syz [ 352.865397][ T9322] usb 4-1: SerialNumber: syz [ 352.875684][ T9322] usb 4-1: config 0 descriptor?? [ 353.032610][ T9329] gspca_sonixj: reg_w1 err -71 [ 353.071604][ T9329] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 353.077135][ T9329] usb 6-1: USB disconnect, device number 15 [ 353.388402][ T9322] usb 4-1: USB disconnect, device number 35 [ 353.655101][ T9329] usb 5-1: USB disconnect, device number 26 [ 353.941792][T10907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.063138][T10910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.415458][T10926] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 354.491528][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 354.565655][T10926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.618630][T10928] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.637983][T10928] bond1: (slave batadv1): making interface the new active one [ 354.650869][T10928] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 354.804202][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2019'. [ 354.804234][T10938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2019'. [ 354.804250][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2019'. [ 354.804491][T10938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2019'. [ 355.141611][ T9319] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 355.229059][ T9322] kernel write not supported for file /cpu/0/msr (pid: 9322 comm: kworker/0:12) [ 355.294017][ T9319] usb 3-1: Using ep0 maxpacket: 16 [ 355.299849][ T9319] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 355.299874][ T9319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.299892][ T9319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.336559][ T9319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.336589][ T9319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.336609][ T9319] usb 3-1: Product: syz [ 355.336623][ T9319] usb 3-1: Manufacturer: syz [ 355.336636][ T9319] usb 3-1: SerialNumber: syz [ 355.612095][T10974] Bluetooth: hci0: unsupported parameter 178 [ 355.612117][T10974] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 355.750857][T10978] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 355.750857][T10978] [ 355.800980][ T9319] usb 3-1: 0:2 : does not exist [ 356.452182][ T9322] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 356.603858][ T9322] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.603892][ T9322] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.603914][ T9322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 356.603948][ T9322] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 356.603970][ T9322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.616261][ T9319] usb 3-1: USB disconnect, device number 19 [ 356.697900][ T9322] usb 4-1: config 0 descriptor?? [ 356.932602][ T9326] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 357.086686][ T9326] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.086722][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.095188][ T9326] usb 6-1: config 0 descriptor?? [ 357.098837][ T9326] cp210x 6-1:0.0: cp210x converter detected [ 357.142296][ T9322] uclogic 0003:28BD:0075.001E: interface is invalid, ignoring [ 357.330969][ T9322] usb 4-1: USB disconnect, device number 36 [ 357.504937][ T9326] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 357.522251][ T9326] usb 6-1: cp210x converter now attached to ttyUSB0 [ 357.716764][ T9322] usb 6-1: USB disconnect, device number 16 [ 357.745521][ T9322] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.861837][ T9322] cp210x 6-1:0.0: device disconnected [ 358.481609][ T9326] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 358.641128][ T9326] usb 4-1: Using ep0 maxpacket: 32 [ 358.655574][ T9326] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 358.655605][ T9326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.655625][ T9326] usb 4-1: Product: syz [ 358.655639][ T9326] usb 4-1: Manufacturer: syz [ 358.655654][ T9326] usb 4-1: SerialNumber: syz [ 358.668548][ T9326] usb 4-1: config 0 descriptor?? [ 358.685400][ T9326] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 359.416518][T11087] KVM: debugfs: duplicate directory 11087-4 [ 359.891275][ T9326] gspca_stk1135: reg_w 0xd err -71 [ 359.892350][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892371][ T9326] gspca_stk1135: Sensor write failed [ 359.892399][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892408][ T9326] gspca_stk1135: Sensor write failed [ 359.892436][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892446][ T9326] gspca_stk1135: Sensor read failed [ 359.892474][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892483][ T9326] gspca_stk1135: Sensor read failed [ 359.892489][ T9326] gspca_stk1135: Detected sensor type unknown (0x0) [ 359.892526][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892535][ T9326] gspca_stk1135: Sensor read failed [ 359.892564][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892573][ T9326] gspca_stk1135: Sensor read failed [ 359.892599][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892607][ T9326] gspca_stk1135: Sensor write failed [ 359.892632][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 359.892641][ T9326] gspca_stk1135: Sensor write failed [ 359.892723][ T9326] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 359.898102][ T9326] usb 4-1: USB disconnect, device number 37 [ 360.671622][ T9326] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 360.835686][ T9326] usb 3-1: Using ep0 maxpacket: 32 [ 360.849291][ T9326] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 360.849322][ T9326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.849343][ T9326] usb 3-1: Product: syz [ 360.849356][ T9326] usb 3-1: Manufacturer: syz [ 360.849369][ T9326] usb 3-1: SerialNumber: syz [ 360.875399][ T9326] usb 3-1: config 0 descriptor?? [ 360.897608][ T9326] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 361.530784][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 361.530809][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 361.531914][T11173] netlink: 'syz.4.2118': attribute type 20 has an invalid length. [ 361.545050][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 361.545072][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 361.545098][T11173] netlink: 'syz.4.2118': attribute type 20 has an invalid length. [ 362.118253][ T9326] gspca_topro: reg_w err -71 [ 362.144596][T11189] kernel read not supported for file /file1 (pid: 11189 comm: syz.5.2126) [ 362.151796][ T9326] gspca_topro: Sensor soi763a [ 362.185470][ T3603] Bluetooth: hci5: Frame reassembly failed (-84) [ 362.202295][ T9326] usb 3-1: USB disconnect, device number 20 [ 362.246543][ T37] audit: type=1800 audit(617.978:299): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2126" name="file1" dev="mqueue" ino=36964 res=0 errno=0 [ 363.199767][T11231] netlink: 'syz.2.2145': attribute type 29 has an invalid length. [ 363.210441][T11231] netlink: 'syz.2.2145': attribute type 29 has an invalid length. [ 363.219892][T11231] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2145'. [ 363.742561][T11252] input: syz0 as /devices/virtual/input/input33 [ 364.211614][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 364.911663][ T9329] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 365.093942][ T9329] usb 4-1: Using ep0 maxpacket: 16 [ 365.098192][ T9329] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.098222][ T9329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 365.098262][ T9329] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 365.098284][ T9329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.123459][ T9329] usb 4-1: config 0 descriptor?? [ 365.622405][ T9329] usbhid 4-1:0.0: can't add hid device: -71 [ 365.622531][ T9329] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 365.660644][ T9329] usb 4-1: USB disconnect, device number 38 [ 366.261992][T11315] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 367.917726][T11383] Invalid source name [ 367.917743][T11383] UBIFS error (pid: 11383): cannot open "./file0", error -22 [ 369.401706][ T9326] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 369.575370][ T9326] usb 5-1: Using ep0 maxpacket: 8 [ 369.577881][ T9326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 369.577914][ T9326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.577935][ T9326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.577958][ T9326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 369.577979][ T9326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 369.578017][ T9326] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 369.578039][ T9326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.584125][ T9326] usb 5-1: config 0 descriptor?? [ 369.674310][ T5826] Bluetooth: hci5: urb ffff88805b70bc00 submission failed (90) [ 369.757762][T11458] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 369.840057][ T9319] usb 5-1: USB disconnect, device number 27 [ 369.861485][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.101228][T11466] netlink: 'syz.3.2251': attribute type 4 has an invalid length. [ 370.163145][T11469] netlink: 'syz.3.2251': attribute type 4 has an invalid length. [ 371.378026][T11512] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.406103][T11511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 371.406584][T11511] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 372.477019][T11549] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 372.594150][T11549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.624407][T11543] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 372.624439][T11543] overlayfs: failed to set xattr on upper [ 372.624447][T11543] overlayfs: ...falling back to redirect_dir=nofollow. [ 372.624455][T11543] overlayfs: ...falling back to index=off. [ 372.624463][T11543] overlayfs: ...falling back to uuid=null. [ 372.624471][T11543] overlayfs: ...falling back to xino=off. [ 372.826827][T11551] bond3: (slave gretap2): making interface the new active one [ 372.847800][T11551] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 373.996656][T11592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2306'. [ 374.541538][ T9319] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 374.706240][ T9319] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 374.706269][ T9319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.706287][ T9319] usb 5-1: Product: syz [ 374.706300][ T9319] usb 5-1: Manufacturer: syz [ 374.706313][ T9319] usb 5-1: SerialNumber: syz [ 374.747722][ T9319] usb 5-1: config 0 descriptor?? [ 374.770990][ T9319] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 376.190869][ T9319] usb 5-1: USB disconnect, device number 28 [ 378.310869][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 378.521715][ T9319] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 378.672701][ T9319] usb 4-1: Using ep0 maxpacket: 16 [ 378.675155][ T9319] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 378.675180][ T9319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.675199][ T9319] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 378.675220][ T9319] usb 4-1: config 1 has no interface number 1 [ 378.675265][ T9319] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.675310][ T9319] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.712143][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712216][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.773642][ T9319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.773672][ T9319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.773692][ T9319] usb 4-1: Product: syz [ 378.773706][ T9319] usb 4-1: Manufacturer: syz [ 378.773720][ T9319] usb 4-1: SerialNumber: syz [ 379.024130][ T9319] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 379.024164][ T9319] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 379.024274][ T9319] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 379.086542][ T9319] usb 4-1: USB disconnect, device number 39 [ 379.530927][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 379.658702][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 379.658784][ T4503] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.659710][ T4503] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.659753][ T4503] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.104193][T11801] lo speed is unknown, defaulting to 1000 [ 380.250120][T11805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.702608][T11828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.897037][T11833] kvm: vcpu 2: requested 27798 ns lapic timer period limited to 200000 ns [ 381.751532][ T9326] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 381.912201][ T9326] usb 5-1: Using ep0 maxpacket: 32 [ 381.927054][ T9326] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 381.927081][ T9326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.927100][ T9326] usb 5-1: Product: syz [ 381.927113][ T9326] usb 5-1: Manufacturer: syz [ 381.927126][ T9326] usb 5-1: SerialNumber: syz [ 381.938376][ T9326] usb 5-1: config 0 descriptor?? [ 381.994614][ T9326] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 383.066956][T11896] loop2: detected capacity change from 0 to 7 [ 383.071901][T11896] Dev loop2: unable to read RDB block 7 [ 383.071939][T11896] loop2: AHDI p1 p2 p3 [ 383.071967][T11896] loop2: partition table partially beyond EOD, truncated [ 383.072065][T11896] loop2: p1 start 1601398130 is beyond EOD, truncated [ 383.072083][T11896] loop2: p2 start 1702059890 is beyond EOD, truncated [ 383.356523][ T9326] gspca_topro: reg_r err -71 [ 383.356536][ T9326] gspca_topro: Sensor soi763a [ 383.392150][ T9326] usb 5-1: USB disconnect, device number 29 [ 384.019370][T11923] input: syz0 as /devices/virtual/input/input34 [ 384.471506][ T9319] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 384.650041][ T9319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.651074][ T9319] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 384.651108][ T9319] usb 5-1: can't read configurations, error -71 [ 384.886353][T11950] ALSA: seq fatal error: cannot create timer (-16) [ 384.928794][T11953] netlink: 'syz.5.2469': attribute type 6 has an invalid length. [ 384.939276][T11953] netlink: 'syz.5.2469': attribute type 6 has an invalid length. [ 385.709755][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 386.151359][T11996] netlink: 'syz.3.2490': attribute type 10 has an invalid length. [ 386.218301][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.229864][T11996] bond0: (slave team0): Enslaving as an active interface with an up link [ 386.734737][T12016] overlayfs: failed to decode file handle (len=4, type=248, flags=0, err=-22) [ 390.131564][ T9326] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 390.284140][ T9326] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 390.284199][ T9326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 390.284227][ T9326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 390.284252][ T9326] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.284293][ T9326] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.284315][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.291196][ T9326] usb 6-1: config 0 descriptor?? [ 390.364436][T12144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 390.393835][T12166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.443442][T12166] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 390.454289][T12166] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 390.582527][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 390.743348][ T9319] hid_parser_main: 1 callbacks suppressed [ 390.743371][ T9319] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 390.796643][ T9326] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 390.817132][ T9319] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.842729][ T9326] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 391.096284][ T9329] usb 6-1: USB disconnect, device number 17 [ 391.380309][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 391.576935][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 391.676232][T12198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.785996][T12202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.786470][T12202] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 391.788266][T12202] bond2: (slave vti0): Error -95 calling set_mac_address [ 391.791019][T12206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.990162][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.738017][T12252] tipc: Failed to remove unknown binding: 66,1,1/4:2018544382/2018544384 [ 392.738057][T12252] tipc: Failed to remove unknown binding: 66,1,1/4:2018544382/2018544384 [ 394.181633][ T9322] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 394.333874][ T9322] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.333904][ T9322] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.333925][ T9322] usb 6-1: config 0 interface 0 has no altsetting 0 [ 394.333954][ T9322] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 394.333975][ T9322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.345653][ T9322] usb 6-1: config 0 descriptor?? [ 394.778999][ T9322] uclogic 0003:28BD:0075.0021: interface is invalid, ignoring [ 394.978092][ T9329] usb 6-1: USB disconnect, device number 18 [ 395.036822][T12330] kvm: emulating exchange as write [ 395.364571][T12342] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 395.472717][T12346] gretap2: entered allmulticast mode [ 395.476671][T12346] bond3: (slave gretap2): making interface the new active one [ 395.477671][T12346] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 395.911524][ T9329] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 396.071522][ T9329] usb 3-1: Using ep0 maxpacket: 8 [ 396.076772][ T9329] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 396.076801][ T9329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.076822][ T9329] usb 3-1: Product: syz [ 396.076835][ T9329] usb 3-1: Manufacturer: syz [ 396.076849][ T9329] usb 3-1: SerialNumber: syz [ 396.119668][ T9329] usb 3-1: config 0 descriptor?? [ 396.336281][ T9329] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.345841][ T9329] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 397.351184][ T9329] usb 3-1: USB disconnect, device number 21 [ 397.431521][ T9319] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 397.584721][ T9319] usb 5-1: Using ep0 maxpacket: 16 [ 397.587143][ T9319] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 397.587171][ T9319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.596265][ T9319] usb 5-1: config 0 descriptor?? [ 397.606774][ T9319] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 399.091523][ T9319] gspca_sonixj: i2c_w8 err -71 [ 399.111644][ T9319] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 399.116557][ T9319] usb 5-1: USB disconnect, device number 32 [ 399.815604][T12456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2696'. [ 399.816209][T12456] unsupported nlmsg_type 40 [ 399.841546][ T9322] psmouse serio5: Failed to reset mouse on : -5 [ 400.651091][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 400.651124][T12493] netlink: 'syz.4.2711': attribute type 20 has an invalid length. [ 400.701510][ T9329] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 400.814619][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 400.814641][T12493] netlink: 'syz.4.2711': attribute type 20 has an invalid length. [ 400.864426][ T9329] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 400.864456][ T9329] usb 3-1: config 1 has no interface number 0 [ 400.864507][ T9329] usb 3-1: config 1 interface 105 has no altsetting 0 [ 400.867887][ T9329] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 400.867913][ T9329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.867932][ T9329] usb 3-1: Product: syz [ 400.867945][ T9329] usb 3-1: Manufacturer: syz [ 400.867959][ T9329] usb 3-1: SerialNumber: syz [ 401.755403][ T9329] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 401.756986][ T9329] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 401.795366][ T9329] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 401.974586][ T9329] usb 3-1: USB disconnect, device number 22 [ 402.007139][ T9329] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 402.117536][ T9329] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 402.117684][ T9329] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 402.117824][ T9329] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 403.591548][ T9322] misc userio: Buffer overflowed, userio client isn't keeping up [ 404.650482][ T9322] input: PS/2 Generic Mouse as /devices/serio5/input/input37 [ 404.861566][ T9322] psmouse serio5: Failed to enable mouse on [ 405.448540][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 405.451001][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 405.481544][ T9326] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 405.643808][ T9326] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 405.643839][ T9326] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 405.647437][ T9326] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 405.647464][ T9326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.647483][ T9326] usb 6-1: Product: syz [ 405.647497][ T9326] usb 6-1: Manufacturer: syz [ 405.647511][ T9326] usb 6-1: SerialNumber: syz [ 405.704416][ T9326] usb 6-1: config 0 descriptor?? [ 405.707472][T12664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.707653][T12664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.786626][T12687] Bluetooth: hci0: unsupported parameter 133 [ 405.786648][T12687] Bluetooth: hci0: unsupported parameter 1792 [ 405.786661][T12687] Bluetooth: hci0: unsupported parameter 133 [ 405.786672][T12687] Bluetooth: hci0: unsupported parameter 1792 [ 405.924096][T12664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.924753][T12664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.007336][ T9322] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 406.177873][ T9322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.177906][ T9322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.177958][ T9322] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 406.177988][ T9322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.193991][ T9322] usb 3-1: config 0 descriptor?? [ 406.381666][ T9329] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 406.534046][ T9329] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 406.534164][ T9329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.534197][ T9329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.534217][ T9329] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 406.536560][ T9329] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 406.536805][ T9329] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 406.536827][ T9329] usb 5-1: Manufacturer: syz [ 406.614899][ T9329] usb 5-1: config 0 descriptor?? [ 407.031518][ T9304] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 407.065937][ T9326] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 407.108521][ T9329] appleir 0003:05AC:8243.0023: item fetching failed at offset 0/1 [ 407.109295][ T9329] appleir 0003:05AC:8243.0023: parse failed [ 407.109428][ T9329] appleir 0003:05AC:8243.0023: probe with driver appleir failed with error -22 [ 407.144505][ T9326] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 407.147249][ T9326] usb 6-1: USB disconnect, device number 19 [ 407.150578][ T9326] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 407.223515][ T9304] usb 4-1: Using ep0 maxpacket: 32 [ 407.227017][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.227048][ T9304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.227086][ T9304] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 407.227108][ T9304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.233070][ T9322] uclogic 0003:256C:006D.0022: interface is invalid, ignoring [ 407.288850][ T9304] usb 4-1: config 0 descriptor?? [ 407.320602][ T9329] usb 5-1: USB disconnect, device number 33 [ 407.437073][ T10] usb 3-1: USB disconnect, device number 23 [ 407.712872][ T9304] usbhid 4-1:0.0: can't add hid device: -71 [ 407.712994][ T9304] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.718945][ T9304] usb 4-1: USB disconnect, device number 40 [ 408.263864][T12756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2835'. [ 408.264429][T12756] netlink: 'syz.4.2835': attribute type 10 has an invalid length. [ 408.264580][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.269651][T12756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.532943][ T37] audit: type=1326 audit(664.368:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.533587][ T37] audit: type=1326 audit(664.368:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.534054][ T37] audit: type=1326 audit(664.368:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.542847][ T37] audit: type=1326 audit(664.368:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.544277][ T37] audit: type=1326 audit(664.378:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.544986][ T37] audit: type=1326 audit(664.378:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.545237][ T37] audit: type=1326 audit(664.378:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.547217][ T37] audit: type=1326 audit(664.378:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12765 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 408.557488][T12768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.699650][T12772] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 408.916760][T12782] input: syz1 as /devices/virtual/input/input38 [ 408.990816][T12784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2851'. [ 409.713983][ T9304] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 409.865432][ T9304] usb 6-1: config 0 has no interfaces? [ 409.880857][ T9304] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 409.880887][ T9304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.880906][ T9304] usb 6-1: Product: syz [ 409.880919][ T9304] usb 6-1: Manufacturer: syz [ 409.880931][ T9304] usb 6-1: SerialNumber: syz [ 409.923600][ T9304] usb 6-1: config 0 descriptor?? [ 410.155639][ T10] usb 6-1: USB disconnect, device number 20 [ 410.483443][T12852] tipc: Enabled bearer , priority 0 [ 410.921889][T12851] tipc: Disabling bearer [ 412.142484][ T9304] IPVS: starting estimator thread 0... [ 412.231631][T12912] IPVS: using max 7 ests per chain, 16800 per kthread [ 412.641510][ T9326] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 412.814481][ T9326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.814506][ T9326] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.815960][ T9326] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 412.815984][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.816004][ T9326] usb 6-1: SerialNumber: syz [ 413.053894][ T9326] usb 6-1: 0:2 : does not exist [ 413.056495][ T9326] usb 6-1: unit 1 not found! [ 413.079738][ T9326] usb 6-1: USB disconnect, device number 21 [ 413.191834][ T9322] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 413.341473][ T9322] usb 3-1: Using ep0 maxpacket: 32 [ 413.344959][ T9322] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 413.344988][ T9322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.377772][ T9322] usb 3-1: config 0 descriptor?? [ 413.379022][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.388399][ T9322] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 413.396123][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396192][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396252][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396310][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396390][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396448][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396505][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396687][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396743][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396800][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396859][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396915][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.396974][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397030][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397132][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397277][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397332][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397386][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397443][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397500][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397556][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397612][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397667][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397849][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397906][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.397961][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398018][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398074][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398136][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398193][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398274][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398460][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398517][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398572][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398628][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398684][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398739][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398795][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398850][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.398993][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399048][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399109][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399166][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399220][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399277][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399333][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 413.399415][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 414.827798][ T9322] gspca_vc032x: reg_w err -71 [ 414.827817][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827829][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827837][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827846][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827854][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827862][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827870][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827879][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827887][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827895][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827903][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827911][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827920][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827927][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827936][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827944][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827952][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827960][ T9322] gspca_vc032x: I2c Bus Busy Wait 00 [ 414.827969][ T9322] gspca_vc032x: Unknown sensor... [ 414.828059][ T9322] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 414.967686][ T9322] usb 3-1: USB disconnect, device number 24 [ 417.287972][ T1116] Bluetooth: hci5: Frame reassembly failed (-90) [ 417.321693][ T9319] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 417.476603][ T9319] usb 6-1: Using ep0 maxpacket: 16 [ 417.479713][ T9319] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 417.479739][ T9319] usb 6-1: config 1 has no interface number 1 [ 417.479785][ T9319] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.479806][ T9319] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 417.479846][ T9319] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.482606][ T9319] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.482632][ T9319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.482651][ T9319] usb 6-1: Product: syz [ 417.482664][ T9319] usb 6-1: Manufacturer: syz [ 417.482677][ T9319] usb 6-1: SerialNumber: syz [ 417.826056][T13098] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 417.826086][T13098] overlayfs: failed to set xattr on upper [ 417.826094][T13098] overlayfs: ...falling back to redirect_dir=nofollow. [ 417.826103][T13098] overlayfs: ...falling back to uuid=null. [ 417.894405][ T5820] Bluetooth: hci1: command 0x0405 tx timeout [ 417.991554][ T9319] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 419.066318][ T9319] usb 6-1: USB disconnect, device number 22 [ 419.331584][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 419.331638][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 420.151570][ T9326] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 420.152973][T13182] netlink: 'syz.4.3020': attribute type 12 has an invalid length. [ 420.311554][ T9326] usb 4-1: Using ep0 maxpacket: 32 [ 420.316480][ T9326] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 420.316497][ T9326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.316507][ T9326] usb 4-1: Product: syz [ 420.316515][ T9326] usb 4-1: Manufacturer: syz [ 420.316522][ T9326] usb 4-1: SerialNumber: syz [ 420.319888][ T9326] usb 4-1: config 0 descriptor?? [ 420.325462][ T9326] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 420.582285][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 420.664162][T13195] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 420.664763][T13194] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 421.770894][ T9326] gspca_stk1135: reg_w 0xf err -71 [ 421.771934][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.771948][ T9326] gspca_stk1135: Sensor write failed [ 421.771977][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.771986][ T9326] gspca_stk1135: Sensor write failed [ 421.772016][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772024][ T9326] gspca_stk1135: Sensor read failed [ 421.772052][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772061][ T9326] gspca_stk1135: Sensor read failed [ 421.772068][ T9326] gspca_stk1135: Detected sensor type unknown (0x0) [ 421.772101][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772110][ T9326] gspca_stk1135: Sensor read failed [ 421.772145][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772154][ T9326] gspca_stk1135: Sensor read failed [ 421.772183][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772191][ T9326] gspca_stk1135: Sensor write failed [ 421.772219][ T9326] gspca_stk1135: serial bus timeout: status=0x00 [ 421.772228][ T9326] gspca_stk1135: Sensor write failed [ 421.772312][ T9326] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 421.788528][ T9326] usb 4-1: USB disconnect, device number 41 [ 425.589473][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 427.151631][ T9326] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 427.317709][ T9326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.317743][ T9326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.317781][ T9326] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 427.317810][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.343591][ T9326] usb 6-1: config 0 descriptor?? [ 427.810046][ T9326] pyra 0003:1E7D:2CF6.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 428.831624][ T9326] pyra 0003:1E7D:2CF6.0024: couldn't init struct pyra_device [ 428.831669][ T9326] pyra 0003:1E7D:2CF6.0024: couldn't install mouse [ 428.833857][ T9326] pyra 0003:1E7D:2CF6.0024: probe with driver pyra failed with error -71 [ 428.872178][ T9326] usb 6-1: USB disconnect, device number 23 [ 430.181632][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 430.346636][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 430.346663][ T10] usb 3-1: config 0 has no interface number 0 [ 430.350390][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 430.350416][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.350426][ T10] usb 3-1: Product: syz [ 430.350434][ T10] usb 3-1: Manufacturer: syz [ 430.350441][ T10] usb 3-1: SerialNumber: syz [ 430.362509][ T10] usb 3-1: config 0 descriptor?? [ 430.887938][ T59] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 430.992241][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 430.992272][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 430.992636][ T10] asix 3-1:0.251: probe with driver asix failed with error -71 [ 431.041297][ T10] usb 3-1: USB disconnect, device number 25 [ 431.299295][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3162'. [ 432.181501][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 432.344188][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.344224][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.344270][ T10] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 432.344294][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.349563][ T10] usb 5-1: config 0 descriptor?? [ 432.605366][ T37] audit: type=1326 audit(688.438:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13527 comm="syz.2.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc46eeec9 code=0x7fc00000 [ 432.773753][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773789][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773814][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773837][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773861][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773885][ T10] a4tech 0003:09DA:000A.0025: unknown main item tag 0x0 [ 432.773908][ T10] a4tech 0003:09DA:000A.0025: item fetching failed at offset 6/7 [ 432.774662][ T10] a4tech 0003:09DA:000A.0025: parse failed [ 432.774761][ T10] a4tech 0003:09DA:000A.0025: probe with driver a4tech failed with error -22 [ 432.780531][T13556] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 432.895357][T13556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.971640][ T10] usb 5-1: USB disconnect, device number 34 [ 433.054245][T13562] bond4: (slave veth3): Enslaving as an active interface with a down link [ 433.174894][T13556] bond4: (slave syz_tun): making interface the new active one [ 433.177414][T13556] syz_tun: entered promiscuous mode [ 433.178059][T13556] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 435.121633][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 435.316250][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.316282][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.316302][ T10] usb 5-1: Product: syz [ 435.316316][ T10] usb 5-1: Manufacturer: syz [ 435.316330][ T10] usb 5-1: SerialNumber: syz [ 435.373497][ T10] usb 5-1: config 0 descriptor?? [ 435.599166][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.158695][T13658] input: syz0 as /devices/virtual/input/input39 [ 436.611609][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 436.631612][ T10] usb 5-1: USB disconnect, device number 35 [ 438.128856][T13728] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3262'. [ 438.517632][T13741] syzkaller0: entered promiscuous mode [ 438.517658][T13741] syzkaller0: entered allmulticast mode [ 440.137920][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137989][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.625241][ T37] audit: type=1326 audit(696.458:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.625294][ T37] audit: type=1326 audit(696.458:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659580][ T37] audit: type=1326 audit(696.488:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659632][ T37] audit: type=1326 audit(696.488:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659671][ T37] audit: type=1326 audit(696.488:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659707][ T37] audit: type=1326 audit(696.488:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659744][ T37] audit: type=1326 audit(696.488:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.659781][ T37] audit: type=1326 audit(696.488:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.670842][ T37] audit: type=1326 audit(696.498:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 440.670890][ T37] audit: type=1326 audit(696.498:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.4.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3274a6eec9 code=0x7ffc0000 [ 442.471502][ T9326] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 442.631681][ T9304] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 442.634458][ T9326] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 442.634485][ T9326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.643793][ T9326] usb 6-1: config 0 descriptor?? [ 442.660343][ T9326] usb 6-1: NDI device with a latency value of 1 [ 442.741545][ T9329] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 442.802764][ T9304] usb 5-1: Using ep0 maxpacket: 16 [ 442.808753][ T9304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.808802][ T9304] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 442.808875][ T9304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.857477][ T9304] usb 5-1: config 0 descriptor?? [ 442.858616][ T9326] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 442.878101][ T9326] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 442.890354][ T9326] usb 6-1: USB disconnect, device number 24 [ 442.906355][ T9326] ftdi_sio 6-1:0.0: device disconnected [ 442.943506][ T9329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.943531][ T9329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.978722][ T9329] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.978800][ T9329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.978820][ T9329] usb 4-1: Product: syz [ 442.978833][ T9329] usb 4-1: Manufacturer: syz [ 442.978847][ T9329] usb 4-1: SerialNumber: syz [ 443.242053][ T9329] usb 4-1: 0:2 : does not exist [ 443.265543][ T9329] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 443.332344][ T9329] usb 4-1: USB disconnect, device number 42 [ 443.490202][ T9304] usb 5-1: USB disconnect, device number 36 [ 444.039043][T13920] input: syz1 as /devices/virtual/input/input40 [ 444.381768][ T1116] syz_tun: left promiscuous mode [ 446.264131][T14016] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3384'. [ 446.354414][T14023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.971920][T14033] block nbd0: server does not support multiple connections per device. [ 446.977367][T14033] block nbd0: shutting down sockets [ 448.745724][T14074] netlink: 'syz.3.3407': attribute type 1 has an invalid length. [ 448.845863][T14074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.892656][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 449.099583][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.247671][T14093] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 449.444751][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.551611][ T9304] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 449.711104][ T9304] usb 5-1: Using ep0 maxpacket: 8 [ 449.717095][ T9304] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.717122][ T9304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.717145][ T9304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.717168][ T9304] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.717210][ T9304] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.717232][ T9304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.898265][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.981466][ T9304] usb 5-1: GET_CAPABILITIES returned 0 [ 449.981511][ T9304] usbtmc 5-1:16.0: can't read capabilities [ 450.204609][ T9304] usb 5-1: USB disconnect, device number 37 [ 450.265306][T14074] bond4 (unregistering): Released all slaves [ 450.345276][T14093] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 450.418463][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.835312][T14143] kvm_intel: kvm [14142]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 451.003334][ T9304] IPVS: starting estimator thread 0... [ 451.102999][T14155] IPVS: using max 7 ests per chain, 16800 per kthread [ 452.569311][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 453.021501][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 453.057249][ T9304] kernel write not supported for file /binder/stats (pid: 9304 comm: kworker/1:10) [ 453.174168][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 453.174194][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.174212][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.178551][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.178581][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.178600][ T10] usb 4-1: Product: syz [ 453.178615][ T10] usb 4-1: Manufacturer: syz [ 453.178628][ T10] usb 4-1: SerialNumber: syz [ 453.551535][ T9319] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 453.683170][ T10] usb 4-1: 0:2 : does not exist [ 453.701513][ T9319] usb 5-1: Using ep0 maxpacket: 16 [ 453.718716][ T9319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.718750][ T9319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.718828][ T9319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.718872][ T9319] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.718895][ T9319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.788971][ T9319] usb 5-1: config 0 descriptor?? [ 454.093360][T14267] lo speed is unknown, defaulting to 1000 [ 454.240161][ T9319] HID 045e:07da: Invalid code 65791 type 1 [ 454.270525][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3498'. [ 454.300899][ T9319] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0027/input/input41 [ 454.355525][ T9319] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 454.484174][ T9304] usb 5-1: USB disconnect, device number 38 [ 454.931618][ T10] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 454.971604][ T10] usb 4-1: USB disconnect, device number 43 [ 455.016220][T14249] ------------[ cut here ]------------ [ 455.016240][T14249] WARNING: CPU: 1 PID: 14249 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 455.016282][T14249] Modules linked in: [ 455.016310][T14249] CPU: 1 UID: 0 PID: 14249 Comm: syz.4.3487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.016332][T14249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.016348][T14249] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 455.016375][T14249] Code: c7 c7 a8 86 a5 8e 48 c7 c6 3c f1 bc 8c 48 c7 c2 54 c7 bb 8c 4c 89 f9 e8 02 00 ee 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 24 d7 fa 08 0f 1f 40 00 90 90 [ 455.016393][T14249] RSP: 0018:ffffc90010da7d00 EFLAGS: 00010287 [ 455.016410][T14249] RAX: a87964adb3e69a00 RBX: ffff888032ce3300 RCX: 0000000000000000 [ 455.016425][T14249] RDX: 0000000000000000 RSI: ffffffff8b1d9640 RDI: 00000000ffffffff [ 455.016439][T14249] RBP: ffffc90010da7e78 R08: 0000000000000000 R09: ffffffff8ab80501 [ 455.016453][T14249] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: 1ffff1100482be2d [ 455.016468][T14249] R13: 0000000000000000 R14: ffff888032ce3308 R15: ffff888054dc0000 [ 455.016482][T14249] FS: 000055557c9ec500(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 455.016499][T14249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.016513][T14249] CR2: 000000110c42dc04 CR3: 0000000029358000 CR4: 00000000003526f0 [ 455.016536][T14249] Call Trace: [ 455.016548][T14249] [ 455.016560][T14249] do_exit+0x105/0x2300 [ 455.016591][T14249] ? rt_mutex_slowunlock+0x493/0x8a0 [ 455.016618][T14249] ? rt_spin_lock+0x1c1/0x3e0 [ 455.016643][T14249] ? __pfx_do_exit+0x10/0x10 [ 455.016663][T14249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 455.016689][T14249] ? rt_spin_unlock+0x150/0x200 [ 455.016715][T14249] ? rt_spin_unlock+0x161/0x200 [ 455.016741][T14249] do_group_exit+0x21c/0x2d0 [ 455.016767][T14249] __x64_sys_exit_group+0x3f/0x40 [ 455.016787][T14249] x64_sys_call+0x21f7/0x2200 [ 455.016807][T14249] do_syscall_64+0xfa/0x3b0 [ 455.016824][T14249] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.016851][T14249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.016870][T14249] ? clear_bhb_loop+0x60/0xb0 [ 455.016894][T14249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.016914][T14249] RIP: 0033:0x7f3274a6eec9 [ 455.016933][T14249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.016952][T14249] RSP: 002b:00007ffeeac46b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 455.016973][T14249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3274a6eec9 [ 455.016988][T14249] RDX: 00007f3273cd9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.017002][T14249] RBP: 00007ffeeac46b9c R08: 00000000000001c4 R09: 00000000000927c0 [ 455.017016][T14249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000023e [ 455.017028][T14249] R13: 00000000000927c0 R14: 000000000006e983 R15: 00007ffeeac46bf0 [ 455.017062][T14249] [ 455.017077][T14249] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 455.017092][T14249] CPU: 1 UID: 0 PID: 14249 Comm: syz.4.3487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.017116][T14249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.017129][T14249] Call Trace: [ 455.017137][T14249] [ 455.017146][T14249] dump_stack_lvl+0x99/0x250 [ 455.017166][T14249] ? __asan_memcpy+0x40/0x70 [ 455.017187][T14249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.017207][T14249] ? __pfx__printk+0x10/0x10 [ 455.017247][T14249] vpanic+0x281/0x750 [ 455.017268][T14249] ? __pfx__printk+0x10/0x10 [ 455.017291][T14249] ? __pfx_vpanic+0x10/0x10 [ 455.017311][T14249] ? is_bpf_text_address+0x26/0x2b0 [ 455.017344][T14249] panic+0xb9/0xc0 [ 455.017364][T14249] ? __pfx_panic+0x10/0x10 [ 455.017400][T14249] __warn+0x31b/0x4b0 [ 455.017419][T14249] ? kcov_task_exit+0x13c/0x150 [ 455.017449][T14249] ? kcov_task_exit+0x13c/0x150 [ 455.017478][T14249] report_bug+0x2be/0x4f0 [ 455.017506][T14249] ? kcov_task_exit+0x13c/0x150 [ 455.017538][T14249] ? kcov_task_exit+0x13c/0x150 [ 455.017565][T14249] ? kcov_task_exit+0x13e/0x150 [ 455.017592][T14249] handle_bug+0x84/0x160 [ 455.017616][T14249] exc_invalid_op+0x1a/0x50 [ 455.017638][T14249] asm_exc_invalid_op+0x1a/0x20 [ 455.017657][T14249] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 455.017684][T14249] Code: c7 c7 a8 86 a5 8e 48 c7 c6 3c f1 bc 8c 48 c7 c2 54 c7 bb 8c 4c 89 f9 e8 02 00 ee 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 24 d7 fa 08 0f 1f 40 00 90 90 [ 455.017701][T14249] RSP: 0018:ffffc90010da7d00 EFLAGS: 00010287 [ 455.017719][T14249] RAX: a87964adb3e69a00 RBX: ffff888032ce3300 RCX: 0000000000000000 [ 455.017734][T14249] RDX: 0000000000000000 RSI: ffffffff8b1d9640 RDI: 00000000ffffffff [ 455.017748][T14249] RBP: ffffc90010da7e78 R08: 0000000000000000 R09: ffffffff8ab80501 [ 455.017762][T14249] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: 1ffff1100482be2d [ 455.017778][T14249] R13: 0000000000000000 R14: ffff888032ce3308 R15: ffff888054dc0000 [ 455.017800][T14249] ? rt_spin_lock+0x1c1/0x3e0 [ 455.017836][T14249] do_exit+0x105/0x2300 [ 455.017865][T14249] ? rt_mutex_slowunlock+0x493/0x8a0 [ 455.017890][T14249] ? rt_spin_lock+0x1c1/0x3e0 [ 455.017916][T14249] ? __pfx_do_exit+0x10/0x10 [ 455.017936][T14249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 455.017964][T14249] ? rt_spin_unlock+0x150/0x200 [ 455.017994][T14249] ? rt_spin_unlock+0x161/0x200 [ 455.018023][T14249] do_group_exit+0x21c/0x2d0 [ 455.018051][T14249] __x64_sys_exit_group+0x3f/0x40 [ 455.018073][T14249] x64_sys_call+0x21f7/0x2200 [ 455.018094][T14249] do_syscall_64+0xfa/0x3b0 [ 455.018112][T14249] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.018141][T14249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.018161][T14249] ? clear_bhb_loop+0x60/0xb0 [ 455.018186][T14249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.018205][T14249] RIP: 0033:0x7f3274a6eec9 [ 455.018222][T14249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.018239][T14249] RSP: 002b:00007ffeeac46b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 455.018259][T14249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3274a6eec9 [ 455.018273][T14249] RDX: 00007f3273cd9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.018286][T14249] RBP: 00007ffeeac46b9c R08: 00000000000001c4 R09: 00000000000927c0 [ 455.018300][T14249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000023e [ 455.018312][T14249] R13: 00000000000927c0 R14: 000000000006e983 R15: 00007ffeeac46bf0 [ 455.018345][T14249] [ 455.018639][T14249] Kernel Offset: disabled