last executing test programs: 14m12.703763305s ago: executing program 1 (id=1651): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r0, &(0x7f0000002480)=""/4096, 0x1000) 14m12.62283951s ago: executing program 1 (id=1653): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b02254342002108", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m12.572752785s ago: executing program 1 (id=1654): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE '], 0x8c) close(r1) 14m12.51144978s ago: executing program 1 (id=1655): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 14m11.596305156s ago: executing program 1 (id=1668): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x10, 0x1, "c5"}, 0x9) 14m11.226971745s ago: executing program 1 (id=1673): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) 14m10.795484218s ago: executing program 32 (id=1673): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) 7m29.544765435s ago: executing program 0 (id=5747): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r1, &(0x7f0000000000)=0x3ff, r1, 0x0, 0x6, 0x0) 7m29.49306654s ago: executing program 0 (id=5748): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x85}], 0x1c) 7m29.414992705s ago: executing program 0 (id=5749): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m29.279218125s ago: executing program 0 (id=5750): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 7m28.401255848s ago: executing program 0 (id=5762): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 7m28.042977761s ago: executing program 0 (id=5768): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 7m27.747076334s ago: executing program 33 (id=5768): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 5m55.394844152s ago: executing program 2 (id=6637): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20007, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x7, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0x1000, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001ff, 0xfffffffe, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000022c0)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x34324d59, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 5m55.288185683s ago: executing program 2 (id=6638): socket$kcm(0x2, 0xa, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800034000000008080005400000001a100002000c000280050001"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c0005"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 5m55.160226848s ago: executing program 2 (id=6639): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = dup2(r0, r0) write$UHID_INPUT(r3, 0x0, 0x0) 5m55.075373913s ago: executing program 2 (id=6640): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 5m54.898761494s ago: executing program 2 (id=6642): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 5m54.535359816s ago: executing program 2 (id=6646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) 5m54.080517682s ago: executing program 34 (id=6646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) 3m30.678861325s ago: executing program 7 (id=8101): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x4e23, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xf8}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x40810) 3m30.492661166s ago: executing program 7 (id=8105): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='d'], 0x64}}, 0x24000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) 3m29.54925057s ago: executing program 7 (id=8113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x7fffffff, 0x7e, 0xcb, 0x10, 0x7, 0x9, 0xb, 0x8, 0x0, 0x10003, 0x3f, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000340)) 3m29.148227925s ago: executing program 7 (id=8117): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x62) 3m28.984496039s ago: executing program 7 (id=8120): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) ppoll(&(0x7f0000000000)=[{r0, 0xd}, {r0, 0x8100}], 0x2, 0x0, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 3m28.542086338s ago: executing program 7 (id=8125): io_setup(0x2, &(0x7f0000000200)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], 0x0) 3m28.109247488s ago: executing program 35 (id=8125): io_setup(0x2, &(0x7f0000000200)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], 0x0) 28.390525032s ago: executing program 8 (id=9948): socket(0x400000000010, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 28.143861586s ago: executing program 8 (id=9951): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x338000, 0x1000, 0x9}, 0x20) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) 27.378054885s ago: executing program 8 (id=9959): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 27.072926951s ago: executing program 8 (id=9963): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 26.887448115s ago: executing program 8 (id=9967): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00') pread64(r3, &(0x7f0000000180)=""/121, 0xfdcd, 0x101) 26.510969853s ago: executing program 8 (id=9971): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 26.183136833s ago: executing program 36 (id=9971): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 7.769643324s ago: executing program 6 (id=10115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0xf, 0x2, r3}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0xf, 0x4, 0x0, 0x0, @msi={0x1, 0x1, 0xe, 0xfffffb64}}]}) 7.36209006s ago: executing program 6 (id=10118): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.735961563s ago: executing program 4 (id=10140): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 4.442629254s ago: executing program 4 (id=10141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/199, 0xc7}], 0x1) 4.369166286s ago: executing program 6 (id=10142): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) openat$nullb(0xffffff9c, 0x0, 0x24080, 0x0) recvmsg(r0, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1}, 0x0) 4.04634365s ago: executing program 4 (id=10144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.650897225s ago: executing program 5 (id=10147): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x2) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3.539615416s ago: executing program 5 (id=10148): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xb0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, 0x0) 3.295591034s ago: executing program 5 (id=10151): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3.190919676s ago: executing program 6 (id=10152): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000300), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 3.114478828s ago: executing program 5 (id=10153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4000080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x8001, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) 3.026073014s ago: executing program 4 (id=10155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.866889766s ago: executing program 6 (id=10157): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.700296585s ago: executing program 5 (id=10159): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)={0x40, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.610923731s ago: executing program 4 (id=10160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) 2.535601359s ago: executing program 9 (id=10162): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.471208246s ago: executing program 3 (id=10163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'user.', './binderfs/binder0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3e, 0x3230135, 0x2, 0x65c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="91f642c8806e5fac6c7396a8b89f75286ee3471d2868b7e5dd8cb71fb3c1021f302254a354e253e89479249f0f2e24bae4941bafa3e8a1dff252ec25236d94cc410f21f43f98912edaed66316bdecc1f16a6ffe5ce4670f7b4db6f2b1447ae3225db086e2f1f8555384b8b8945ac390697fc365bf8431c6ea9809dc731457c8eaae48629901508a6f43a3e1f939b72e9640082028678f2573dceeb4e63f23b71c3318f504b836393930f35db23e5828d88302003e5a157251b6f5f847f54d359a5ae83e57e8c94583c90541626d2f53d63f685c281dec64acbe87808a493dd436cdcbd7ecf097b6e2796263e177a9357259030985a14bdfda63e7f5f929f3d68b40dc237d1b3091c9dad8eadc47d6c16a12cfc95982d2b57146c985e7210646995b1a6fcd1743e958b08ece59f4a327023408f8a6b7f975dccb0805109dc6b3950a35779ae028f32f091b6986bdf218f79255fa61a2eca8f7698c6b8b4fab554b68b0770d9cead8b93d576da4307cc7ceaf8516b790638c19c6a345fb1b9aba8b950afd0a050b712f189261c15a199dc63919f7ea8c1b287814a009ac21e7881eacfe8d8de632e62dfb567facad709ffb5219f39f61697c7107c8c40d9054fc4a4303722c81721d26d40308654900a08c7171d87e554c7d7cd661fd23824dcb39f5f97518ba6312d712c0c0e86ee4c114a65d8baeae23f09b2fff4a3056bad6b6d2ad67fc41a8511177bcbce5a342d4fcb81d41fc2b7b9518fd36f8803ba5c34458061ad5deb6e6e973ffefe72c83d9d38ec77769bb17d59fc54011f9df0139f63c8d0ebbe2b7740fdd0c18f505224d9e03075f1b53d9b5ffd548ef563eab6b385bceee01579da37030d407e5829222437fda930d890b48b174af52a9b4626fd9e3f9ba54ecdefcc3ac109448ed6738f3cd5ff53b94130a965ddaf4a8aaa6ddaeb8485de163af08c75e87b6b798f3d8f28e9b4b71f4e5be23d4ee07c42790a2edbbd8fcf597b6ccf129c06d2ed130be6c1da8b2f66e485cb530b0761cbd11fb5ed4d41ae9dedfabc110b86b36dab0e40b422611ec97dfd6efb5c7a6f00c1600f42dab5233e4d76d319e8db188988f9369b8e2ebb201b40a18076ff4a222e8dd3fe4f6652ac5610f5e1e4e9965bf8f7bf2aca43e38c24353a571047a2924f0baa79f66b477f1720a5f02392199a3047382f93602b007c281d7e7d2f542e8ebad9e6a36746a4bf5a380d8c025372d00057df8251870e40d0eea49c6bb28fbc93b7d5defa7ba417253f9304309574ceb7493d2ec90625e52abc7cbb121320fa10c433944eae564874203a1b751a2aac3ae7004b2a9f0ce1ca66243ba030652ee4f31b30598d86ccdaeeb8b32824830ff5f4262c2909d6923d083a47fbb78b98bbc43671ab2b801ef776547a281d0364ad82468ccbea704f757b0612a648d1e62cf8109dfb4081f8dfdd236357454709c01530e214ab3ad615874fa629b51ed84d9d66d2b1f6d342edaee1b1fd54db2d3754ea1bd74ba6732edd5c00b621ba37ac971ec11bce89bd51a666631ecd91de60560f52b0552abf21d3a4e5c79884489bb56305132446868d40984a4b8a885cdd865abac22afe5d10ea0b7c15050ece0446d84130af727daf682ea29bde7bcd5acba44d54952d227022939524cd85876d1b120e1a88329d26288d3e4a636645d3f0f4a88503ebf1a77275c910d904e05fbfa3ee2c3f19e718cd7465b9f95a88521bf1c460321e3a57f239adddc46ba90c9433c1d277d6c55e78c9438c8a8dff28f89936c4646cb0c75c5403c4b2c7703f9806cc6ae22460dcea64827e1fd70e7554e2c4541a8edcda1d2c04df99bf51389bd3c0b16e27a6a52723567816c929be0e78f10217da580d40b9e912c825fae224a22bca7439a12f40e8e2b424ccc97860b980e0e54c872c4d03e1d31e8ef1eea331c575efa3a0923bbb80fd50217e7e364391c1343f87270eb798956eb9162fdcd5c10d6f810e53f1cef51270fe068d2f101b25bcd3a8b7077876452e2d8777d4c11094d4ad4dc7604626aebefdccc09daf723a1a055bbba4a5bd9279f2201eba945cef29c3462ab4fe771d83aa05383f42f5763a80ead6bc6ae01849b6ed4028faeb400449447aebf66942529222f34ac3fdc8f85d0182db33dc57ad849dc45b8ce8e41aace1d10277ca1eee5e02583fe4306c77c3eec7012504b2e34dbb0291843b52dbe669cb93d0552962a8b5455fc8fdca870065aee06f1f0d04af85eef580231c8336d1ce62bae106152dd27c28b16e153ac3af1d36528f2b850af8c188feb4c061dd2c6450b05a271a284f071f854571afc5b828e2e1e5351b286e1be409f48794772d3509bfb4ed709bf06b1af7ac0cb4e2afecb0f28516cda8aa9dacf12beaae7a244e1e6a9643d60d8edd87267265be94ce206b450dbf3306998124a3c29781a1939b54eff1471bd5d0a679755786ed87d3303531137d2c51af4c108172a4e8b83052045f05be931610b9e5754f816d26ba660d811a37c7d9003d0659dd86fb95832a0f197d3fbdf2578eb90411ecd00c535346cc88a323cfbdc1fc2e1070855edcbc3b66dffe0d6ca0d7f455e56e70153e5b0540ae19940cb54979219b74a04d5edd7823fba99b03d77d882b44878933fd2e22667f93ce866d6b82f51c503a9aa09a81b8d0ae0394804da44d53ce4f3eb84991558ff4e66b60ebdae037b398566be04b385afbfe45e77d93d50c0c62ed846eeff2d27d126a7d150d46c120465512efd593a6aae296200b562cd1113736a67152ff3db4d2c8fb310e4d9c62085f2609dceb435ee0b184d0c5b565f7d708c8a153ec845f003205ac7b3a82c607fcdbc5ff2a44837b32dfde5c2ca62e77916f37ca7aa433ec1a8ee57bf50a242ebaee1bad342fd935949a9dec7893f88b565128d0ccacf631dd10112315f33baf16360851beea0b4e2907fd04f1a44bf06f3498261c7e28b4faacc8d2df96e9b7b48f29516f8300acb600ff0d76e994d2a2cf3910547ba82d39c8320a70105f336a0500a5ed856ef2d0dead4fb36193142962a1bf866bb4fcbf9711d2df9f2eb5b80a4b1ae67ef29c9bb1bfb4d8aabeb3fe054b4f6b465eaa8333dcfdb6f28f4233bbe729d0f9e8abe5e7a6c67b5cfce4f572484264bf2cb5db58a8090bec33ee639bf722ac2657dc22d01bb754be4c27c18709eac1215f864ecd68d9b93dfa6e043ed26108daf5fbf09d20a3284736a8b6e88cb78541112b26cf8bd0881655a99bdf8da161be7b407bf8160bee5bc9b8fddb5961baf363dfce16be41af1014991ef2a518c114c8cc018489877a9ce0c382476c3a643c165dfd75187e76958d0321c239f72cda123fc5b4913e22610310721b9daa6ca64bdaacf40659eafce52a56ccdf538e94389b85c881361c5de06b87bd4bcc2e90a83db092dadb6023e6f2f0e59e079f8478219c978b67b74d1044f4130f8cc9ff12ff52e52ae14f4c4b0c12db7d6f4b14e1628101bc08413e7bc34061de4da864c76e18516a9be3cc9697848ff3011312c2c03529fcf65dda3b72a6ad2c4cb1a00cc33d0dabfbef0857a292a1d34145bd20a46ecb603ee5c69fe7f2732dc43385ec607906ab6665488d8bbba6bd1f5e2f24a84c3126b7a1994e8b500d318ddf1591443cad0763a7506428df06b745a418d314649edb74a6a6e71d61c045929d2115fad2ad00c30940a4dd9e4847977ee8b7483cdcd24424a50c1e72588cb49c60c72dcdaa2f87494690befe8dc8d1da45dbe07449e17fece2883b7b7f9dacff84c616ab97eb972a570cf7a2900e0ab63adfd245ad96cc80ab145627880cba86c83873cd656a6bfea105c5d31e657e10c9abc9ff52f2a0cae31feedc4cecd2eaf4421a2ab40b2d18a172e6c84007cbd21656984dc5a11efd76e0bff9254f796dc70f825747fcdc958b90f37cf2c812caa43da874fdc283a6aebb55a7def13f87a368a3d84bc917307508d3a3d99cfebd1c30d24720cc27c3622c82fe04e822df8ae5ff01f53b32a3d588b127472fdeb337f2b41457645c21f37725b0e8f17867049f22e2cd7895b1a015ec5b34214e6c921c0698f251280a40e95bc52b00ccd89014dd18c7ac5b5b7a4ea8fe00faee7317a14226e3b51de212ff8d9958ef83c53e25a9f6338a918f017ba62d20975ec0c751c79a341e65330b1a8f3e0eca7346cc97dd485d2b0d610eae3618608039949807fd285fa48ccc01b278e171c9d2255ba458be06abdd9db00e76babb9f7a66228fc7e3abeb278af90df9a4140d365c7b54062a28a10142e369d0a5972deffde6e9ab19e2afb42aa6cf84078c7e9112dda38f8e9ede11d0f1bace30244d3d536905eaa595530a56ac38493581274462858a4923b2bbaff35af9b012f106fb34a24b1a29feeb980cde472f5f5393e17fc0fa30c2bf53546478960ac68429363687a90dee420b5e5b5088085f88f955d358f3960c4459b77098cba401834a5efcfd39600f3e7f4ef5a9059eb6308dd903045bddef2d475d6d473bde94519e949b98528a48d2a73138771edd6773b2347fd6c223759bf827a5d7e8b9d786a6495bfe15d4b91ba150b26d2c218ea5151c995cc6d5a757e7edd35dc0b106a942a317003c19a1a08598c026eb89f557689fff2c383b5ece42157f97f0af89b21ec3703c4d99b3c1f422ad563a9059b252b3b7365ab711834dad56306ca3a26d0a8f5bbea6a3e2813fa9f5efdf961a1cf6373296842f9eb1c26cacc89200893d4df95bb91dd80fc4d0b926d41af3d5616b73c34424a26225da81249cd2c32127665e85bc696e2d8442f9021fcd3de8b8c3b1da9e2b8158b75a3cd364242be2fc86b771042b3bb6d96b1d199d1bcaa8eaa52ae9e1fc3a564b7122237d5b2de6e50e4110f6b9703554896851e56cecc785c905983bbb3457c06758d14d63791288c11ec79cdc5a16c7c303678e32aee4d7537fd96fdc2d9c6676fcca01152a22899388343b9eecb95d75c9ffd2ea5a09f52c07e13daa324c2c3115993bcd19a98cb6286750f4d3707d3376209a262fbe54266590081996f6dfce55305b8c52f0d9ece74cbe348217b5101aaf08a84d146b3f30eaff1665a98d5edd5903659a52ba965d59c25d67db8ad84d65b9c136159673aa75afbf4801b0c6129c8fa4bf8b0350695aadef3d8511da0527f320da50a0b8783c294cf70d0c9612ebbceefd6235f5171adf88d016acc2b0e80bad59ad0940e93cfc4d4eed72895f77134d2dbbaee6dacc34fc263841e37d016badba8079c78d020b267b2f89a8ede0e7ef3370f1bc008d4148a977631ec2a95a55c3020bdd9577ba32e89f707e349c333334312f364f7c12cfec6c1bb56ba6d09fcb5baf63978d90188d1900bae3103bb17eaba889c8a034c7f205f45e698cb719348d5cc136ff2a74696e69a4d94e0854feb5649d8163a5ddd2b1983080c35d7d1bf806f685431294dcdafea2e3776fbaaff6570f57302618b8052f251e03458d5bf2ba5a958992fdbc351d9f58e456694be9345ae4e6c2497309f6d37369d71ffd72ddb7089fb46401c1d3be30359397c3475b2f1436e3cc2e784cb68b02ca53091a596d27ad9f0f2781d9186e787b0c3696fa039ca25ad55c13bd2baf339106238f2722aa1ef0d65e4c13c3081ad42ecfe1e6d84d4a6b7954ff7283aa0dae24d8eb33a2969eb8c3a160d29ff126cd8537bf89c24f9aa2f5e8c20a8e98d2b7fddb1fd7591f31794d2637dd3ed9e901fd86b169f1748d46004ee2a3680cc87d27780475ad22035b691fb36c4c30b7f0312bbc4e7b88d3db858b31326c0c6881b738d508e477f040d279392795fa82d9889fa58b8e2ac0e1fe4d394fc8a2b562c9c4a4235ef194da5965e43645bf5ad05e36e8a8e3c2e67d666e396994c0f30a8527a00f99eaecff594053d74c03cef62910d75ec403c7d3367bb6d1ed6d38dee1ac2f868b1a134c4876bcd7290f8f6865a5c4b1b6c7e90b06ebb15a267e283ab221cd09a4784c62a2d60dd9d0c73fd7519127e0907c570e2e5b6f2618eafc3bae7e6f9a5f14769763876195856e67fcac870ee04bbd762688da4d228388fdd32632410072ff4be7f1e25a4b6a05ab20e5b98a05b226532e9f85671b5a404496bb7eff79f7f37fb4c130d88a9149f3b8b09769c1753a634c05e182d12ff68a0db434379ae4f24205c424fcaf6709409bb5e8680b58608ac02c3f95ee933bcb22a5e34f08231cbbd96f184df433d9dd67e1756c2eecff265bcd5e5942a0d2777404eb93a9dfe2ec5ae7d4d7de42e2c947083a8c3e91fd90cad20bd983580f604c112216cde407165baf107959b465dcf28ed7033eddbb412b044da5e2f62d551cc3575f1e464059e6c73b0951b30ad491869b5627ee8b3b95d6accce14c399f5fd5c36fdee83031bb0ff02f2e564e7e93fef6da9fae95f843c5dcd317218738ba05c6e07b07f85c864e0ab36691fc030a0abd2c449c1559204405a086fb9d96b14374e1adafd1162a8deb992a23751573659d64d8c6425ff909c1a25b359ff718919bcb0c5713f326ed66b422c355c30f4574bdf9e97e9538ee862e8a4739c03e77d4c0c22b8ad9d7e6631cd4c87c3cc8a8574d407cb162bc2851bcb600fc5604dfe6ea1a50ef5b907a80cba57358c2a8a0c13a0e32b2bd72e6180744ebaa638080de4370b5823d62430b326e7edae9e8ebb7aea5f8a5e915a8e96042fb6ac8a6b732fb623072969b91e984eba151fdb353ab0042e12dbec05401a49d12a6155ab926abf011db8a94d62a8318e41b30c870ac2133e1b0046836c6c11d9b8f2d5f3f2d7d65bac2e240b982b3fd27b0f09e60c9779742f10363710064d9e4b937b52cd7c7d1bce878fcf652de714e3a75e7436b55712a06df4586fd11b1151fb0c3f2d538c3ed3dd9c2806a5627c99c9ba39f9f7c16cace3a7b003a8937aac129ea41867430f83566871a49d1988ff359a5f802da72e87fb8795d4e7e77140c13f846a8d04434fb6524ec00dc4dfff4b5079c49a75f55b33c6071fd52fa9cfd6677dcd75b1e0174b88196e2c86e4d2b451869e9ea9bd13f436aa2d9fac6aa49fd8ecc3abfd1c1b47f592df6de931bd8d1aa1c2360e76156ce63faea2c25bd18c5019fe755df25ce87a5952cdfe77fdced1e9546643deda1a55c9fafaddc28456741ea877a063bf80bb379b01f76827882bb37426c5a20fbeee78d5f64aa2a7ccdb3f5bfe8bed79cd7ca9e7a5117e4b94bbd5182feb55cf77e4fa8c3332baaed9a4aabb3493ea15cc2ef35b52b680094b2aebacc75e659e5809f9f548278af0256a06a801a840e27548886b4a01a34adcb33a76ecb11465155ab8cbbcfcc3626a59d1ad9af8944ffa94564f679a2ec297f7995ab80978794f56fe68f5b11ecf60d46a36756ff7348da29c6261f164f5f0cabeb9ad1459d97aca708c56c10a70d6abced2aab1525aa172acdbeadc243e612a5e5197b3b822470a7aaeaacdf9072ddb190063db0d7bce649e4c5909f7d80c166c3d9f58792e2406ebe9c70ca91e25c6efcd8b71abf2b04e868d21e2cb7112e53f8982d72ab250db49dd9f21be14b1f39ee33a49ccdb7977fd1124a05fb2830215ff502caeb955c2ccc431764befa1404e3fc721090e78c54792bdc1847dab50bf7cde72beea5c4f9b5f7d2c7f72df4f2dc37312fa93c263a215251aa299fa0b669e1175d75128ac689eb8e85d46b63f70b6f4087fabe4e4cfd6b2c1d07ab0de8086f4bda9023442f4276a78ec19ced714ecd6f6ed5605675da3cb725ad879aade51f7e20cdaec4db634f5dc9d8794a4e325fcac97a031ec7f0d95efc0300b362bec79d9494de2374784c35c1cf56df594db65eb037e8495ca88637abd3457979fa37669364131d584637bf2c9de4f79e3d1ef8f6fc4a64d750870bbdf6d7fbc657e774885a0295a6c16399c875b49ffa8db86aee272a7e3bab7b6d0ef3b2f53b5c4e1b06f39b1a9169fe37071ec12acf08b4d52798733bf159ab2a9740ac18a94b483960b235442b042708045eaf1ca09271d32223fa593da9d56d554079e92c354891522b9723b49986fd7c26f6539576529feef94ddd2940da03723f1f28b47a0a249d7f780ef6103196d70aa2f6b99c51aeed3652137ae56edfa823744ba73ec3b4c9545600f6c95cb566270428042d00a48c4722374a8f046a9277a3adf2bdfd71101bd0aeab82c0a69422a89ecd3c6e51e1933e24886af1ee22eb4ecf7405ce4ee5442d572fec049824a2e08b1de05136d9db3f3de37e654d0f8ba98fe3390e64958da9f16c9cbd97b3cb6093e9f002fd9933712c63656f25dcaf8859851409f4ec1397d12925575afd80d16385429afff3c2d9e4ff57f99eb587e027eda9fe3b670ad9e1f98ec976bc7a9d1a15820262f98cb71eadfe2253bf168d021539bfe47e4831aff7179cf04ea15fb2d75fdae55f09c216f5c6e38cf8a45718b38b791c8b84567aa96c583fc16c53240cb1ed1ab5850bcd8722ec49ddb1c0adee86837d9d93fa4bc871b735d6d5176727de6ff35d057a9022491b06de06c7bb92e5455d199fd1e9c0351e8a3efdda9bb861fd856bcf691dac16aeddad403091a63d8749e105d86e67ff1280b0bed8c01e42743d23469ba2326ca32945ab3c8d703d5f710487a01aa133dc2f2689d6f7c24303d8df99ac70e246fbb99bb47fc252b18e97917857e5a5b09b30f5338ee1a63c72b92cd55cf47ab05d032e42fa4a5ebda82d6406e0322a3716253b997f7f650ca1f438b26fb0318099876c93766371fcf68bbcfc225ee01097ebc974b68890cea3ae0ca9c66c5a7384aae401969b0f257be0d8fa24547ff3feebaab9cf26216761a1b4febf48d35497f07f6d85fd6f54eb4dcdeac936d2af2af1a88cce61406059a5a097ed38f59ddf0d7650be449c7070c11ef4292e2aa846982dd55a5d32e4853357667cfb2a9b3890c95e268e16c2859b04e3dd5f2edeac86e84f37e92df8ec747f34185253d5debaa3240980fee2f63e917a46916c8e210a504ad341bb71e1ecb927beeaaaa59e6ea6c936c8b5bfb414f4b04857f3a2ec8fdc43524dffc1026f2bd09ce04f979ebd1c430303e7758a58fd592c8be07e4881a50fcd172baff48209a344c4b0908526b1e42962b874703782e1a3db4def184c53cd275f5474f98fbe2e2885c34f36739a52cd3b9c99c290c1a37bf091b1cd822bb5651cddaa256ea3b2de23ab7991b4728be1bccf1fa3c8ab8ee0b9d79ccb546a1c879b7f72b7e4d984097635f402ea07358fe49a0045d8eed146e44f928e2eaed60396a37655cfcae10b1ef50d343f3c84ed0de9ab0011b8aee0256782dafafd1d83323f03dd3a200fb165811b278a38a8fd256fb07589087a7fe0c40a0bb590bb8c315e6dd554430c0b69da8895ff111805652700cefa8b8b107f20c830dd6b8165ef29b2451fe45dcdf56da28099d00cd5f88a860ae374033e03e061184f7cf40421455cb2ae9e98fc5ff784a78e2ce29c3e548a21f80aa9bee5f78dc0abaf87dceba5bc4c4fd02e51852148a8b300d28f7a10e20b8b071613ce355f802ba7293474770f53ee651e97f5a0eeb5fcc52500c3d986d78a7583e4095ac29ecc4ef20a46c87113db7a1a3e1239712437e8e080f99875fd74e0fbe3ea87ccdfcc5ebebd1fb23eaf5181b43da158d43d722f447112bb1f562ecaee368a11f3f9dff80bab0e744a4db51077f6b37aff735967831af3872a51ab25e9468314ac0cd01706093e86c9561520f5b3757ea31781054eff28a1cf2ff4496d3a35112020c3d46b76374aad34266108863a1a5959fa3b910f7bb2ae4d4903c2bdfbd31a2868e907f603f176fb8a178c5691d8bf1cbc73867402043c9a4428e52a68ed198ff8d8002358af3676da1fc994698b96fb6674e64f91ab59d04000198544280ed784f7531f8f3b1251375ca4f66365d41d9c6faa2c1be90167504792a97873e96f5a0b933d2c73ce08e12db947959adfe84fb07754c2ba39a896bd1ef68b0152be78040f40d46e9204bca20981a739bd3f7a1e2bf95ab975cf70f4fca5cf532656682794614fbce18df9e0a912e103a2a76b6adac87a2d1813f844f031ce504554dd76ef1e99653f0f2b2f2e607c7817961405a6eba43ecba144e767da02070cd1c65708e5a39ff79efad6548b2f43455f5d47c27860e34bbeecd4422deebdf4535718bfc44f7f8fe96d59b4273f16fba46011e72d66b466ff0305976d1a9ce474ac7700b7d370da90de50334e04f08318a010dd664b587e3002653048b432bb7367e7dad57844f078b49ecd0ef3e7a8a7a891cd4baa1546f6c63b9aa7d6c57d23999173cc71779cb006e943f1a1fd1a779c3da8d191b794c6128aec9e3f225a8a98d78d63fa7e078979c50ea418d4a905be4a948950b67a1d0cd2b6d7b706bae9e6a353a071690c63348e8cf145be08221b8e28583bd5946b037dc5b26da4a26ef55e752091ec41f48e1382036b3f757d3cbef6e8b60e63b3ef261319e74858e4f4d2c3c69ee3ed1c23f9250932d6457e000ac91ba0c3f52568e80ddf9c233c255868f3d0edab3001cf64cbf6a8ee304ebadb32b24b7ad03a0e57a0383ceb23cbbc671b25b42f0b7c20f9b80decbdb4657afa772859a2a0cfd94b8b6960251147ed0b8715b0f88ca4920aec6b620d8cb5aff8f7568727913a7b775bc9e10d0f1091b087d03c2111d00e52912b8095e13997200676d0ad11e0d8eb13acdfba8c134f9d610081c72e6fe6db1e5529d51dc1ff7e261f0e534f4789934b53cc26ac2efc126a23c56308b179b0c91a3d8b23575891cf6e8a73d05dabc73805652e2e632daecb54cc09dd7599bcc45a4d4d8cf21f6db238dbca94d8b1ac0a0e04bdfded824bfecb5648131f56f9a8ba53a588d20320cc1d7f13b25e111f9ef55c582dada6956c18d88250ef0511fbefe33fcba89032316dfe05be2945bf959947ee420ec5a9f9cc188b89fb6a3db81cb0548238d06252bf647fd0506388d3ba14f88e7abd83df1bc750419aa62dd7bbaca5846e8faf83e7f8fcb77979d438da285660e3cd6ebd47d61711ff93309e9be0dcb26f2279deed85a32114d5a5c0acc8640a8db197d7d9e7ab3ef0300c3a189d63d32c242d04ac5800f830d51724d388e54884a9da539f63ffcc04e657a13e3a74ce54bfc95e14390b5aceec14589fdfbbaebde8cc5d41e52623d646efb9da0280a6cba0d5805d0b60d0f000865b047da7d824c9add1adb7e2530e9dc05123e3aec2bc3817d54f82d06620f20dd05fc10d8e6f7656c13d868b77e7ed9e11e4b3647a493cceeea7ed6dee546dcbc4699385aec0060553c2593ffa4d3dc8c200d8bc6c7eccbb92b0db7c3f79227e56a0650838760a9328f1a3519cf349899105915a778f85869e80debd75aa83b30c74dee8caddd78280719328fd86de44cae1c958a51bbe002109c1a65220573468db8603a76ed73d9e921c901f410d8eb2ac6a7cca858829bf317c877a173cbb759a3daeaac037ab42b5a4e5a58a3ac18286e0149bf77da131dbc7f539487b4120834b4a856005479a9b354adc68217d3fd835c0f446ddee422e", 0x2000, &(0x7f0000003500)={&(0x7f00000003c0)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x4, 0x400000, 0x7, 0x80, 0x8, 0x9, 0x0, 0x0, 0x10, 0x247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.294999461s ago: executing program 4 (id=10164): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_disconnect(r0) 2.256702855s ago: executing program 3 (id=10165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.978684444s ago: executing program 3 (id=10166): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) 1.779852449s ago: executing program 9 (id=10167): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 1.589520527s ago: executing program 9 (id=10168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9fe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 1.27187308s ago: executing program 9 (id=10169): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 914.115316ms ago: executing program 3 (id=10170): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2, {0x3, 0x1, 0x4}, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}}, 0x18) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) 545.935606ms ago: executing program 9 (id=10171): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) 409.295954ms ago: executing program 3 (id=10172): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) keyctl$set_reqkey_keyring(0xe, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 172.749981ms ago: executing program 9 (id=10173): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x80) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) 103.584479ms ago: executing program 5 (id=10174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000007c0)=""/12, 0xc}], 0x5}, 0xfffffffc}], 0x2, 0x10, 0x0) 103.290227ms ago: executing program 6 (id=10175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x4c1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x0, 0x107000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8}) 0s ago: executing program 3 (id=10176): userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r0}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r0}, 0x38) kernel console output (not intermixed with test programs): the interface descriptor's value: 9 [ 977.091627][T28860] loop5: detected capacity change from 0 to 7 [ 977.105988][T17309] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 977.126336][T17309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.126979][T28860] Dev loop5: unable to read RDB block 7 [ 977.143810][T28860] loop5: AHDI p1 p2 p3 p4 [ 977.150466][T17309] usb 7-1: config 0 descriptor?? [ 977.171820][T28860] loop5: partition table partially beyond EOD, truncated [ 977.184099][T28860] loop5: p1 start 49598 is beyond EOD, truncated [ 977.195377][T28860] loop5: p2 start 3956713404 is beyond EOD, truncated [ 977.204874][T28860] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 977.218211][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 977.274283][T28862] bridge1: entered promiscuous mode [ 977.378836][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 977.384253][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9192'. [ 977.393554][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 977.415510][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 977.429614][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.438897][ T24] usb 6-1: Product: syz [ 977.443233][ T24] usb 6-1: Manufacturer: syz [ 977.448405][ T24] usb 6-1: SerialNumber: syz [ 977.594304][T28850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.607673][T28850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.690064][T17309] microsoft 0003:045E:07DA.00EC: ignoring exceeding usage max [ 977.719735][T17309] microsoft 0003:045E:07DA.00EC: unknown main item tag 0x0 [ 977.738822][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 977.747677][T17309] microsoft 0003:045E:07DA.00EC: unknown main item tag 0x0 [ 977.766493][T17309] microsoft 0003:045E:07DA.00EC: unknown main item tag 0x0 [ 977.914513][ T24] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 977.930400][T17309] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.00EC/input/input223 [ 977.945554][ T24] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 977.975203][T17309] microsoft 0003:045E:07DA.00EC: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 978.016962][T17309] usb 7-1: USB disconnect, device number 62 [ 978.206311][T28892] fido_id[28892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 978.325943][ T24] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 978.395828][ T24] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 978.533389][ T24] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 978.685146][ T24] usb 6-1: USB disconnect, device number 4 [ 978.733006][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9202'. [ 978.787498][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9202'. [ 978.856527][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.902596][T17304] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 979.068847][T17304] usb 4-1: Using ep0 maxpacket: 8 [ 979.075635][T17304] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 979.086287][T17304] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.097484][T17304] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.108364][T17304] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.118477][T17304] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.131859][T17304] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 979.141070][T17304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.299131][T17322] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 979.359045][T17304] usb 4-1: GET_CAPABILITIES returned 0 [ 979.364667][T17304] usbtmc 4-1:16.0: can't read capabilities [ 979.478243][T17322] usb 5-1: Using ep0 maxpacket: 32 [ 979.485049][T17322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.496257][T17322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.506414][T17322] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 979.516619][T17322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.530543][T17322] usb 5-1: config 0 descriptor?? [ 979.722108][T28943] netlink: 'syz.8.9209': attribute type 1 has an invalid length. [ 979.761101][T28943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.794407][T28943] bond1: (slave geneve2): making interface the new active one [ 979.805720][T28943] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 979.863690][T17304] usb 4-1: USB disconnect, device number 23 [ 979.973058][T17322] savu 0003:1E7D:2D5A.00ED: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 980.232055][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9215'. [ 980.241751][T28957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9215'. [ 980.251671][T17322] usb 5-1: USB disconnect, device number 37 [ 980.348402][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 980.518598][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 980.529278][ T24] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 980.542819][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 980.555589][ T24] usb 9-1: Product: syz [ 980.571454][ T24] usb 9-1: Manufacturer: syz [ 980.579173][ T24] usb 9-1: SerialNumber: syz [ 980.600193][ T24] usb 9-1: config 0 descriptor?? [ 980.634277][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 981.088384][T17322] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 981.228866][ T5709] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 981.248284][T17322] usb 6-1: Using ep0 maxpacket: 8 [ 981.257412][T17322] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 981.267540][T17322] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.277717][T17322] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.290194][T17322] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 981.300781][T17322] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.314231][T17322] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 981.324422][T17322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.380579][ T5709] usb 7-1: Using ep0 maxpacket: 8 [ 981.388388][ T5709] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 981.396729][ T5709] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.408777][ T5709] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.418729][ T5709] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 981.428898][ T5709] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.446212][ T5709] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 981.456588][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.547201][T17322] usb 6-1: usb_control_msg returned -32 [ 981.563570][T17322] usbtmc 6-1:16.0: can't read capabilities [ 981.664123][ T24] gspca_sq905: bulk read fail (-22) len 0/4 [ 981.674069][ T24] sq905 9-1:0.0: probe with driver sq905 failed with error -5 [ 981.688652][ T5709] usb 7-1: GET_CAPABILITIES returned 0 [ 981.699812][ T5709] usbtmc 7-1:16.0: can't read capabilities [ 981.886816][ T5709] usb 9-1: USB disconnect, device number 13 [ 981.945039][T28984] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 982.270900][T28975] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 982.280921][ T24] usb 6-1: USB disconnect, device number 5 [ 982.708200][T17322] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 982.720239][ T5709] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 982.869104][T17322] usb 5-1: Using ep0 maxpacket: 16 [ 982.883318][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.884070][T17322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.912366][T17322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.916170][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.926545][T17322] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.945257][T17322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.969141][ T5709] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 982.980836][T17322] usb 5-1: config 0 descriptor?? [ 982.991076][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.022999][ T5709] usb 9-1: config 0 descriptor?? [ 983.246115][T17322] usbhid 5-1:0.0: can't add hid device: -71 [ 983.254324][T17322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 983.284966][T17322] usb 5-1: USB disconnect, device number 38 [ 983.462180][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.484616][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.500023][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.509424][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.516944][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.527248][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.535988][ T5709] playstation 0003:054C:0BA0.00EE: unknown main item tag 0x0 [ 983.555079][ T5709] playstation 0003:054C:0BA0.00EE: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.8-1/input0 [ 983.671986][ T5709] playstation 0003:054C:0BA0.00EE: Failed to retrieve feature with reportID 18: -71 [ 983.685194][ T5709] playstation 0003:054C:0BA0.00EE: Failed to retrieve DualShock4 pairing info: -71 [ 983.713696][ T5709] playstation 0003:054C:0BA0.00EE: Failed to get MAC address from DualShock4 [ 983.729734][ T5709] playstation 0003:054C:0BA0.00EE: Failed to create dualshock4. [ 983.749025][ T5709] playstation 0003:054C:0BA0.00EE: probe with driver playstation failed with error -71 [ 983.765798][ T5709] usb 9-1: USB disconnect, device number 14 [ 983.784314][T29049] netlink: 192 bytes leftover after parsing attributes in process `syz.5.9258'. [ 984.016479][ T5709] usb 7-1: USB disconnect, device number 63 [ 984.163116][T29062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 984.524208][T29073] team_slave_1: Caught tx_queue_len zero misconfig [ 984.862643][T29089] vivid-001: disconnect [ 984.912335][T29088] vivid-001: reconnect [ 985.048588][T17304] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 985.240892][T17304] usb 9-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 985.275024][T17304] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 985.293406][T17304] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.314826][T17304] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.343501][T17304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.366217][T17304] usb 9-1: Product: syz [ 985.380512][T29109] netlink: 'syz.5.9283': attribute type 1 has an invalid length. [ 985.381785][T17304] usb 9-1: Manufacturer: syz [ 985.395482][T17304] usb 9-1: SerialNumber: syz [ 985.403033][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9285'. [ 985.427571][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9285'. [ 985.439675][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9285'. [ 985.494133][T29109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.533248][T29114] bond0: (slave gretap1): making interface the new active one [ 985.546652][T29114] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 985.636334][T29114] syz.5.9283 (29114) used greatest stack depth: 17408 bytes left [ 985.859453][T17304] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 985.900390][T17304] cdc_ncm 9-1:1.0: bind() failure [ 985.969515][T17304] usb 9-1: USB disconnect, device number 15 [ 986.548195][T17304] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 986.722652][T17304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 986.753982][T17304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9105, setting to 1024 [ 986.771475][T17304] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.802745][T17304] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.815261][T17304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.875740][T17304] usb 6-1: config 0 descriptor?? [ 987.341255][T17304] plantronics 0003:047F:FFFF.00EF: reserved main item tag 0xd [ 987.354998][T17304] plantronics 0003:047F:FFFF.00EF: unknown main item tag 0x0 [ 987.363091][T17304] plantronics 0003:047F:FFFF.00EF: unknown main item tag 0x0 [ 987.371542][T17304] plantronics 0003:047F:FFFF.00EF: unknown main item tag 0x0 [ 987.388003][T17304] plantronics 0003:047F:FFFF.00EF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 987.508501][T17322] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 987.631141][ T5709] usb 6-1: USB disconnect, device number 6 [ 987.680352][T17322] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 987.692028][T17322] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 987.709581][T17322] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 987.732177][T17322] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 987.741694][T17322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.753319][T29163] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 987.779122][T17304] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 987.941244][T17304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.952324][T17304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.962734][T17304] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 987.972246][T17304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.983203][T17304] usb 7-1: config 0 descriptor?? [ 988.139860][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 988.176169][T29184] vxlan0: entered promiscuous mode [ 988.408693][T17304] hid-steam 0003:28DE:1142.00F0: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 988.478586][T17304] hid-steam 0003:28DE:1142.00F0: Steam wireless receiver connected [ 988.486870][T17304] hid-steam 0003:28DE:1142.00F0: No HID_FEATURE_REPORT submitted - nothing to read [ 988.503048][T17304] hid_parser_main: 3 callbacks suppressed [ 988.503069][T17304] hid-steam 0003:28DE:1142.00F1: unknown main item tag 0x0 [ 988.530885][T17304] hid-steam 0003:28DE:1142.00F1: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 988.617122][T17309] usb 7-1: USB disconnect, device number 64 [ 988.644687][T17309] hid-steam 0003:28DE:1142.00F0: Steam wireless receiver disconnected [ 989.196735][T29202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9319'. [ 989.247944][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 989.247968][ T29] audit: type=1326 audit(1779444723.812:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.282639][ T29] audit: type=1326 audit(1779444723.812:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.330437][ T29] audit: type=1326 audit(1779444723.832:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.357150][T17322] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 989.365319][ T29] audit: type=1326 audit(1779444723.852:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.369313][T17322] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input225 [ 989.426178][ T29] audit: type=1326 audit(1779444723.852:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.440534][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 989.464766][T17322] usb 9-1: USB disconnect, device number 16 [ 989.523277][ T29] audit: type=1326 audit(1779444723.902:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.552652][ T29] audit: type=1326 audit(1779444723.902:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.599702][ T29] audit: type=1326 audit(1779444723.902:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.626747][ T29] audit: type=1326 audit(1779444723.902:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 989.722729][ T29] audit: type=1326 audit(1779444723.902:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.5.9320" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 990.036921][T29219] netlink: 'syz.5.9326': attribute type 2 has an invalid length. [ 990.059018][T29219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9326'. [ 990.450819][T29237] lo: Caught tx_queue_len zero misconfig [ 991.002339][T29261] input: syz0 as /devices/virtual/input/input226 [ 991.299678][T29276] loop5: detected capacity change from 0 to 7 [ 991.306644][T29276] Dev loop5: unable to read RDB block 7 [ 991.317054][T29276] loop5: unable to read partition table [ 991.331518][T29276] loop5: partition table beyond EOD, truncated [ 991.349815][T29276] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 991.428263][T17304] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 991.603644][T17304] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 991.616079][T17304] usb 7-1: config 0 has no interface number 0 [ 991.624135][T17304] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 991.651491][T17309] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 991.658867][T17304] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 991.670975][T17304] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 991.687240][T17304] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 991.704666][T17304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.719694][T17304] usb 7-1: config 0 descriptor?? [ 991.737306][T17304] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input227 [ 991.848693][T17309] usb 6-1: Using ep0 maxpacket: 8 [ 991.865025][T17309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.898943][T17309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 991.926862][T17309] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 991.948633][T17309] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 991.971844][T17309] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 991.991483][T17309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.007040][T29269] ptrace attach of ""[29294] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[29269] [ 992.020412][T17309] hub 6-1:1.0: bad descriptor, ignoring hub [ 992.042192][T17309] hub 6-1:1.0: probe with driver hub failed with error -5 [ 992.064758][T29269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.071259][T17309] cdc_wdm 6-1:1.0: skipping garbage [ 992.089964][T17309] cdc_wdm 6-1:1.0: skipping garbage [ 992.115815][T17309] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 992.116016][T29269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.132694][T17309] cdc_wdm 6-1:1.0: Unknown control protocol [ 992.229308][T29280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.256105][T29280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.388404][T17309] usb 6-1: USB disconnect, device number 7 [ 992.736074][T17309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 992.939267][T17309] usb 6-1: Using ep0 maxpacket: 16 [ 992.951902][T17309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 992.966003][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.972455][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.995970][T17309] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.031378][T17309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 993.066690][T17309] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 993.096882][T17309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 993.135203][T17309] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 993.178243][T17309] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 993.194377][T17309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.219348][T17309] usb 6-1: Product: syz [ 993.229030][T17309] usb 6-1: Manufacturer: syz [ 993.244338][T17309] usb 6-1: SerialNumber: syz [ 993.256155][T17309] usb 6-1: config 0 descriptor?? [ 993.373611][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 993.379880][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 993.386608][T17309] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 993.712712][T17309] usb 6-1: USB disconnect, device number 8 [ 993.747399][T17309] mcba_usb 6-1:0.0 can0: device disconnected [ 994.231949][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 994.424386][ T24] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 994.440413][T17304] usb 7-1: USB disconnect, device number 65 [ 994.462602][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 994.463673][T29349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9374'. [ 994.496166][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.548700][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.569873][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.594670][ T24] usb 5-1: Product: syz [ 994.610005][ T24] usb 5-1: Manufacturer: syz [ 994.630540][ T24] usb 5-1: SerialNumber: syz [ 995.101514][ T24] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 995.131314][ T24] cdc_ncm 5-1:1.0: bind() failure [ 995.171183][ T24] usb 5-1: USB disconnect, device number 39 [ 995.491405][T29376] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9382'. [ 995.908574][T17322] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 995.977703][T29397] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9390'. [ 996.082033][T17322] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 996.119776][T17322] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 996.144272][T17322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 996.171447][T17322] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 996.195387][T17322] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 996.208752][T17322] usb 4-1: Product: syz [ 996.216219][T17322] usb 4-1: Manufacturer: syz [ 996.228119][T17322] usb 4-1: SerialNumber: syz [ 996.242348][T17322] usb 4-1: config 0 descriptor?? [ 996.285805][T17322] usb 4-1: selecting invalid altsetting 0 [ 996.350562][T29405] netlink: 27 bytes leftover after parsing attributes in process `syz.5.9393'. [ 996.418452][ T5709] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 996.593071][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.631770][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.643530][T17322] usb 4-1: USB disconnect, device number 24 [ 996.649757][T29384] usb 4-1: cannot submit urb 0, error -19: no device [ 996.662243][ T5709] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.712746][ T5709] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.742789][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.772970][ T5709] usb 7-1: config 0 descriptor?? [ 996.808207][T17304] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 996.978524][T17304] usb 6-1: Using ep0 maxpacket: 32 [ 996.995290][T17304] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 997.018121][T17304] usb 6-1: config 0 has no interface number 0 [ 997.025462][T17304] usb 6-1: config 0 interface 12 has no altsetting 0 [ 997.035168][T17304] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 997.047166][T17304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.060636][T17304] usb 6-1: Product: syz [ 997.064868][T17304] usb 6-1: Manufacturer: syz [ 997.069556][T17304] usb 6-1: SerialNumber: syz [ 997.077336][T17304] usb 6-1: config 0 descriptor?? [ 997.233720][ T5709] plantronics 0003:047F:FFFF.00F2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 997.542996][T29432] batadv_slave_1: entered promiscuous mode [ 997.559375][T29431] batadv_slave_1: left promiscuous mode [ 997.848685][T29444] input: syz0 as /devices/virtual/input/input228 [ 998.302974][T17304] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 998.328762][T17304] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 998.354998][T17304] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 998.376750][T17304] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 998.412569][T17304] usb 6-1: USB disconnect, device number 9 [ 998.437627][T29464] loop2: detected capacity change from 0 to 7 [ 998.477011][T29464] Dev loop2: unable to read RDB block 7 [ 998.488753][T29464] loop2: unable to read partition table [ 998.508980][T29464] loop2: partition table beyond EOD, truncated [ 998.525421][T29464] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 998.646862][T29471] syz_tun: entered allmulticast mode [ 998.664304][T29471] pimreg: entered allmulticast mode [ 998.675238][T29471] pimreg: left allmulticast mode [ 998.742983][T29470] syz_tun: left allmulticast mode [ 998.928985][T29485] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9427'. [ 998.940577][T29485] netlink: Unknown conntrack attr (0) [ 998.948153][T17302] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 998.949192][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 999.128180][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 999.136729][ T24] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 999.138451][T17302] usb 5-1: Using ep0 maxpacket: 32 [ 999.146090][ T24] usb 9-1: config 0 has no interface number 0 [ 999.157042][T17302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.157074][T17302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.157112][T17302] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 999.157135][T17302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.198655][ T24] usb 9-1: config 0 interface 184 has no altsetting 0 [ 999.207730][ T24] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 999.217997][T17302] usb 5-1: config 0 descriptor?? [ 999.229691][ T5709] usb 7-1: USB disconnect, device number 66 [ 999.237280][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.249589][ T24] usb 9-1: Product: syz [ 999.260619][ T24] usb 9-1: Manufacturer: syz [ 999.276801][T29494] loop2: detected capacity change from 0 to 7 [ 999.279480][ T24] usb 9-1: SerialNumber: syz [ 999.304810][T29494] Dev loop2: unable to read RDB block 7 [ 999.324173][ T24] usb 9-1: config 0 descriptor?? [ 999.326481][T29494] loop2: unable to read partition table [ 999.347865][T29494] loop2: partition table beyond EOD, truncated [ 999.363756][T29494] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 999.674917][T17302] savu 0003:1E7D:2D5A.00F3: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 999.733292][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9438'. [ 999.746606][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9438'. [ 999.764112][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9438'. [ 999.765469][T29509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9437'. [ 999.811845][T29509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9437'. [ 999.970946][T17302] usb 5-1: USB disconnect, device number 40 [ 1000.165651][T20089] Bluetooth: hci4: command 0x0406 tx timeout [ 1000.363913][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1000.564935][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1000.584533][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1000.604728][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1000.629422][ T24] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1000.662312][ T24] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1000.688439][ T24] usb 9-1: USB disconnect, device number 17 [ 1001.320592][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1001.740558][T17322] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1001.807974][T29562] syzkaller1: entered promiscuous mode [ 1001.822463][T29562] syzkaller1: entered allmulticast mode [ 1001.932468][T17322] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1001.947574][T17322] usb 7-1: string descriptor 0 read error: -22 [ 1001.961700][T17322] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 1001.977605][T17322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.435459][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.451849][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.462188][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.470397][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.477577][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.485179][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.500652][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.519771][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.526891][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.544532][T17322] elecom 0003:056E:00FC.00F4: unknown main item tag 0x0 [ 1002.671081][T17322] elecom 0003:056E:00FC.00F4: hidraw0: USB HID vff.7f Device [HID 056e:00fc] on usb-dummy_hcd.6-1/input0 [ 1002.714858][T17322] usb 7-1: USB disconnect, device number 67 [ 1002.752817][T29600] netlink: 'syz.4.9473': attribute type 10 has an invalid length. [ 1002.784105][T29600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9473'. [ 1002.803367][T29600] dummy0: entered promiscuous mode [ 1002.834710][T29600] bridge0: port 1(dummy0) entered blocking state [ 1002.837055][T29598] fido_id[29598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1002.872003][T29600] bridge0: port 1(dummy0) entered disabled state [ 1002.901700][T29600] dummy0: entered allmulticast mode [ 1002.926940][T29600] bridge0: port 1(dummy0) entered blocking state [ 1002.933524][T29600] bridge0: port 1(dummy0) entered listening state [ 1003.149233][T29607] syzkaller1: entered promiscuous mode [ 1003.154903][T29607] syzkaller1: entered allmulticast mode [ 1003.609400][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1003.770575][ T24] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 1003.786962][ T24] usb 5-1: config 150 has no interface number 0 [ 1003.810644][ T24] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1003.835457][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1003.858784][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.877262][ T24] usb 5-1: Product: syz [ 1003.889328][ T24] usb 5-1: Manufacturer: syz [ 1003.900689][ T24] usb 5-1: SerialNumber: syz [ 1004.141521][ T24] xr_serial 5-1:150.204: xr_serial converter detected [ 1004.468232][T17302] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1004.498241][ T5709] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1004.619846][T17302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.631191][T17302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.641851][T17302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1004.654842][T17302] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1004.658487][T17321] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1004.664051][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 1004.676764][T17302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.687941][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1004.702231][T17302] usb 6-1: config 0 descriptor?? [ 1004.707458][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1004.725103][ T5709] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1004.734318][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.742380][ T5709] usb 4-1: Product: syz [ 1004.746569][ T5709] usb 4-1: Manufacturer: syz [ 1004.751364][ T5709] usb 4-1: SerialNumber: syz [ 1004.758892][ T5709] usb 4-1: config 0 descriptor?? [ 1004.767766][ T5709] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1004.777182][ T5709] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1004.828236][T17321] usb 9-1: Using ep0 maxpacket: 32 [ 1004.835737][T17321] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1004.844480][T17321] usb 9-1: config 0 has no interface number 0 [ 1004.853036][T17321] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1004.862520][T17321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.871254][T17321] usb 9-1: Product: syz [ 1004.875592][T17321] usb 9-1: Manufacturer: syz [ 1004.882003][T17321] usb 9-1: SerialNumber: syz [ 1004.892638][T17321] usb 9-1: config 0 descriptor?? [ 1004.937281][ T24] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 1005.136860][T17304] usb 5-1: USB disconnect, device number 41 [ 1005.160158][T17302] plantronics 0003:047F:FFFF.00F5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1005.173659][T17304] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1005.183580][T17304] xr_serial 5-1:150.204: device disconnected [ 1005.306039][T17321] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1005.317770][T17321] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1005.396303][ T5709] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1005.403270][ T5709] em28xx 4-1:0.0: Config register raw data: 0xa1 [ 1005.409700][ T5709] em28xx 4-1:0.0: I2S Audio (1 sample rate(s)) [ 1005.416852][ T5709] em28xx 4-1:0.0: No AC97 audio processor [ 1005.708925][T29646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1005.731695][T29648] loop6: detected capacity change from 0 to 2640 [ 1005.739840][T29648] buffer_io_error: 130 callbacks suppressed [ 1005.739859][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.754573][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.764010][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.772179][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.780630][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.790208][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.800106][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.811150][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.831306][ T5709] usb 4-1: USB disconnect, device number 25 [ 1005.836937][T29648] ldm_validate_partition_table(): Disk read failed. [ 1005.845265][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.856957][T29648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1005.867584][T29648] Dev loop6: unable to read RDB block 0 [ 1005.874204][T29648] loop6: unable to read partition table [ 1005.882048][T29648] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1005.939934][T17321] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1005.965736][T17321] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1005.980807][T29653] syzkaller1: entered promiscuous mode [ 1005.992062][T29653] syzkaller1: entered allmulticast mode [ 1006.010178][T17321] usb 9-1: USB disconnect, device number 18 [ 1006.167434][T29657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9497'. [ 1007.175462][T29694] bond2: option mode: unable to set because the bond device has slaves [ 1007.206101][T29694] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1007.231121][ T5709] usb 6-1: USB disconnect, device number 10 [ 1008.218571][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1008.378156][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1008.412244][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1008.435389][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1008.445515][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 1008.456078][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.773925][T29736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9531'. [ 1008.808450][ T5709] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1008.811649][T29736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9531'. [ 1008.857548][T29740] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9533'. [ 1008.901188][ T24] hid_parser_main: 4007 callbacks suppressed [ 1008.901212][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1008.944447][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1008.962302][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1008.982128][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1008.984667][ T5709] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1009.007971][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.026159][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9545'. [ 1009.032812][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.037128][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.070388][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9545'. [ 1009.084046][ T5709] usb 4-1: config 0 descriptor?? [ 1009.084172][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.115032][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.132692][ T5709] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1009.139373][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.159940][ T24] sony 0003:054C:0268.00F6: unknown main item tag 0x0 [ 1009.342927][ T24] sony 0003:054C:0268.00F6: hiddev0,hidraw0: USB HID v80.08 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 1009.378378][ T24] sony 0003:054C:0268.00F6: failed to claim input [ 1009.423820][ T24] usb 6-1: USB disconnect, device number 11 [ 1009.527881][ T5709] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1009.531634][T29754] fido_id[29754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1009.919777][ T24] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1010.089880][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.111488][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1010.134124][ T5709] gspca_cpia1: usb_control_msg 05, error -71 [ 1010.136120][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.166678][ T5709] cpia1 4-1:0.0: unexpected systemstate: 00 [ 1010.173597][ T24] usb 7-1: config 0 descriptor?? [ 1010.204666][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1010.206719][ T5709] usb 4-1: USB disconnect, device number 26 [ 1010.609457][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1010.622482][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1010.635043][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1010.854189][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 1010.870663][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 1010.884190][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 1010.900244][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 1010.914587][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1010.930399][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1010.942129][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1010.959001][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1010.967700][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1010.977812][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1010.987133][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1010.994992][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1011.007585][ T24] pwc: Registered as video103. [ 1011.020410][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input229 [ 1011.086403][ T24] usb 7-1: USB disconnect, device number 68 [ 1011.420259][T29803] input: syz0 as /devices/virtual/input/input230 [ 1011.678681][T17302] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1011.708489][T17321] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1011.838423][T17302] usb 5-1: Using ep0 maxpacket: 16 [ 1011.854027][T17302] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.858416][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1011.876607][T17302] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.890037][T17321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.891554][T17302] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.910433][T17321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.910461][T17321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1011.910507][T17321] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1011.947200][T17302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.961710][T17302] usb 5-1: Product: syz [ 1011.967581][T17302] usb 5-1: Manufacturer: syz [ 1011.975491][T17302] usb 5-1: SerialNumber: syz [ 1011.988648][T17321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.006768][T17302] usb 5-1: 0:2 : does not exist [ 1012.012935][T17321] usb 4-1: config 0 descriptor?? [ 1012.038354][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1012.045834][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.070399][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1012.086886][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.106951][ T24] usb 9-1: config 0 descriptor?? [ 1012.222728][T17302] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1012.308215][T17302] usb 5-1: USB disconnect, device number 42 [ 1012.334927][ T24] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1012.378251][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.458675][ T5709] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 1012.467038][T17321] plantronics 0003:047F:FFFF.00F7: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1012.640519][ T5709] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.654987][ T5709] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1012.667532][ T5709] usb 7-1: string descriptor 0 read error: -22 [ 1012.678225][ T5709] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.40 [ 1012.701782][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.751335][T17302] usb 4-1: USB disconnect, device number 27 [ 1012.865298][ T24] usb 9-1: USB disconnect, device number 19 [ 1013.018213][T17321] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1013.171792][T17321] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1013.183406][T17321] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 1013.185018][ T5709] gembird 0003:11FF:3331.00F8: hidraw0: USB HID v0.01 Device [HID 11ff:3331] on usb-dummy_hcd.6-1/input0 [ 1013.213150][T17321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1013.222785][T17321] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1013.232914][T17321] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1013.241632][T17321] usb 6-1: Product: syz [ 1013.246307][T17321] usb 6-1: Manufacturer: syz [ 1013.251390][T17321] usb 6-1: SerialNumber: syz [ 1013.263098][T17321] usb 6-1: config 0 descriptor?? [ 1013.275334][T17321] usb 6-1: selecting invalid altsetting 0 [ 1013.464650][T17321] usb 7-1: USB disconnect, device number 69 [ 1013.579948][ T9] usb 6-1: USB disconnect, device number 12 [ 1013.579967][ C1] usb 6-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 1013.596089][T29824] usb 6-1: cannot submit urb 0, error -19: no device [ 1013.604279][T29824] usb 6-1: cannot submit urb 0, error -19: no device [ 1014.568146][T17321] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1014.740215][T17321] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.779638][T17321] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.800890][T17321] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1014.814302][T17321] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1014.831823][T17321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.858436][T17321] usb 9-1: config 0 descriptor?? [ 1015.062963][T29890] : renamed from bond0 (while UP) [ 1015.205151][T29900] netlink: 'syz.5.9594': attribute type 30 has an invalid length. [ 1015.317793][T17321] plantronics 0003:047F:FFFF.00F9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1015.900718][T29926] : renamed from bond0 (while UP) [ 1016.197240][T29939] netlink: 'syz.6.9610': attribute type 30 has an invalid length. [ 1016.678195][ T9] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1016.838137][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1016.850502][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1016.880929][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1016.899748][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1016.916122][ T9] usb 7-1: Product: syz [ 1016.920380][ T9] usb 7-1: Manufacturer: syz [ 1016.924991][ T9] usb 7-1: SerialNumber: syz [ 1016.938732][ T9] usb 7-1: config 0 descriptor?? [ 1016.956456][T29945] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1017.036264][T29960] : renamed from bond0 (while UP) [ 1017.322083][ T9] usb 7-1: USB disconnect, device number 70 [ 1017.420602][T17322] usb 9-1: USB disconnect, device number 20 [ 1018.559176][ C1] bridge0: port 1(dummy0) entered learning state [ 1018.928132][T17302] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1019.078187][ T24] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1019.098267][T17302] usb 4-1: Using ep0 maxpacket: 32 [ 1019.105299][T17302] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1019.114614][T17302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.129951][T17302] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1019.228562][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1019.235458][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1019.244638][ T24] usb 7-1: config 179 has no interface number 0 [ 1019.251290][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1019.262493][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1019.273884][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1019.285263][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1019.297800][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1019.311230][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1019.321125][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.335985][T30019] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1019.802383][ T9] usb 7-1: USB disconnect, device number 71 [ 1019.802383][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1019.802426][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1020.354301][T17302] gspca_nw80x: reg_w err -71 [ 1020.369091][T17302] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 1020.397745][T17302] usb 4-1: USB disconnect, device number 28 [ 1020.911661][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1020.911678][ T29] audit: type=1326 audit(1779444755.482:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30054 comm="syz.5.9656" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f01c code=0x0 [ 1021.598520][ T5709] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1021.779301][ T24] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1021.787934][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 1021.802834][ T5709] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1021.825607][ T5709] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1021.849021][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1021.857241][ T5709] usb 4-1: Product: syz [ 1021.862921][ T5709] usb 4-1: Manufacturer: syz [ 1021.878267][ T5709] usb 4-1: SerialNumber: syz [ 1021.886979][ T5709] usb 4-1: config 0 descriptor?? [ 1021.897142][T30074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1021.941980][ T24] usb 9-1: config 0 has no interfaces? [ 1021.964345][ T24] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1021.993851][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.013911][ T24] usb 9-1: Product: syz [ 1022.021730][ T24] usb 9-1: Manufacturer: syz [ 1022.027334][ T24] usb 9-1: SerialNumber: syz [ 1022.044725][ T24] usb 9-1: config 0 descriptor?? [ 1022.202934][ T24] usb 4-1: USB disconnect, device number 29 [ 1022.271485][T17322] usb 9-1: USB disconnect, device number 21 [ 1022.918983][T17322] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1023.049119][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1023.105017][T17322] usb 9-1: config 0 has no interfaces? [ 1023.119327][T17322] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1023.139309][T17322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.169758][T17322] usb 9-1: Product: syz [ 1023.181018][T17322] usb 9-1: Manufacturer: syz [ 1023.195629][T17322] usb 9-1: SerialNumber: syz [ 1023.217184][T17322] usb 9-1: config 0 descriptor?? [ 1023.229453][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1023.250398][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.276328][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1023.279832][T30122] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1023.293719][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1023.303772][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.312208][ T24] usb 5-1: Product: syz [ 1023.316607][ T24] usb 5-1: Manufacturer: syz [ 1023.343806][ T24] usb 5-1: SerialNumber: syz [ 1023.382521][ T24] usb 5-1: 0:2 : does not exist [ 1023.437333][ T29] audit: type=1326 audit(1779444758.002:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.6.9686" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fff01c code=0x0 [ 1023.456000][T17322] usb 9-1: USB disconnect, device number 22 [ 1023.591305][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1023.641699][ T24] usb 5-1: USB disconnect, device number 43 [ 1023.697692][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1024.479364][T17322] hid_parser_main: 6995 callbacks suppressed [ 1024.479386][T17322] hid-generic 0000:0000:0000.00FA: unknown main item tag 0x0 [ 1024.531455][T17322] hid-generic 0000:0000:0000.00FA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1024.732716][T30157] fido_id[30157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1025.388492][ T5709] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1025.478689][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1025.548207][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 1025.555875][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.566871][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.582551][ T5709] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1025.592882][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.601416][ T5709] usb 6-1: Product: syz [ 1025.605834][ T5709] usb 6-1: Manufacturer: syz [ 1025.612503][ T5709] usb 6-1: SerialNumber: syz [ 1025.630641][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1025.630637][ T5709] usb 6-1: 0:2 : does not exist [ 1025.645259][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.656138][ T24] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.669547][ T24] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.700294][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1025.712844][ T24] usb 4-1: string descriptor 0 read error: -22 [ 1025.720152][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1025.729452][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.842262][ T5709] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.922003][ T5709] usb 6-1: USB disconnect, device number 13 [ 1025.978741][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.174143][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.181356][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.189219][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.197636][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.214321][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.233917][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.253303][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.265242][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.273425][ T24] kone 0003:1E7D:2CED.00FB: unknown main item tag 0x0 [ 1026.290061][T30191] kvm: user requested TSC rate below hardware speed [ 1026.365717][ T24] kone 0003:1E7D:2CED.00FB: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 1026.392971][ T24] kone 0003:1E7D:2CED.00FB: couldn't init struct kone_device [ 1026.402466][ T24] kone 0003:1E7D:2CED.00FB: couldn't install mouse [ 1026.416416][ T24] kone 0003:1E7D:2CED.00FB: probe with driver kone failed with error -5 [ 1026.436866][ T24] usb 4-1: USB disconnect, device number 30 [ 1026.476340][T30194] fido_id[30194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1027.028168][ T24] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1027.189700][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.197734][ T24] usb 9-1: config 0 has no interface number 0 [ 1027.205920][ T24] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1027.215244][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.223426][ T24] usb 9-1: Product: syz [ 1027.229127][ T24] usb 9-1: Manufacturer: syz [ 1027.233794][ T24] usb 9-1: SerialNumber: syz [ 1027.241495][ T24] usb 9-1: config 0 descriptor?? [ 1027.252531][ T24] usb 9-1: selecting invalid altsetting 1 [ 1027.260945][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 1027.269179][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1027.307567][ T24] DVB: Unable to find symbol stv0299_attach() [ 1027.334457][ T24] DVB: Unable to find symbol tda8083_attach() [ 1027.347207][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1027.455272][T30206] m920x_read = error: -19 [ 1027.466296][ T24] usb 9-1: USB disconnect, device number 23 [ 1027.818142][ T5709] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1028.012151][ T5709] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1028.029429][ T5709] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1028.060570][ T5709] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1028.073329][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.084082][ T5709] usb 6-1: Product: syz [ 1028.089157][ T5709] usb 6-1: Manufacturer: syz [ 1028.094024][ T5709] usb 6-1: SerialNumber: syz [ 1028.105523][ T5709] usb 6-1: config 0 descriptor?? [ 1028.117374][T30210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.125130][T30210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.258208][ T24] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1028.350647][T30210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.360613][T30210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1028.430004][ T24] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1028.441844][ T24] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 1028.453459][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1028.463248][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1028.472833][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1028.481324][ T24] usb 7-1: Product: syz [ 1028.485794][ T24] usb 7-1: Manufacturer: syz [ 1028.491711][ T24] usb 7-1: SerialNumber: syz [ 1028.510810][ T24] usb 7-1: config 0 descriptor?? [ 1028.526195][ T24] usb 7-1: selecting invalid altsetting 0 [ 1028.808349][T17302] usb 7-1: USB disconnect, device number 72 [ 1028.808860][ C1] usb 7-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1028.823706][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1029.335747][T30239] input: syz0 as /devices/virtual/input/input231 [ 1029.399757][ T5709] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1029.451784][ T5709] dm9601 6-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 1029.474643][ T5709] usb 6-1: USB disconnect, device number 14 [ 1029.505583][ T5709] dm9601 6-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 1029.995113][T30254] netlink: 'syz.4.9737': attribute type 1 has an invalid length. [ 1030.249595][T30254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.709859][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1030.901412][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1030.922837][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 1030.944465][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1030.958130][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1030.977521][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1030.987636][ T9] usb 5-1: Product: syz [ 1030.996227][ T9] usb 5-1: Manufacturer: syz [ 1031.004111][ T9] usb 5-1: SerialNumber: syz [ 1031.015192][ T9] usb 5-1: config 0 descriptor?? [ 1031.032188][ T9] usb 5-1: selecting invalid altsetting 0 [ 1031.130626][ T5709] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1031.298690][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 1031.317407][ T5709] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1031.330792][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.341607][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.354595][ T5709] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1031.369450][T17322] usb 5-1: USB disconnect, device number 44 [ 1031.374153][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.375680][T30271] usb 5-1: cannot submit urb 0, error -19: no device [ 1031.409051][ T5709] usb 6-1: Product: syz [ 1031.417356][ T5709] usb 6-1: Manufacturer: syz [ 1031.437745][ T5709] usb 6-1: SerialNumber: syz [ 1031.578809][ T5709] usb 6-1: 0:2 : does not exist [ 1032.809490][ T5709] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1032.914668][ T5709] usb 6-1: USB disconnect, device number 15 [ 1032.954252][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.378141][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1033.485280][T17322] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1033.568155][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1033.579182][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1033.598653][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.616879][ T24] usb 5-1: Product: syz [ 1033.621775][ T24] usb 5-1: Manufacturer: syz [ 1033.626425][ T24] usb 5-1: SerialNumber: syz [ 1033.634720][ T24] usb 5-1: config 0 descriptor?? [ 1033.648304][T17322] usb 7-1: Using ep0 maxpacket: 16 [ 1033.660550][T17322] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.682283][T17322] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.694434][T17322] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1033.704209][T17322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.712819][T17322] usb 7-1: Product: syz [ 1033.717245][T17322] usb 7-1: Manufacturer: syz [ 1033.723201][T17322] usb 7-1: SerialNumber: syz [ 1033.733139][T17322] usb 7-1: config 0 descriptor?? [ 1033.850810][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1033.919112][ C1] bridge0: port 1(dummy0) entered forwarding state [ 1033.925699][ C1] bridge0: topology change detected, propagating [ 1033.955644][T17322] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input232 [ 1034.138157][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1034.208288][T17322] rc_core: IR keymap rc-imon-pad not found [ 1034.214286][T17322] Registered IR keymap rc-empty [ 1034.219440][T17322] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1034.229683][T17322] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1034.288131][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1034.295747][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.306734][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1034.313727][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1034.322888][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.335024][ T9] usb 6-1: config 0 descriptor?? [ 1034.359807][T17322] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1034.372851][T17322] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input233 [ 1034.386433][T17322] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:73> initialized [ 1034.668425][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1034.700593][ T24] usb 5-1: USB disconnect, device number 45 [ 1034.757320][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1034.757815][ T5709] usb 7-1: USB disconnect, device number 73 [ 1034.824459][ T9] nzxt-smart2 0003:1E71:2009.00FC: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1035.144714][T30368] netlink: 'syz.3.9778': attribute type 2 has an invalid length. [ 1035.153183][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1035.192243][ T24] usb 6-1: USB disconnect, device number 16 [ 1035.278929][ T9] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1035.430662][T30376] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1035.472858][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1035.494886][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 1035.515100][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.539968][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1035.551995][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.569132][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1035.580599][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.591356][ T9] usb 9-1: Product: syz [ 1035.595723][ T9] usb 9-1: Manufacturer: syz [ 1035.602751][ T9] usb 9-1: SerialNumber: syz [ 1036.103066][T30366] block device autoloading is deprecated and will be removed. [ 1036.153121][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1036.174518][ T9] usb 9-1: MIDIStreaming interface descriptor not found [ 1036.295942][ T9] usb 9-1: USB disconnect, device number 24 [ 1036.410244][T17304] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1036.424962][T14507] udevd[14507]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.568413][T17304] usb 4-1: Using ep0 maxpacket: 16 [ 1036.577906][T17304] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1036.591996][T17304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1036.617715][T17304] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1036.631975][T17304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.648254][T17304] usb 4-1: Product: syz [ 1036.670354][T17304] usb 4-1: Manufacturer: syz [ 1036.684830][T17304] usb 4-1: SerialNumber: syz [ 1036.704756][T17304] usb 4-1: config 0 descriptor?? [ 1036.736401][T17304] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1036.774482][T17304] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1036.824249][ T29] audit: type=1804 audit(1779444771.392:1459): pid=30413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.9797" name="/newroot/350/file1" dev="tmpfs" ino=1813 res=1 errno=0 [ 1037.048408][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1037.212673][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1037.224580][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.242291][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.266424][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1037.277544][ T9] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1037.286461][ T9] usb 6-1: Manufacturer: syz [ 1037.297694][ T9] usb 6-1: config 0 descriptor?? [ 1037.341452][T17304] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1037.353402][T17304] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1037.572709][T17304] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1037.593790][T17304] em28xx 4-1:0.0: No AC97 audio processor [ 1037.620773][T17304] usb 4-1: USB disconnect, device number 31 [ 1037.650075][T17304] em28xx 4-1:0.0: Disconnecting em28xx [ 1037.693312][T17304] em28xx 4-1:0.0: Freeing device [ 1037.779663][ T9] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.00FD/input/input234 [ 1037.852269][ T9] creative-sb0540 0003:041E:3100.00FD: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1037.976356][ T24] usb 6-1: USB disconnect, device number 17 [ 1038.864234][T30459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9816'. [ 1039.798177][T17322] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1039.971983][T17322] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1039.981249][T17322] usb 5-1: config 0 has no interface number 0 [ 1039.993214][T17322] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1040.002653][T17322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.010903][T17322] usb 5-1: Product: syz [ 1040.015328][T17322] usb 5-1: Manufacturer: syz [ 1040.020057][T17322] usb 5-1: SerialNumber: syz [ 1040.028268][ T24] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1040.037854][T17322] usb 5-1: config 0 descriptor?? [ 1040.048537][T17322] usb 5-1: selecting invalid altsetting 1 [ 1040.050693][T17304] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1040.056900][T17322] dvb_ttusb_budget: ttusb_init_controller: error [ 1040.068745][T17322] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1040.080754][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1040.160621][T17322] DVB: Unable to find symbol stv0299_attach() [ 1040.180395][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1040.191308][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1040.211648][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1040.223365][T17322] DVB: Unable to find symbol tda8083_attach() [ 1040.229686][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.238858][T17322] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1040.240798][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1040.250228][ T24] usb 7-1: Product: syz [ 1040.257960][T30474] m920x_read = error: -19 [ 1040.261254][T17304] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1040.265797][ T24] usb 7-1: Manufacturer: syz [ 1040.281394][ T9] usb 4-1: config 0 has no interfaces? [ 1040.287812][T17304] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 1040.304968][ T24] usb 7-1: SerialNumber: syz [ 1040.318863][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1040.336965][T17304] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1040.344362][ T24] usb 7-1: config 0 descriptor?? [ 1040.345322][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1040.359611][ T9] usb 4-1: Manufacturer: syz [ 1040.366028][T17304] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1040.375541][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1040.377863][T17304] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1040.395744][ T9] usb 4-1: config 0 descriptor?? [ 1040.429538][T17322] usb 5-1: USB disconnect, device number 46 [ 1040.436863][T17304] usb 9-1: Product: syz [ 1040.443529][T17304] usb 9-1: Manufacturer: syz [ 1040.455151][T17304] usb 9-1: SerialNumber: syz [ 1040.473690][T17304] usb 9-1: config 0 descriptor?? [ 1040.500895][T17304] usb 9-1: selecting invalid altsetting 0 [ 1040.696322][T17304] usb 4-1: USB disconnect, device number 32 [ 1040.804468][ T9] usb 9-1: USB disconnect, device number 25 [ 1040.804471][ C1] usb 9-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 1040.805085][T30486] usb 9-1: cannot submit urb 0, error -19: no device [ 1040.979756][T30484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.000622][T30484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.216678][ T24] gspca_zc3xx: reg_w_i err -71 [ 1041.808152][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1041.815144][ T24] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1041.832204][ T24] usb 7-1: USB disconnect, device number 74 [ 1041.849077][ T5709] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1041.968405][T17322] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1042.011128][ T5709] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1042.018214][ T5709] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1042.027314][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.052476][ T5709] usb 9-1: config 0 descriptor?? [ 1042.140781][T17322] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.159164][T17322] usb 4-1: config 0 has no interface number 0 [ 1042.180869][T17322] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1042.191969][T17322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.206690][T17322] usb 4-1: Product: syz [ 1042.212826][T17322] usb 4-1: Manufacturer: syz [ 1042.217556][T17322] usb 4-1: SerialNumber: syz [ 1042.225566][T17322] usb 4-1: config 0 descriptor?? [ 1042.248561][T17322] usb 4-1: selecting invalid altsetting 1 [ 1042.261763][T17322] dvb_ttusb_budget: ttusb_init_controller: error [ 1042.272004][T17322] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1042.310081][T17309] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1042.361269][T17322] DVB: Unable to find symbol stv0299_attach() [ 1042.447473][T30536] m920x_read = error: -19 [ 1042.469581][T17322] DVB: Unable to find symbol tda8083_attach() [ 1042.485635][T17309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.497512][T17322] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1042.505944][T17309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.521171][T17309] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1042.531895][T17322] usb 4-1: USB disconnect, device number 33 [ 1042.541432][T17309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.579510][T17309] usb 6-1: config 0 descriptor?? [ 1042.608539][ T24] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1042.768187][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1042.775029][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1042.789018][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1042.804461][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.817682][ T24] usb 7-1: config 0 descriptor?? [ 1043.021840][T17309] hid_parser_main: 4006 callbacks suppressed [ 1043.021883][T17309] cm6533_jd 0003:0D8C:0022.00FE: unknown main item tag 0x0 [ 1043.035744][T17309] cm6533_jd 0003:0D8C:0022.00FE: unknown main item tag 0x0 [ 1043.048516][T17309] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.00FE/input/input235 [ 1043.072695][T17309] cm6533_jd 0003:0D8C:0022.00FE: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1043.135962][ T5709] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1043.241899][T17309] usb 6-1: USB disconnect, device number 18 [ 1043.248535][ T24] hid (null): unknown global tag 0xe [ 1043.253909][ T24] hid (null): global environment stack underflow [ 1043.264713][ T24] hid (null): unknown global tag 0xc [ 1043.272336][ T24] hid (null): unknown global tag 0xc [ 1043.281262][ T24] hid (null): invalid report_size 44048 [ 1043.288621][ T24] hid (null): unknown global tag 0xd [ 1043.307145][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.321527][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.329592][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.336921][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.344728][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.353809][ T24] magicmouse 0003:05AC:0265.00FF: unknown main item tag 0x0 [ 1043.362420][ T24] magicmouse 0003:05AC:0265.00FF: unknown global tag 0xe [ 1043.362894][ T5709] usb 9-1: USB disconnect, device number 26 [ 1043.369558][ T24] magicmouse 0003:05AC:0265.00FF: item 0 0 1 14 parsing failed [ 1043.371167][ T24] magicmouse 0003:05AC:0265.00FF: magicmouse hid parse failed [ 1043.393031][ T24] magicmouse 0003:05AC:0265.00FF: probe with driver magicmouse failed with error -22 [ 1043.455600][T17304] usb 7-1: USB disconnect, device number 75 [ 1044.578353][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1044.739912][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1044.753971][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 1044.768779][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1044.778969][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1044.789946][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1044.809549][ T24] usb 5-1: Product: syz [ 1044.818725][ T24] usb 5-1: Manufacturer: syz [ 1044.833937][ T24] usb 5-1: SerialNumber: syz [ 1044.851901][ T24] usb 5-1: config 0 descriptor?? [ 1044.873219][ T24] usb 5-1: selecting invalid altsetting 0 [ 1044.938248][T17309] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1045.153928][T17309] usb 9-1: Using ep0 maxpacket: 8 [ 1045.164612][T17309] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1045.173018][T17309] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1045.182385][T17304] usb 5-1: USB disconnect, device number 47 [ 1045.185941][T17309] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1045.240706][T17309] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1045.292316][T17309] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1045.339677][T17309] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.365491][T30615] Set syz1 is full, maxelem 6117 reached [ 1045.374287][T17309] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1045.384659][T17309] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.479197][T30622] syz_tun: entered allmulticast mode [ 1045.506466][T30621] syz_tun: left allmulticast mode [ 1045.625206][T17309] usb 9-1: usb_control_msg returned -32 [ 1045.648185][T17309] usbtmc 9-1:16.0: can't read capabilities [ 1045.922644][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1045.935764][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1045.950413][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1045.968140][T17309] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1046.144979][T17309] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1046.164672][T17309] usb 4-1: string descriptor 0 read error: -22 [ 1046.177867][T17309] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 1046.197282][T17309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.644479][T17309] nti 0003:0757:0A00.0100: unknown main item tag 0x0 [ 1046.675708][T17309] nti 0003:0757:0A00.0100: unknown main item tag 0x0 [ 1046.826148][T17309] nti 0003:0757:0A00.0100: hidraw0: USB HID vff.7f Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 1046.862557][T17309] usb 4-1: USB disconnect, device number 34 [ 1046.914994][T30659] fido_id[30659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1047.138486][T17321] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1047.309231][T17321] usb 7-1: Using ep0 maxpacket: 8 [ 1047.321042][T17321] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 1047.334190][T17321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.345150][T17321] usb 7-1: config 0 has no interface number 0 [ 1047.351645][T17321] usb 7-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1047.362406][T17321] usb 7-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 1047.384428][T17321] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 1047.394144][T17321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.495362][T17321] usb 7-1: Product: syz [ 1047.499940][T17321] usb 7-1: Manufacturer: syz [ 1047.504969][T17321] usb 7-1: SerialNumber: syz [ 1047.512778][T17321] usb 7-1: config 0 descriptor?? [ 1047.531978][T17321] ttusb_dec_send_command: command bulk message failed: error -8 [ 1047.541355][T17321] ttusb-dec 7-1:0.113: probe with driver ttusb-dec failed with error -8 [ 1047.550832][T17321] usbhid 7-1:0.113: couldn't find an input interrupt endpoint [ 1047.728470][ T9] usb 9-1: USB disconnect, device number 27 [ 1047.743278][T17321] usb 7-1: USB disconnect, device number 76 [ 1048.924207][T30706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9915'. [ 1050.278513][T17304] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1050.429803][T17304] usb 9-1: Using ep0 maxpacket: 16 [ 1050.447612][T17304] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1050.469253][T17304] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1050.481232][T17304] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1050.491883][T17304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.510314][T17304] usb 9-1: Product: syz [ 1050.521756][T17304] usb 9-1: Manufacturer: syz [ 1050.532542][T17304] usb 9-1: SerialNumber: syz [ 1050.552892][T17304] usb 9-1: config 0 descriptor?? [ 1050.588134][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1050.750866][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1050.768359][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1050.793000][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.811654][T17304] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input236 [ 1050.825548][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.840394][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.862648][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1050.872178][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.883420][ T9] usb 4-1: Product: syz [ 1050.887738][ T9] usb 4-1: Manufacturer: syz [ 1050.914177][ T9] usb 4-1: SerialNumber: syz [ 1051.110195][T17304] rc_core: IR keymap rc-imon-pad not found [ 1051.121374][T17304] Registered IR keymap rc-empty [ 1051.146101][T17304] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1051.172959][T17304] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1051.240774][T17304] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1051.260257][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1051.278259][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 1051.299156][T17304] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input237 [ 1051.345231][T17304] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:28> initialized [ 1051.493443][ T9] usb 4-1: USB disconnect, device number 35 [ 1051.499393][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1051.515708][T30793] netlink: 'syz.6.9938': attribute type 1 has an invalid length. [ 1051.649401][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1051.657245][ T24] usb 5-1: config 0 has no interfaces? [ 1051.712715][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1051.732323][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1051.749345][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1051.756941][ T10] usb 9-1: USB disconnect, device number 28 [ 1051.770946][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.771198][ T24] usb 5-1: Manufacturer: syz [ 1051.859573][ T24] usb 5-1: config 0 descriptor?? [ 1051.965125][T30793] bond7: entered promiscuous mode [ 1051.981177][T30793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1052.031045][T30798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1052.058970][T30798] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 1052.073186][T30798] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1052.112352][T30798] bond7: (slave vti0): making interface the new active one [ 1052.138614][T30798] vti0: entered promiscuous mode [ 1052.160536][T30798] bond7: (slave vti0): Enslaving as an active interface with an up link [ 1052.341030][ T9] usb 5-1: USB disconnect, device number 48 [ 1052.456019][T30813] syzkaller1: entered promiscuous mode [ 1052.472951][T30813] syzkaller1: entered allmulticast mode [ 1052.539340][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1052.706419][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.729218][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.754886][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1052.775717][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.806769][ T24] usb 4-1: config 0 descriptor?? [ 1053.256260][ T24] hid_parser_main: 4013 callbacks suppressed [ 1053.256284][ T24] cm6533_jd 0003:0D8C:0022.0101: unknown main item tag 0x0 [ 1053.305084][ T24] cm6533_jd 0003:0D8C:0022.0101: unknown main item tag 0x0 [ 1053.343182][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0101/input/input238 [ 1053.414366][ T24] cm6533_jd 0003:0D8C:0022.0101: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1053.534533][ T24] usb 4-1: USB disconnect, device number 36 [ 1053.597656][T30838] fido_id[30838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1054.215596][T30863] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9964'. [ 1054.222322][T30862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9965'. [ 1054.249101][T17309] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1054.409352][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.415686][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.422437][T17309] usb 6-1: Using ep0 maxpacket: 16 [ 1054.431668][T17309] usb 6-1: config 0 has no interfaces? [ 1054.439497][T17309] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1054.448817][T17309] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1054.464715][T17309] usb 6-1: Manufacturer: syz [ 1054.473038][T30870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9969'. [ 1054.488535][T17309] usb 6-1: config 0 descriptor?? [ 1054.560988][T30870] vxlan1: entered promiscuous mode [ 1054.584017][ T29] audit: type=1326 audit(1779444789.152:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30872 comm="syz.3.9970" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf707f01c code=0x0 [ 1054.812872][T17309] usb 6-1: USB disconnect, device number 19 [ 1055.003579][T25783] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.091481][T20089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1055.106127][T20089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.118392][T20089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1055.131644][T20089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1055.144334][T20089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1055.263848][T25783] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.399641][T25783] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.712752][T25783] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.196420][T30912] lo: Caught tx_queue_len zero misconfig [ 1056.271230][T25783] bridge_slave_1: left allmulticast mode [ 1056.277258][T25783] bridge_slave_1: left promiscuous mode [ 1056.283587][T25783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.302932][T25783] bridge_slave_0: left allmulticast mode [ 1056.309868][T17304] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1056.317501][T25783] bridge_slave_0: left promiscuous mode [ 1056.325900][T25783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.416215][T30919] Set syz0 is full, maxelem 0 reached [ 1056.497817][T17304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1056.516197][T17304] usb 5-1: not running at top speed; connect to a high speed hub [ 1056.540798][T17304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.554144][T17304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.569661][T17304] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.586539][T17304] usb 5-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1056.604847][T17304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.621749][T17304] usb 5-1: Product: syz [ 1056.626130][T30924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1056.635728][T17304] usb 5-1: Manufacturer: syz [ 1056.642397][T17304] usb 5-1: SerialNumber: syz [ 1056.701571][ T24] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1056.739580][T25783] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1056.803899][T25783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.822378][T25783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.834287][T25783] bond0 (unregistering): Released all slaves [ 1056.849567][T25783] bond1 (unregistering): Released all slaves [ 1056.858453][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1056.865827][ T24] usb 7-1: config 0 has no interfaces? [ 1056.881359][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1056.893962][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1056.910334][ T24] usb 7-1: Manufacturer: syz [ 1056.925620][ T24] usb 7-1: config 0 descriptor?? [ 1057.009348][T17304] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.033943][T17304] usb 5-1: MIDIStreaming interface descriptor not found [ 1057.215264][T17304] usb 5-1: USB disconnect, device number 49 [ 1057.220076][T20083] Bluetooth: hci4: command tx timeout [ 1057.341738][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.507456][T30940] syzkaller1: entered promiscuous mode [ 1057.513894][T30940] syzkaller1: entered allmulticast mode [ 1057.949931][T30879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.982478][T30879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.026863][T30879] bridge_slave_0: entered allmulticast mode [ 1058.053186][T30879] bridge_slave_0: entered promiscuous mode [ 1058.091027][T25783] hsr_slave_0: left promiscuous mode [ 1058.104542][T25783] hsr_slave_1: left promiscuous mode [ 1058.113729][ T5709] usb 7-1: USB disconnect, device number 77 [ 1058.135882][T25783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.143880][T25783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.153314][T25783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.163096][T25783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.207366][T25783] veth1_macvtap: left promiscuous mode [ 1058.215760][T25783] veth0_macvtap: left promiscuous mode [ 1058.218142][T17304] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1058.235829][T25783] veth1_vlan: left promiscuous mode [ 1058.241721][T25783] veth0_vlan: left promiscuous mode [ 1058.395583][T17304] usb 4-1: Using ep0 maxpacket: 16 [ 1058.416527][T17304] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1058.439040][T17304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.453560][T17304] usb 4-1: Product: syz [ 1058.486914][T17304] usb 4-1: Manufacturer: syz [ 1058.491916][T17304] usb 4-1: SerialNumber: syz [ 1058.649113][T25783] team0 (unregistering): Port device team_slave_1 removed [ 1058.689125][T25783] team0 (unregistering): Port device team_slave_0 removed [ 1058.912041][T30879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.919505][T30879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.926851][T30879] bridge_slave_1: entered allmulticast mode [ 1058.934410][T30879] bridge_slave_1: entered promiscuous mode [ 1058.945168][ T5291] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1058.947415][T17304] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1058.978987][T17304] usb 4-1: USB disconnect, device number 37 [ 1059.051259][T30879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.100782][T30879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.149906][T30879] team0: Port device team_slave_0 added [ 1059.158955][T30879] team0: Port device team_slave_1 added [ 1059.206422][T30879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.214258][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.260322][T30879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.281167][T30879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.286875][T20083] Bluetooth: hci4: command tx timeout [ 1059.288737][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.346426][T30879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.611457][T30879] hsr_slave_0: entered promiscuous mode [ 1059.629237][T30879] hsr_slave_1: entered promiscuous mode [ 1059.638477][T17304] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1059.661116][T30879] debugfs: 'hsr0' already exists in 'hsr' [ 1059.678357][T30879] Cannot create hsr debugfs directory [ 1059.701735][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10008'. [ 1059.818376][T17304] usb 5-1: Using ep0 maxpacket: 8 [ 1059.835748][T17304] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1059.859473][T17304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.921031][T17304] usb 5-1: config 0 has no interface number 0 [ 1059.943345][T17304] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1059.985258][T17304] usb 5-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 1060.041898][T17304] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 1060.071425][T17304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.100226][T17304] usb 5-1: Product: syz [ 1060.121164][T17304] usb 5-1: Manufacturer: syz [ 1060.140490][T17304] usb 5-1: SerialNumber: syz [ 1060.174367][T17304] usb 5-1: config 0 descriptor?? [ 1060.270303][T17304] ttusb_dec_send_command: command bulk message failed: error -8 [ 1060.315208][T17304] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8 [ 1060.346378][T17304] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 1060.461333][T17309] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1060.531754][T17304] usb 5-1: USB disconnect, device number 50 [ 1060.673495][T17309] usb 7-1: Using ep0 maxpacket: 8 [ 1060.778629][T17309] usb 7-1: config 0 has no interfaces? [ 1060.798456][T17309] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.892684][T17309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.964434][T17309] usb 7-1: config 0 descriptor?? [ 1061.089049][ T5291] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1061.209484][T17309] usb 7-1: USB disconnect, device number 78 [ 1061.359597][T20083] Bluetooth: hci4: command tx timeout [ 1061.705964][T31068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10020'. [ 1061.897207][T31070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10021'. [ 1061.952886][T30879] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1061.977830][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.011582][T30879] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1062.034882][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.068332][T30879] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1062.095048][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.119777][T30879] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1062.154989][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.214670][T31092] tipc: Failed to remove unknown binding: 66,1,1/2886997039:4116672160/4116672162 [ 1062.388894][T30879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.440426][T30879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.461931][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.469152][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.486745][ T5291] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1062.507885][T25778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.515131][T25778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.647990][T30879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.722598][T30879] veth0_vlan: entered promiscuous mode [ 1062.762339][T30879] veth1_vlan: entered promiscuous mode [ 1062.848872][T30879] veth0_macvtap: entered promiscuous mode [ 1062.891375][T30879] veth1_macvtap: entered promiscuous mode [ 1062.924279][T31117] all: renamed from bridge_slave_1 (while UP) [ 1062.993485][T30879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.046223][T30879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.086912][ T1155] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.110071][ T1155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.133825][ T1155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.158501][ T1155] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.434993][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.444236][T20083] Bluetooth: hci4: command tx timeout [ 1063.480065][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.531865][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10033'. [ 1063.596099][T25780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.621181][T25780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.893808][ T5291] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1064.170173][T31151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10037'. [ 1064.201396][T31151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10037'. [ 1064.250441][T31151] netlink: 'syz.3.10037': attribute type 3 has an invalid length. [ 1064.608422][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1064.778450][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1064.788483][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1064.835775][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.859571][ T9] usb 10-1: Product: syz [ 1064.864426][ T9] usb 10-1: Manufacturer: syz [ 1064.872515][ T9] usb 10-1: SerialNumber: syz [ 1064.887009][ T9] usb 10-1: config 0 descriptor?? [ 1065.137477][ T9] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1065.389075][T17322] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1065.560771][T17322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.578266][T17322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1065.604098][T17322] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1065.623485][T17322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.632651][T31197] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1557215110/1557215112 [ 1065.642552][T17322] usb 4-1: config 0 descriptor?? [ 1065.671696][T17322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1065.690603][T17322] dvb-usb: bulk message failed: -22 (3/0) [ 1065.716526][T17322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1065.745200][T17322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.762955][T17322] usb 4-1: media controller created [ 1065.784258][T17322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.854458][T17322] dvb-usb: bulk message failed: -22 (6/0) [ 1065.873269][T17322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1065.917932][T17322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input239 [ 1066.004989][T17322] dvb-usb: schedule remote query interval to 150 msecs. [ 1066.025918][T17322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1066.043766][T17322] usb 4-1: USB disconnect, device number 38 [ 1066.046726][T31204] binder: 31201:31204 ioctl c0306201 80000340 returned -14 [ 1066.129652][T17322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1066.560335][ T9] usb write operation failed. (-71) [ 1066.584354][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1066.595598][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 1066.606518][ T9] usb 10-1: media controller created [ 1066.618229][ T9] usb read operation failed. (-71) [ 1066.625463][ T9] usb write operation failed. (-71) [ 1066.637459][ T9] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1066.663367][ T9] usb 10-1: USB disconnect, device number 2 [ 1067.628272][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1067.795919][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1067.817627][ T24] usb 10-1: config 0 has no interfaces? [ 1067.828358][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1067.837815][ T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1067.870636][ T24] usb 10-1: Manufacturer: syz [ 1067.878384][T17309] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1067.899743][ T24] usb 10-1: config 0 descriptor?? [ 1068.049120][T17309] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1068.083394][T17309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.109110][T17309] usb 6-1: config 0 descriptor?? [ 1068.346236][ T24] usb 10-1: USB disconnect, device number 3 [ 1068.603860][T31231] syz.6.10065 (31231): drop_caches: 2 [ 1068.950421][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1069.145051][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1069.154602][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.184673][ T9] usb 5-1: config 0 descriptor?? [ 1069.201169][ T9] cp210x 5-1:0.0: cp210x converter detected [ 1069.418552][T17304] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1069.572117][T17304] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1069.586206][T17304] usb 7-1: not running at top speed; connect to a high speed hub [ 1069.598843][T17304] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1069.604318][T17309] usb 6-1: Cannot set autoneg [ 1069.607360][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1069.629849][T17309] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1069.631410][T17304] usb 7-1: string descriptor 0 read error: -22 [ 1069.663702][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1069.669132][T17309] usb 6-1: USB disconnect, device number 20 [ 1069.675898][T17304] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 1069.689482][T17304] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.927086][T17309] usb 5-1: USB disconnect, device number 51 [ 1069.956596][T17309] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1069.991610][T31275] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1070.008213][T31275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1070.050457][T17309] cp210x 5-1:0.0: device disconnected [ 1070.167641][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.201698][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.215741][ T3328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.231741][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.260023][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.272417][ T3328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.285462][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.313853][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.355370][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.388765][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.422127][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.446942][T17304] hid-picolcd 0003:04D8:C002.0102: unknown main item tag 0x0 [ 1070.675370][T17304] hid-picolcd 0003:04D8:C002.0102: No report with id 0x11 found [ 1070.710021][ T3328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.725076][T17304] usb 7-1: USB disconnect, device number 79 [ 1070.740205][ T3328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.002729][ T3328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.037948][ T3328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.260141][ T3328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.301589][ T3328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.200249][ T3328] bridge_slave_1: left allmulticast mode [ 1072.227683][ T3328] bridge_slave_1: left promiscuous mode [ 1072.248339][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.271769][ T3328] bridge_slave_0: left allmulticast mode [ 1072.290742][ T3328] bridge_slave_0: left promiscuous mode [ 1072.317315][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.668133][T17309] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1072.851970][T17309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.876044][T17309] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1072.909745][T17309] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1072.939983][T17309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.975991][T17309] usb 5-1: config 0 descriptor?? [ 1072.998510][T17309] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1073.026676][T17309] dvb-usb: bulk message failed: -22 (3/0) [ 1073.052835][T17309] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1073.083447][T17309] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1073.098275][T17309] usb 5-1: media controller created [ 1073.126427][T17309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.183097][T17309] dvb-usb: bulk message failed: -22 (6/0) [ 1073.227692][T17309] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1073.247079][ T3328] bond1 (unregistering): (slave lo): Releasing backup interface [ 1073.279531][T17309] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input240 [ 1073.292972][ T3328] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1073.317611][T17309] dvb-usb: schedule remote query interval to 150 msecs. [ 1073.326659][ T3328] bond1 (unregistering): Released all slaves [ 1073.344011][T17309] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1073.390863][T17309] usb 5-1: USB disconnect, device number 52 [ 1073.402742][ T3328] bond0 (unregistering): Released all slaves [ 1073.491290][T17309] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1073.502752][T31338] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1073.504284][T31340] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1073.742175][ T5291] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1073.866891][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10117'. [ 1073.964308][T31382] vxlan1: entered promiscuous mode [ 1073.999405][T25778] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.023754][ T8015] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.051205][T17315] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1074.191112][ T8015] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.205788][ T8015] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.218482][T17315] usb 7-1: Using ep0 maxpacket: 8 [ 1074.230081][T17315] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1074.251086][T17315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.295338][T17315] usb 7-1: Product: syz [ 1074.299894][T17315] usb 7-1: Manufacturer: syz [ 1074.304699][T17315] usb 7-1: SerialNumber: syz [ 1074.318911][T17315] usb 7-1: config 0 descriptor?? [ 1074.505596][ T3328] hsr_slave_0: left promiscuous mode [ 1074.518441][ T3328] hsr_slave_1: left promiscuous mode [ 1074.532923][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.536724][T17315] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1074.548627][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.570617][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.587280][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.660117][ T3328] veth1_macvtap: left promiscuous mode [ 1074.685114][ T3328] veth0_macvtap: left promiscuous mode [ 1074.701024][ T3328] veth1_vlan: left promiscuous mode [ 1074.716884][ T3328] veth0_vlan: left promiscuous mode [ 1075.529956][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1075.703006][ T3328] team0 (unregistering): Port device team_slave_1 removed [ 1075.708180][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1075.730487][ T3328] team0 (unregistering): Port device team_slave_0 removed [ 1075.734976][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1075.747302][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.773471][ T24] usb 4-1: config 0 descriptor?? [ 1075.988542][T17315] usb write operation failed. (-71) [ 1076.009254][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1076.029292][T17315] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1076.042286][ T5291] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1076.048680][T17315] dvbdev: DVB: registering new adapter (Terratec H7) [ 1076.057308][T17315] usb 7-1: media controller created [ 1076.063597][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1076.089960][T17315] usb read operation failed. (-71) [ 1076.101646][T17315] usb write operation failed. (-71) [ 1076.107512][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1076.124970][T17315] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1076.134232][ T24] usb 4-1: media controller created [ 1076.165120][T17315] usb 7-1: USB disconnect, device number 80 [ 1076.203733][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.302527][ T24] az6027: usb out operation failed. (-71) [ 1076.343676][ T24] az6027: usb out operation failed. (-71) [ 1076.368178][ T24] stb0899_attach: Driver disabled by Kconfig [ 1076.388291][ T24] az6027: no front-end attached [ 1076.388291][ T24] [ 1076.397053][ T24] az6027: usb out operation failed. (-71) [ 1076.428942][T31455] loop2: detected capacity change from 0 to 7 [ 1076.436973][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1076.465213][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input241 [ 1076.523822][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1076.534175][T31455] Dev loop2: unable to read RDB block 7 [ 1076.545515][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1076.546507][T31455] loop2: AHDI p1 p2 p3 [ 1076.577506][T31455] loop2: partition table partially beyond EOD, truncated [ 1076.595188][T31455] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1076.602583][T31455] loop2: p3 start 335544320 is beyond EOD, truncated [ 1076.610237][ T24] usb 4-1: USB disconnect, device number 39 [ 1076.791627][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1077.348829][T31481] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.10146'. [ 1077.385528][T31446] netlink: 5 bytes leftover after parsing attributes in process `syz.9.10139'. [ 1077.417533][T31446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1078.156148][T31501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1078.233426][T31506] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1078.589941][T17309] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1078.688881][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1078.768360][T17309] usb 7-1: Using ep0 maxpacket: 32 [ 1078.786238][T17309] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1078.818101][T17309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.837919][T17309] usb 7-1: Product: syz [ 1078.848106][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1078.862899][ T24] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1078.873854][T17309] usb 7-1: Manufacturer: syz [ 1078.890242][ T24] usb 6-1: config 0 has no interface number 0 [ 1078.896497][T17309] usb 7-1: SerialNumber: syz [ 1078.911439][ T24] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1078.925663][T17309] usb 7-1: config 0 descriptor?? [ 1078.941853][T17309] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1078.949989][ T24] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1078.965473][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1078.978160][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.998967][ T24] usb 6-1: Product: syz [ 1079.003270][ T24] usb 6-1: Manufacturer: syz [ 1079.011703][ T24] usb 6-1: SerialNumber: syz [ 1079.031265][ T24] usb 6-1: config 0 descriptor?? [ 1079.051725][ T24] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1079.076701][ T24] em28xx 6-1:0.89: Video interface 89 found: [ 1079.124641][T31527] syz.9.10162 (31527): drop_caches: 2 [ 1079.167351][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10166'. [ 1079.169772][T31126] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1079.352673][T31126] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1079.384666][T31126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.409066][T31126] usb 5-1: Product: syz [ 1079.417659][T31126] usb 5-1: Manufacturer: syz [ 1079.429946][T31126] usb 5-1: SerialNumber: syz [ 1079.661066][ T24] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1079.865295][T31126] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1080.099213][ T24] em28xx 6-1:0.89: AC97 command still being executed: not handled properly! [ 1080.293532][ T24] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1080.364016][T17309] gspca_topro: reg_r err -71 [ 1080.378988][ T24] em28xx 6-1:0.89: board has no eeprom [ 1080.419460][T17309] gspca_topro: Sensor soi763a [ 1080.497684][T17309] usb 7-1: USB disconnect, device number 81 [ 1080.507555][ T24] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1080.531388][ T24] em28xx 6-1:0.89: analog set to bulk mode. [ 1080.544821][T17315] em28xx 6-1:0.89: Registering V4L2 extension [ 1080.598111][ T24] usb 6-1: USB disconnect, device number 21 [ 1080.646152][ T24] em28xx 6-1:0.89: Disconnecting em28xx [ 1080.779238][T17315] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1080.805414][T17315] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1080.844759][T17315] em28xx 6-1:0.89: No AC97 audio processor [ 1080.874995][T17315] usb 6-1: Decoder not found [ 1080.906770][T17315] em28xx 6-1:0.89: failed to create media graph [ 1080.955756][T17315] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1081.135029][T31612] ================================================================== [ 1081.138765][T17315] em28xx 6-1:0.89: Registering snapshot button... [ 1081.143122][T31612] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 1081.143159][T31612] Read of size 4 at addr ffff88808a524860 by task v4l_id/31612 [ 1081.164277][T31612] [ 1081.166615][T31612] CPU: 0 UID: 0 PID: 31612 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.166636][T31612] Tainted: [L]=SOFTLOCKUP [ 1081.166642][T31612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.166656][T31612] Call Trace: [ 1081.166667][T31612] [ 1081.166675][T31612] dump_stack_lvl+0xe8/0x150 [ 1081.166696][T31612] print_address_description+0x55/0x1e0 [ 1081.166712][T31612] ? v4l2_open+0x395/0x3a0 [ 1081.166731][T31612] print_report+0x58/0x70 [ 1081.166744][T31612] kasan_report+0x117/0x150 [ 1081.166765][T31612] ? v4l2_open+0x395/0x3a0 [ 1081.166787][T31612] v4l2_open+0x395/0x3a0 [ 1081.166811][T31612] chrdev_open+0x4cd/0x5e0 [ 1081.166828][T31612] ? __pfx_chrdev_open+0x10/0x10 [ 1081.166847][T31612] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1081.166870][T31612] ? __pfx_chrdev_open+0x10/0x10 [ 1081.166883][T31612] do_dentry_open+0x785/0x14e0 [ 1081.166903][T31612] vfs_open+0x3b/0x340 [ 1081.166918][T31612] ? path_openat+0x2df0/0x3860 [ 1081.166939][T31612] path_openat+0x2e08/0x3860 [ 1081.166966][T31612] ? __pfx_stack_trace_save+0x10/0x10 [ 1081.166988][T31612] ? stack_depot_save_flags+0x33/0x810 [ 1081.167022][T31612] ? __pfx_path_openat+0x10/0x10 [ 1081.167040][T31612] ? __x64_sys_openat+0x138/0x170 [ 1081.167058][T31612] ? __lock_acquire+0x6b5/0x2cf0 [ 1081.167080][T31612] do_file_open+0x23e/0x4a0 [ 1081.167103][T31612] ? __pfx_do_file_open+0x10/0x10 [ 1081.167129][T31612] ? _raw_spin_unlock+0x28/0x50 [ 1081.167148][T31612] ? alloc_fd+0x64b/0x6c0 [ 1081.167167][T31612] do_sys_openat2+0x113/0x200 [ 1081.167184][T31612] ? __pfx_do_sys_openat2+0x10/0x10 [ 1081.167202][T31612] ? exc_page_fault+0x6a/0xc0 [ 1081.167227][T31612] ? do_user_addr_fault+0xc6f/0x1340 [ 1081.167244][T31612] __x64_sys_openat+0x138/0x170 [ 1081.167262][T31612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.167278][T31612] do_syscall_64+0x15f/0xf80 [ 1081.167297][T31612] ? trace_irq_disable+0x3b/0x140 [ 1081.167318][T31612] ? clear_bhb_loop+0x40/0x90 [ 1081.167334][T31612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.167350][T31612] RIP: 0033:0x7f256a2a7407 [ 1081.167375][T31612] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1081.167389][T31612] RSP: 002b:00007ffc69801370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1081.167405][T31612] RAX: ffffffffffffffda RBX: 00007f256aa88880 RCX: 00007f256a2a7407 [ 1081.167420][T31612] RDX: 0000000000000000 RSI: 00007ffc69801f1c RDI: ffffffffffffff9c [ 1081.167431][T31612] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1081.167440][T31612] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1081.167449][T31612] R13: 00007ffc698015c0 R14: 00007f256abef000 R15: 0000563e2423e4d8 [ 1081.167465][T31612] [ 1081.167471][T31612] [ 1081.441223][T31612] Allocated by task 17315: [ 1081.445638][T31612] kasan_save_track+0x3e/0x80 [ 1081.450312][T31612] __kasan_kmalloc+0x93/0xb0 [ 1081.454891][T31612] __kmalloc_cache_noprof+0x31c/0x660 [ 1081.460257][T31612] em28xx_v4l2_init+0x10b/0x2eb0 [ 1081.465178][T31612] em28xx_init_extension+0x120/0x1c0 [ 1081.470449][T31612] process_scheduled_works+0xb5d/0x1860 [ 1081.475979][T31612] worker_thread+0xa53/0xfc0 [ 1081.480553][T31612] kthread+0x389/0x470 [ 1081.484615][T31612] ret_from_fork+0x514/0xb70 [ 1081.489191][T31612] ret_from_fork_asm+0x1a/0x30 [ 1081.493943][T31612] [ 1081.496299][T31612] Freed by task 17315: [ 1081.500350][T31612] kasan_save_track+0x3e/0x80 [ 1081.505022][T31612] kasan_save_free_info+0x46/0x50 [ 1081.510032][T31612] __kasan_slab_free+0x5c/0x80 [ 1081.514784][T31612] kfree+0x1c5/0x640 [ 1081.518670][T31612] em28xx_v4l2_init+0x1685/0x2eb0 [ 1081.523682][T31612] em28xx_init_extension+0x120/0x1c0 [ 1081.528959][T31612] process_scheduled_works+0xb5d/0x1860 [ 1081.534491][T31612] worker_thread+0xa53/0xfc0 [ 1081.539066][T31612] kthread+0x389/0x470 [ 1081.543133][T31612] ret_from_fork+0x514/0xb70 [ 1081.547716][T31612] ret_from_fork_asm+0x1a/0x30 [ 1081.552465][T31612] [ 1081.554782][T31612] The buggy address belongs to the object at ffff88808a524000 [ 1081.554782][T31612] which belongs to the cache kmalloc-8k of size 8192 [ 1081.568825][T31612] The buggy address is located 2144 bytes inside of [ 1081.568825][T31612] freed 8192-byte region [ffff88808a524000, ffff88808a526000) [ 1081.582784][T31612] [ 1081.585097][T31612] The buggy address belongs to the physical page: [ 1081.591515][T31612] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8a520 [ 1081.600281][T31612] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1081.608780][T31612] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1081.616332][T31612] page_type: f5(slab) [ 1081.620315][T31612] raw: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122 [ 1081.628898][T31612] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1081.637483][T31612] head: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122 [ 1081.646151][T31612] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1081.654816][T31612] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1081.663474][T31612] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1081.672132][T31612] page dumped because: kasan: bad access detected [ 1081.678540][T31612] page_owner tracks the page as allocated [ 1081.684237][T31612] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 31099, tgid 31098 (syz.4.10026), ts 1062425409476, free_ts 1062371170598 [ 1081.706016][T31612] post_alloc_hook+0x22d/0x280 [ 1081.710781][T31612] get_page_from_freelist+0x24ba/0x2540 [ 1081.716322][T31612] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1081.722119][T31612] allocate_slab+0x77/0x660 [ 1081.726623][T31612] refill_objects+0x339/0x3d0 [ 1081.731305][T31612] __pcs_replace_empty_main+0x321/0x720 [ 1081.736843][T31612] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 1081.743255][T31612] __alloc_skb+0x2c1/0x7d0 [ 1081.747668][T31612] nf_tables_chain_notify+0xad/0x470 [ 1081.752939][T31612] nf_tables_commit+0x5ceb/0xa7c0 [ 1081.757957][T31612] nfnetlink_rcv+0x1c19/0x27b0 [ 1081.762710][T31612] netlink_unicast+0x75c/0x8e0 [ 1081.767468][T31612] netlink_sendmsg+0x813/0xb40 [ 1081.772220][T31612] ____sys_sendmsg+0x972/0x9f0 [ 1081.776975][T31612] ___sys_sendmsg+0x2a5/0x360 [ 1081.781639][T31612] __sys_sendmsg+0x183/0x260 [ 1081.786222][T31612] page last free pid 5647 tgid 5647 stack trace: [ 1081.792527][T31612] __free_frozen_pages+0xbc7/0xd30 [ 1081.797637][T31612] __slab_free+0x274/0x2c0 [ 1081.802046][T31612] qlist_free_all+0x99/0x100 [ 1081.806632][T31612] kasan_quarantine_reduce+0x148/0x160 [ 1081.812083][T31612] __kasan_slab_alloc+0x22/0x80 [ 1081.816928][T31612] __kmalloc_node_noprof+0x498/0x7c0 [ 1081.822207][T31612] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 1081.828090][T31612] vmalloc_noprof+0xb2/0xe0 [ 1081.832591][T31612] xt_compat_init_offsets+0xdc/0x1d0 [ 1081.837949][T31612] compat_table_info+0x99/0xa90 [ 1081.842799][T31612] do_ip6t_get_ctl+0xb2c/0x1230 [ 1081.847644][T31612] nf_getsockopt+0x26e/0x290 [ 1081.852223][T31612] ipv6_getsockopt+0x1fd/0x2b0 [ 1081.856973][T31612] do_sock_getsockopt+0x51d/0x7e0 [ 1081.861985][T31612] __sys_getsockopt+0x127/0x1c0 [ 1081.866830][T31612] __ia32_compat_sys_socketcall+0x86a/0xa10 [ 1081.872712][T31612] [ 1081.875019][T31612] Memory state around the buggy address: [ 1081.880628][T31612] ffff88808a524700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.888674][T31612] ffff88808a524780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.896718][T31612] >ffff88808a524800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.904757][T31612] ^ [ 1081.911935][T31612] ffff88808a524880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.919982][T31612] ffff88808a524900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.928031][T31612] ================================================================== [ 1081.947273][T17315] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input242 [ 1081.969716][ C1] usblp0: nonzero write bulk status received: -71 [ 1081.978718][T17309] usb 5-1: USB disconnect, device number 53 [ 1081.995575][T17315] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1082.014028][ T24] em28xx 6-1:0.89: Closing input extension [ 1082.022852][ T24] em28xx 6-1:0.89: Deregistering snapshot button [ 1082.035903][T31612] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1082.043154][T31612] CPU: 1 UID: 0 PID: 31612 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.053748][T31612] Tainted: [L]=SOFTLOCKUP [ 1082.058062][T31612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1082.068103][T31612] Call Trace: [ 1082.071409][T31612] [ 1082.074329][T31612] vpanic+0x56c/0xa60 [ 1082.078308][T31612] ? __pfx_vpanic+0x10/0x10 [ 1082.082800][T31612] ? __pfx___schedule+0x10/0x10 [ 1082.087642][T31612] panic+0xc5/0xd0 [ 1082.091350][T31612] ? __pfx_panic+0x10/0x10 [ 1082.095757][T31612] ? preempt_schedule_thunk+0x16/0x30 [ 1082.101126][T31612] ? v4l2_open+0x395/0x3a0 [ 1082.105533][T31612] check_panic_on_warn+0x89/0xb0 [ 1082.110462][T31612] ? v4l2_open+0x395/0x3a0 [ 1082.114874][T31612] end_report+0x73/0x170 [ 1082.119119][T31612] ? v4l2_open+0x395/0x3a0 [ 1082.123612][T31612] kasan_report+0x128/0x150 [ 1082.128107][T31612] ? v4l2_open+0x395/0x3a0 [ 1082.132520][T31612] v4l2_open+0x395/0x3a0 [ 1082.136755][T31612] chrdev_open+0x4cd/0x5e0 [ 1082.141159][T31612] ? __pfx_chrdev_open+0x10/0x10 [ 1082.146082][T31612] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1082.152409][T31612] ? __pfx_chrdev_open+0x10/0x10 [ 1082.157332][T31612] do_dentry_open+0x785/0x14e0 [ 1082.162089][T31612] vfs_open+0x3b/0x340 [ 1082.166145][T31612] ? path_openat+0x2df0/0x3860 [ 1082.170901][T31612] path_openat+0x2e08/0x3860 [ 1082.175485][T31612] ? __pfx_stack_trace_save+0x10/0x10 [ 1082.180852][T31612] ? stack_depot_save_flags+0x33/0x810 [ 1082.186302][T31612] ? __pfx_path_openat+0x10/0x10 [ 1082.191228][T31612] ? __x64_sys_openat+0x138/0x170 [ 1082.196241][T31612] ? __lock_acquire+0x6b5/0x2cf0 [ 1082.201168][T31612] do_file_open+0x23e/0x4a0 [ 1082.205662][T31612] ? __pfx_do_file_open+0x10/0x10 [ 1082.210683][T31612] ? _raw_spin_unlock+0x28/0x50 [ 1082.215527][T31612] ? alloc_fd+0x64b/0x6c0 [ 1082.219850][T31612] do_sys_openat2+0x113/0x200 [ 1082.224516][T31612] ? __pfx_do_sys_openat2+0x10/0x10 [ 1082.229702][T31612] ? exc_page_fault+0x6a/0xc0 [ 1082.234373][T31612] ? do_user_addr_fault+0xc6f/0x1340 [ 1082.239647][T31612] __x64_sys_openat+0x138/0x170 [ 1082.244489][T31612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.250633][T31612] do_syscall_64+0x15f/0xf80 [ 1082.255221][T31612] ? trace_irq_disable+0x3b/0x140 [ 1082.260235][T31612] ? clear_bhb_loop+0x40/0x90 [ 1082.264900][T31612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.270779][T31612] RIP: 0033:0x7f256a2a7407 [ 1082.275187][T31612] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1082.294778][T31612] RSP: 002b:00007ffc69801370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1082.303178][T31612] RAX: ffffffffffffffda RBX: 00007f256aa88880 RCX: 00007f256a2a7407 [ 1082.311146][T31612] RDX: 0000000000000000 RSI: 00007ffc69801f1c RDI: ffffffffffffff9c [ 1082.319103][T31612] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1082.327065][T31612] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1082.335017][T31612] R13: 00007ffc698015c0 R14: 00007f256abef000 R15: 0000563e2423e4d8 [ 1082.343068][T31612] [ 1082.346697][T31612] Kernel Offset: disabled [ 1082.351010][T31612] Rebooting in 86400 seconds..