last executing test programs: 10m25.332250915s ago: executing program 4 (id=3095): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10m25.058652746s ago: executing program 4 (id=3096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m24.27790034s ago: executing program 4 (id=3100): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10m22.594491526s ago: executing program 4 (id=3103): rt_sigaction(0x34, &(0x7f0000000180)={&(0x7f00000020c0)="c4e1fd637288c4d9e4196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x4, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000002100)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 10m22.488937221s ago: executing program 4 (id=3104): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f05000904020000"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 10m21.173562902s ago: executing program 4 (id=3105): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) exit(0xffffffffffffff7f) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 10m5.962629385s ago: executing program 32 (id=3105): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) exit(0xffffffffffffff7f) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 6.978687525s ago: executing program 0 (id=6078): socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(0x0) 4.978330162s ago: executing program 1 (id=6088): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 4.615485139s ago: executing program 0 (id=6090): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 4.404229842s ago: executing program 1 (id=6091): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r5) 4.264559196s ago: executing program 0 (id=6092): sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 4.22333104s ago: executing program 1 (id=6093): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a2, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.845476269s ago: executing program 0 (id=6095): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) 3.256343323s ago: executing program 2 (id=6096): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) symlink(0x0, 0x0) 3.152888041s ago: executing program 0 (id=6097): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sg(0x0, 0x5d7000000000000, 0x82442) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ppoll(&(0x7f00000000c0)=[{r4, 0x400}], 0x1, &(0x7f0000000140), &(0x7f00000001c0)={[0x7]}, 0x8) 2.896644679s ago: executing program 2 (id=6098): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000090) 2.572298552s ago: executing program 0 (id=6099): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) read(r2, 0x0, 0x0) 2.498442356s ago: executing program 2 (id=6100): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.284220128s ago: executing program 5 (id=6101): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.170186801s ago: executing program 2 (id=6102): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) 1.868321442s ago: executing program 2 (id=6103): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 1.83331697s ago: executing program 3 (id=6104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000080)) 1.6553853s ago: executing program 2 (id=6105): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000e40)=[{&(0x7f0000000680)=""/37, 0x25}], 0x1, 0x33, 0x51b) 1.520283922s ago: executing program 3 (id=6106): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 1.296488947s ago: executing program 3 (id=6107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000380)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='X', 0x1}], 0x1}}], 0x2, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) 1.210550093s ago: executing program 1 (id=6108): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) symlink(0x0, 0x0) 1.00044348s ago: executing program 3 (id=6109): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b02ffffffffff0008116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x49) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 948.353894ms ago: executing program 5 (id=6110): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000090) 948.17037ms ago: executing program 1 (id=6111): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 749.343611ms ago: executing program 3 (id=6112): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 702.833788ms ago: executing program 5 (id=6113): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, 0x0, 0x0) 695.211916ms ago: executing program 1 (id=6114): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0xfcee) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1009}], 0x1, 0x40012160, 0x0) 397.517204ms ago: executing program 5 (id=6115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r4 = syz_open_pts(r3, 0x80) dup3(r4, r3, 0x80000) read(r3, 0x0, 0x0) 376.027241ms ago: executing program 3 (id=6116): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459", 0xd0) socket$nl_generic(0x10, 0x3, 0x10) 186.353434ms ago: executing program 5 (id=6117): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 0s ago: executing program 5 (id=6118): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000200)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): e: 1 [ 842.784069][T10529] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 842.784165][T10529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.784250][T10529] usb 2-1: Product: syz [ 842.784333][T10529] usb 2-1: Manufacturer: syz [ 842.784389][T10529] usb 2-1: SerialNumber: syz [ 842.801378][ T5870] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 842.875378][T10529] usb 2-1: config 0 descriptor?? [ 842.999316][ T5870] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 842.999384][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.020075][ T5870] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 843.020104][ T5870] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 843.020124][ T5870] usb 1-1: Manufacturer: syz [ 843.067655][ T5870] usb 1-1: config 0 descriptor?? [ 843.440906][T10529] usb 2-1: USB disconnect, device number 38 [ 843.558675][T14275] udevd[14275]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.601252][ T5870] rc_core: IR keymap rc-hauppauge not found [ 843.601274][ T5870] Registered IR keymap rc-empty [ 843.603247][ T5870] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 843.606651][ T5870] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 843.668087][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 843.668333][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 843.668412][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 843.698321][ T5870] usb 1-1: USB disconnect, device number 30 [ 844.710530][T15368] delete_channel: no stack [ 845.800207][T15421] binder_alloc: 15420: binder_alloc_buf, no vma [ 845.800820][T15421] binder: 15420:15421 ioctl c0306201 200000000240 returned -11 [ 845.816034][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 845.973861][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 845.973929][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.977310][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 845.977341][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 845.977362][ T9] usb 3-1: Manufacturer: syz [ 846.031328][ T9] usb 3-1: config 0 descriptor?? [ 846.121453][ T9] rc_core: IR keymap rc-hauppauge not found [ 846.121475][ T9] Registered IR keymap rc-empty [ 846.129044][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 846.159903][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 846.389856][ T9] usb 3-1: USB disconnect, device number 43 [ 847.841412][ T993] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 848.018107][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 848.021962][ T993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 848.024029][ T993] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 848.024064][ T993] usb 3-1: config 12 interface 0 has no altsetting 0 [ 848.029214][ T993] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 848.029247][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.029269][ T993] usb 3-1: Product: syz [ 848.029285][ T993] usb 3-1: Manufacturer: syz [ 848.029302][ T993] usb 3-1: SerialNumber: syz [ 848.097384][T15453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 848.350898][ T993] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.350970][ T993] usb 3-1: selecting invalid altsetting 0 [ 848.670094][ T993] usb 3-1: USB disconnect, device number 44 [ 849.004063][T14220] udevd[14220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.610716][T15470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3837'. [ 850.101287][ T38] kauditd_printk_skb: 88 callbacks suppressed [ 850.101307][ T38] audit: type=1326 audit(1763256778.825:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101362][ T38] audit: type=1326 audit(1763256778.825:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101410][ T38] audit: type=1326 audit(1763256778.825:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101457][ T38] audit: type=1326 audit(1763256778.825:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101507][ T38] audit: type=1326 audit(1763256778.825:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101554][ T38] audit: type=1326 audit(1763256778.825:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101601][ T38] audit: type=1326 audit(1763256778.825:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101648][ T38] audit: type=1326 audit(1763256778.825:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101695][ T38] audit: type=1326 audit(1763256778.825:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.101742][ T38] audit: type=1326 audit(1763256778.825:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.3.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 850.876799][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 851.060778][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 851.127114][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 851.128377][ T5884] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 851.128400][ T5884] usb 1-1: config 12 interface 0 has no altsetting 0 [ 851.159766][ T5884] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 851.159788][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.159803][ T5884] usb 1-1: Product: syz [ 851.159813][ T5884] usb 1-1: Manufacturer: syz [ 851.159823][ T5884] usb 1-1: SerialNumber: syz [ 851.188196][T15489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 851.443165][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.443225][ T5884] usb 1-1: selecting invalid altsetting 0 [ 851.610782][ T5884] usb 1-1: USB disconnect, device number 31 [ 851.904060][T14220] udevd[14220]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.634195][T15506] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 853.019636][T15518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3858'. [ 853.951361][T15542] binder: BINDER_SET_CONTEXT_MGR already set [ 853.951387][T15542] binder: 15541:15542 ioctl 4018620d 200000000040 returned -16 [ 853.976846][T15542] binder: 15541:15542 ioctl c0306201 200000000240 returned -11 [ 855.431319][ T993] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 855.591249][ T993] usb 1-1: Using ep0 maxpacket: 8 [ 855.599094][ T993] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.599125][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.599146][ T993] usb 1-1: Product: syz [ 855.599163][ T993] usb 1-1: Manufacturer: syz [ 855.599178][ T993] usb 1-1: SerialNumber: syz [ 855.621535][ T993] usb 1-1: config 0 descriptor?? [ 855.920531][ T993] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.116795][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 856.311066][ T9] usb 3-1: no configurations [ 856.311089][ T9] usb 3-1: can't read configurations, error -22 [ 856.465821][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 856.633905][ T9] usb 3-1: no configurations [ 856.633927][ T9] usb 3-1: can't read configurations, error -22 [ 856.635258][ T9] usb usb3-port1: attempt power cycle [ 856.721689][ T993] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 856.841879][T12434] Bluetooth: hci2: command 0x0406 tx timeout [ 856.853012][ T993] usb 1-1: USB disconnect, device number 32 [ 856.971332][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 856.994257][ T9] usb 3-1: no configurations [ 856.994277][ T9] usb 3-1: can't read configurations, error -22 [ 857.121266][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 857.200430][ T9] usb 3-1: no configurations [ 857.200452][ T9] usb 3-1: can't read configurations, error -22 [ 857.200923][ T9] usb usb3-port1: unable to enumerate USB device [ 857.645209][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 857.645277][T15583] bridge_slave_1: left allmulticast mode [ 857.645294][T15583] bridge_slave_1: left promiscuous mode [ 857.645495][T15583] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.815711][T15583] bridge_slave_0: left allmulticast mode [ 857.815755][T15583] bridge_slave_0: left promiscuous mode [ 857.816040][T15583] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.401306][ T5884] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 859.561248][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 859.566096][ T5884] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 859.566161][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 859.566205][ T5884] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 859.566325][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.579466][ T5884] usb 3-1: config 0 descriptor?? [ 860.054538][ T5884] elecom 0003:056E:00FB.0005: unknown main item tag 0x0 [ 860.054583][ T5884] elecom 0003:056E:00FB.0005: unknown main item tag 0x0 [ 860.054613][ T5884] elecom 0003:056E:00FB.0005: unknown main item tag 0x0 [ 860.054642][ T5884] elecom 0003:056E:00FB.0005: unknown main item tag 0x0 [ 860.054671][ T5884] elecom 0003:056E:00FB.0005: unknown main item tag 0x0 [ 860.152059][ T5884] elecom 0003:056E:00FB.0005: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 860.251892][ T5870] usb 3-1: USB disconnect, device number 49 [ 860.354093][T15605] fido_id[15605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 862.599795][T10529] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 862.828446][T10529] usb 6-1: no configurations [ 862.828467][T10529] usb 6-1: can't read configurations, error -22 [ 862.991370][T10529] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 863.163035][T10529] usb 6-1: no configurations [ 863.163057][T10529] usb 6-1: can't read configurations, error -22 [ 863.163474][T10529] usb usb6-port1: attempt power cycle [ 863.531324][T10529] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 863.583968][T10529] usb 6-1: no configurations [ 863.583989][T10529] usb 6-1: can't read configurations, error -22 [ 863.741402][T10529] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 863.768264][T10529] usb 6-1: no configurations [ 863.768286][T10529] usb 6-1: can't read configurations, error -22 [ 863.768723][T10529] usb usb6-port1: unable to enumerate USB device [ 875.249750][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.249827][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.811348][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 936.690834][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.690910][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.769797][T15682] syzkaller0: entered promiscuous mode [ 949.769826][T15682] syzkaller0: entered allmulticast mode [ 949.921245][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3925'. [ 950.291549][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3925'. [ 950.731325][T13886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 950.894600][T13886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.894646][T13886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.894669][T13886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 950.894712][T13886] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.894735][T13886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.938052][T13886] usb 6-1: config 0 descriptor?? [ 951.168532][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3938'. [ 951.355890][T13886] usbhid 6-1:0.0: can't add hid device: -71 [ 951.356026][T13886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 951.385910][T13886] usb 6-1: USB disconnect, device number 9 [ 951.828361][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 951.936097][T15748] fuse: Bad value for 'group_id' [ 951.936119][T15748] fuse: Bad value for 'group_id' [ 952.257511][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3953'. [ 952.780375][T15771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.842307][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3961'. [ 953.064280][T10529] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 953.085693][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 953.085786][T15786] bridge_slave_1: left allmulticast mode [ 953.085809][T15786] bridge_slave_1: left promiscuous mode [ 953.086748][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.183052][T15786] bridge_slave_0: left allmulticast mode [ 953.183082][T15786] bridge_slave_0: left promiscuous mode [ 953.183358][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.244043][T10529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.244080][T10529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.244104][T10529] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 953.244150][T10529] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 953.244175][T10529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.250020][T10529] usb 6-1: config 0 descriptor?? [ 953.301262][ T5870] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 953.451310][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 953.457584][ T5870] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 953.457635][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 953.457740][ T5870] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 953.457765][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.517125][ T5870] usb 4-1: config 0 descriptor?? [ 953.682136][T10529] usbhid 6-1:0.0: can't add hid device: -71 [ 953.682352][T10529] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 953.704875][T10529] usb 6-1: USB disconnect, device number 10 [ 953.958480][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 953.958628][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 953.983961][ T5870] usb 4-1: USB disconnect, device number 41 [ 955.090315][T15815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 956.081330][ T5870] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 956.233892][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.233928][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.233957][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.234003][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.234026][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.311839][ T5870] usb 4-1: config 0 descriptor?? [ 956.778901][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 956.779036][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 956.802190][ T5870] usb 4-1: USB disconnect, device number 42 [ 957.251293][ T5870] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 957.455557][ T5870] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 957.455624][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.456856][ T5870] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 957.456885][ T5870] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 957.456899][ T5870] usb 1-1: Manufacturer: syz [ 957.460954][ T5870] usb 1-1: config 0 descriptor?? [ 957.633078][ T5870] rc_core: IR keymap rc-hauppauge not found [ 957.633101][ T5870] Registered IR keymap rc-empty [ 957.636119][ T5870] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 957.639620][ T5870] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 957.698213][T15856] kvm: user requested TSC rate below hardware speed [ 957.903938][ T5884] usb 1-1: USB disconnect, device number 33 [ 958.292850][T15863] binder: 15862:15863 ioctl c0306201 200000000240 returned -11 [ 959.141228][ T5870] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 959.261330][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 959.280473][ T5870] usb 1-1: device descriptor read/64, error -71 [ 959.413123][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.413158][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.413182][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 959.413227][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 959.413251][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.419362][ T9] usb 2-1: config 0 descriptor?? [ 959.531278][ T5870] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 959.661447][ T5870] usb 1-1: device descriptor read/64, error -71 [ 959.771789][ T5870] usb usb1-port1: attempt power cycle [ 959.851607][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 959.851744][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 959.857463][ T9] usb 2-1: USB disconnect, device number 39 [ 960.121293][ T5870] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 960.142100][ T5870] usb 1-1: device descriptor read/8, error -71 [ 960.381332][ T5870] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 960.412885][ T5870] usb 1-1: device descriptor read/8, error -71 [ 960.418252][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4009'. [ 960.418345][T15895] bridge_slave_1: left allmulticast mode [ 960.418370][T15895] bridge_slave_1: left promiscuous mode [ 960.418662][T15895] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.492916][T15895] bridge_slave_0: left allmulticast mode [ 960.492948][T15895] bridge_slave_0: left promiscuous mode [ 960.493217][T15895] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.511283][ T5891] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 960.531816][ T5870] usb usb1-port1: unable to enumerate USB device [ 960.666559][ T5891] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 960.666623][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.668138][ T5891] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 960.668166][ T5891] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 960.668187][ T5891] usb 4-1: Manufacturer: syz [ 960.741352][ T5891] usb 4-1: config 0 descriptor?? [ 960.894187][ T5891] rc_core: IR keymap rc-hauppauge not found [ 960.894210][ T5891] Registered IR keymap rc-empty [ 960.897272][ T5891] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 960.900696][ T5891] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 961.065659][ T5870] usb 4-1: USB disconnect, device number 43 [ 961.598096][T15918] kvm: user requested TSC rate below hardware speed [ 961.779285][T15922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.503739][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 966.221407][T16004] kvm: user requested TSC rate below hardware speed [ 968.504456][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4067'. [ 968.752397][T16036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.988394][T16038] binder: 16037:16038 ioctl c0306201 200000000240 returned -11 [ 969.603578][T16047] kvm: user requested TSC rate below hardware speed [ 979.675943][T16131] delete_channel: no stack [ 980.041403][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 980.191193][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 980.195395][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.195446][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 980.195471][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.241673][ T10] usb 6-1: config 0 descriptor?? [ 980.719322][ T10] mcp2221 0003:04D8:00DD.0006: collection stack underflow [ 980.719363][ T10] mcp2221 0003:04D8:00DD.0006: item 0 1 0 12 parsing failed [ 980.720224][ T10] mcp2221 0003:04D8:00DD.0006: can't parse reports [ 980.751224][ T10] mcp2221 0003:04D8:00DD.0006: probe with driver mcp2221 failed with error -22 [ 980.883214][ T10] usb 6-1: USB disconnect, device number 11 [ 982.348393][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4127'. [ 985.116028][T16207] fuse: Bad value for 'group_id' [ 985.116050][T16207] fuse: Bad value for 'group_id' [ 986.131360][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 986.281190][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 986.283875][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 986.283907][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.322816][ T10] usb 1-1: config 0 descriptor?? [ 986.540158][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 986.566361][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 986.569349][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 986.569421][ T10] usb 1-1: media controller created [ 986.626446][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.748768][ T10] az6027: usb out operation failed. (-71) [ 986.759538][ T10] az6027: usb out operation failed. (-71) [ 986.759559][ T10] stb0899_attach: Driver disabled by Kconfig [ 986.759579][ T10] az6027: no front-end attached [ 986.759579][ T10] [ 986.760009][ T10] az6027: usb out operation failed. (-71) [ 986.760024][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 986.798536][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 986.815033][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 986.815058][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 986.818742][ T10] usb 1-1: USB disconnect, device number 38 [ 987.093816][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 987.260133][T16193] delete_channel: no stack [ 989.985776][T16260] fuse: Bad value for 'group_id' [ 989.985798][T16260] fuse: Bad value for 'group_id' [ 991.259011][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4169'. [ 991.284576][T16289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 992.341343][ T5891] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 992.491218][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 992.494371][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 992.496282][ T5891] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 992.496309][ T5891] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 992.505458][ T5891] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 992.505498][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.505523][ T5891] usb 2-1: Product: syz [ 992.505541][ T5891] usb 2-1: Manufacturer: syz [ 992.505557][ T5891] usb 2-1: SerialNumber: syz [ 992.790667][ T5891] usb 2-1: USB disconnect, device number 40 [ 993.254957][T16327] binder: 16325:16327 ioctl c0306201 200000000240 returned -11 [ 994.704518][T16355] trusted_key: encrypted_key: key user:syz not found [ 995.063598][T16362] tipc: Enabling of bearer rejected, failed to enable media [ 995.064623][T16362] syzkaller0: entered promiscuous mode [ 995.064647][T16362] syzkaller0: entered allmulticast mode [ 995.116985][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 995.271342][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 995.338824][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 995.338846][ T9] usb 2-1: config 0 has no interface number 0 [ 995.338884][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.338981][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.339011][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 995.339028][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.400640][ T9] usb 2-1: config 0 descriptor?? [ 996.421339][ T9] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 996.421394][ T9] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 996.421434][ T9] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 996.421458][ T9] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 996.425591][ T9] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 996.481819][ T9] usb 2-1: USB disconnect, device number 41 [ 997.811251][ T5891] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 997.966320][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 997.983637][ T5891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 997.983689][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 997.983734][ T5891] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 997.983758][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.036440][ T5891] usb 1-1: config 0 descriptor?? [ 998.128690][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.129867][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.528398][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 998.528825][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 998.529273][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 998.529447][ T5891] usbhid 1-1:0.0: can't add hid device: -32 [ 998.529587][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 998.593225][ T5891] usb 1-1: USB disconnect, device number 39 [ 1001.089840][T16437] fuse: Bad value for 'group_id' [ 1001.089862][T16437] fuse: Bad value for 'group_id' [ 1002.681667][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1002.834048][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1002.834116][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1002.835630][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1002.835659][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1002.835679][ T9] usb 1-1: Manufacturer: syz [ 1002.862628][ T9] usb 1-1: config 0 descriptor?? [ 1002.869379][ T9] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1002.958932][T16474] syz.5.4241 (16474) used greatest stack depth: 17416 bytes left [ 1003.090957][ T5884] usb 1-1: USB disconnect, device number 40 [ 1003.817337][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1003.817365][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1003.818323][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1003.818351][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1004.771251][ T993] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1004.933632][ T993] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1004.933745][ T993] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.963930][ T993] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1004.963953][ T993] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1004.963968][ T993] usb 4-1: Manufacturer: syz [ 1004.998269][ T993] usb 4-1: config 0 descriptor?? [ 1005.029093][ T993] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1005.231638][ T5884] usb 4-1: USB disconnect, device number 44 [ 1006.661223][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1006.820621][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1006.820655][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.820677][ T9] usb 3-1: Product: syz [ 1006.820699][ T9] usb 3-1: Manufacturer: syz [ 1006.820728][ T9] usb 3-1: SerialNumber: syz [ 1006.844027][ T9] usb 3-1: config 0 descriptor?? [ 1006.869554][ T9] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1007.231246][ T993] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1007.292270][ T9] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1007.384242][ T993] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1007.384308][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.386174][ T993] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1007.386204][ T993] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1007.386226][ T993] usb 4-1: Manufacturer: syz [ 1007.391232][ T5884] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1007.444996][ T993] usb 4-1: config 0 descriptor?? [ 1007.490200][ T5891] usb 3-1: USB disconnect, device number 50 [ 1007.571181][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1007.585336][ T5884] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1007.585403][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1007.585449][ T5884] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1007.585473][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.634950][ T5884] usb 2-1: config 0 descriptor?? [ 1007.671190][ T993] rc_core: IR keymap rc-hauppauge not found [ 1007.671213][ T993] Registered IR keymap rc-empty [ 1007.700808][ T993] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1007.755899][ T993] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 1007.906778][ T993] usb 4-1: USB disconnect, device number 45 [ 1008.303717][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 1008.303906][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1008.338704][ T5884] usb 2-1: USB disconnect, device number 42 [ 1009.819823][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1009.871206][ T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1009.983181][ T5884] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1009.983247][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.984822][ T5884] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1009.984850][ T5884] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1009.984871][ T5884] usb 6-1: Manufacturer: syz [ 1010.037864][ T5884] usb 6-1: config 0 descriptor?? [ 1010.053147][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1010.060119][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.060196][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.060225][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.060248][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.060272][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.134978][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.135010][ T44] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.135032][ T44] usb 2-1: Manufacturer: syz [ 1010.165209][ T44] usb 2-1: config 0 descriptor?? [ 1010.301208][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1010.301289][ T5884] Registered IR keymap rc-empty [ 1010.324422][ T5884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1010.342197][ T5884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 1010.387820][ T5884] usb 6-1: USB disconnect, device number 12 [ 1010.651247][ T44] rc_core: IR keymap rc-hauppauge not found [ 1010.651272][ T44] Registered IR keymap rc-empty [ 1010.651470][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.671311][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.694390][ T44] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1010.717566][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input44 [ 1010.745069][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.761500][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.781497][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.801429][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.821863][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.841384][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.861360][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.881517][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.901290][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.931278][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.971887][ T44] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1010.971915][ T44] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1011.016673][ T44] usb 2-1: USB disconnect, device number 43 [ 1012.824444][T16648] binder: 16647:16648 ioctl c0306201 0 returned -14 [ 1012.859310][T16648] binder: 16647:16648 ioctl c0306201 200000000240 returned -11 [ 1013.041360][ T5870] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1013.206348][ T5870] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1013.206522][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.208265][ T5870] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1013.208293][ T5870] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1013.208313][ T5870] usb 3-1: Manufacturer: syz [ 1013.255666][ T5870] usb 3-1: config 0 descriptor?? [ 1013.401354][ T5870] rc_core: IR keymap rc-hauppauge not found [ 1013.401377][ T5870] Registered IR keymap rc-empty [ 1013.403345][ T5870] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1013.409107][ T5870] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 1013.421332][ T5884] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1013.525574][ T5870] usb 3-1: USB disconnect, device number 51 [ 1013.611195][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1013.613623][ T5884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1013.613652][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.662286][ T5884] usb 4-1: config 0 descriptor?? [ 1013.893622][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1013.910736][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.921341][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1013.921402][ T5884] usb 4-1: media controller created [ 1014.000761][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1014.094753][ T5884] az6027: usb out operation failed. (-71) [ 1014.095281][ T5884] az6027: usb out operation failed. (-71) [ 1014.095296][ T5884] stb0899_attach: Driver disabled by Kconfig [ 1014.095327][ T5884] az6027: no front-end attached [ 1014.095327][ T5884] [ 1014.095742][ T5884] az6027: usb out operation failed. (-71) [ 1014.095756][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1014.143945][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 1014.163180][ T5884] dvb-usb: schedule remote query interval to 400 msecs. [ 1014.163203][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1014.186686][ T5884] usb 4-1: USB disconnect, device number 46 [ 1014.513257][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1015.123706][ T5884] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1015.286959][ T5884] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1015.287058][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.289395][ T5884] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1015.289424][ T5884] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1015.289445][ T5884] usb 3-1: Manufacturer: syz [ 1015.343585][ T5884] usb 3-1: config 0 descriptor?? [ 1015.501198][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1015.501222][ T5884] Registered IR keymap rc-empty [ 1015.503334][ T5884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1015.506801][ T5884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 1015.714460][T13886] usb 3-1: USB disconnect, device number 52 [ 1016.282024][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'. [ 1016.413128][T16734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1016.726021][T13886] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1016.883126][T13886] usb 3-1: Using ep0 maxpacket: 8 [ 1016.897512][T13886] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1016.897564][T13886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1016.897611][T13886] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1016.897699][T13886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.931006][T13886] usb 3-1: config 0 descriptor?? [ 1017.261250][ T5870] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1017.411267][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 1017.415260][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.415286][ T5870] usb 2-1: config 0 has no interfaces? [ 1017.422690][ T5870] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.440726][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.440774][ T5870] usb 2-1: Product: syz [ 1017.440790][ T5870] usb 2-1: Manufacturer: syz [ 1017.440806][ T5870] usb 2-1: SerialNumber: syz [ 1017.518166][ T5870] usb 2-1: config 0 descriptor?? [ 1017.558188][T13886] usbhid 3-1:0.0: can't add hid device: -71 [ 1017.558324][T13886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1017.587073][T13886] usb 3-1: USB disconnect, device number 53 [ 1018.441413][ T5884] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1018.594259][ T5884] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1018.594325][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.595900][ T5884] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1018.595927][ T5884] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1018.595947][ T5884] usb 3-1: Manufacturer: syz [ 1018.615454][ T5884] usb 3-1: config 0 descriptor?? [ 1018.731218][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1018.731241][ T5884] Registered IR keymap rc-empty [ 1018.733298][ T5884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1018.737093][ T5884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 1018.884024][ T5884] usb 3-1: USB disconnect, device number 54 [ 1020.033335][ T5884] usb 2-1: USB disconnect, device number 44 [ 1020.631320][ T993] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1020.679130][T16803] syzkaller0: entered promiscuous mode [ 1020.679159][T16803] syzkaller0: entered allmulticast mode [ 1020.843938][ T993] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.843967][ T993] usb 6-1: config 0 has no interfaces? [ 1020.843999][ T993] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.844024][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.855821][ T993] usb 6-1: config 0 descriptor?? [ 1022.211280][T13886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1022.426436][T13886] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1022.426464][T13886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.431460][T13886] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1022.431491][T13886] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1022.431513][T13886] usb 2-1: Manufacturer: syz [ 1022.445850][T13886] usb 2-1: config 0 descriptor?? [ 1022.485890][T13886] igorplugusb 2-1:0.0: incorrect number of endpoints [ 1023.512652][ T993] usb 6-1: USB disconnect, device number 13 [ 1024.991332][ T44] usb 2-1: USB disconnect, device number 45 [ 1026.521335][ T5870] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1026.674713][ T5870] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1026.674745][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.676331][ T5870] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1026.676359][ T5870] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1026.676380][ T5870] usb 3-1: Manufacturer: syz [ 1026.729726][ T5870] usb 3-1: config 0 descriptor?? [ 1026.746301][ T5870] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1029.298934][ T5870] usb 3-1: USB disconnect, device number 55 [ 1030.517780][T16917] delete_channel: no stack [ 1031.615913][ T38] kauditd_printk_skb: 60 callbacks suppressed [ 1031.615933][ T38] audit: type=1326 audit(1763256960.345:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.615988][ T38] audit: type=1326 audit(1763256960.345:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.616022][ T38] audit: type=1326 audit(1763256960.345:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.616832][ T38] audit: type=1326 audit(1763256960.345:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.616884][ T38] audit: type=1326 audit(1763256960.345:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.617061][ T38] audit: type=1326 audit(1763256960.345:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.617109][ T38] audit: type=1326 audit(1763256960.345:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.617670][ T38] audit: type=1326 audit(1763256960.345:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.617726][ T38] audit: type=1326 audit(1763256960.345:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1031.618276][ T38] audit: type=1326 audit(1763256960.345:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16985 comm="syz.5.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x50000 [ 1036.443446][T17016] fuse: Bad value for 'user_id' [ 1036.443466][T17016] fuse: Bad value for 'user_id' [ 1042.644482][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4497'. [ 1042.956806][T17006] delete_channel: no stack [ 1044.486120][T17125] fuse: Bad value for 'fd' [ 1044.921454][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4509'. [ 1048.396711][T17165] syzkaller0: entered promiscuous mode [ 1048.396739][T17165] syzkaller0: entered allmulticast mode [ 1049.326335][T17152] syz.2.4518 (17152) used greatest stack depth: 16696 bytes left [ 1049.432813][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1049.432840][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1049.509677][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1049.509703][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1049.851215][T13886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1050.026374][T13886] usb 2-1: Using ep0 maxpacket: 8 [ 1050.029496][T13886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1050.030714][T13886] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1050.030753][T13886] usb 2-1: can't read configurations, error -71 [ 1051.563696][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1051.563724][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1051.565649][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1051.565672][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1052.411339][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1052.561545][ T9] usb 6-1: device descriptor read/64, error -71 [ 1052.801176][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1052.931232][ T9] usb 6-1: device descriptor read/64, error -71 [ 1053.045891][ T9] usb usb6-port1: attempt power cycle [ 1053.381269][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1053.402197][ T9] usb 6-1: device descriptor read/8, error -71 [ 1053.646814][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1053.646843][T17239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1053.651280][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1053.677004][ T9] usb 6-1: device descriptor read/8, error -71 [ 1053.781765][ T9] usb usb6-port1: unable to enumerate USB device [ 1053.964078][ T38] kauditd_printk_skb: 47 callbacks suppressed [ 1053.964100][ T38] audit: type=1326 audit(1763256982.685:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.2.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1053.964164][ T38] audit: type=1326 audit(1763256982.685:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.2.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1053.964214][ T38] audit: type=1326 audit(1763256982.685:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17242 comm="syz.2.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1054.111941][ T5870] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1054.263249][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 1054.266128][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.266190][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1054.266236][ T5870] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1054.266260][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.290062][ T5870] usb 1-1: config 0 descriptor?? [ 1054.349143][ T5870] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1056.821212][ T5884] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1056.858023][ T5870] usb 1-1: USB disconnect, device number 41 [ 1056.951164][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1057.194750][ T5884] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1057.321315][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1057.447818][ T5884] usb usb3-port1: attempt power cycle [ 1057.858135][ T5884] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1057.877730][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1058.141191][ T5884] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1058.176592][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1058.283283][ T5884] usb usb3-port1: unable to enumerate USB device [ 1059.568683][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.568759][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.601210][ T993] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1061.734738][ T993] usb 4-1: device descriptor read/64, error -71 [ 1061.981917][ T993] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1062.121782][ T993] usb 4-1: device descriptor read/64, error -71 [ 1062.233795][ T993] usb usb4-port1: attempt power cycle [ 1062.581192][ T993] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1062.614039][ T993] usb 4-1: device descriptor read/8, error -71 [ 1062.628259][ T38] audit: type=1326 audit(1763256991.355:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17409 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1062.628970][ T38] audit: type=1326 audit(1763256991.355:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17409 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1062.629273][ T38] audit: type=1326 audit(1763256991.355:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17409 comm="syz.0.4627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1062.851530][ T993] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1062.872129][ T993] usb 4-1: device descriptor read/8, error -71 [ 1062.981564][ T993] usb usb4-port1: unable to enumerate USB device [ 1063.031334][ T5870] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1063.249997][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.250026][ T5870] usb 6-1: config 0 has no interfaces? [ 1063.250061][ T5870] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1063.250087][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.300472][ T5870] usb 6-1: config 0 descriptor?? [ 1066.002300][T17438] kvm: user requested TSC rate below hardware speed [ 1066.601409][ T5884] usb 6-1: USB disconnect, device number 18 [ 1067.452840][T17447] syzkaller0: entered promiscuous mode [ 1067.452867][T17447] syzkaller0: entered allmulticast mode [ 1067.556024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.591200][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1068.741322][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1068.749217][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.749237][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.750371][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1068.750391][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1068.750405][ T9] usb 2-1: Manufacturer: syz [ 1068.767521][ T9] usb 2-1: config 0 descriptor?? [ 1071.333078][ T5884] usb 2-1: USB disconnect, device number 48 [ 1071.662801][T17505] binder: 17504:17505 ioctl c0306201 0 returned -14 [ 1073.892497][T13886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1074.141212][T13886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.141242][T13886] usb 3-1: config 0 has no interfaces? [ 1074.141318][T13886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.141343][T13886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.153201][T13886] usb 3-1: config 0 descriptor?? [ 1074.738529][T17546] fuse: Bad value for 'user_id' [ 1074.738544][T17546] fuse: Bad value for 'user_id' [ 1076.203059][ T5870] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1076.353433][ T5870] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 1076.353455][ T5870] usb 2-1: config 0 has no interface number 0 [ 1076.353489][ T5870] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1076.357512][ T5870] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1076.357534][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.357548][ T5870] usb 2-1: Product: syz [ 1076.357559][ T5870] usb 2-1: Manufacturer: syz [ 1076.357569][ T5870] usb 2-1: SerialNumber: syz [ 1076.440909][ T5870] usb 2-1: config 0 descriptor?? [ 1076.445875][T17563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1076.668818][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1076.668886][ T5870] usb 2-1: MIDIStreaming interface descriptor not found [ 1076.884898][ T5870] usb 2-1: USB disconnect, device number 49 [ 1077.152049][T16150] udevd[16150]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.901914][ T5870] usb 3-1: USB disconnect, device number 60 [ 1078.497595][T17593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1078.543130][T17593] __nla_validate_parse: 2 callbacks suppressed [ 1078.543153][T17593] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1080.128343][T17638] tipc: Started in network mode [ 1080.128375][T17638] tipc: Node identity 5ea55c02087d, cluster identity 4711 [ 1080.128758][T17638] tipc: Enabled bearer , priority 0 [ 1080.135114][T17638] syzkaller0: entered promiscuous mode [ 1080.135146][T17638] syzkaller0: entered allmulticast mode [ 1080.235556][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1080.344264][T17637] tipc: Resetting bearer [ 1080.391161][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1080.393998][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1080.394028][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.425096][ T9] usb 4-1: config 0 descriptor?? [ 1080.444722][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1080.637119][T17637] tipc: Disabling bearer [ 1080.648088][ T9] gspca_sq930x: reg_r 001f failed -71 [ 1080.648226][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1080.693151][ T9] usb 4-1: USB disconnect, device number 51 [ 1081.407005][T17665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1083.838018][ T38] audit: type=1326 audit(1763257012.565:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.866553][ T38] audit: type=1326 audit(1763257012.595:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.866851][ T38] audit: type=1326 audit(1763257012.595:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.867264][ T38] audit: type=1326 audit(1763257012.595:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.867547][ T38] audit: type=1326 audit(1763257012.595:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.867827][ T38] audit: type=1326 audit(1763257012.595:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.868118][ T38] audit: type=1326 audit(1763257012.595:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.870528][ T38] audit: type=1326 audit(1763257012.595:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.870821][ T38] audit: type=1326 audit(1763257012.595:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1083.901236][ T38] audit: type=1326 audit(1763257012.595:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17722 comm="syz.3.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1084.091904][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1084.246578][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1084.258613][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1084.258643][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.258664][ T10] usb 1-1: Product: syz [ 1084.258678][ T10] usb 1-1: Manufacturer: syz [ 1084.258692][ T10] usb 1-1: SerialNumber: syz [ 1084.295629][ T10] usb 1-1: config 0 descriptor?? [ 1084.591294][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.794544][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1086.961819][T10529] usb 1-1: USB disconnect, device number 42 [ 1089.151299][T10529] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1089.312690][T10529] usb 2-1: Using ep0 maxpacket: 8 [ 1089.318731][T10529] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1089.318753][T10529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.318767][T10529] usb 2-1: Product: syz [ 1089.318777][T10529] usb 2-1: Manufacturer: syz [ 1089.318787][T10529] usb 2-1: SerialNumber: syz [ 1089.324710][T10529] usb 2-1: config 0 descriptor?? [ 1089.538843][T10529] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1090.150142][T10529] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1091.387866][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 1091.387885][ T38] audit: type=1326 audit(1763257020.115:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.389323][ T38] audit: type=1326 audit(1763257020.115:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.389624][ T38] audit: type=1326 audit(1763257020.115:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.389940][ T38] audit: type=1326 audit(1763257020.115:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.390315][ T38] audit: type=1326 audit(1763257020.115:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.393264][ T38] audit: type=1326 audit(1763257020.115:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.393598][ T38] audit: type=1326 audit(1763257020.125:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.394067][ T38] audit: type=1326 audit(1763257020.125:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.394921][ T38] audit: type=1326 audit(1763257020.125:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1091.395287][ T38] audit: type=1326 audit(1763257020.125:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17827 comm="syz.3.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x50000 [ 1092.031205][T10529] usb 2-1: USB disconnect, device number 50 [ 1093.141294][ T993] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1093.291158][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 1093.298443][ T993] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1093.298476][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.298498][ T993] usb 4-1: Product: syz [ 1093.298513][ T993] usb 4-1: Manufacturer: syz [ 1093.298527][ T993] usb 4-1: SerialNumber: syz [ 1093.365949][ T993] usb 4-1: config 0 descriptor?? [ 1093.594721][ T993] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1094.202371][ T993] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1095.321510][ T993] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1095.481316][ T993] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1095.481349][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.481370][ T993] usb 1-1: Product: syz [ 1095.481385][ T993] usb 1-1: Manufacturer: syz [ 1095.481399][ T993] usb 1-1: SerialNumber: syz [ 1095.489864][ T993] usb 1-1: config 0 descriptor?? [ 1095.510495][ T993] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1095.923840][ T993] usb 4-1: USB disconnect, device number 52 [ 1098.083833][ T10] usb 1-1: USB disconnect, device number 43 [ 1098.711778][ T993] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1098.863834][ T993] usb 6-1: Using ep0 maxpacket: 8 [ 1098.883641][ T993] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1098.883671][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.883690][ T993] usb 6-1: Product: syz [ 1098.883705][ T993] usb 6-1: Manufacturer: syz [ 1098.883719][ T993] usb 6-1: SerialNumber: syz [ 1098.894557][ T993] usb 6-1: config 0 descriptor?? [ 1098.988035][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1099.131267][ T993] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1099.760645][ T993] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1101.538575][ T9] usb 6-1: USB disconnect, device number 19 [ 1101.983972][T18025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1102.041163][ T993] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1102.097842][T18025] bond1: (slave ip6gretap1): making interface the new active one [ 1102.133836][T18025] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1102.213629][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 1102.216342][ T993] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.216371][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.216390][ T993] usb 3-1: config 0 has no interface number 0 [ 1102.216442][ T993] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.216491][ T993] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1102.216516][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.243965][ T993] usb 3-1: config 0 descriptor?? [ 1102.283134][ T993] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1102.822602][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1102.971187][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1102.977007][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1102.977038][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.977060][ T10] usb 1-1: Product: syz [ 1102.977075][ T10] usb 1-1: Manufacturer: syz [ 1102.977089][ T10] usb 1-1: SerialNumber: syz [ 1103.020874][ T10] usb 1-1: config 0 descriptor?? [ 1103.131916][T18056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1103.235435][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1103.721233][ T993] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1103.849116][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1103.898756][ T993] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1103.898791][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.898813][ T993] usb 4-1: Product: syz [ 1103.898828][ T993] usb 4-1: Manufacturer: syz [ 1103.898843][ T993] usb 4-1: SerialNumber: syz [ 1103.938405][ T993] usb 4-1: config 0 descriptor?? [ 1103.982464][ T993] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1104.834559][ T5891] usb 3-1: USB disconnect, device number 61 [ 1105.666930][T10529] usb 1-1: USB disconnect, device number 44 [ 1106.635256][ T10] usb 4-1: USB disconnect, device number 53 [ 1106.983124][T18102] fuse: Bad value for 'group_id' [ 1106.983146][T18102] fuse: Bad value for 'group_id' [ 1112.426612][T18187] fuse: Bad value for 'group_id' [ 1112.426633][T18187] fuse: Bad value for 'group_id' [ 1113.015468][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 1113.015492][ T38] audit: type=1326 audit(1763257041.725:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18197 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1113.015550][ T38] audit: type=1326 audit(1763257041.725:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18197 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1113.015603][ T38] audit: type=1326 audit(1763257041.725:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18197 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1113.015656][ T38] audit: type=1326 audit(1763257041.725:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18197 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1113.015706][ T38] audit: type=1326 audit(1763257041.725:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18197 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1116.635182][ T38] audit: type=1326 audit(1763257045.365:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18233 comm="syz.0.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1116.636487][ T38] audit: type=1326 audit(1763257045.365:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18233 comm="syz.0.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1116.638835][ T38] audit: type=1326 audit(1763257045.365:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18233 comm="syz.0.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1116.641877][ T38] audit: type=1326 audit(1763257045.365:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18233 comm="syz.0.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05d92f6c9 code=0x7ffc0000 [ 1118.021260][T13886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1118.171193][T13886] usb 6-1: Using ep0 maxpacket: 8 [ 1118.173343][T13886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.173368][T13886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.173384][T13886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.173415][T13886] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1118.173433][T13886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.243135][T13886] usb 6-1: config 0 descriptor?? [ 1118.658713][T13886] usbhid 6-1:0.0: can't add hid device: -71 [ 1118.658850][T13886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1118.697114][T13886] usb 6-1: USB disconnect, device number 20 [ 1121.011396][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.011474][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.951170][T13886] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1123.103838][T13886] usb 2-1: Using ep0 maxpacket: 8 [ 1123.106481][T13886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.106516][T13886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.106540][T13886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.106585][T13886] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1123.106609][T13886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.219732][T13886] usb 2-1: config 0 descriptor?? [ 1123.603694][T18301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1123.717524][T13886] usbhid 2-1:0.0: can't add hid device: -71 [ 1123.717689][T13886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1123.752248][T13886] usb 2-1: USB disconnect, device number 51 [ 1132.145172][ T38] audit: type=1326 audit(1763257060.875:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18393 comm="syz.2.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1132.145232][ T38] audit: type=1326 audit(1763257060.875:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18393 comm="syz.2.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1132.146639][ T38] audit: type=1326 audit(1763257060.875:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18393 comm="syz.2.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1132.146693][ T38] audit: type=1326 audit(1763257060.875:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18393 comm="syz.2.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1132.146741][ T38] audit: type=1326 audit(1763257060.875:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18393 comm="syz.2.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587dfcf6c9 code=0x7ffc0000 [ 1133.911139][ T5891] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1134.095288][ T5891] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1134.095333][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.095371][ T5891] usb 2-1: Product: syz [ 1134.095386][ T5891] usb 2-1: Manufacturer: syz [ 1134.095401][ T5891] usb 2-1: SerialNumber: syz [ 1134.121430][ T5891] usb 2-1: config 0 descriptor?? [ 1134.128212][ T5891] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1136.701917][T13886] usb 2-1: USB disconnect, device number 52 [ 1138.617692][T18441] fuse: Bad value for 'group_id' [ 1138.617713][T18441] fuse: Bad value for 'group_id' [ 1139.672437][T13886] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1139.831257][T13886] usb 1-1: Using ep0 maxpacket: 16 [ 1139.833661][T13886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.833721][T13886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.833752][T13886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1139.833775][T13886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1139.833800][T13886] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.835349][T13886] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1139.835377][T13886] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1139.835397][T13886] usb 1-1: Manufacturer: syz [ 1139.941323][T13886] usb 1-1: config 0 descriptor?? [ 1140.291135][T13886] rc_core: IR keymap rc-hauppauge not found [ 1140.291157][T13886] Registered IR keymap rc-empty [ 1140.291325][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.311220][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.336419][T13886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1140.356252][T13886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 1140.378755][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.403663][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.431422][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.451385][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.471356][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.491260][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.511350][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.529895][T18465] fuse: Bad value for 'group_id' [ 1140.529919][T18465] fuse: Bad value for 'group_id' [ 1140.531224][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.561396][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.581283][T13886] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1140.633782][T13886] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1140.633810][T13886] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1140.667432][T13886] usb 1-1: USB disconnect, device number 45 [ 1143.234406][T18491] fuse: Bad value for 'group_id' [ 1143.234428][T18491] fuse: Bad value for 'group_id' [ 1147.003119][ T5891] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1147.163690][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.163727][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.163768][ T5891] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1147.163791][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.229033][ T5891] usb 1-1: config 0 descriptor?? [ 1147.406548][T18542] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1147.643790][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 1147.643933][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1147.677767][ T5891] usb 1-1: USB disconnect, device number 46 [ 1148.916123][T18571] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1150.421224][T13886] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1150.574040][T13886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.574076][T13886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.574117][T13886] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1150.574141][T13886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.583679][T13886] usb 3-1: config 0 descriptor?? [ 1150.995383][T13886] usbhid 3-1:0.0: can't add hid device: -71 [ 1150.995518][T13886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1151.031769][T13886] usb 3-1: USB disconnect, device number 62 [ 1154.271151][ T5891] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1154.431890][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 1154.434593][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.434625][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.434649][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.434695][ T5891] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1154.434720][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.440591][ T5891] usb 3-1: config 0 descriptor?? [ 1154.878688][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879613][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879646][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879677][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879707][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879736][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879765][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879795][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879824][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.879984][ T5891] hid-rmi 0003:06CB:81A7.0008: unknown main item tag 0x0 [ 1154.977631][ T5891] hid-rmi 0003:06CB:81A7.0008: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1155.060960][ T5891] usb 3-1: USB disconnect, device number 63 [ 1155.436402][T18646] fido_id[18646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1156.834012][T13886] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1157.017604][T13886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.017657][T13886] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.020717][T13886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.020745][T13886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.020764][T13886] usb 3-1: Product: syz [ 1157.020778][T13886] usb 3-1: Manufacturer: syz [ 1157.020792][T13886] usb 3-1: SerialNumber: syz [ 1157.372152][T13886] cdc_ncm 3-1:1.0: bind() failure [ 1157.404709][T13886] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1157.404758][T13886] cdc_ncm 3-1:1.1: bind() failure [ 1157.431776][T13886] usb 3-1: USB disconnect, device number 64 [ 1159.490822][ T38] audit: type=1326 audit(1763257088.215:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18692 comm="syz.5.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1159.519058][ T38] audit: type=1326 audit(1763257088.245:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18692 comm="syz.5.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1159.519385][ T38] audit: type=1326 audit(1763257088.245:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18692 comm="syz.5.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1159.519699][ T38] audit: type=1326 audit(1763257088.245:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18692 comm="syz.5.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1160.880781][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5177'. [ 1161.514500][ T38] audit: type=1326 audit(1763257090.235:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18723 comm="syz.5.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1161.515096][ T38] audit: type=1326 audit(1763257090.245:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18723 comm="syz.5.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1161.515404][ T38] audit: type=1326 audit(1763257090.245:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18723 comm="syz.5.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1161.588607][ T38] audit: type=1326 audit(1763257090.245:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18723 comm="syz.5.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1163.786530][ T38] audit: type=1326 audit(1763257092.515:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18753 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0bfb2f6c9 code=0x7ffc0000 [ 1163.786827][ T38] audit: type=1326 audit(1763257092.515:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18753 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa0bfb2f6c9 code=0x7ffc0000 [ 1167.784101][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1167.784123][ T38] audit: type=1326 audit(1763257096.515:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18790 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1167.784499][ T38] audit: type=1326 audit(1763257096.515:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18790 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1167.785012][ T38] audit: type=1326 audit(1763257096.515:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18790 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1167.789640][ T38] audit: type=1326 audit(1763257096.515:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18790 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1168.341414][T13886] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1168.503509][T13886] usb 1-1: Using ep0 maxpacket: 16 [ 1168.507092][T13886] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.507121][T13886] usb 1-1: config 0 has no interface number 0 [ 1168.507172][T13886] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.507199][T13886] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.507248][T13886] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1168.507272][T13886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.548278][T13886] usb 1-1: config 0 descriptor?? [ 1169.006697][T13886] usbhid 1-1:0.1: can't add hid device: -71 [ 1169.007105][T13886] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1169.022383][T13886] usb 1-1: USB disconnect, device number 47 [ 1173.031121][T13886] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1173.221866][T13886] usb 3-1: Using ep0 maxpacket: 16 [ 1173.339893][T13886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.339917][T13886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.339933][T13886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1173.339963][T13886] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1173.339979][T13886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.413250][T13886] usb 3-1: config 0 descriptor?? [ 1173.827398][T13886] usbhid 3-1:0.0: can't add hid device: -71 [ 1173.827528][T13886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1173.841646][T13886] usb 3-1: USB disconnect, device number 65 [ 1174.473961][ T38] audit: type=1326 audit(1763257103.205:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.3.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1174.477498][ T38] audit: type=1326 audit(1763257103.205:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.3.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1174.478792][ T38] audit: type=1326 audit(1763257103.205:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.3.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac754f6c9 code=0x7ffc0000 [ 1176.281227][ T38] audit: type=1326 audit(1763257105.005:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18896 comm="syz.5.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1176.281293][ T38] audit: type=1326 audit(1763257105.005:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18896 comm="syz.5.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1176.281918][ T38] audit: type=1326 audit(1763257105.005:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18896 comm="syz.5.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1176.281970][ T38] audit: type=1326 audit(1763257105.015:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18896 comm="syz.5.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da1e8f6c9 code=0x7ffc0000 [ 1177.256686][T18941] fuse: Bad value for 'user_id' [ 1177.256707][T18941] fuse: Bad value for 'user_id' [ 1177.485172][T18951] tipc: Started in network mode [ 1177.485205][T18951] tipc: Node identity 9e41fda3a867, cluster identity 4711 [ 1177.485449][T18951] tipc: Enabled bearer , priority 0 [ 1177.486467][T18951] syzkaller0: entered promiscuous mode [ 1177.486489][T18951] syzkaller0: entered allmulticast mode [ 1177.656309][T18954] tipc: Resetting bearer [ 1177.705265][T18950] tipc: Resetting bearer [ 1177.862029][T18950] tipc: Disabling bearer [ 1177.946845][T18972] fuse: Bad value for 'user_id' [ 1177.946867][T18972] fuse: Bad value for 'user_id' [ 1178.670334][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5306'. [ 1179.727083][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'. [ 1182.451708][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.451760][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.461221][T19120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1189.051342][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1189.491593][ T10] usb 3-1: device descriptor read/64, error -71 [ 1189.731118][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1189.889056][ T10] usb 3-1: device descriptor read/64, error -71 [ 1189.992446][ T10] usb usb3-port1: attempt power cycle [ 1190.021336][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1190.171106][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1190.173244][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1190.173289][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1190.173314][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.196043][ T9] usb 2-1: config 0 descriptor?? [ 1190.332848][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1190.392512][ T10] usb 3-1: device descriptor read/8, error -71 [ 1190.631125][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1190.653734][ T10] usb 3-1: device descriptor read/8, error -71 [ 1190.763885][ T10] usb usb3-port1: unable to enumerate USB device [ 1192.818887][ T10] usb 2-1: USB disconnect, device number 53 [ 1197.752274][ T993] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1197.911530][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 1197.914290][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.914370][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1197.914445][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1197.914469][ T993] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1197.914494][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.920557][ T993] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1197.920587][ T993] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1197.920608][ T993] usb 2-1: Manufacturer: syz [ 1198.027941][ T993] usb 2-1: config 0 descriptor?? [ 1198.391635][ T993] rc_core: IR keymap rc-hauppauge not found [ 1198.391657][ T993] Registered IR keymap rc-empty [ 1198.391819][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.421197][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.444844][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1198.447032][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 1198.482287][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.511606][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.531341][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.551214][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.571220][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.591219][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.611205][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.631208][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.651243][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.671216][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1198.699525][ T993] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1198.699599][ T993] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1198.734379][ T10] usb 2-1: USB disconnect, device number 54 [ 1199.072210][T19306] fuse: Bad value for 'user_id' [ 1199.072233][T19306] fuse: Bad value for 'user_id' [ 1200.741211][T13886] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1200.891118][T13886] usb 2-1: Using ep0 maxpacket: 16 [ 1200.893655][T13886] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.893682][T13886] usb 2-1: config 0 has no interface number 0 [ 1200.893735][T13886] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.893762][T13886] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.893800][T13886] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1200.893824][T13886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.963356][T13886] usb 2-1: config 0 descriptor?? [ 1201.596867][T13886] usbhid 2-1:0.1: can't add hid device: -71 [ 1201.597007][T13886] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1201.624491][T13886] usb 2-1: USB disconnect, device number 55 [ 1212.171140][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1212.301220][ T9] usb 4-1: device descriptor read/64, error -71 [ 1213.041150][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1213.171137][ T9] usb 4-1: device descriptor read/64, error -71 [ 1213.281376][ T9] usb usb4-port1: attempt power cycle [ 1213.631153][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1213.652022][ T9] usb 4-1: device descriptor read/8, error -71 [ 1213.891139][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1213.912825][ T9] usb 4-1: device descriptor read/8, error -71 [ 1214.021585][ T9] usb usb4-port1: unable to enumerate USB device [ 1217.081157][ T993] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1217.234623][ T993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.234650][ T993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1217.234701][ T993] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.238212][ T993] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1217.238242][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.238263][ T993] usb 6-1: Product: syz [ 1217.238288][ T993] usb 6-1: Manufacturer: syz [ 1217.238303][ T993] usb 6-1: SerialNumber: syz [ 1217.308014][ T993] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1217.308064][ T993] cdc_ncm 6-1:1.0: bind() failure [ 1217.513768][T13886] usb 6-1: USB disconnect, device number 21 [ 1217.832175][T19599] netlink: 'syz.3.5553': attribute type 29 has an invalid length. [ 1217.844391][T19599] netlink: 'syz.3.5553': attribute type 29 has an invalid length. [ 1219.164787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.972954][T13886] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1220.043455][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1220.127843][T13886] usb 6-1: Using ep0 maxpacket: 16 [ 1220.130654][T13886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.130673][T13886] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1220.130700][T13886] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1220.130717][T13886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.135358][T13886] usb 6-1: config 0 descriptor?? [ 1220.201165][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1220.203251][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.203281][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.203309][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1220.203326][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.210643][ T9] usb 4-1: config 0 descriptor?? [ 1220.629981][ T9] hid_parser_main: 1 callbacks suppressed [ 1220.630008][ T9] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1220.630038][ T9] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1220.630077][ T9] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1220.630108][ T9] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1220.630138][ T9] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 1220.691407][ T9] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 1220.691431][ T9] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 1220.833513][ T9] usb 4-1: USB disconnect, device number 58 [ 1222.424456][T19666] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1222.620536][ T9] usb 6-1: USB disconnect, device number 22 [ 1223.969790][T19692] tipc: Enabled bearer , priority 0 [ 1223.987735][T19691] syzkaller0: entered promiscuous mode [ 1223.987764][T19691] syzkaller0: entered allmulticast mode [ 1224.145008][T19691] tipc: Resetting bearer [ 1224.181358][T19690] tipc: Resetting bearer [ 1224.492499][T19690] tipc: Disabling bearer [ 1224.605008][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.624019][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.625731][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.627001][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.627835][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.010067][T19716] fuse: Bad value for 'fd' [ 1226.236999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.372295][T11557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.681355][ T5809] Bluetooth: hci1: command tx timeout [ 1226.704343][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1226.897732][T11557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.456506][T11557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.761177][ T5809] Bluetooth: hci1: command tx timeout [ 1229.053687][T11557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.677895][T19700] chnl_net:caif_netlink_parms(): no params data found [ 1230.842203][ T5809] Bluetooth: hci1: command tx timeout [ 1231.170933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.456229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.591372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.087561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.218789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.354834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.653777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.930913][ T5809] Bluetooth: hci1: command tx timeout [ 1234.744726][T11557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.861870][T11557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.904761][T11557] bond0 (unregistering): Released all slaves [ 1236.061631][T11557] bond1 (unregistering): Released all slaves [ 1237.370136][T19700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.370278][T19700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.370523][T19700] bridge_slave_0: entered allmulticast mode [ 1237.380686][T19700] bridge_slave_0: entered promiscuous mode [ 1237.407876][T19700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.408032][T19700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.410710][T19700] bridge_slave_1: entered allmulticast mode [ 1237.427880][T19700] bridge_slave_1: entered promiscuous mode [ 1238.943298][T19700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.032619][T19700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.745120][T19700] team0: Port device team_slave_0 added [ 1239.921212][T11557] hsr_slave_0: left promiscuous mode [ 1240.001169][T11557] hsr_slave_1: left promiscuous mode [ 1240.002290][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.002318][T11557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.066426][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.066458][T11557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.238640][T11557] veth1_macvtap: left promiscuous mode [ 1240.238758][T11557] veth0_macvtap: left promiscuous mode [ 1240.239035][T11557] veth1_vlan: left promiscuous mode [ 1240.239247][T11557] veth0_vlan: left promiscuous mode [ 1243.895569][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.895640][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.411208][T19181] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1244.454928][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1244.561729][T11557] team0 (unregistering): Port device team_slave_1 removed [ 1244.571175][T19181] usb 3-1: Using ep0 maxpacket: 16 [ 1244.609660][T19181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.609722][T19181] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.609753][T19181] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1244.609770][T19181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.662021][T19181] usb 3-1: config 0 descriptor?? [ 1244.705188][T19181] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1244.764673][T20021] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1244.903495][T11557] team0 (unregistering): Port device team_slave_0 removed [ 1247.187894][T13886] usb 3-1: USB disconnect, device number 70 [ 1247.357129][T20038] fuse: Unknown parameter '&' [ 1247.915614][T20012] delete_channel: no stack [ 1248.481304][ T993] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1248.543679][T19700] team0: Port device team_slave_1 added [ 1248.631247][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 1248.633224][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.633277][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1248.633296][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1248.633311][ T993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1248.633327][ T993] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.634474][ T993] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1248.634494][ T993] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1248.634509][ T993] usb 4-1: Manufacturer: syz [ 1248.640495][ T993] usb 4-1: config 0 descriptor?? [ 1249.122850][ T993] rc_core: IR keymap rc-hauppauge not found [ 1249.122873][ T993] Registered IR keymap rc-empty [ 1249.123038][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.144580][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.166883][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1249.170434][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 1249.220834][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.241482][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.261522][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.301853][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.321336][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.338214][T19700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.338234][T19700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.338330][T19700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.341366][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.361385][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.381329][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.401301][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.423602][ T993] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1249.470725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.493881][ T993] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1249.493910][ T993] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1249.590921][ T993] usb 4-1: USB disconnect, device number 59 [ 1249.598350][T19700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.598370][T19700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.598405][T19700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.632463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.911696][T20063] fuse: Bad value for 'user_id' [ 1249.911715][T20063] fuse: Bad value for 'user_id' [ 1250.293432][T19700] hsr_slave_0: entered promiscuous mode [ 1250.294905][T19700] hsr_slave_1: entered promiscuous mode [ 1250.295934][T19700] debugfs: 'hsr0' already exists in 'hsr' [ 1250.295973][T19700] Cannot create hsr debugfs directory [ 1252.240950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.306309][T19700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1253.365400][T19700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1253.403713][T19700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1253.464184][T19700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1253.963263][T20080] delete_channel: no stack [ 1254.006143][T19700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.110159][T19700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.160549][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.167138][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.227384][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.227533][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.602915][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5748'. [ 1255.488551][T19700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.770833][T19700] veth0_vlan: entered promiscuous mode [ 1255.824272][T19700] veth1_vlan: entered promiscuous mode [ 1256.066674][T19700] veth0_macvtap: entered promiscuous mode [ 1256.221312][T19700] veth1_macvtap: entered promiscuous mode [ 1256.404548][T19700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.428773][T19700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.507125][T11557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.509620][T11557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.509963][T11557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.510005][T11557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.017041][ T1517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.017080][ T1517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.228500][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.228523][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.378288][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5764'. [ 1258.456909][T20199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1258.487685][T20203] bond2: option mode: unable to set because the bond device is up [ 1259.259555][T20156] delete_channel: no stack [ 1259.768812][T20229] fuse: Unknown parameter 'grou' [ 1261.283519][T20261] fuse: Unknown parameter 'grou' [ 1262.980078][T20283] netlink: 'syz.3.5791': attribute type 1 has an invalid length. [ 1263.383077][T20291] tipc: Enabled bearer , priority 0 [ 1263.384369][T20291] syzkaller0: entered promiscuous mode [ 1263.384393][T20291] syzkaller0: entered allmulticast mode [ 1263.582376][T20291] tipc: Resetting bearer [ 1263.672218][T20290] tipc: Resetting bearer [ 1263.873430][T20290] tipc: Disabling bearer [ 1266.813126][T10529] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1267.026919][T10529] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1267.026953][T10529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.026972][T10529] usb 2-1: Product: syz [ 1267.026995][T10529] usb 2-1: Manufacturer: syz [ 1267.027010][T10529] usb 2-1: SerialNumber: syz [ 1267.033832][T10529] usb 2-1: config 0 descriptor?? [ 1267.049750][T10529] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1267.256204][T10529] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1267.256225][T10529] sq905c 2-1:0.0: Get version command failed [ 1267.256312][T10529] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1267.265803][T10529] usb 2-1: USB disconnect, device number 56 [ 1268.301090][T10529] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1268.451126][T10529] usb 4-1: Using ep0 maxpacket: 32 [ 1268.453874][T10529] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1268.453902][T10529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.491970][T10529] usb 4-1: config 0 descriptor?? [ 1268.939769][T10529] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1268.944539][T10529] gspca_sq930x: reg_r 001f failed -32 [ 1268.944663][T10529] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 1268.961928][T10529] usb 4-1: USB disconnect, device number 60 [ 1270.229942][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5838'. [ 1270.413422][T20394] bond2: entered allmulticast mode [ 1271.770019][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1271.931153][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1271.934716][ T9] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1271.934737][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.939101][ T9] usb 6-1: config 0 descriptor?? [ 1271.978988][ T9] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 1272.281722][ T9] usb 6-1: USB disconnect, device number 23 [ 1275.081267][ T44] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1275.231373][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1275.237609][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.237670][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.237700][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1275.237723][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1275.237748][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.239465][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1275.239495][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1275.239516][ T44] usb 3-1: Manufacturer: syz [ 1275.333294][ T44] usb 3-1: config 0 descriptor?? [ 1276.051633][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5879'. [ 1278.121053][ T44] rc_core: IR keymap rc-hauppauge not found [ 1278.121076][ T44] Registered IR keymap rc-empty [ 1278.121244][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.141118][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.172779][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1278.176322][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 1278.251496][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.271143][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.291132][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.311183][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.331143][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.351135][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.371175][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.391168][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.411181][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.438021][ T44] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.456398][ T44] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1278.456424][ T44] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1278.472970][T20497] process 'syz.1.5886' launched './file1' with NULL argv: empty string added [ 1278.511578][ T44] usb 3-1: USB disconnect, device number 71 [ 1279.561190][T19181] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1279.723700][T19181] usb 4-1: Using ep0 maxpacket: 16 [ 1279.726151][T19181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.726211][T19181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.726240][T19181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1279.726263][T19181] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1279.726288][T19181] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.728667][T19181] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1279.728696][T19181] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1279.728717][T19181] usb 4-1: Manufacturer: syz [ 1279.747410][T19181] usb 4-1: config 0 descriptor?? [ 1279.824644][T10529] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1279.986566][T10529] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1279.986598][T10529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.986620][T10529] usb 2-1: Product: syz [ 1279.986635][T10529] usb 2-1: Manufacturer: syz [ 1279.986650][T10529] usb 2-1: SerialNumber: syz [ 1280.024864][T10529] usb 2-1: config 0 descriptor?? [ 1280.252100][T10529] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1280.519297][T20532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.534081][T20532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.555545][ T5884] usb 2-1: USB disconnect, device number 57 [ 1282.461085][ T44] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1282.578179][T19181] rc_core: IR keymap rc-hauppauge not found [ 1282.578201][T19181] Registered IR keymap rc-empty [ 1282.578361][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.595299][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.617039][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1282.617072][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.617092][ T44] usb 3-1: Product: syz [ 1282.617107][ T44] usb 3-1: Manufacturer: syz [ 1282.617122][ T44] usb 3-1: SerialNumber: syz [ 1282.621355][T19181] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1282.639933][T19181] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 1282.662538][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.686514][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.689069][ T44] usb 3-1: config 0 descriptor?? [ 1282.701185][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.721292][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.743650][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.761988][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.781166][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.801194][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.821190][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.844293][T19181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.866835][T19181] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1282.866860][T19181] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1282.911394][T19181] usb 4-1: USB disconnect, device number 61 [ 1282.927824][ T44] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1283.194212][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.217745][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.225369][T13886] usb 3-1: USB disconnect, device number 72 [ 1285.071179][ T44] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1285.211242][ T44] usb 6-1: device descriptor read/64, error -71 [ 1285.461088][ T44] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1285.601083][ T44] usb 6-1: device descriptor read/64, error -71 [ 1285.711809][ T44] usb usb6-port1: attempt power cycle [ 1286.051083][ T44] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1286.071856][ T44] usb 6-1: device descriptor read/8, error -71 [ 1286.312961][ T44] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1286.349840][ T44] usb 6-1: device descriptor read/8, error -71 [ 1286.451464][ T44] usb usb6-port1: unable to enumerate USB device [ 1288.076951][ T44] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1288.145805][T20715] tipc: Enabled bearer , priority 0 [ 1288.146948][T20715] syzkaller0: entered promiscuous mode [ 1288.146972][T20715] syzkaller0: entered allmulticast mode [ 1288.222367][T20715] tipc: Resetting bearer [ 1288.226597][ T44] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1288.226631][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.226653][ T44] usb 2-1: Product: syz [ 1288.226668][ T44] usb 2-1: Manufacturer: syz [ 1288.226684][ T44] usb 2-1: SerialNumber: syz [ 1288.285794][ T44] usb 2-1: config 0 descriptor?? [ 1288.321532][T20714] tipc: Resetting bearer [ 1288.459684][T20714] tipc: Disabling bearer [ 1288.692717][ T44] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1288.945087][T20713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.945635][T20713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.953575][T13886] usb 2-1: USB disconnect, device number 58 [ 1293.077846][T20775] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1293.831148][T19181] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1293.988333][T19181] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1293.988364][T19181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.988386][T19181] usb 4-1: Product: syz [ 1293.988402][T19181] usb 4-1: Manufacturer: syz [ 1293.988417][T19181] usb 4-1: SerialNumber: syz [ 1294.001694][T19181] usb 4-1: config 0 descriptor?? [ 1294.249873][T19181] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1294.505379][T20786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.505758][T20786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.508451][T13886] usb 4-1: USB disconnect, device number 62 [ 1294.800312][T20814] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1296.614048][T20848] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1297.871184][T19181] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1298.021115][T19181] usb 6-1: Using ep0 maxpacket: 8 [ 1298.028987][T19181] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1298.029018][T19181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.029039][T19181] usb 6-1: Product: syz [ 1298.029054][T19181] usb 6-1: Manufacturer: syz [ 1298.029068][T19181] usb 6-1: SerialNumber: syz [ 1298.046245][T19181] usb 6-1: config 0 descriptor?? [ 1298.201872][T10529] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1298.252475][T19181] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1298.361178][T10529] usb 2-1: Using ep0 maxpacket: 16 [ 1298.364057][T10529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.364083][T10529] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1298.364121][T10529] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1298.364143][T10529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.419326][T10529] usb 2-1: config 0 descriptor?? [ 1298.656670][T19181] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1298.664132][T19181] usb 6-1: USB disconnect, device number 28 [ 1300.070839][T20945] netlink: 'syz.5.6068': attribute type 11 has an invalid length. [ 1301.022881][T19181] usb 2-1: USB disconnect, device number 59 [ 1304.393686][T21002] fuse: Bad value for 'fd' [ 1305.328310][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.328363][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.818625][T21035] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1308.301507][ T5884] usb 6-1: new high-speed USB device number[ 1308.301507][ T5884] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1308.311071][T21048] ================================================================== [ 1308.311088][T21048] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 1308.311119][T21048] Read of size 1 at addr ffff888020b19200 by task syz.3.6116/21048 [ 1308.311138][T21048] [ 1308.311164][T21048] CPU: 0 UID: 0 PID: 21048 Comm: syz.3.6116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1308.311189][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1308.311210][T21048] Call Trace: [ 1308.311222][T21048] [ 1308.311232][T21048] dump_stack_lvl+0x189/0x250 [ 1308.311266][T21048] ? rcu_is_watching+0x15/0xb0 [ 1308.311284][T21048] ? __kasan_check_byte+0x12/0x40 [ 1308.311315][T21048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.311346][T21048] ? rcu_is_watching+0x15/0xb0 [ 1308.311365][T21048] ? lock_release+0x4b/0x3e0 [ 1308.311397][T21048] ? __virt_addr_valid+0x1c8/0x5c0 [ 1308.311429][T21048] ? __virt_addr_valid+0x4a5/0x5c0 [ 1308.311461][T21048] print_report+0xca/0x240 [ 1308.311490][T21048] ? rt_spin_lock+0x88/0x3e0 [ 1308.311513][T21048] kasan_report+0x118/0x150 [ 1308.311544][T21048] ? rt_spin_lock+0x88/0x3e0 [ 1308.311572][T21048] ? __wake_up_common_lock+0x2f/0x1e0 [ 1308.311600][T21048] __kasan_check_byte+0x2a/0x40 [ 1308.311630][T21048] lock_acquire+0x8d/0x360 [ 1308.311660][T21048] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1308.311684][T21048] ? rt_spin_lock+0x1c1/0x3e0 [ 1308.311713][T21048] rt_spin_lock+0x88/0x3e0 [ 1308.311737][T21048] ? __wake_up_common_lock+0x2f/0x1e0 [ 1308.311765][T21048] ? __pfx_rt_spin_lock+0x10/0x10 [ 1308.311788][T21048] ? rt_spin_unlock+0x161/0x200 [ 1308.311815][T21048] ? __wake_up_common_lock+0x18a/0x1e0 [ 1308.311844][T21048] __wake_up_common_lock+0x2f/0x1e0 [ 1308.311871][T21048] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1308.311892][T21048] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1308.311910][T21048] snd_pcm_action+0x1f4/0x240 [ 1308.311940][T21048] loopback_trigger+0xb82/0x1b60 [ 1308.311962][T21048] ? rcu_is_watching+0x15/0xb0 [ 1308.311985][T21048] snd_pcm_do_start+0xb7/0x180 [ 1308.312027][T21048] snd_pcm_action+0xe7/0x240 [ 1308.312057][T21048] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 1308.312084][T21048] ? __pfx_interleaved_copy+0x10/0x10 [ 1308.312108][T21048] ? __pfx_default_write_copy+0x10/0x10 [ 1308.312135][T21048] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1308.312156][T21048] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1308.312181][T21048] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1308.312208][T21048] ? snd_pcm_oss_write3+0x1a2/0x320 [ 1308.312244][T21048] snd_pcm_oss_write3+0x1bc/0x320 [ 1308.312281][T21048] snd_pcm_oss_sync1+0x345/0x760 [ 1308.312311][T21048] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1308.312333][T21048] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1308.312366][T21048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1308.312399][T21048] ? __pfx_default_wake_function+0x10/0x10 [ 1308.312423][T21048] ? __asan_memset+0x22/0x50 [ 1308.312446][T21048] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1308.312473][T21048] snd_pcm_oss_sync+0x86c/0xc30 [ 1308.312498][T21048] snd_pcm_oss_release+0x102/0x250 [ 1308.312519][T21048] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1308.312538][T21048] __fput+0x45b/0xa80 [ 1308.312565][T21048] task_work_run+0x1d4/0x260 [ 1308.312587][T21048] ? __pfx_task_work_run+0x10/0x10 [ 1308.312609][T21048] ? exit_to_user_mode_loop+0x40/0x130 [ 1308.312638][T21048] exit_to_user_mode_loop+0xe9/0x130 [ 1308.312663][T21048] do_syscall_64+0x2bd/0xfa0 [ 1308.312691][T21048] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.312725][T21048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.312747][T21048] ? clear_bhb_loop+0x60/0xb0 [ 1308.312771][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.312792][T21048] RIP: 0033:0x7f5ac754f6c9 [ 1308.312822][T21048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.312841][T21048] RSP: 002b:00007ffed3728938 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1308.312873][T21048] RAX: 0000000000000000 RBX: 00007f5ac77a7da0 RCX: 00007f5ac754f6c9 [ 1308.312888][T21048] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1308.312904][T21048] RBP: 00007f5ac77a7da0 R08: 000000000000232c R09: 00000007d3728c2f [ 1308.312921][T21048] R10: 00007f5ac77a7cb0 R11: 0000000000000246 R12: 000000000013f571 [ 1308.312940][T21048] R13: 00007f5ac77a5fa0 R14: ffffffffffffffff R15: 00007ffed3728a50 [ 1308.312968][T21048] [ 1308.312979][T21048] [ 1308.312995][T21048] Allocated by task 21051: [ 1308.313012][T21048] kasan_save_track+0x3e/0x80 [ 1308.313041][T21048] __kasan_kmalloc+0x93/0xb0 [ 1308.313070][T21048] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 1308.313101][T21048] snd_pcm_attach_substream+0x5b7/0xb50 [ 1308.313125][T21048] snd_pcm_open_substream+0xb9/0x23a0 [ 1308.313157][T21048] snd_pcm_oss_open+0xf35/0x1bf0 [ 1308.313192][T21048] chrdev_open+0x4cf/0x5e0 [ 1308.313221][T21048] do_dentry_open+0x9b1/0x1350 [ 1308.313240][T21048] vfs_open+0x3b/0x350 [ 1308.313256][T21048] path_openat+0x2ef1/0x3840 [ 1308.313280][T21048] do_filp_open+0x1fa/0x410 [ 1308.313320][T21048] do_sys_openat2+0x121/0x1c0 [ 1308.313340][T21048] __x64_sys_openat+0x138/0x170 [ 1308.313361][T21048] do_syscall_64+0xfa/0xfa0 [ 1308.313394][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.313416][T21048] [ 1308.313421][T21048] Freed by task 21051: [ 1308.313433][T21048] kasan_save_track+0x3e/0x80 [ 1308.313460][T21048] __kasan_save_free_info+0x46/0x50 [ 1308.313494][T21048] __kasan_slab_free+0x5c/0x80 [ 1308.313521][T21048] kfree+0x197/0x950 [ 1308.313564][T21048] snd_pcm_detach_substream+0x1e1/0x290 [ 1308.313588][T21048] snd_pcm_oss_release+0x184/0x250 [ 1308.313608][T21048] __fput+0x45b/0xa80 [ 1308.313626][T21048] task_work_run+0x1d4/0x260 [ 1308.313646][T21048] exit_to_user_mode_loop+0xe9/0x130 [ 1308.313676][T21048] do_syscall_64+0x2bd/0xfa0 [ 1308.313709][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.313731][T21048] [ 1308.313737][T21048] The buggy address belongs to the object at ffff888020b19000 [ 1308.313737][T21048] which belongs to the cache kmalloc-2k of size 2048 [ 1308.313758][T21048] The buggy address is located 512 bytes inside of [ 1308.313758][T21048] freed 2048-byte region [ffff888020b19000, ffff888020b19800) [ 1308.313784][T21048] [ 1308.313789][T21048] The buggy address belongs to the physical page: [ 1308.313812][T21048] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20b18 [ 1308.313834][T21048] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1308.313853][T21048] flags: 0x80000000000040(head|node=0|zone=1) [ 1308.313878][T21048] page_type: f5(slab) [ 1308.313900][T21048] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1308.313922][T21048] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1308.313944][T21048] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1308.313963][T21048] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1308.313983][T21048] head: 0080000000000003 ffffea000082c601 00000000ffffffff 00000000ffffffff [ 1308.314011][T21048] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1308.314024][T21048] page dumped because: kasan: bad access detected [ 1308.314043][T21048] page_owner tracks the page as allocated [ 1308.314052][T21048] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12433, tgid 12433 (syz-executor), ts 635045132846, free_ts 634925310809 [ 1308.314096][T21048] post_alloc_hook+0x240/0x2a0 [ 1308.314127][T21048] get_page_from_freelist+0x28c0/0x2960 [ 1308.314166][T21048] __alloc_frozen_pages_noprof+0x181/0x370 [ 1308.314204][T21048] alloc_pages_mpol+0xd1/0x380 [ 1308.314237][T21048] allocate_slab+0x96/0x350 [ 1308.314259][T21048] ___slab_alloc+0xb10/0x1400 [ 1308.314279][T21048] __slab_alloc+0xc6/0x1f0 [ 1308.314297][T21048] __kmalloc_noprof+0x14b/0x7d0 [ 1308.314328][T21048] ieee80211_register_hw+0x1eb8/0x40d0 [ 1308.314354][T21048] mac80211_hwsim_new_radio+0x2efe/0x5160 [ 1308.314378][T21048] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1308.314401][T21048] genl_family_rcv_msg_doit+0x215/0x300 [ 1308.314446][T21048] genl_rcv_msg+0x60e/0x790 [ 1308.314475][T21048] netlink_rcv_skb+0x208/0x470 [ 1308.314496][T21048] genl_rcv+0x28/0x40 [ 1308.314523][T21048] netlink_unicast+0x846/0xa10 [ 1308.314557][T21048] page last free pid 12433 tgid 12433 stack trace: [ 1308.314569][T21048] __free_frozen_pages+0xfb6/0x1140 [ 1308.314601][T21048] __put_partials+0x149/0x170 [ 1308.314620][T21048] __slab_free+0x29e/0x370 [ 1308.314641][T21048] qlist_free_all+0x97/0x140 [ 1308.314667][T21048] kasan_quarantine_reduce+0x148/0x160 [ 1308.314693][T21048] __kasan_slab_alloc+0x22/0x80 [ 1308.314723][T21048] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 1308.314752][T21048] __alloc_skb+0x112/0x2d0 [ 1308.314773][T21048] netlink_ack+0x146/0xa50 [ 1308.314792][T21048] netlink_rcv_skb+0x28c/0x470 [ 1308.314813][T21048] genl_rcv+0x28/0x40 [ 1308.314840][T21048] netlink_unicast+0x846/0xa10 [ 1308.314873][T21048] netlink_sendmsg+0x805/0xb30 [ 1308.314896][T21048] __sock_sendmsg+0x21c/0x270 [ 1308.314927][T21048] __sys_sendto+0x3c7/0x520 [ 1308.314948][T21048] __x64_sys_sendto+0xde/0x100 [ 1308.314970][T21048] [ 1308.314976][T21048] Memory state around the buggy address: [ 1308.314994][T21048] ffff888020b19100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1308.315011][T21048] ffff888020b19180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1308.315026][T21048] >ffff888020b19200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1308.315040][T21048] ^ [ 1308.315051][T21048] ffff888020b19280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1308.315067][T21048] ffff888020b19300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1308.315078][T21048] ================================================================== [ 1308.315100][T21048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1308.315115][T21048] CPU: 0 UID: 0 PID: 21048 Comm: syz.3.6116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1308.315140][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1308.315153][T21048] Call Trace: [ 1308.315162][T21048] [ 1308.315171][T21048] dump_stack_lvl+0x99/0x250 [ 1308.315209][T21048] ? __asan_memcpy+0x40/0x70 [ 1308.315236][T21048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.315272][T21048] ? __pfx__printk+0x10/0x10 [ 1308.315308][T21048] vpanic+0x237/0x6d0 [ 1308.315329][T21048] ? __pfx_vpanic+0x10/0x10 [ 1308.315356][T21048] panic+0xb9/0xc0 [ 1308.315376][T21048] ? __pfx_panic+0x10/0x10 [ 1308.315396][T21048] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1308.315436][T21048] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1308.315478][T21048] ? rt_spin_lock+0x88/0x3e0 [ 1308.315502][T21048] check_panic_on_warn+0x89/0xb0 [ 1308.315525][T21048] ? rt_spin_lock+0x88/0x3e0 [ 1308.315554][T21048] end_report+0x78/0x160 [ 1308.315587][T21048] kasan_report+0x129/0x150 [ 1308.315624][T21048] ? rt_spin_lock+0x88/0x3e0 [ 1308.315655][T21048] ? __wake_up_common_lock+0x2f/0x1e0 [ 1308.315685][T21048] __kasan_check_byte+0x2a/0x40 [ 1308.315719][T21048] lock_acquire+0x8d/0x360 [ 1308.315752][T21048] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1308.315779][T21048] ? rt_spin_lock+0x1c1/0x3e0 [ 1308.315812][T21048] rt_spin_lock+0x88/0x3e0 [ 1308.315837][T21048] ? __wake_up_common_lock+0x2f/0x1e0 [ 1308.315870][T21048] ? __pfx_rt_spin_lock+0x10/0x10 [ 1308.315896][T21048] ? rt_spin_unlock+0x161/0x200 [ 1308.315927][T21048] ? __wake_up_common_lock+0x18a/0x1e0 [ 1308.315958][T21048] __wake_up_common_lock+0x2f/0x1e0 [ 1308.315997][T21048] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1308.316020][T21048] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1308.316043][T21048] snd_pcm_action+0x1f4/0x240 [ 1308.316075][T21048] loopback_trigger+0xb82/0x1b60 [ 1308.316100][T21048] ? rcu_is_watching+0x15/0xb0 [ 1308.316126][T21048] snd_pcm_do_start+0xb7/0x180 [ 1308.316163][T21048] snd_pcm_action+0xe7/0x240 [ 1308.316193][T21048] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 1308.316221][T21048] ? __pfx_interleaved_copy+0x10/0x10 [ 1308.316245][T21048] ? __pfx_default_write_copy+0x10/0x10 [ 1308.316272][T21048] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1308.316293][T21048] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1308.316317][T21048] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1308.316344][T21048] ? snd_pcm_oss_write3+0x1a2/0x320 [ 1308.316385][T21048] snd_pcm_oss_write3+0x1bc/0x320 [ 1308.316425][T21048] snd_pcm_oss_sync1+0x345/0x760 [ 1308.316460][T21048] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1308.316484][T21048] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1308.316520][T21048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1308.316575][T21048] ? __pfx_default_wake_function+0x10/0x10 [ 1308.316603][T21048] ? __asan_memset+0x22/0x50 [ 1308.316630][T21048] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1308.316661][T21048] snd_pcm_oss_sync+0x86c/0xc30 [ 1308.316691][T21048] snd_pcm_oss_release+0x102/0x250 [ 1308.316714][T21048] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1308.316737][T21048] __fput+0x45b/0xa80 [ 1308.316768][T21048] task_work_run+0x1d4/0x260 [ 1308.316793][T21048] ? __pfx_task_work_run+0x10/0x10 [ 1308.316818][T21048] ? exit_to_user_mode_loop+0x40/0x130 [ 1308.316854][T21048] exit_to_user_mode_loop+0xe9/0x130 [ 1308.316888][T21048] do_syscall_64+0x2bd/0xfa0 [ 1308.316924][T21048] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.316961][T21048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.316993][T21048] ? clear_bhb_loop+0x60/0xb0 [ 1308.317023][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.317046][T21048] RIP: 0033:0x7f5ac754f6c9 [ 1308.317068][T21048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.317089][T21048] RSP: 002b:00007ffed3728938 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1308.317114][T21048] RAX: 0000000000000000 RBX: 00007f5ac77a7da0 RCX: 00007f5ac754f6c9 [ 1308.317132][T21048] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1308.317146][T21048] RBP: 00007f5ac77a7da0 R08: 000000000000232c R09: 00000007d3728c2f [ 1308.317163][T21048] R10: 00007f5ac77a7cb0 R11: 0000000000000246 R12: 000000000013f571 [ 1308.317180][T21048] R13: 00007f5ac77a5fa0 R14: ffffffffffffffff R15: 00007ffed3728a50 [ 1308.317209][T21048] [ 1308.317580][T21048] Kernel Offset: disabled