last executing test programs: 1m18.529769944s ago: executing program 2 (id=2247): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000001cc0)=""/202, 0xca}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x9}, 0x40016002) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1a8744c, 0x0) (async) setns(r2, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x880) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') move_mount(r6, &(0x7f0000000400)='./file0/file0\x00', r3, &(0x7f0000000540)='./file0/file1\x00', 0x1) pread64(r6, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) lseek(r5, 0x2, 0x1) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xc) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_extra={0xd, &(0x7f0000000100)=0x1}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001c00014dfe00ad39b4b744db3894a0c42c630b67e10030ff4cdc182badd037fc10cbb7b6e48098d7c23681cecf952249ce9c2a9eaef371761ac7702e3eee7598ade08459d5c36287c64c92514521a41a6f670301a21c716c79"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) 1m18.511884592s ago: executing program 2 (id=2248): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYBLOB="95b02ecd751938a1add7a9bf4af8ca16dcb48822748d67c343853e9f95c5ed94ad798040e2cea44664ab8a570c2b0e09a726cd4aacd53092e3dbc7bc275bb1dc750c1f88e6a857a80121a9b0a8b6b56b3814efee333250860128055a00d9b467fba8fc60077a691092ef16"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0x3, 0x5, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r8 = fanotify_init(0x2, 0x1000) fanotify_mark(r8, 0x541, 0x1000, r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0x103}]}) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000006eb0b86f09346793b3832565a327b9a0190d4d377aa24b23395e77c03c2bec94b22d4d964a5b2fe4d340f69017aee1dc804ffaa162e7d9540a2977c06735ad50", @ANYRESDEC=r2, @ANYRES8=r5, @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xc804}, 0x80) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x8, 0x1, 'D'}, 0x0, 0x0}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) splice(r9, 0x0, r9, 0x0, 0x4, 0x4) syz_usb_control_io(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m13.391575573s ago: executing program 2 (id=2253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) 1m13.309794194s ago: executing program 2 (id=2263): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0xfa, &(0x7f0000000040)=@string={0xfa, 0x3, "647977653da1e26f37a5a2518aa57e5040e1e8ea70d0707f555cb930c6729ca355da7a6ba2d92469fe39452efff3a2550635f8d8e448b9e23170d0c2cbfc7285728a6ebeeb75d148a4b051d6e9cd3e3a9bb4e988b0eea06dfd5f501cc874dfed6179ec8ced0ff4dbcce01e7b37db106cf0dae942774a82c922dfbe1b431ac5597ec6ff09484c2d0b44f493d3783351ec1aa4b42da6e8d9f7a5d88acdb3a17cc0cf5ff9f8f3d55d7e67d382f148b1430e118078586dfa3673b0dfd10429c83cc9c8b9381009eb261589c7a2bdc727b70f8c36dccf23b8461edaf2f88cc85ae7248da6827bdf75c9243513fe0af5ab42a571b40feb7ecaccee"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0}) 1m10.052654633s ago: executing program 2 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000080)='{.\x00') prlimit64(0x0, 0xb, &(0x7f0000001b40)={0x0, 0x2}, &(0x7f0000001b80)) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000440)=0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x7}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r8, 0x180000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f00000000c0), 0x10) sendto$l2tp(r10, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x48000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r11 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x400008, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='e', 0x1}], 0x1}, 0x4048043) read$FUSE(r11, &(0x7f0000002880)={0x2020}, 0xff54) socket$inet_udplite(0x2, 0x2, 0x88) r12 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="e749e384eef9e29186801001add600000f14ff3b7e0904020000a0122400000000000000"], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r12, &(0x7f0000000840)={0x2c, &(0x7f00000014c0)={0x20, 0x31, 0x102, {0x102, 0x31, "96bc6f4f0661b259caaf64f0a4de334dcf984e3f696379a9e353d90941aba69d1b78c6ce0cfee138c36b2b4453119d86ef0357b22dbd47d6f972248b6cdb4d6843dd8a7dfc42859ad9484c1d6f6ecfbf023fecf8989736ac9e4d9f8f9f63c05a5a99d9ca1d483e7c71421a6ebc0c870e32f997b096697a385ba2e98c525b0c326ffe3892dafd2fb0de5c5bb6460945930c2bd20f5ce1b71d624ddacdff09e90f5194d21c83b7a503127ad706b9165e1e646cc238b73adb91691b221772cbf08c3e9dc17bb0e9e8af09b4c88b02f0c7eea56ed60bd57af3adc19407084d5c36263e25357a5148cfde1a9cf1cc92595567c526311ecd913887079f3a9f8bccf158"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000740)=ANY=[@ANYBLOB="f962917942135e7ad355433fd4b2fdbc000f05000067f2af63900000000000"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x6, 0x5, 's[u5', 'K[:q'}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x4, 0x4, 0x6, 0x7, 0x6}}}, &(0x7f0000001c00)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0011670000002f249ec29b2b0000046f618e89a65351215243160b540a8ff49c378942030fe4304de02fc0c8b98115b38fb95ce79f498465cebed6bff9cf5e0590e9cd7c0b5a8a020a797ce162c6bc42182d955a8a421525a520c8596bedf78a5132223359882d803c0a1c30b3"], &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x38}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)=ANY=[@ANYBLOB="e923e9d2b1bcc14c0800ee010000"], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001bc0)={0x40, 0xb, 0x2}, &(0x7f00000006c0)={0x40, 0xf, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "010a"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xbb9}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001900)={0x40, 0x1e, 0x1}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x4}}) recvmmsg(r7, &(0x7f0000001280)=[{{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/107, 0x6b}, {&(0x7f00000013c0)=""/252, 0xfc}, {&(0x7f0000000c00)=""/162, 0xa2}], 0x8, &(0x7f00000058c0)=""/4096, 0x1000}}, {{&(0x7f0000000d40)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000dc0)=""/134, 0x86}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000e80)=""/147, 0x93}, {&(0x7f0000000f40)=""/161, 0xa1}], 0x4, &(0x7f0000001000)=""/95, 0x5f}, 0x91f}, {{&(0x7f0000001080)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/112, 0x70}], 0x2, &(0x7f0000001240)=""/44, 0x2c}, 0x2}], 0x3, 0x600101a2, 0x0) 1m9.777666333s ago: executing program 2 (id=2275): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x0, "047ae66151de8814675d9ed59fe0e5e241e655ad9e3392b1c92b352edf621ffa"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0x3) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.545589928s ago: executing program 32 (id=2275): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x0, "047ae66151de8814675d9ed59fe0e5e241e655ad9e3392b1c92b352edf621ffa"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0x3) close_range(r1, 0xffffffffffffffff, 0x0) 7.769830348s ago: executing program 1 (id=2571): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x3, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0xfee}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x9, 0x9, 0x4}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8f, 0xa7, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xa4, 0x42, 0xfb}}}}}]}}]}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010040000e00400000006000100050000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6.487791618s ago: executing program 0 (id=2576): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f00320000000100"}}], 0x1c) 6.417473611s ago: executing program 1 (id=2577): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_conf_req={{0x4, 0x6, 0xf}, {0x5fd, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x7, 0x7, 0xfff6, 0xfff7}}]}}, @l2cap_conf_req={{0x4, 0x4, 0x33}, {0x1, 0xfffc, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x401, 0x401, 0x4, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x2, 0x100, 0x7, 0x1, 0x5}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0xd3f}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x40, 0x8, 0x4}}, @l2cap_conn_req={{0x2, 0xd7, 0x4}, {0x5, 0x1}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x6, 0x5, 0x3, 0xff89}}]}}, 0x76) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x3c, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x3a, 0x1c, 0x9d, 0x10, 0x1199, 0x6891, 0x89a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0x9, 0x5, 0x0, 0xff, 0xff, 0xff, 0xf8}}, {{0x9, 0x4, 0x9, 0x6, 0x0, 0xbf, 0x32, 0x1d}}]}}]}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000440)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, r6, {0x8, 0x4, 0x1ff, 0x6}}, 0x20) sendmmsg$unix(r4, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}], 0x20, 0x40004}}], 0x1, 0x40c0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0x0, 0x0}) 6.345342437s ago: executing program 0 (id=2579): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYBLOB="95b02ecd751938a1add7a9bf4af8ca16dcb48822748d67c343853e9f95c5ed94ad798040e2cea44664ab8a570c2b0e09a726cd4aacd53092e3dbc7bc275bb1dc750c1f88e6a857a80121a9b0a8b6b56b3814efee333250860128055a00d9b467fba8fc60077a691092ef16"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0x3, 0x5, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r6 = fanotify_init(0x2, 0x1000) fanotify_mark(r6, 0x541, 0x1000, r5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) 4.85404005s ago: executing program 3 (id=2589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28b00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x8000, {0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x6, 0x846fe97dc65f6e46, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1173939c787a16c1ca43f8539f3d33697c176d1bb29f35239d20000000080b000000000000000001e00000000000000947d00000200", "24431a1e77a68e174ff60000000000000010e200"}}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)="e08e") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.781833498s ago: executing program 3 (id=2590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000651000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000058a000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) recvmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000180)=""/1, 0x1}], 0x5}, 0x2001) r3 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000000819040100000000000001090200000303000000092105000b0122050009058103ff03010007"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="4024ce"], 0x0, 0x0, 0x0}, 0x0) 4.480343416s ago: executing program 1 (id=2591): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000300000000001400000045ad001c0068000060029078ac1e0001ffffffff11f3305280f125e66ce36b428aedd87f"], 0x2a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x20001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) 3.429526251s ago: executing program 1 (id=2595): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000580)={0x18, 0x0, {0x2, @local, 'pimreg\x00'}}, 0x1e) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1f20f22e666b8530000000000d95d22dcaf15e8da"], 0x5e}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x3, 0xc0, 0x7, 0x6, 0x7b, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5c, 0x8c, 0x5, 0x9, 0x7f}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000840)={0xc1, 0x0, 0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463"], 0x2de}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) recvfrom(r0, &(0x7f00000002c0)=""/166, 0xa6, 0x80000123, &(0x7f0000000380)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) (rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) (async) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf00000007000000bc"]) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03008400000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000006ce3fb88080005400000001224001180090001006d657461000000001400028008000240000000070800014000000008140000001000010000000000000000000084000a"], 0xa8}}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r8, r9, 0x3, 0xff, 0x5, 0x5, {0x4, 0xfff, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x4, 0x9, 0xd25, 0x7, 0x60b, 0xfffffff9, 0x10000, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3.3588741s ago: executing program 1 (id=2596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xaf, 0x18102) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x4147, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfd, @tick, {0x5}, {0xe}, @connect={{}, {0x1, 0x7}}}], 0xfdc1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000040)) 3.075896438s ago: executing program 0 (id=2597): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14567e, 0xa0) (async) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14567e, 0xa0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x1000, 0x1000f4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x40], [0x7f]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000}) 2.949819331s ago: executing program 0 (id=2598): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f00950000000100"}}], 0x1c) 2.93759473s ago: executing program 0 (id=2599): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x414000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x1, 0x9, 0x4, 0x4, 0x9a, 0x5, 0x6, 0x2, "d16de8bc5ed063c76ccd6309ba8ed1c2fa2edb96be5c68de4686e23a7f14b8b9"}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000100)={0xb, 0xfffffffa, {0x55, 0x9, 0x67, {0x1d, 0x7}, {0x4, 0x5}, @cond=[{0x2, 0xc40, 0xf, 0x8, 0x0, 0x8}, {0x2f, 0x5, 0x4, 0x1, 0x6, 0x3fd7}]}, {0x52, 0x3, 0x7, {0xf, 0x6}, {0x4, 0x1ff}, @rumble={0x9f0c, 0x9}}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x49, 0x3, 0x2]}, &(0x7f00000001c0)=0xa) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x5, 0x56, "4b6797aca22cff4d0cfbd3daddcf2edd53ce2861fdbb4c63518a8b30da8dacb5f1749b394d617f13e59f5b099deb4dcf779ecdedabce831974ca37fe593c850935702ba53181e461985247d5a33ea6e97f26546a2d7f"}, 0x5e) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000000380)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000400)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000440)=0x400) fcntl$setstatus(r4, 0x4, 0x40800) sendmsg$nl_netfilter(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x10, 0x6, 0x101, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x5}, [@nested={0x10, 0xed, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @nested={0x4, 0xff}]}, @typed={0xe, 0x148, 0x0, 0x0, @str='!+[+{}./!\x00'}, @nested={0x10, 0x146, 0x0, 0x1, [@nested={0x4, 0x98}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x128, 0x0, 0x0, @u32=0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044001) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f00000005c0)=0x7f, 0x4) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x404401, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x6a2, 0x6c, 0xff}]}) r10 = pidfd_getfd(r8, r9, 0x0) ioctl$TIOCMBIS(r10, 0x5416, &(0x7f00000006c0)=0x200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0xfffffffffffffffe) r11 = accept4$alg(r10, 0x0, 0x0, 0x400) sendmmsg(r11, &(0x7f0000001b80)=[{{&(0x7f0000000700)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="d171a10d20b8968e678679eee4b11507be532501c4b0d3c382ae0c70bb719fe796e6858b980280c59b107be73489fb6f90d29a91cfc68592008f9012dcf218394fe3e70ae5bfe2768aba7d5c8c", 0x4d}, {&(0x7f0000001800)="78bf98c5ccd5e920fb98d4ef757a6f6c80cba3079b1720faebbb98d512c30c5b9564ef06a7686cc797c9fde439bfd63e20cd9f4912be0efe65ed9274eb0618bb456477e7665cbed8b199e5b5eb3ab9e2cbe94037b55a7aa74094803790ac0a8ef49cfa46a63bd72cc96a340a555afa8f344d8dea79f8a7639c338c26001cb92acf", 0x81}, {&(0x7f00000018c0)="4058d72f7007273f1c42eda3aad74fe18ff5d191ba887420a0804db53a376740d8e6f7889e646561aa5855898354c0643d703bf00d2b8a475f58df8e6690ad985afed0753f2944af6521", 0x4a}, {&(0x7f0000001940)="68605993c80635d2a7df2acd9f9654d58c5056e0332f99ebbd27176db7e2de7ea658af973fb5ed64dc3d772e038bad22868b8e835ed72cebce0ceb4f845fbd33116d136dcc18c9b38e5207714fdc5ee82826b4a490294295ba666a26433b23b7e48f84ffb3527fe6a6180c7d7cc25813f9eb3d0c378dc0eee49ef4ee3ab695970c015865bcf734aef2569d4aaf889e52a460bb8dced6a43d930ca442bdc74c5ca1342de66610cbb32fc130e4994058ecd40cd5b17e802903fc6cb313c3bf8cc9bc666734a5d1382a1daecd19dcbaaddc276fb94515101bb8b4fc0e20fffa817cb7340c2f6b4aba0864c5823cfc160511ceb70d2e", 0xf4}], 0x5, &(0x7f0000001ac0)=[{0x98, 0x108, 0x1ff, "3d90bdb7ad4b245f9a3e9771fd75b829d06295a1ec2e914353f4ffcb17d38cd2849dc5a320a671de3ad471513fc5f22893a4d3606e21a56f6dc9515c1fc494ab471aed3fb264bdf19c648c1d10581231c440909b77bfff0d78103773446db3bfb62456c55310a29bf421b3ccf652765e4b8545530e77b8f4fe96b5113bfb04d0fcef"}], 0x98}}], 0x1, 0x4001) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000001c00)={0x0, 0x473, 0x5, '\x00', &(0x7f0000001bc0)=0x4}) acct(&(0x7f0000001c40)='./file0\x00') connect$802154_dgram(r10, &(0x7f0000001c80)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) 2.863367343s ago: executing program 0 (id=2600): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_conf_req={{0x4, 0x6, 0xf}, {0x5fd, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x7, 0x7, 0xfff6, 0xfff7}}]}}, @l2cap_conf_req={{0x4, 0x4, 0x33}, {0x1, 0xfffc, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0xc1, 0x0, 0x401, 0x401, 0x4, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x2, 0x100, 0x7, 0x1, 0x5}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0xd3f}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x40, 0x8, 0x4}}, @l2cap_conn_req={{0x2, 0xd7, 0x4}, {0x5, 0x1}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x6, 0x5, 0x3, 0xff89}}]}}, 0x76) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x3c, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x3a, 0x1c, 0x9d, 0x10, 0x1199, 0x6891, 0x89a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0x9, 0x5, 0x0, 0xff, 0xff, 0xff, 0xf8}}, {{0x9, 0x4, 0x9, 0x6, 0x0, 0xbf, 0x32, 0x1d}}]}}]}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.35363331s ago: executing program 1 (id=2601): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x1, 0x4) (async) preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x1, 0x4) connect$caif(r0, &(0x7f0000000940)=@dgm={0x25, 0xa}, 0x18) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usbip_server_init(0x1) (async) r3 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)={0x1030, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}]}, 0x1030}, 0x1, 0x0, 0x0, 0x40040}, 0x4004045) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x20, 0x12, 0x4, "bcaf83c2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.484904565s ago: executing program 3 (id=2605): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYBLOB="95b02ecd751938a1add7a9bf4af8ca16dcb48822748d67c343853e9f95c5ed94ad798040e2cea44664ab8a570c2b0e09a726cd4aacd53092e3dbc7bc275bb1dc750c1f88e6a857a80121a9b0a8b6b56b3814efee333250860128055a00d9b467fba8fc60077a691092ef16"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0x3, 0x5, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r6 = fanotify_init(0x2, 0x1000) fanotify_mark(r6, 0x541, 0x1000, r5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) 853.739094ms ago: executing program 4 (id=2607): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f00960000000100"}}], 0x1c) 849.603557ms ago: executing program 4 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, 0x0, 0x0, 0x8000}]) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 804.18874ms ago: executing program 3 (id=2609): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140)=0x6, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2442, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000000000000600000004000000002c"]) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2442, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000000000000600000004000000002c"]) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 760.722373ms ago: executing program 4 (id=2610): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1d4) getdents64(r0, &(0x7f00000001c0)=""/36, 0x24) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r1, 0xe7d4c009da6c1985}, {r1, 0x201}], 0x2, 0x4) getdents64(r0, 0xfffffffffffffffe, 0x29) 628.693179ms ago: executing program 4 (id=2611): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 607.146473ms ago: executing program 3 (id=2612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 605.210358ms ago: executing program 4 (id=2613): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x2, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r2, 0x0, 0x0, 0x4000000, 0x0, 0x0) (async) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={r0, r1+60000000}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @mcast1, 0x5}, 0x1c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) close(0x3) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x40) 465.581542ms ago: executing program 4 (id=2614): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2001) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000002c0)=0x7c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40) (async) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x25) (async) syz_open_dev$vcsu(0x0, 0x8b, 0x8000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/connector\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017525582cc858e93fb63edcc1b4300102030109121b00010406900d0904a4010125f90ff409050c0200"], 0x0) 0s ago: executing program 3 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000002c0)={0x1, 0x0, [{0x75f, 0x4, 0x1, [0x6000000, 0x1, 0x4, 0x1104, 0xffff, 0xa, 0x7, 0x101]}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40044}}], 0x1, 0x5) (async) sendmmsg$unix(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40044}}], 0x1, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000000)) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b28, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="050034006e000000080026006c0900001e0094bb4700190200000000000000040002000000000000000b0000000c00001e001f00"], 0x74}}, 0x4800) kernel console output (not intermixed with test programs): h-speed USB device number 73 using dummy_hcd [ 503.200008][ T10] hid_parser_main: 27 callbacks suppressed [ 503.200033][ T10] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 503.213543][ T10] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 503.220923][ T10] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 503.228282][ T10] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 503.235361][ T10] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 503.245181][ T10] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 503.283751][ T10] corsair 0003:1B1C:1B02.001D: Read invalid backlight brightness: 88. [ 503.293185][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.317596][ T5975] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 503.327030][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.345365][ T5975] usb 4-1: config 0 descriptor?? [ 503.350485][T12175] usb 2-1: Using ep0 maxpacket: 32 [ 503.373039][T12175] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 503.381412][T12175] usb 2-1: config 0 has no interface number 0 [ 503.387799][T12175] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 503.401534][T12175] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 503.415806][T12175] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 503.425117][T12175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.435315][T12175] usb 2-1: Product: syz [ 503.439625][T12175] usb 2-1: Manufacturer: syz [ 503.444404][T12175] usb 2-1: SerialNumber: syz [ 503.452535][T12175] usb 2-1: config 0 descriptor?? [ 503.462760][T12175] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 503.472773][T12175] em28xx 2-1:0.132: Video interface 132 found: isoc [ 503.499819][ T10] usb 3-1: USB disconnect, device number 52 [ 503.679334][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.690498][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.809002][ T5975] nintendo 0003:057E:200E.001E: unbalanced collection at end of report description [ 503.819609][ T5975] nintendo 0003:057E:200E.001E: HID parse failed [ 503.827949][ T5975] nintendo 0003:057E:200E.001E: probe - fail = -22 [ 503.834717][ T5975] nintendo 0003:057E:200E.001E: probe with driver nintendo failed with error -22 [ 503.933565][T12175] em28xx 2-1:0.132: chip ID is em2884 [ 504.084512][T13029] binder: 13027:13029 ioctl c0306201 200000000540 returned -14 [ 504.396582][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.405560][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.438631][T12175] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 504.450956][T12175] em28xx 2-1:0.132: board has no eeprom [ 504.520737][T12175] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 504.528663][T12175] em28xx 2-1:0.132: analog set to isoc mode. [ 504.536279][ T5861] em28xx 2-1:0.132: Registering V4L2 extension [ 504.547768][T12175] usb 2-1: USB disconnect, device number 73 [ 504.560867][T12175] em28xx 2-1:0.132: Disconnecting em28xx [ 504.571783][ T5975] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 504.673994][ T5861] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 504.684515][ T5861] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 504.695478][ T5861] em28xx 2-1:0.132: No AC97 audio processor [ 504.704576][ T5861] usb 2-1: Decoder not found [ 504.709222][ T5861] em28xx 2-1:0.132: failed to create media graph [ 504.716098][ T5861] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 504.726729][ T5861] em28xx 2-1:0.132: Remote control support is not available for this card. [ 504.735640][T12175] em28xx 2-1:0.132: Closing input extension [ 504.745561][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 504.752526][T12175] em28xx 2-1:0.132: Freeing device [ 504.759652][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.781716][ T5975] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.790900][ T5975] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 504.805886][ T5975] usb 3-1: Manufacturer: syz [ 504.818629][ T5975] usb 3-1: config 0 descriptor?? [ 505.058786][ T5975] usb 3-1: USB disconnect, device number 53 [ 505.385337][T13056] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2243'. [ 506.112821][ T5975] usb 4-1: USB disconnect, device number 63 [ 506.500071][ T5975] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 506.681238][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 506.689361][ T5975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 506.698772][ T5975] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 506.708284][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.716417][ T5975] usb 4-1: Product: syz [ 506.720754][ T5975] usb 4-1: Manufacturer: syz [ 506.725532][ T5975] usb 4-1: SerialNumber: syz [ 506.732614][ T5975] usb 4-1: config 0 descriptor?? [ 506.955370][ T5975] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 506.962321][ T5975] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 506.976125][ T5975] usb 4-1: USB disconnect, device number 64 [ 507.622305][ T5860] Bluetooth: hci0: command 0x1003 tx timeout [ 507.629946][ T5871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 507.804389][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 507.902253][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.913420][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.924030][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.932233][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.945698][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.997690][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 508.014452][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 508.037654][T13095] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2256'. [ 508.040059][ T10] usb 2-1: config 0 has no interface number 0 [ 508.069219][T13088] vxcan1 speed is unknown, defaulting to 1000 [ 508.075729][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 508.094428][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 508.127455][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 508.143317][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.151664][ T10] usb 2-1: Product: syz [ 508.155960][ T10] usb 2-1: Manufacturer: syz [ 508.160668][ T10] usb 2-1: SerialNumber: syz [ 508.174303][ T10] usb 2-1: config 0 descriptor?? [ 508.190913][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 508.200827][ T10] em28xx 2-1:0.132: Video interface 132 found: isoc [ 508.307109][ T5975] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 508.338926][T13088] wlan1 speed is unknown, defaulting to 1000 [ 508.407480][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.418244][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.456933][ T5975] usb 4-1: device descriptor read/64, error -71 [ 508.563537][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 508.662862][ T10] em28xx 2-1:0.132: chip ID is em2884 [ 508.713202][ T5975] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 508.733354][T13088] chnl_net:caif_netlink_parms(): no params data found [ 508.849128][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.856472][ T5975] usb 4-1: device descriptor read/64, error -71 [ 508.861679][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.870590][T13088] bridge_slave_0: entered allmulticast mode [ 508.879320][T13088] bridge_slave_0: entered promiscuous mode [ 508.889202][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.896566][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.903850][T13088] bridge_slave_1: entered allmulticast mode [ 508.912638][T13088] bridge_slave_1: entered promiscuous mode [ 508.953187][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.968710][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.970433][ T5975] usb usb4-port1: attempt power cycle [ 509.020734][T13088] team0: Port device team_slave_0 added [ 509.031773][T13088] team0: Port device team_slave_1 added [ 509.072408][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.080755][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.109299][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.122715][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.130018][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.161857][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.190141][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 509.203680][ T10] em28xx 2-1:0.132: board has no eeprom [ 509.236152][T13088] hsr_slave_0: entered promiscuous mode [ 509.243339][T13088] hsr_slave_1: entered promiscuous mode [ 509.255541][T13088] debugfs: 'hsr0' already exists in 'hsr' [ 509.261707][T13088] Cannot create hsr debugfs directory [ 509.269550][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 509.277532][ T10] em28xx 2-1:0.132: analog set to isoc mode. [ 509.290929][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 509.319607][ T10] usb 2-1: USB disconnect, device number 74 [ 509.340441][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 509.347034][ T5975] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 509.356476][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 509.393669][ T5975] usb 4-1: device descriptor read/8, error -71 [ 509.470313][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 509.486332][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 509.493643][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 509.510806][ T9] usb 2-1: Decoder not found [ 509.515620][ T9] em28xx 2-1:0.132: failed to create media graph [ 509.522020][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 509.532497][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 509.541571][ T10] em28xx 2-1:0.132: Closing input extension [ 509.553453][ T10] em28xx 2-1:0.132: Freeing device [ 509.560369][T13088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.659817][ T5975] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 509.690177][T13088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.702803][ T5975] usb 4-1: device descriptor read/8, error -71 [ 509.775290][T13088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.827154][ T5975] usb usb4-port1: unable to enumerate USB device [ 509.866249][T13088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.026768][T13088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.037617][T13088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.048093][T13088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.061907][T13088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 510.148672][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.170217][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.184577][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.191840][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.205423][ T5868] Bluetooth: hci0: command tx timeout [ 510.212795][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.220270][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.439878][T13088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.494206][T13088] veth0_vlan: entered promiscuous mode [ 510.509379][T13088] veth1_vlan: entered promiscuous mode [ 510.543628][T13088] veth0_macvtap: entered promiscuous mode [ 510.554938][T13088] veth1_macvtap: entered promiscuous mode [ 510.576532][T13088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.598215][T13088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.616139][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.625392][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.637546][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.650997][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.769454][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.780622][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.821738][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.829940][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.194617][ T10] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 511.344454][ T10] usb 3-1: device descriptor read/64, error -71 [ 511.622963][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 511.686574][ T5851] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 511.772966][ T10] usb 3-1: device descriptor read/64, error -71 [ 511.816069][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 511.836161][ T5851] usb 2-1: device descriptor read/64, error -71 [ 511.890243][ T10] usb usb3-port1: attempt power cycle [ 512.007396][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 512.014232][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 512.023235][ T9] usb 4-1: config 0 has no interface number 0 [ 512.030646][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 512.042662][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 512.058313][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 512.067728][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.076477][ T9] usb 4-1: Product: syz [ 512.080684][ T9] usb 4-1: Manufacturer: syz [ 512.085383][ T9] usb 4-1: SerialNumber: syz [ 512.092276][ T9] usb 4-1: config 0 descriptor?? [ 512.097757][ T5851] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 512.110633][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 512.120902][ T9] em28xx 4-1:0.132: Video interface 132 found: isoc [ 512.264098][ T5851] usb 2-1: device descriptor read/64, error -71 [ 512.270486][ T10] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 512.297652][ T10] usb 3-1: device descriptor read/8, error -71 [ 512.326292][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.336443][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.392963][ T5851] usb usb2-port1: attempt power cycle [ 512.424665][ T5868] Bluetooth: hci0: command tx timeout [ 512.574151][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 512.584250][ T9] em28xx 4-1:0.132: chip ID is em2884 [ 512.596586][ T10] usb 3-1: device descriptor read/8, error -71 [ 512.714835][ T10] usb usb3-port1: unable to enumerate USB device [ 512.766793][ T5851] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 512.790173][ T5851] usb 2-1: device descriptor read/8, error -71 [ 513.044898][ T5851] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 513.068985][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 513.078108][ T5851] usb 2-1: device descriptor read/8, error -71 [ 513.084341][ T9] em28xx 4-1:0.132: board has no eeprom [ 513.151832][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 513.159914][ T9] em28xx 4-1:0.132: analog set to isoc mode. [ 513.166050][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 513.184398][ T9] usb 4-1: USB disconnect, device number 69 [ 513.195595][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 513.205476][ T5851] usb usb2-port1: unable to enumerate USB device [ 513.298286][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 513.306472][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 513.314549][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 513.322911][ T10] usb 4-1: Decoder not found [ 513.327569][ T10] em28xx 4-1:0.132: failed to create media graph [ 513.335975][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 513.344159][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 513.353126][ T9] em28xx 4-1:0.132: Closing input extension [ 513.364070][ T9] em28xx 4-1:0.132: Freeing device [ 513.669005][T13164] openvswitch: netlink: Missing key (keys=40, expected=100) [ 513.986046][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 514.146518][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 514.161145][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.170103][ T10] usb 4-1: config 0 has no interface number 0 [ 514.181515][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 514.191673][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.200706][ T10] usb 4-1: Product: syz [ 514.205827][ T10] usb 4-1: Manufacturer: syz [ 514.210621][ T10] usb 4-1: SerialNumber: syz [ 514.218679][ T10] usb 4-1: config 0 descriptor?? [ 514.234753][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 514.245422][ T10] usb 4-1: selecting invalid altsetting 1 [ 514.261155][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 514.272183][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 514.289544][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 514.300264][ T10] usb 4-1: media controller created [ 514.326339][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.449801][ T10] usb 4-1: DVB: registering adapter 3 frontend 0 (Zarlink ZL10353 DVB-T)... [ 514.458915][ T10] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 514.528381][ T10] DVB: Unable to find symbol mxl5005s_attach() [ 514.661277][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 514.770890][ T10] usb 4-1: USB disconnect, device number 70 [ 515.112707][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.123483][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.133946][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.145019][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.155813][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.197286][T13178] vxcan1 speed is unknown, defaulting to 1000 [ 515.269359][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 515.385605][T13178] wlan1 speed is unknown, defaulting to 1000 [ 515.419084][ T10] usb 2-1: device descriptor read/64, error -71 [ 515.558072][ T5975] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 515.676713][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 515.708929][T13178] chnl_net:caif_netlink_parms(): no params data found [ 515.720616][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 515.728113][ T5975] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 515.744160][ T5975] usb 4-1: config 0 has no interface number 0 [ 515.750458][ T5975] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 515.767567][ T5975] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 515.781880][ T5975] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 515.791315][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.799480][ T5975] usb 4-1: Product: syz [ 515.803691][ T5975] usb 4-1: Manufacturer: syz [ 515.808448][ T5975] usb 4-1: SerialNumber: syz [ 515.816457][ T5975] usb 4-1: config 0 descriptor?? [ 515.826247][ T10] usb 2-1: device descriptor read/64, error -71 [ 515.835241][ T5975] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 515.846078][ T5975] em28xx 4-1:0.132: Video interface 132 found: isoc [ 515.884136][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.891488][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.899213][T13178] bridge_slave_0: entered allmulticast mode [ 515.907569][T13178] bridge_slave_0: entered promiscuous mode [ 515.916214][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.930438][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.938353][T13178] bridge_slave_1: entered allmulticast mode [ 515.948574][T13178] bridge_slave_1: entered promiscuous mode [ 515.952050][ T10] usb usb2-port1: attempt power cycle [ 515.997536][T13178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.012277][T13178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.055318][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.068782][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.080723][T13178] team0: Port device team_slave_0 added [ 516.090696][T13178] team0: Port device team_slave_1 added [ 516.128531][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.135815][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.161888][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.175899][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.182951][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.209451][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.270973][T13178] hsr_slave_0: entered promiscuous mode [ 516.278510][T13178] hsr_slave_1: entered promiscuous mode [ 516.284930][T13178] debugfs: 'hsr0' already exists in 'hsr' [ 516.290770][T13178] Cannot create hsr debugfs directory [ 516.328946][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 516.340608][ T5975] em28xx 4-1:0.132: chip ID is em2884 [ 516.379488][ T10] usb 2-1: device descriptor read/8, error -71 [ 516.549216][T13178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 516.560919][T13178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.572205][T13178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.584076][T13178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 516.625916][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.633174][T13178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.640765][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.647983][T13178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.656454][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 516.692780][ T10] usb 2-1: device descriptor read/8, error -71 [ 516.746730][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.768136][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.784392][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.808368][T13178] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.815906][ T10] usb usb2-port1: unable to enumerate USB device [ 516.829513][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.836767][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.860243][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.867487][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.914961][ T5975] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 516.924542][ T5975] em28xx 4-1:0.132: board has no eeprom [ 516.991923][ T5975] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 517.000126][ T5975] em28xx 4-1:0.132: analog set to isoc mode. [ 517.010419][ T1217] em28xx 4-1:0.132: Registering V4L2 extension [ 517.034916][ T5975] usb 4-1: USB disconnect, device number 71 [ 517.073278][ T5975] em28xx 4-1:0.132: Disconnecting em28xx [ 517.197603][ T1217] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 517.207949][ T1217] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 517.215130][ T1217] em28xx 4-1:0.132: No AC97 audio processor [ 517.219615][T13178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.223974][ T1217] usb 4-1: Decoder not found [ 517.233020][ T1217] em28xx 4-1:0.132: failed to create media graph [ 517.244703][ T1217] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 517.254078][ T1217] em28xx 4-1:0.132: Remote control support is not available for this card. [ 517.269351][ T5975] em28xx 4-1:0.132: Closing input extension [ 517.290400][ T5975] em28xx 4-1:0.132: Freeing device [ 517.378234][ T5868] Bluetooth: hci0: command tx timeout [ 517.534503][T13209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.611385][T13178] veth0_vlan: entered promiscuous mode [ 517.638822][T13178] veth1_vlan: entered promiscuous mode [ 517.680038][T13178] veth0_macvtap: entered promiscuous mode [ 517.691524][T13178] veth1_macvtap: entered promiscuous mode [ 517.713538][T13178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.724011][ T30] audit: type=1326 audit(6048796831.931:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.3.2283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f6898ebe9 code=0x0 [ 517.745844][T13178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.760912][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.770804][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.784876][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.794383][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.850472][ T30] audit: type=1326 audit(6048796832.053:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.3.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6898ebe9 code=0x7fc00000 [ 517.927939][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.937597][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.985174][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.995795][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.199944][ T5851] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 518.393840][ T5851] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 518.416859][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.428805][ T5851] usb 4-1: Product: syz [ 518.435199][ T5851] usb 4-1: Manufacturer: syz [ 518.440145][ T5851] usb 4-1: SerialNumber: syz [ 518.451389][ T5851] usb 4-1: config 0 descriptor?? [ 518.674885][ T5851] usb 4-1: ignoring: probably an ADSL modem [ 519.066428][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 519.106194][ T5851] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 519.226792][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 519.238590][ T10] usb 5-1: config 51 has an invalid interface number: 123 but max is 0 [ 519.246908][ T10] usb 5-1: config 51 has no interface number 0 [ 519.254030][ T10] usb 5-1: config 51 interface 123 has no altsetting 0 [ 519.265837][ T10] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 519.283648][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.297144][ T10] usb 5-1: Product: syz [ 519.304424][ T10] usb 5-1: Manufacturer: syz [ 519.309095][ T10] usb 5-1: SerialNumber: syz [ 519.322039][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.336360][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.352148][ T5975] usb 4-1: USB disconnect, device number 72 [ 519.397849][T12175] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 519.568808][T12175] usb 2-1: Using ep0 maxpacket: 32 [ 519.575590][ T10] usb 5-1: unsupported MDLM descriptors [ 519.581769][T12175] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.601489][ T5868] Bluetooth: hci0: command tx timeout [ 519.610492][T12175] usb 2-1: config 0 interface 0 has no altsetting 0 [ 519.618683][ T10] usb 5-1: USB disconnect, device number 2 [ 519.620848][T12175] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 519.643052][T12175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.684706][T12175] usb 2-1: config 0 descriptor?? [ 520.192670][T12175] asus 0003:048D:CE50.001F: unknown main item tag 0x0 [ 520.213123][T12175] asus 0003:048D:CE50.001F: unknown main item tag 0x0 [ 520.230108][T12175] asus 0003:048D:CE50.001F: unknown main item tag 0x0 [ 520.237404][T12175] asus 0003:048D:CE50.001F: unknown main item tag 0x0 [ 520.245058][T12175] asus 0003:048D:CE50.001F: unknown main item tag 0x0 [ 520.267963][T12175] asus 0003:048D:CE50.001F: hidraw0: USB HID v80.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 520.280942][T12175] asus 0003:048D:CE50.001F: Asus input not registered [ 520.293593][T12175] asus 0003:048D:CE50.001F: probe with driver asus failed with error -12 [ 520.460626][T12175] usb 2-1: USB disconnect, device number 83 [ 520.745418][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 520.927119][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 520.941442][ T10] usb 5-1: config 7 has an invalid interface number: 73 but max is 3 [ 520.951825][ T10] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 520.960948][ T10] usb 5-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 520.971656][ T10] usb 5-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 520.981122][ T10] usb 5-1: config 7 has no interface number 0 [ 520.987319][ T10] usb 5-1: config 7 has no interface number 1 [ 520.993937][ T10] usb 5-1: config 7 interface 73 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 521.007436][ T10] usb 5-1: config 7 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 521.021899][ T10] usb 5-1: config 7 interface 73 has no altsetting 0 [ 521.029189][ T10] usb 5-1: config 7 interface 3 has no altsetting 0 [ 521.039178][ T10] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffae, bcdDevice=f4.f1 [ 521.056161][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.064213][ T10] usb 5-1: Product: syz [ 521.076760][ T10] usb 5-1: Manufacturer: syz [ 521.084659][ T10] usb 5-1: SerialNumber: syz [ 521.206537][T13274] sp0: Synchronizing with TNC [ 521.226088][T13273] [U] [ 521.340884][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.358236][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.375292][ T10] option 5-1:7.73: GSM modem (1-port) converter detected [ 521.404562][ T10] usb 5-1: USB disconnect, device number 3 [ 521.424861][ T10] option 5-1:7.73: device disconnected [ 521.428588][T13278] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 521.460520][T13278] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.473352][T13278] bond0: (slave team0): Enslaving as an active interface with an up link [ 521.592276][T13292] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 521.598695][T13292] PKCS7: Only support pkcs7_signedData type [ 521.825740][ T5868] Bluetooth: hci0: command tx timeout [ 521.857703][ T5851] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 521.900431][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 522.029888][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 522.061830][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 522.071229][ T5851] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 522.083979][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 522.092355][ T5851] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 522.105725][ T10] usb 2-1: config 0 has no interface number 0 [ 522.113054][ T5851] usb 4-1: config 1 has no interface number 1 [ 522.119746][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 522.132166][T13302] IPVS: Unknown mcast interface: pimreg0 [ 522.135995][ T5851] usb 4-1: too many endpoints for config 1 interface 4 altsetting 8: 140, using maximum allowed: 30 [ 522.159357][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 522.177952][ T5851] usb 4-1: config 1 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 522.191895][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 522.198715][ T5851] usb 4-1: config 1 interface 4 has no altsetting 0 [ 522.208205][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 522.218011][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.227329][ T5851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.236822][ T10] usb 2-1: Product: syz [ 522.241016][ T10] usb 2-1: Manufacturer: syz [ 522.245683][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.255154][ T10] usb 2-1: SerialNumber: syz [ 522.261491][ T5851] usb 4-1: Product: ࡃ [ 522.267005][ T10] usb 2-1: config 0 descriptor?? [ 522.272684][ T5851] usb 4-1: Manufacturer: ﴮ庥ﴑ虳孩逜ﴋ괟沰荏鵟覻잻踫쉁甪휐抂㞽帋믴熅梻狮檈떫∽遼崫詤 [ 522.281538][T13295] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 522.286985][ T5851] usb 4-1: SerialNumber: 흩솀棃䤂᠍슐ꏎ畎⨌됹ॶ吵纪ӑꕾ缻㾆焛 [ 522.303416][T13295] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 522.370991][T12175] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 522.511686][T12175] usb 5-1: device descriptor read/64, error -71 [ 522.532421][T13295] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 522.539362][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.541722][T13295] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 522.556791][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.580755][ T5851] usb 4-1: 0:2 : does not exist [ 522.608728][ T5851] usb 4-1: USB disconnect, device number 73 [ 522.767232][T12175] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 522.905880][T12175] usb 5-1: device descriptor read/64, error -71 [ 523.040670][T12175] usb usb5-port1: attempt power cycle [ 523.211190][T13313] vxcan1 speed is unknown, defaulting to 1000 [ 523.221712][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 523.285578][T13319] syzkaller1: entered promiscuous mode [ 523.291710][T13319] syzkaller1: entered allmulticast mode [ 523.430244][T12175] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 523.466650][T12175] usb 5-1: device descriptor read/8, error -71 [ 523.550061][T13313] wlan1 speed is unknown, defaulting to 1000 [ 523.772414][T12175] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 523.826214][T12175] usb 5-1: device descriptor read/8, error -71 [ 523.943763][T12175] usb usb5-port1: unable to enumerate USB device [ 524.050256][ T5868] Bluetooth: hci0: command tx timeout [ 524.381654][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 524.542364][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 524.550861][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 524.561777][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 524.572989][ T9] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 524.581501][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 524.590027][ T9] usb 4-1: config 0 has no interface number 0 [ 524.604641][ T10] usb 2-1: USB disconnect, device number 84 [ 524.612885][ T9] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 524.622380][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.634809][ T9] usb 4-1: Product: syz [ 524.639291][ T9] usb 4-1: Manufacturer: syz [ 524.646232][ T9] usb 4-1: SerialNumber: syz [ 524.656902][ T9] usb 4-1: config 0 descriptor?? [ 524.899112][ T9] usbhid 4-1:0.78: couldn't find an input interrupt endpoint [ 524.914771][ T9] usb 4-1: USB disconnect, device number 74 [ 525.739991][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 525.889988][ T5861] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 525.900371][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 525.908185][ T9] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 525.917217][ T9] usb 5-1: config 0 has no interface number 0 [ 525.926571][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 525.943204][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.957861][ T9] usb 5-1: Product: syz [ 525.962122][ T9] usb 5-1: Manufacturer: syz [ 525.968817][ T9] usb 5-1: SerialNumber: syz [ 525.988188][ T9] usb 5-1: config 0 descriptor?? [ 526.003260][ T9] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 526.018868][ T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 526.061138][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 526.073779][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.096537][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.117945][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 526.141909][ T5861] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 526.152255][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.167749][ T5861] usb 4-1: config 0 descriptor?? [ 526.230000][ T9] usb 5-1: USB disconnect, device number 8 [ 526.244379][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 526.260915][ T9] kobil_sct 5-1:0.148: device disconnected [ 526.275282][ T5868] Bluetooth: hci0: command tx timeout [ 526.632288][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0020/input/input38 [ 526.809584][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0020/input/input39 [ 526.918459][ T5861] kye 0003:0458:5011.0020: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 527.126826][T13366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2335'. [ 527.143689][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2335'. [ 527.156715][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 527.329653][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.340769][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.359134][ T9] usb 5-1: config 0 descriptor?? [ 527.374877][ T9] cp210x 5-1:0.0: cp210x converter detected [ 527.421459][T13375] dvmrp0: entered allmulticast mode [ 527.720673][T13384] kvm: pic: non byte write [ 527.785967][T13388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.795361][T13388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.805132][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 527.825623][ T9] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 527.834826][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 527.845436][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 527.858127][ T9] usb 5-1: USB disconnect, device number 9 [ 527.875432][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.885687][ T9] cp210x 5-1:0.0: device disconnected [ 528.403065][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 528.538789][T13394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.550511][T13394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.560757][T13394] program syz.3.2345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.585914][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 528.594157][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 528.603210][ T9] usb 2-1: config 0 has no interface number 0 [ 528.609740][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 528.621383][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 528.636137][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 528.645573][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.653737][T13305] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 528.661623][ T9] usb 2-1: Product: syz [ 528.665838][ T9] usb 2-1: Manufacturer: syz [ 528.672077][ T9] usb 2-1: SerialNumber: syz [ 528.681199][ T9] usb 2-1: config 0 descriptor?? [ 528.697053][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 528.707218][ T9] em28xx 2-1:0.132: Video interface 132 found: isoc [ 528.830813][T13305] usb 5-1: Using ep0 maxpacket: 32 [ 528.838325][T13305] usb 5-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 528.849489][T13305] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.861602][T13305] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 528.870857][T13305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.879192][T13305] usb 5-1: Product: syz [ 528.883652][T13305] usb 5-1: Manufacturer: syz [ 528.888411][T13305] usb 5-1: SerialNumber: syz [ 528.897151][T13305] usb 5-1: config 0 descriptor?? [ 528.912749][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.922182][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.188279][ T9] em28xx 2-1:0.132: chip ID is em2884 [ 529.238180][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.257100][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.482524][T13305] usb 5-1: USB disconnect, device number 10 [ 529.679564][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 529.689013][ T9] em28xx 2-1:0.132: board has no eeprom [ 529.761318][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 529.769321][ T9] em28xx 2-1:0.132: analog set to isoc mode. [ 529.780386][T13305] em28xx 2-1:0.132: Registering V4L2 extension [ 529.791444][ T9] usb 2-1: USB disconnect, device number 85 [ 529.799286][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 529.973407][T13305] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 529.980834][T13305] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 530.002458][T13305] em28xx 2-1:0.132: No AC97 audio processor [ 530.013167][T13305] usb 2-1: Decoder not found [ 530.017834][T13305] em28xx 2-1:0.132: failed to create media graph [ 530.033756][T13305] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 530.047453][T13305] em28xx 2-1:0.132: Remote control support is not available for this card. [ 530.059292][ T9] em28xx 2-1:0.132: Closing input extension [ 530.081578][ T9] em28xx 2-1:0.132: Freeing device [ 530.606405][T13305] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 530.779338][T13305] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 530.787617][T13305] usb 2-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 530.798472][T13305] usb 2-1: config 0 has no interface number 0 [ 530.811202][T13305] usb 2-1: config 0 interface 84 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.834448][T13305] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 530.850802][T13305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.860966][T13305] usb 2-1: Product: syz [ 530.874216][T13305] usb 2-1: Manufacturer: syz [ 530.879183][T13305] usb 2-1: SerialNumber: syz [ 530.906240][T13305] usb 2-1: config 0 descriptor?? [ 531.141573][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'. [ 531.152064][T13426] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 531.184216][T13426] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2354'. [ 531.201262][T13426] NCSI netlink: No device for ifindex 0 [ 531.222629][T13428] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 531.294799][T13420] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13420 comm: syz.1.2352) [ 531.459441][ T30] audit: type=1800 audit(6048796844.712:54): pid=13420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2352" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=54615 res=0 errno=0 [ 531.606494][T13305] ljca 2-1:0.84: bulk endpoints not found [ 531.621163][T13305] usb 2-1: USB disconnect, device number 86 [ 531.677247][ T5861] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 531.859231][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 531.921734][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 531.955161][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 531.962839][ T5861] usb 5-1: can't read configurations, error -71 [ 532.361469][T13446] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.369780][T13446] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.388551][T13446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2359'. [ 533.151940][ T5861] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 533.333627][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 533.355424][ T5861] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 533.364581][ T5861] usb 5-1: config 0 has no interface number 0 [ 533.374704][ T5861] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 533.395624][ T5861] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 533.411721][ T5861] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 533.425364][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.435320][ T5861] usb 5-1: Product: syz [ 533.439564][ T5861] usb 5-1: Manufacturer: syz [ 533.456901][ T5861] usb 5-1: SerialNumber: syz [ 533.468934][ T5861] usb 5-1: config 0 descriptor?? [ 533.487443][ T5861] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 533.518288][ T5861] em28xx 5-1:0.132: Video interface 132 found: isoc [ 533.709482][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.748776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 533.751721][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.757169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.056801][ T5861] em28xx 5-1:0.132: chip ID is em2884 [ 534.349650][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 534.451810][ T5861] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 534.460910][ T5861] em28xx 5-1:0.132: board has no eeprom [ 534.524635][ T5861] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 534.534994][ T5861] em28xx 5-1:0.132: analog set to isoc mode. [ 534.537077][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 534.542824][ T1217] em28xx 5-1:0.132: Registering V4L2 extension [ 534.575388][ T5861] usb 5-1: USB disconnect, device number 12 [ 534.581121][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.599646][ T5861] em28xx 5-1:0.132: Disconnecting em28xx [ 534.616733][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 534.667729][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.696043][ T9] usb 2-1: config 0 descriptor?? [ 534.985273][ T1217] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 535.023642][ T1217] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 535.046793][ T1217] em28xx 5-1:0.132: No AC97 audio processor [ 535.073909][ T1217] usb 5-1: Decoder not found [ 535.087582][ T1217] em28xx 5-1:0.132: failed to create media graph [ 535.096024][ T1217] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 535.117045][ T1217] em28xx 5-1:0.132: Remote control support is not available for this card. [ 535.131807][ T5861] em28xx 5-1:0.132: Closing input extension [ 535.146989][ T5861] em28xx 5-1:0.132: Freeing device [ 535.201562][ T9] creative-sb0540 0003:041E:3100.0021: item fetching failed at offset 0/5 [ 535.257012][ T9] creative-sb0540 0003:041E:3100.0021: parse failed [ 535.268397][ T9] creative-sb0540 0003:041E:3100.0021: probe with driver creative-sb0540 failed with error -22 [ 535.515656][ T5861] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 535.527027][ T1217] usb 2-1: USB disconnect, device number 87 [ 535.709466][ T5861] usb 5-1: not running at top speed; connect to a high speed hub [ 535.720489][ T5861] usb 5-1: config index 0 descriptor too short (expected 2322, got 18) [ 535.733589][ T5861] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 535.742673][ T5861] usb 5-1: config 95 has no interface number 0 [ 535.749505][ T5861] usb 5-1: config 95 interface 1 has no altsetting 0 [ 535.759312][ T5861] usb 5-1: string descriptor 0 read error: -22 [ 535.766154][ T5861] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 535.779185][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.226410][T13473] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 536.249462][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.271392][T13473] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 536.389942][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.413115][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.676033][T13474] overlayfs: upper fs does not support tmpfile. [ 536.697570][ T30] audit: type=1326 audit(6048796849.677:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13471 comm="syz.1.2368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1bacf85ba7 code=0x0 [ 537.148540][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.169535][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.192161][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.202282][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.060957][ T1217] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 538.245684][ T1217] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 538.256597][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.273670][ T1217] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 538.284861][ T1217] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 538.293458][ T1217] usb 2-1: Manufacturer: syz [ 538.304108][ T1217] usb 2-1: config 0 descriptor?? [ 538.346867][T13305] usb 5-1: USB disconnect, device number 13 [ 538.462187][ T1217] rc_core: IR keymap rc-hauppauge not found [ 538.470687][T13521] overlayfs: unescaped trailing colons in lowerdir mount option. [ 538.484945][ T1217] Registered IR keymap rc-empty [ 538.501586][ T1217] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 538.535402][ T1217] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 538.615213][ T1217] usb 2-1: USB disconnect, device number 88 [ 538.745782][T13530] syzkaller1: entered promiscuous mode [ 538.766256][T13530] syzkaller1: entered allmulticast mode [ 538.910785][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.919932][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.144669][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.153443][ T5861] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 539.159508][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.172418][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.177602][ T1217] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 539.186320][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.203426][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.214521][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.323243][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 539.331629][ T5861] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 539.340310][ T5861] usb 5-1: config 179 has no interface number 0 [ 539.347081][ T5861] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 539.358673][ T5861] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 539.376620][ T5861] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 539.388465][ T1217] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 539.401403][ T5861] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 50891, setting to 1024 [ 539.413104][ T1217] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.423328][ T5861] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 539.436851][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.443560][ T1217] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 539.452887][ T5861] usb 5-1: config 179 interface 65 has no altsetting 0 [ 539.459831][ T5861] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 539.469118][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.477251][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.493911][ T1217] usb 2-1: config 0 descriptor?? [ 539.503531][T13530] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 539.540984][ T5861] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input41 [ 539.590872][ T5214] input input41: unable to receive magic message: -110 [ 539.613435][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 539.630423][ T5214] input input41: unable to receive magic message: -32 [ 539.647293][ T5214] input input41: unable to receive magic message: -32 [ 539.683201][ T5214] input input41: unable to receive magic message: -32 [ 539.696182][ T5214] input input41: unable to receive magic message: -32 [ 539.728993][ T1217] usbhid 2-1:0.0: can't add hid device: -71 [ 539.756596][ T1217] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 539.769055][ T1217] usb 2-1: USB disconnect, device number 89 [ 539.821956][T13530] vxcan1 speed is unknown, defaulting to 1000 [ 539.846875][ T10] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 539.996561][ T10] usb 4-1: device descriptor read/64, error -32 [ 540.004165][T13530] wlan1 speed is unknown, defaulting to 1000 [ 540.264058][ T10] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 540.404754][ T10] usb 4-1: device descriptor read/64, error -32 [ 540.419454][ T1217] usb 5-1: USB disconnect, device number 14 [ 540.659811][ T10] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 540.693357][ T10] usb 4-1: device descriptor read/8, error -32 [ 540.788082][ T5851] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 540.887907][T13544] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 540.896825][T13545] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 540.969899][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 540.975147][ T10] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 540.992749][ T5851] usb 2-1: config 7 has an invalid interface number: 182 but max is 0 [ 541.001372][ T5851] usb 2-1: config 7 has no interface number 0 [ 541.008010][ T5851] usb 2-1: config 7 interface 182 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 541.018698][ T10] usb 4-1: device descriptor read/8, error -32 [ 541.024979][ T5851] usb 2-1: config 7 interface 182 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 541.036278][ T5851] usb 2-1: config 7 interface 182 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.047416][ T5851] usb 2-1: config 7 interface 182 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 541.059728][ T5851] usb 2-1: config 7 interface 182 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 541.070724][ T5851] usb 2-1: config 7 interface 182 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 541.082193][ T5851] usb 2-1: config 7 interface 182 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.093902][ T5851] usb 2-1: config 7 interface 182 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.105300][ T5851] usb 2-1: config 7 interface 182 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 541.120070][ T5851] usb 2-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=2d.7b [ 541.129391][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.137509][ T5851] usb 2-1: Product: syz [ 541.142765][ T5851] usb 2-1: Manufacturer: syz [ 541.147397][ T5851] usb 2-1: SerialNumber: syz [ 541.152229][ T10] raw-gadget.2 gadget.3: failed to queue suspend event [ 541.159672][T13305] usb 4-1: USB disconnect, device number 75 [ 541.170887][T13541] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 541.188446][T13541] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 541.272923][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 541.355106][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 541.419113][T13305] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 541.427203][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 541.436132][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 541.447066][ T5851] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 541.461933][ T5851] gspca_nw80x: reg_w err -71 [ 541.466666][ T5851] nw80x 2-1:7.182: probe with driver nw80x failed with error -71 [ 541.500322][ T5851] usb 2-1: USB disconnect, device number 90 [ 541.526116][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 541.601147][T13305] usb 4-1: device descriptor read/64, error -32 [ 541.718652][T13305] raw-gadget.2 gadget.3: failed to queue suspend event [ 541.725876][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 541.804630][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 541.846160][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.855411][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.865004][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.873550][T13305] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 541.875139][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.881553][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 541.897242][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 541.898153][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.915759][ T1217] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 541.918414][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.937387][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.948378][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.957557][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.967600][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.975849][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 541.978764][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.993854][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.050168][ T1217] usb 5-1: device descriptor read/64, error -71 [ 542.061056][T13305] usb 4-1: device descriptor read/64, error -32 [ 542.192433][T13305] raw-gadget.2 gadget.3: failed to queue suspend event [ 542.200505][T13305] usb usb4-port1: attempt power cycle [ 542.210419][T13305] raw-gadget.2 gadget.3: failed to queue disconnect event [ 542.226290][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 542.307553][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 542.317763][ T1217] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 542.320354][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 542.374666][T13568] sctp: [Deprecated]: syz.1.2395 (pid 13568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.374666][T13568] Use struct sctp_sack_info instead [ 542.478086][ T1217] usb 5-1: device descriptor read/64, error -71 [ 542.554719][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 542.595922][ T1217] usb usb5-port1: attempt power cycle [ 542.604423][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.613355][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.626225][T13305] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 542.643051][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.649257][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 542.652479][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.658697][T13305] usb 4-1: device descriptor read/8, error -32 [ 542.790282][T13305] raw-gadget.2 gadget.3: failed to queue suspend event [ 542.797762][T13305] raw-gadget.2 gadget.3: failed to queue reset event [ 542.874799][T13305] raw-gadget.2 gadget.3: failed to queue resume event [ 542.937959][T13305] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 542.959714][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 542.967017][T13305] usb 4-1: device descriptor read/8, error -32 [ 542.970089][ T1217] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 543.003156][ T1217] usb 5-1: device descriptor read/8, error -71 [ 543.088773][T13305] raw-gadget.2 gadget.3: failed to queue suspend event [ 543.095958][T13305] usb usb4-port1: unable to enumerate USB device [ 543.258662][ T1217] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 543.280815][ T1217] usb 5-1: device descriptor read/8, error -71 [ 543.330844][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.344989][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.399292][ T1217] usb usb5-port1: unable to enumerate USB device [ 543.408376][T13305] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 543.590203][T13305] usb 2-1: Using ep0 maxpacket: 16 [ 543.598214][T13305] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 543.606637][T13305] usb 2-1: config 0 has no interface number 0 [ 543.612991][T13305] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.626659][T13305] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 543.635976][T13305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.644279][T13305] usb 2-1: Product: syz [ 543.648593][T13305] usb 2-1: Manufacturer: syz [ 543.653212][T13305] usb 2-1: SerialNumber: syz [ 543.661062][T13305] usb 2-1: config 0 descriptor?? [ 543.673132][T13305] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 543.887687][ T1138] usb 2-1: Failed to submit usb control message: -71 [ 543.889068][T13305] usb 2-1: USB disconnect, device number 91 [ 543.902697][ T1138] usb 2-1: unable to send the bmi data to the device: -71 [ 543.918306][ T1138] usb 2-1: unable to get target info from device [ 543.932127][ T1138] usb 2-1: could not get target info (-71) [ 543.940533][ T1138] usb 2-1: could not probe fw (-71) [ 543.973757][T13590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.994346][T13590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.025445][ T30] audit: type=1326 audit(6048796856.522:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.3.2406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f6898ebe9 code=0x0 [ 544.745775][T13602] netlink: 'syz.1.2408': attribute type 37 has an invalid length. [ 545.611749][ T5975] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 545.796197][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 545.812534][ T5975] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 545.825669][ T5975] usb 5-1: config 0 has no interface number 0 [ 545.855111][ T5975] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 545.875279][ T5975] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 545.917829][ T5975] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 545.934764][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.945556][ T5975] usb 5-1: Product: syz [ 545.957746][ T5975] usb 5-1: Manufacturer: syz [ 545.963576][ T5975] usb 5-1: SerialNumber: syz [ 545.987880][ T5975] usb 5-1: config 0 descriptor?? [ 546.016589][ T5975] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 546.033845][ T5975] em28xx 5-1:0.132: Video interface 132 found: isoc [ 546.094148][T13615] nbd: must specify at least one socket [ 546.116612][ T30] audit: type=1326 audit(6048796858.485:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.1.2413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bacf8ebe9 code=0x0 [ 546.231100][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.241026][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.488035][ T5975] em28xx 5-1:0.132: chip ID is em2884 [ 546.834375][ T5975] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 546.843402][ T5975] em28xx 5-1:0.132: board has no eeprom [ 546.907004][ T5975] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 546.914905][ T5975] em28xx 5-1:0.132: analog set to isoc mode. [ 546.921314][ T43] em28xx 5-1:0.132: Registering V4L2 extension [ 546.938294][ T5975] usb 5-1: USB disconnect, device number 19 [ 546.948113][ T5975] em28xx 5-1:0.132: Disconnecting em28xx [ 547.064163][ T43] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 547.074918][ T43] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 547.085613][ T43] em28xx 5-1:0.132: No AC97 audio processor [ 547.102668][ T43] usb 5-1: Decoder not found [ 547.107431][ T43] em28xx 5-1:0.132: failed to create media graph [ 547.114350][ T43] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 547.129450][ T43] em28xx 5-1:0.132: Remote control support is not available for this card. [ 547.138626][ T5975] em28xx 5-1:0.132: Closing input extension [ 547.154121][ T5975] em28xx 5-1:0.132: Freeing device [ 547.332405][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 547.362969][T13629] IPVS: Error joining to the multicast group [ 547.560373][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 547.574590][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.584591][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.643840][ T10] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 547.676067][ T5861] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 547.807823][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 547.816220][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 547.825135][ T10] usb 2-1: config 11 has an invalid interface number: 229 but max is 0 [ 547.833645][ T10] usb 2-1: config 11 has no interface number 0 [ 547.839997][ T10] usb 2-1: config 11 interface 229 has no altsetting 0 [ 547.846882][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 547.850858][ T5861] usb 5-1: config 0 has an invalid interface number: 127 but max is 0 [ 547.855682][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 547.868711][ T5861] usb 5-1: config 0 has no interface number 0 [ 547.869876][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.883913][ T10] usb 2-1: Product: syz [ 547.888118][ T10] usb 2-1: Manufacturer: syz [ 547.892840][ T10] usb 2-1: SerialNumber: syz [ 547.901014][ T5861] usb 5-1: config 0 interface 127 has no altsetting 0 [ 547.910818][ T5861] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0f [ 547.920894][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.929311][ T5861] usb 5-1: Product: syz [ 547.933978][ T5861] usb 5-1: Manufacturer: syz [ 547.938688][ T5861] usb 5-1: SerialNumber: syz [ 547.946933][ T5861] usb 5-1: config 0 descriptor?? [ 548.189525][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.212017][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.229743][ T10] usb 2-1: USB disconnect, device number 92 [ 548.259258][ T8647] udevd[8647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.297265][ T5861] usb-storage 5-1:0.127: USB Mass Storage device detected [ 548.319946][ T5861] usb-storage 5-1:0.127: Quirks match for vid 05ab pid 0060: 2 [ 548.340801][T13648] netlink: 78 bytes leftover after parsing attributes in process `syz.1.2421'. [ 548.348575][T13646] 9p filesystem being mounted at /141/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 548.408742][ T5861] usb 5-1: USB disconnect, device number 20 [ 548.579467][T13656] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2424'. [ 548.591868][T13656] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2424'. [ 548.706385][T13666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.718137][T13666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.959317][ T1164] wlan1: Trigger new scan to find an IBSS to join [ 549.134555][ T5975] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 549.334615][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 549.349679][ T5975] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 549.358332][ T5975] usb 5-1: config 0 has no interface number 0 [ 549.364481][ T5975] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 549.376320][ T5975] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 549.415430][ T5975] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 549.434668][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.451114][ T5975] usb 5-1: Product: syz [ 549.455467][ T5975] usb 5-1: Manufacturer: syz [ 549.460686][ T5975] usb 5-1: SerialNumber: syz [ 549.474302][T13678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2431'. [ 549.484324][T13678] tipc: Invalid UDP bearer configuration [ 549.484380][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 549.500516][ T5975] usb 5-1: config 0 descriptor?? [ 549.512016][ T5975] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 549.525976][ T5975] em28xx 5-1:0.132: Video interface 132 found: isoc [ 549.607837][T13683] 9p filesystem being mounted at /154/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 549.742002][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.751287][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.964523][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 549.988912][ T5975] em28xx 5-1:0.132: chip ID is em2884 [ 550.133107][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 550.143592][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.156314][ T10] usb 2-1: Product: syz [ 550.160853][ T10] usb 2-1: Manufacturer: syz [ 550.165501][ T10] usb 2-1: SerialNumber: syz [ 550.173634][ T10] usb 2-1: config 0 descriptor?? [ 550.188871][ T10] ldusb 2-1:0.0: Interrupt in endpoint not found [ 550.316333][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.326332][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.370297][ T5975] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 550.379618][ T5975] em28xx 5-1:0.132: board has no eeprom [ 550.409268][ T10] usb 2-1: USB disconnect, device number 93 [ 550.450321][ T5975] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 550.458278][ T5975] em28xx 5-1:0.132: analog set to isoc mode. [ 550.464465][ T1217] em28xx 5-1:0.132: Registering V4L2 extension [ 550.481689][ T5975] usb 5-1: USB disconnect, device number 21 [ 550.489766][ T5975] em28xx 5-1:0.132: Disconnecting em28xx [ 550.587406][ T1217] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 550.594551][ T1217] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 550.602223][ T1217] em28xx 5-1:0.132: No AC97 audio processor [ 550.610943][ T1217] usb 5-1: Decoder not found [ 550.615605][ T1217] em28xx 5-1:0.132: failed to create media graph [ 550.622085][ T1217] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 550.630576][ T1217] em28xx 5-1:0.132: Remote control support is not available for this card. [ 550.639377][ T5975] em28xx 5-1:0.132: Closing input extension [ 550.655683][ T5975] em28xx 5-1:0.132: Freeing device [ 550.887050][T13305] hid (null): unknown global tag 0xc [ 550.894721][T13305] hid-generic 0001:0006:0003.0022: unknown main item tag 0x3 [ 550.902999][T13305] hid-generic 0001:0006:0003.0022: unknown global tag 0xc [ 550.910311][T13305] hid-generic 0001:0006:0003.0022: item 0 2 1 12 parsing failed [ 550.920020][T13305] hid-generic 0001:0006:0003.0022: probe with driver hid-generic failed with error -22 [ 550.987546][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.007775][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.041893][T13702] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.186483][T13712] netlink: 'syz.1.2441': attribute type 13 has an invalid length. [ 551.202946][T13712] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.605291][ T1217] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 551.782864][ T5975] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 551.793006][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.804336][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.814164][ T1217] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 551.823441][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.834441][ T1217] usb 5-1: config 0 descriptor?? [ 551.964532][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 551.972173][ T5975] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 551.981524][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.994599][ T5975] usb 2-1: config 0 descriptor?? [ 552.004658][ T5975] gspca_main: sunplus-2.14.0 probing 041e:400b [ 552.200381][ T1138] wlan1: Trigger new scan to find an IBSS to join [ 552.292414][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.306907][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.313891][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.334784][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.342681][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.349701][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.356672][ T1217] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 552.364504][ T1217] wacom 0003:056A:0094.0023: Using device in hidraw-only mode [ 552.375286][ T1217] wacom 0003:056A:0094.0023: hidraw0: USB HID vff.fd Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 552.498984][ T1217] usb 5-1: USB disconnect, device number 22 [ 553.079923][ T5975] gspca_sunplus: reg_r err -71 [ 553.092778][ T5975] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 553.106418][ T5975] usb 2-1: USB disconnect, device number 94 [ 553.355066][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 553.422902][T13731] 9p filesystem being mounted at /145/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 553.520049][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 553.527354][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 553.535556][ T10] usb 5-1: config 0 has no interface number 0 [ 553.542003][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 553.554517][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 553.568304][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 553.577948][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.586148][ T10] usb 5-1: Product: syz [ 553.590662][ T10] usb 5-1: Manufacturer: syz [ 553.595295][ T10] usb 5-1: SerialNumber: syz [ 553.603629][ T10] usb 5-1: config 0 descriptor?? [ 553.612955][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 553.622799][ T10] em28xx 5-1:0.132: Video interface 132 found: isoc [ 553.679739][T13733] netlink: 'syz.1.2449': attribute type 6 has an invalid length. [ 553.831121][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.842240][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.039602][ T5975] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 554.129605][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 554.206621][ T5975] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 554.215829][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 554.216690][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.230997][ T10] em28xx 5-1:0.132: board has no eeprom [ 554.239433][ T5975] usb 2-1: Product: syz [ 554.249150][ T5975] usb 2-1: Manufacturer: syz [ 554.255866][ T5975] usb 2-1: SerialNumber: syz [ 554.278596][ T5975] usb 2-1: config 0 descriptor?? [ 554.296241][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 554.304208][ T10] em28xx 5-1:0.132: analog set to isoc mode. [ 554.311708][T13305] em28xx 5-1:0.132: Registering V4L2 extension [ 554.329862][ T10] usb 5-1: USB disconnect, device number 23 [ 554.338089][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 554.510336][T13305] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 554.518867][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.531944][T13305] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 554.541046][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.551484][T13305] em28xx 5-1:0.132: No AC97 audio processor [ 554.559045][ T5975] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 554.560579][T13305] usb 5-1: Decoder not found [ 554.574712][T13305] em28xx 5-1:0.132: failed to create media graph [ 554.574741][T13749] comedi: No check for data length of config insn id 1536 is implemented [ 554.581106][T13305] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 554.583542][T13305] em28xx 5-1:0.132: Remote control support is not available for this card. [ 554.596016][ T5975] asix 2-1:0.0: probe with driver asix failed with error -61 [ 554.599433][ T10] em28xx 5-1:0.132: Closing input extension [ 554.620572][T13749] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 554.631275][T13749] comedi: Assuming n=1 is correct [ 554.640591][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.652031][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.654738][ T10] em28xx 5-1:0.132: Freeing device [ 554.843108][ T5975] usb 2-1: USB disconnect, device number 95 [ 555.366224][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.455954][T13762] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 555.465712][T13762] overlayfs: missing 'lowerdir' [ 555.765708][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.776096][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.799421][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.806097][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 555.811939][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.985891][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 555.992926][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.004037][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.013941][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 556.023255][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.035138][ T10] usb 2-1: config 0 descriptor?? [ 556.092869][ T5851] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 556.278915][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.290743][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.300714][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.314842][ T5851] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 556.324466][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.337057][ T5851] usb 5-1: config 0 descriptor?? [ 556.482065][ T10] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 556.489922][ T10] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 556.511051][T13787] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2466'. [ 556.520419][T13787] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 556.689353][ T10] ft260 0003:0403:6030.0024: chip code: 6424 8183 [ 556.797360][ T5851] uclogic 0003:28BD:0074.0025: interface is invalid, ignoring [ 556.908390][T13766] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2461'. [ 556.936545][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.955456][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.004703][ T5851] usb 5-1: USB disconnect, device number 24 [ 557.489310][ T10] ft260 0003:0403:6030.0024: failed to retrieve system status [ 557.503691][ T10] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -71 [ 557.529633][ T10] usb 2-1: USB disconnect, device number 96 [ 557.643988][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.652603][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.655430][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.665801][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.846984][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 557.868381][ T5851] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 557.927292][ T10] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 558.028890][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 558.037256][ T5851] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 558.045596][ T5851] usb 5-1: config 0 has no interface number 0 [ 558.051800][ T5851] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 558.063153][ T5851] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 558.077470][ T5851] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 558.086721][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.095390][ T5851] usb 5-1: Product: syz [ 558.099678][ T5851] usb 5-1: Manufacturer: syz [ 558.104925][ T5851] usb 5-1: SerialNumber: syz [ 558.111568][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.121523][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 558.130242][ T5851] usb 5-1: config 0 descriptor?? [ 558.139874][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.152989][ T5851] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 558.163050][ T5851] em28xx 5-1:0.132: Video interface 132 found: isoc [ 558.172633][ T10] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 558.181953][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.190745][ T10] usb 2-1: Product: syz [ 558.194991][ T10] usb 2-1: Manufacturer: syz [ 558.199603][ T10] usb 2-1: SerialNumber: syz [ 558.291783][T13821] 9p filesystem being mounted at /165/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 558.358389][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.369024][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.429741][ T10] pwc: Visionite VCS-UC300 USB webcam detected. [ 558.458171][ T10] pwc: Failed to set LED on/off time (-71) [ 558.464604][ T10] pwc: send_video_command error -71 [ 558.479143][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 558.489207][ T10] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 558.504997][ T10] usb 2-1: USB disconnect, device number 97 [ 558.594965][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.609233][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.671493][ T5851] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 558.738446][ T5851] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 558.747612][ T5851] em28xx 5-1:0.132: board has no eeprom [ 558.809582][ T5851] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 558.817586][ T5851] em28xx 5-1:0.132: analog set to isoc mode. [ 558.824188][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 558.844977][ T5851] usb 5-1: USB disconnect, device number 25 [ 558.874742][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 558.883803][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 558.896338][ T5851] em28xx 5-1:0.132: Disconnecting em28xx [ 558.902219][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 558.979223][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 558.992321][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 558.999518][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 559.016947][ T10] usb 5-1: Decoder not found [ 559.028700][ T10] em28xx 5-1:0.132: failed to create media graph [ 559.037425][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 559.056371][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 559.067930][ T5851] em28xx 5-1:0.132: Closing input extension [ 559.090382][ T5851] em28xx 5-1:0.132: Freeing device [ 559.344205][ T1217] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 559.496903][T13846] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2484'. [ 559.529099][ T1217] usb 2-1: Using ep0 maxpacket: 16 [ 559.536374][ T1217] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 559.545765][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.566461][ T1217] usb 2-1: config 0 descriptor?? [ 559.579810][ T5851] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 559.598843][ T1217] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 559.610802][T13848] 9p filesystem being mounted at /171/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 559.739999][ T5851] usb 5-1: device descriptor read/64, error -71 [ 559.770049][T13851] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 559.770049][T13851] The task syz.3.2486 (13851) triggered the difference, watch for misbehavior. [ 559.824364][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.833682][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.996863][ T5851] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 560.059604][ T1217] gspca_sonixj: reg_r err -71 [ 560.066232][ T1217] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 560.082494][ T1217] usb 2-1: USB disconnect, device number 98 [ 560.146380][ T5851] usb 5-1: device descriptor read/64, error -71 [ 560.264456][ T5851] usb usb5-port1: attempt power cycle [ 560.627983][ T5851] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 560.666633][T13858] xt_HMARK: proto mask must be zero with L3 mode [ 560.683353][ T5851] usb 5-1: device descriptor read/8, error -71 [ 560.732145][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.741182][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.754694][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.764430][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.916384][T13305] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 560.948477][ T5851] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 560.970689][ T5851] usb 5-1: device descriptor read/8, error -71 [ 561.079313][T13305] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 561.088327][ T5851] usb usb5-port1: unable to enumerate USB device [ 561.094822][T13305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.111627][T13305] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 561.120900][T13305] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 561.129048][T13305] usb 2-1: Manufacturer: syz [ 561.136665][T13305] usb 2-1: config 0 descriptor?? [ 561.205255][T13305] rc_core: IR keymap rc-hauppauge not found [ 561.212359][T13305] Registered IR keymap rc-empty [ 561.219455][T13305] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 561.232058][T13305] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 561.367307][ T5871] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 561.375892][ T5871] Bluetooth: Wrong link type (-22) [ 561.381381][ T5871] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 561.388280][ T5871] Bluetooth: Wrong link type (-22) [ 561.393673][ T5871] Bluetooth: hci5: link tx timeout [ 561.399502][ T5871] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 561.459195][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.618223][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.635118][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.900940][T13874] 9p filesystem being mounted at /177/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 562.715204][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.726185][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.756913][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.778644][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.015576][ T5861] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 563.220989][ T5861] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 563.230453][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.248271][ T5861] usb 5-1: Product: syz [ 563.252504][ T5861] usb 5-1: Manufacturer: syz [ 563.257165][ T5861] usb 5-1: SerialNumber: syz [ 563.292225][ T5861] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 563.341492][ T5975] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 563.590117][ T5868] Bluetooth: hci5: command 0x0406 tx timeout [ 563.628240][ T10] usb 2-1: USB disconnect, device number 99 [ 563.692324][T13899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.706109][T13899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.722285][T13899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.738470][T13899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.881866][T13901] 9p filesystem being mounted at /153/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 564.001455][ T10] usb 5-1: USB disconnect, device number 30 [ 564.039689][T13903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 564.297867][T13905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.310341][T13904] block nbd1: shutting down sockets [ 564.335201][T13907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.344469][T13907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.520993][ T5975] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 564.528329][ T5975] ath9k_htc: Failed to initialize the device [ 564.535294][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 565.023361][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 565.194630][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 565.216369][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 565.232008][ T10] usb 5-1: config 0 has no interface number 0 [ 565.239292][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 565.256132][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 565.277971][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 565.287779][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.299424][ T10] usb 5-1: Product: syz [ 565.303818][ T10] usb 5-1: Manufacturer: syz [ 565.308513][ T10] usb 5-1: SerialNumber: syz [ 565.316582][ T10] usb 5-1: config 0 descriptor?? [ 565.334571][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 565.346003][ T10] em28xx 5-1:0.132: Video interface 132 found: isoc [ 565.550207][T13914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.568913][T13914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.864171][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 565.930152][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.942684][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.950785][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 565.959714][ T10] em28xx 5-1:0.132: board has no eeprom [ 566.039598][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 566.047509][ T10] em28xx 5-1:0.132: analog set to isoc mode. [ 566.053833][ T5851] em28xx 5-1:0.132: Registering V4L2 extension [ 566.071455][ T10] usb 5-1: USB disconnect, device number 31 [ 566.090233][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 566.199150][ T5851] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 566.208912][ T5851] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 566.216604][ T5851] em28xx 5-1:0.132: No AC97 audio processor [ 566.226234][ T5851] usb 5-1: Decoder not found [ 566.230874][ T5851] em28xx 5-1:0.132: failed to create media graph [ 566.237813][ T5851] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 566.254777][ T5851] em28xx 5-1:0.132: Remote control support is not available for this card. [ 566.263465][ T10] em28xx 5-1:0.132: Closing input extension [ 566.275236][ T10] em28xx 5-1:0.132: Freeing device [ 566.675240][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.685602][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.758594][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.768293][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.809754][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 566.984861][T13951] gfs2: not a GFS2 filesystem [ 567.011627][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 567.021495][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.035085][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 567.044386][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 567.053270][ T10] usb 5-1: Manufacturer: syz [ 567.068180][ T10] usb 5-1: config 0 descriptor?? [ 567.141017][ T10] rc_core: IR keymap rc-hauppauge not found [ 567.147053][ T10] Registered IR keymap rc-empty [ 567.153669][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 567.167145][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 567.333751][ T5851] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 567.377998][T13959] netlink: 'syz.3.2523': attribute type 10 has an invalid length. [ 567.393312][T13959] batman_adv: batadv0: Adding interface: netdevsim0 [ 567.405744][T13959] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.435478][T13959] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 567.490666][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.499619][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.505254][ T5851] usb 2-1: device descriptor read/64, error -71 [ 567.516472][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.525467][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.599275][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.609016][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.782934][ T5851] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 567.915775][ T5975] usb 5-1: USB disconnect, device number 32 [ 567.944027][ T5851] usb 2-1: device descriptor read/64, error -71 [ 568.075928][ T5851] usb usb2-port1: attempt power cycle [ 568.445985][ T5851] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 568.477903][ T5851] usb 2-1: device descriptor read/8, error -71 [ 568.735062][ T5851] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 568.762480][ T5851] usb 2-1: device descriptor read/8, error -71 [ 568.809593][ T5975] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 568.887087][ T5851] usb usb2-port1: unable to enumerate USB device [ 568.993239][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.001668][ T5975] usb 5-1: not running at top speed; connect to a high speed hub [ 569.011428][ T5975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.028247][ T5975] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 569.037409][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.045710][ T5975] usb 5-1: Product: syz [ 569.049927][ T5975] usb 5-1: Manufacturer: syz [ 569.054546][ T5975] usb 5-1: SerialNumber: syz [ 569.293656][ T5975] pwc: Visionite VCS-UC300 USB webcam detected. [ 569.301132][ T5975] pwc: Failed to set LED on/off time (-71) [ 569.307801][ T5975] pwc: send_video_command error -71 [ 569.316294][ T5975] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 569.324878][ T5975] Philips webcam 5-1:1.0: probe with driver Philips webcam failed with error -71 [ 569.341786][ T5975] usb 5-1: USB disconnect, device number 33 [ 569.507729][T13972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.517284][T13972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.155010][ T1217] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 570.296857][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.311219][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.319298][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 570.336194][ T1217] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 570.345878][ T1217] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 570.361777][ T1217] usb 5-1: config 0 has no interface number 0 [ 570.364754][ T5871] Bluetooth: hci5: unexpected event for opcode 0x201c [ 570.367974][ T1217] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 570.394099][ T1217] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0xE has an invalid bInterval 211, changing to 11 [ 570.406734][ T1217] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0xE has invalid maxpacket 57888, setting to 1024 [ 570.421243][ T1217] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 570.430799][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 570.444392][ T1217] usb 5-1: Product: syz [ 570.466841][ T1217] usb 5-1: config 0 descriptor?? [ 570.626863][T13991] 9p filesystem being mounted at /157/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 570.690337][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2529'. [ 570.706326][ T5851] usb 5-1: USB disconnect, device number 34 [ 570.749029][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 570.916432][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 570.929487][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 570.942715][ T9] usb 2-1: config 0 has no interface number 0 [ 570.953766][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 570.966911][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 570.981302][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 570.991715][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.000560][ T9] usb 2-1: Product: syz [ 571.005608][ T9] usb 2-1: Manufacturer: syz [ 571.010249][ T9] usb 2-1: SerialNumber: syz [ 571.018632][ T9] usb 2-1: config 0 descriptor?? [ 571.031503][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 571.038629][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.042025][ T9] em28xx 2-1:0.132: Video interface 132 found: isoc [ 571.059790][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.073083][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.082072][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.245000][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.265336][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.308180][T13999] netlink: 'syz.4.2539': attribute type 10 has an invalid length. [ 571.316439][T13999] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2539'. [ 571.327249][T13999] team0: entered promiscuous mode [ 571.332421][T13999] team_slave_0: entered promiscuous mode [ 571.338631][T13999] team_slave_1: entered promiscuous mode [ 571.344978][T13999] bridge0: port 3(team0) entered blocking state [ 571.351585][T13999] bridge0: port 3(team0) entered disabled state [ 571.358256][T13999] team0: entered allmulticast mode [ 571.363613][T13999] team_slave_0: entered allmulticast mode [ 571.370207][T13999] team_slave_1: entered allmulticast mode [ 571.380079][T13999] bridge0: port 3(team0) entered blocking state [ 571.386501][T13999] bridge0: port 3(team0) entered forwarding state [ 571.571665][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 571.644787][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 571.653551][ T9] em28xx 2-1:0.132: board has no eeprom [ 571.708274][T14011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.718126][T14011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.730136][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 571.738696][ T9] em28xx 2-1:0.132: analog set to isoc mode. [ 571.748265][T13305] em28xx 2-1:0.132: Registering V4L2 extension [ 571.772246][ T9] usb 2-1: USB disconnect, device number 104 [ 571.785344][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 571.902211][T13305] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 571.909465][T13305] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 571.924464][T13305] em28xx 2-1:0.132: No AC97 audio processor [ 571.931758][T13305] usb 2-1: Decoder not found [ 571.937580][T13305] em28xx 2-1:0.132: failed to create media graph [ 571.945178][T13305] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 571.953240][T13305] em28xx 2-1:0.132: Remote control support is not available for this card. [ 571.962168][ T9] em28xx 2-1:0.132: Closing input extension [ 571.973934][ T9] em28xx 2-1:0.132: Freeing device [ 571.986104][ T5851] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 572.139016][ T5851] usb 5-1: device descriptor read/64, error -71 [ 572.178068][T14018] 9p filesystem being mounted at /179/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 572.403064][ T5851] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 572.544046][ T5851] usb 5-1: device descriptor read/64, error -71 [ 572.660253][ T5851] usb usb5-port1: attempt power cycle [ 572.916393][ T43] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 573.037511][ T5851] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 573.058747][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.070086][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.070389][ T5851] usb 5-1: device descriptor read/8, error -71 [ 573.087885][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.095982][ T43] usb 2-1: config 0 has no interface number 0 [ 573.099738][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.108606][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.112770][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.131996][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.142322][ T43] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.157627][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 573.167358][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.186881][ T43] usb 2-1: config 0 descriptor?? [ 573.366235][ T5851] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 573.402742][ T5851] usb 5-1: device descriptor read/8, error -71 [ 573.526432][ T5851] usb usb5-port1: unable to enumerate USB device [ 573.842253][T14041] 9p filesystem being mounted at /203/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 573.867054][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.877931][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.894190][ T43] uclogic 0003:28BD:0042.0026: failed retrieving string descriptor #100: -71 [ 573.907355][ T43] uclogic 0003:28BD:0042.0026: failed retrieving pen parameters: -71 [ 573.919035][ T43] uclogic 0003:28BD:0042.0026: pen probing failed: -71 [ 573.928075][ T43] uclogic 0003:28BD:0042.0026: failed probing parameters: -71 [ 573.935854][ T43] uclogic 0003:28BD:0042.0026: probe with driver uclogic failed with error -71 [ 573.950871][ T43] usb 2-1: USB disconnect, device number 105 [ 574.172291][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.181361][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.198241][T14054] /dev/sg0: Can't lookup blockdev [ 574.745284][ T5861] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 574.882832][T14067] 9p filesystem being mounted at /207/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 574.916592][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 574.926073][ T5861] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 574.937038][ T5861] usb 2-1: config 0 has no interface number 0 [ 574.943495][ T5861] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 205, changing to 7 [ 574.955671][ T5861] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9904, setting to 1024 [ 574.974402][ T5861] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 574.990879][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.000112][ T5861] usb 2-1: Product: syz [ 575.004745][ T5861] usb 2-1: Manufacturer: syz [ 575.009832][ T5861] usb 2-1: SerialNumber: syz [ 575.025897][ T5861] usb 2-1: config 0 descriptor?? [ 575.040205][ T5861] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 575.072688][ T5861] em28xx 2-1:0.132: Video interface 132 found: isoc [ 575.095262][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.113752][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.141874][ T5871] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 575.204723][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.218812][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.255923][T14065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.269351][T14065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.526096][ T5975] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 575.570843][ T5861] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 575.635732][ T5861] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 575.644821][ T5861] em28xx 2-1:0.132: board has no eeprom [ 575.686476][ T5975] usb 5-1: Using ep0 maxpacket: 8 [ 575.694076][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.705198][ T5975] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 575.714534][ T5861] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 575.722553][ T5975] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 575.733957][ T5975] usb 5-1: Manufacturer: syz [ 575.738676][ T5975] usb 5-1: SerialNumber: syz [ 575.743555][ T5861] em28xx 2-1:0.132: analog set to isoc mode. [ 575.749645][ T43] em28xx 2-1:0.132: Registering V4L2 extension [ 575.766543][ T5861] usb 2-1: USB disconnect, device number 106 [ 575.785578][ T5861] em28xx 2-1:0.132: Disconnecting em28xx [ 575.948628][ T43] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 575.956303][ T43] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 575.963525][ T43] em28xx 2-1:0.132: No AC97 audio processor [ 575.974051][ T43] usb 2-1: Decoder not found [ 575.979735][ T43] em28xx 2-1:0.132: failed to create media graph [ 575.988949][ T43] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 576.001309][ T43] em28xx 2-1:0.132: Remote control support is not available for this card. [ 576.011754][ T5861] em28xx 2-1:0.132: Closing input extension [ 576.028212][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.034897][ T5861] em28xx 2-1:0.132: Freeing device [ 576.041252][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.183509][T14087] netlink: 'syz.1.2570': attribute type 10 has an invalid length. [ 576.193119][T14087] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2570'. [ 576.654287][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.666060][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.777327][ T5851] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 576.938005][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 576.945496][ T5851] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 576.955748][ T5851] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.965494][ T5851] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 576.975405][ T5851] usb 2-1: config 1 interface 0 has no altsetting 0 [ 576.987731][ T5851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.996889][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.005107][ T5851] usb 2-1: Product: syz [ 577.009406][ T5851] usb 2-1: Manufacturer: syz [ 577.014104][ T5851] usb 2-1: SerialNumber: syz [ 577.022418][T14089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 577.256784][ T5851] usb 2-1: bad CDC descriptors [ 577.267139][ T5851] usb 2-1: USB disconnect, device number 107 [ 577.589634][T14094] 9p filesystem being mounted at /212/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 577.687926][T14096] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2575'. [ 577.984622][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 577.995098][T14109] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2580'. [ 578.125066][ T5861] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 578.298986][ T5861] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 578.307957][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.320195][ T5861] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 578.329697][ T5861] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 578.337759][ T5861] usb 2-1: Manufacturer: syz [ 578.351437][ T5861] usb 2-1: config 0 descriptor?? [ 578.443518][ T5975] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 578.451441][ T5861] rc_core: IR keymap rc-hauppauge not found [ 578.463473][ T5861] Registered IR keymap rc-empty [ 578.476960][ T5861] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 578.491475][ T5975] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.502956][ T5975] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 578.512291][ T5861] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input44 [ 578.523897][ T5975] usb 5-1: media controller created [ 578.561608][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.603828][ T5871] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 578.613070][ T5871] Bluetooth: Wrong link type (-22) [ 578.618537][ T5871] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 578.625582][ T5871] Bluetooth: Wrong link type (-22) [ 578.631489][ T5975] zl10353_read_register: readreg error (reg=127, ret==0) [ 578.696825][ T5975] usb 5-1: USB disconnect, device number 39 [ 578.866670][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.876272][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.131889][ T5851] usb 2-1: USB disconnect, device number 108 [ 579.323126][ T5975] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 579.507303][ T5975] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 579.524653][ T5975] usb 5-1: config 0 has no interface number 0 [ 579.531600][ T5975] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 579.549796][ T5975] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 579.565276][ T5975] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 579.576018][ T5975] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 579.593980][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.605487][ T5975] usb 5-1: config 0 descriptor?? [ 579.620485][ T5975] gspca_main: spca561-2.14.0 probing abcd:cdee [ 579.752858][ T5871] Bluetooth: hci5: command 0x0406 tx timeout [ 579.826230][T14137] syzkaller1: entered promiscuous mode [ 579.836814][ T5975] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 579.846412][T14137] syzkaller1: entered allmulticast mode [ 579.853632][ T5975] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.860853][ T5975] usb 5-1: MIDIStreaming interface descriptor not found [ 579.949193][ T5975] usb 5-1: USB disconnect, device number 40 [ 580.065383][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.075662][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.428851][T14142] 9p filesystem being mounted at /50/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 580.874067][ T5975] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 580.910837][ T30] audit: type=1326 audit(6048796891.014:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.2596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bacf8ebe9 code=0x0 [ 581.056087][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 581.063311][ T5975] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 581.073400][ T5975] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 581.083578][ T5975] usb 5-1: config 1 interface 0 has no altsetting 0 [ 581.093358][ T5975] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 581.102682][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.110882][ T5975] usb 5-1: Product: syz [ 581.115088][ T5975] usb 5-1: Manufacturer: ࠇ [ 581.119781][ T5975] usb 5-1: SerialNumber: syz [ 581.136502][T14146] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 581.153531][T14146] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 581.200353][ T30] audit: type=1800 audit(6048796891.285:59): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2597" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 581.602494][ T5975] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 5 proto 3 vid 0x04B8 pid 0x0202 [ 581.619674][ T5975] usb 5-1: USB disconnect, device number 41 [ 581.642410][ T5975] usblp0: removed [ 582.167716][ T5851] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 582.209957][T14169] 9p filesystem being mounted at /53/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 582.332929][ T5851] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 582.349796][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.359611][ T5851] usb 2-1: Product: syz [ 582.364735][ T5851] usb 2-1: Manufacturer: syz [ 582.374565][ T5851] usb 2-1: SerialNumber: syz [ 582.385130][ T5851] r8152-cfgselector 2-1: Unknown version 0x0000 [ 582.391520][ T5851] r8152-cfgselector 2-1: config 0 descriptor?? [ 582.615014][ T5851] r8152-cfgselector 2-1: Unknown version 0x0000 [ 582.617720][T14166] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 582.627855][T14166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 582.629261][ T5851] r8152-cfgselector 2-1: bad CDC descriptors [ 582.646220][T14167] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 582.652794][T14167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 582.667990][T14166] vhci_hcd vhci_hcd.0: Device attached [ 582.676531][T14167] vhci_hcd vhci_hcd.0: Device attached [ 582.685233][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.702314][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.720731][T14177] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 582.728879][ T1138] vhci_hcd: stop threads [ 582.733184][ T1138] vhci_hcd: release socket [ 582.738236][ T1138] vhci_hcd: disconnect device [ 582.784827][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.795143][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.807821][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.818082][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.927123][ T1217] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 583.318658][T14182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2606'. [ 583.605740][T14196] 9p filesystem being mounted at /60/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 583.667865][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.679683][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.766802][ T30] audit: type=1326 audit(6048796893.688:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.4.2614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f199698ebe9 code=0x0 [ 584.082434][ T5975] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 584.221203][ T5975] usb 5-1: device descriptor read/64, error -71 [ 584.275831][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.285027][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.371641][ T31] INFO: task kworker/u8:3:50 blocked for more than 143 seconds. [ 584.379496][ T31] Not tainted syzkaller #0 [ 584.387190][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.396571][ T31] task:kworker/u8:3 state:D stack:21992 pid:50 tgid:50 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 584.409054][ T31] Workqueue: netns cleanup_net [ 584.414085][ T31] Call Trace: [ 584.417394][ T31] [ 584.420497][ T31] __schedule+0x1798/0x4cc0 [ 584.425423][ T31] ? do_raw_spin_lock+0x121/0x290 [ 584.431103][ T31] ? __lock_acquire+0xab9/0xd20 [ 584.436183][ T31] ? __pfx___schedule+0x10/0x10 [ 584.441099][ T31] ? schedule+0x91/0x360 [ 584.445478][ T31] schedule+0x165/0x360 [ 584.452269][ T31] afs_cell_purge+0x3d9/0x540 [ 584.457434][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 584.462729][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 584.468702][ T31] ? afs_net+0x45/0x270 [ 584.472913][ T31] ? afs_net+0x45/0x270 [ 584.477090][ T31] afs_net_exit+0x50/0x100 [ 584.482754][ T31] ops_undo_list+0x49a/0x990 [ 584.487417][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 584.492700][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 584.497969][ T31] cleanup_net+0x4c5/0x800 [ 584.502587][ T5975] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 584.507106][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 584.517968][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.523603][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 584.529436][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 584.539087][ T31] process_scheduled_works+0xae1/0x17b0 [ 584.544967][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.551046][ T31] worker_thread+0x8a0/0xda0 [ 584.556000][ T31] kthread+0x711/0x8a0 [ 584.560150][ T31] ? __pfx_worker_thread+0x10/0x10 [ 584.565639][ T31] ? __pfx_kthread+0x10/0x10 [ 584.570312][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.575684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.581005][ T31] ? __pfx_kthread+0x10/0x10 [ 584.585771][ T31] ret_from_fork+0x47c/0x820 [ 584.590450][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 584.595807][ T31] ? __switch_to_asm+0x39/0x70 [ 584.600637][ T31] ? __switch_to_asm+0x33/0x70 [ 584.605473][ T31] ? __pfx_kthread+0x10/0x10 [ 584.610237][ T31] ret_from_fork_asm+0x1a/0x30 [ 584.615083][ T31] [ 584.618556][ T31] [ 584.618556][ T31] Showing all locks held in the system: [ 584.626317][ T31] 1 lock held by khungtaskd/31: [ 584.631789][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 584.641970][ T31] 3 locks held by kworker/u8:3/50: [ 584.648717][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 584.666312][ T31] #1: ffffc90000ba7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 584.670458][ T5975] usb 5-1: device descriptor read/64, error -71 [ 584.677534][ T31] #2: ffffffff8f9449f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 584.694834][ T31] 5 locks held by kworker/1:2/1217: [ 584.700748][ T31] #0: ffff8880206ee148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 584.712663][ T31] #1: ffffc9000430fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 584.725073][ T31] #2: ffff88802919f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 584.734136][ T31] #3: ffff888029139518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 584.744315][ T31] #4: ffff888027b3d968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 584.754181][ T31] 2 locks held by getty/5619: [ 584.759373][ T31] #0: ffff88803406e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 584.769329][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 584.779561][ T31] 1 lock held by syz-executor/5846: [ 584.784791][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 584.794880][ T31] 5 locks held by kworker/1:6/5975: [ 584.800224][ T31] #0: ffff8880206ee148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 584.812423][ T5975] usb usb5-port1: attempt power cycle [ 584.818337][ T31] #1: ffffc900047ffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 584.831481][ T31] #2: ffff8881453b0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 584.840469][ T31] #3: ffff888145762518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 584.859392][ T31] #4: ffff888142bbe268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 584.871326][ T31] 1 lock held by syz.3.2615/14206: [ 584.879745][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 584.890081][ T31] [ 584.892451][ T31] ============================================= [ 584.892451][ T31] [ 584.901139][ T31] NMI backtrace for cpu 1 [ 584.901158][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 584.901181][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.901195][ T31] Call Trace: [ 584.901203][ T31] [ 584.901212][ T31] dump_stack_lvl+0x189/0x250 [ 584.901252][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.901285][ T31] ? __pfx__printk+0x10/0x10 [ 584.901339][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 584.901367][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 584.901393][ T31] ? __pfx__printk+0x10/0x10 [ 584.901429][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 584.901454][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 584.901480][ T31] watchdog+0xf60/0xfa0 [ 584.901508][ T31] ? watchdog+0x1e2/0xfa0 [ 584.901535][ T31] kthread+0x711/0x8a0 [ 584.901568][ T31] ? __pfx_watchdog+0x10/0x10 [ 584.901589][ T31] ? __pfx_kthread+0x10/0x10 [ 584.901621][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.901647][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.901674][ T31] ? __pfx_kthread+0x10/0x10 [ 584.901706][ T31] ret_from_fork+0x47c/0x820 [ 584.901734][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 584.901767][ T31] ? __switch_to_asm+0x39/0x70 [ 584.901787][ T31] ? __switch_to_asm+0x33/0x70 [ 584.901808][ T31] ? __pfx_kthread+0x10/0x10 [ 584.901838][ T31] ret_from_fork_asm+0x1a/0x30 [ 584.901876][ T31] [ 584.901884][ T31] Sending NMI from CPU 1 to CPUs 0: [ 585.053284][ C0] NMI backtrace for cpu 0 [ 585.053304][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 585.053324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.053335][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 585.053366][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 78 1e 00 f3 0f 1e fa fb f4 08 e7 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 585.053382][ C0] RSP: 0018:ffffffff8e207d80 EFLAGS: 000002c6 [ 585.053398][ C0] RAX: d42fc47f18a49a00 RBX: ffffffff8196c488 RCX: d42fc47f18a49a00 [ 585.053413][ C0] RDX: 0000000000000001 RSI: ffffffff8dc9b677 RDI: ffffffff8c04eb80 [ 585.053425][ C0] RBP: ffffffff8e207ea8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 585.053439][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fe50630 [ 585.053453][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c52a38 [ 585.053465][ C0] FS: 0000000000000000(0000) GS:ffff8881257b3000(0000) knlGS:0000000000000000 [ 585.053479][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.053492][ C0] CR2: 00007f3f68cf0300 CR3: 000000007b71c000 CR4: 00000000003526f0 [ 585.053508][ C0] Call Trace: [ 585.053516][ C0] [ 585.053523][ C0] default_idle+0x13/0x20 [ 585.053539][ C0] default_idle_call+0x74/0xb0 [ 585.053555][ C0] do_idle+0x1e8/0x510 [ 585.053579][ C0] ? __pfx_do_idle+0x10/0x10 [ 585.053611][ C0] cpu_startup_entry+0x44/0x60 [ 585.053631][ C0] rest_init+0x2de/0x300 [ 585.053649][ C0] start_kernel+0x3a9/0x410 [ 585.053677][ C0] x86_64_start_reservations+0x24/0x30 [ 585.053699][ C0] x86_64_start_kernel+0x143/0x1c0 [ 585.053720][ C0] common_startup_64+0x13e/0x147 [ 585.053753][ C0] [ 585.079894][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 585.079921][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 585.079951][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.079969][ T31] Call Trace: [ 585.079982][ T31] [ 585.079994][ T31] dump_stack_lvl+0x99/0x250 [ 585.080039][ T31] ? __asan_memcpy+0x40/0x70 [ 585.080076][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.080114][ T31] ? __pfx__printk+0x10/0x10 [ 585.080167][ T31] vpanic+0x237/0x6d0 [ 585.080198][ T31] ? __pfx_vpanic+0x10/0x10 [ 585.080240][ T31] panic+0xb9/0xc0 [ 585.080294][ T31] ? __pfx_panic+0x10/0x10 [ 585.080336][ T31] ? __pfx_panic+0x10/0x10 [ 585.080367][ T31] watchdog+0xf9f/0xfa0 [ 585.080399][ T31] ? watchdog+0x1e2/0xfa0 [ 585.080430][ T31] kthread+0x711/0x8a0 [ 585.080469][ T31] ? __pfx_watchdog+0x10/0x10 [ 585.080494][ T31] ? __pfx_kthread+0x10/0x10 [ 585.080531][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.080563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.080594][ T31] ? __pfx_kthread+0x10/0x10 [ 585.080639][ T31] ret_from_fork+0x47c/0x820 [ 585.080672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 585.080709][ T31] ? __switch_to_asm+0x39/0x70 [ 585.080732][ T31] ? __switch_to_asm+0x33/0x70 [ 585.080757][ T31] ? __pfx_kthread+0x10/0x10 [ 585.080791][ T31] ret_from_fork_asm+0x1a/0x30 [ 585.080844][ T31] [ 585.372294][ T31] Kernel Offset: disabled [ 585.376769][ T31] Rebooting in 86400 seconds..