last executing test programs: 39.16601313s ago: executing program 0 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) io_setup(0x3, &(0x7f0000000200)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x1, r4, 0x0}]) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r7, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r9, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x343}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt(0xffffffffffffffff, 0xffffffff, 0x0, &(0x7f0000000080)="c45af4c808491b8b217ae099c9a10653d12601006ee65c056fc76d", 0x1b) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 37.362414087s ago: executing program 0 (id=408): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r3, 0x0}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x0, 'syz1\x00'}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x109082) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000040)={0x3, 0x32, 0x0}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="df2d47f5d1af77422e366297be4978bf1fcf5a9e9f1f25d5a01c4f93b22ea88da7eb6cc2a025226f89bc59a2839121def556a15a254d78f6c967431617ae1dadeed11a516c04c5816d236123e963d3df957843170746b34813d1cfbd2ab0d125d2a0a7c7fe1440c8d45782e6ef6d557adeabb993fb8cb7e930d7355793c98a377c30662bc95dd5129a4f34fe73bc3bec28849b95638fddd4d8e608cead4be7edb50df74f4a5bbac9ea01c951a7fb26bee7ab2a84b318a5a13652ce4b94d9e75c538afa0db101162e"}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000140)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r8 = socket(0xa, 0x3, 0x3a) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r9) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="a70900bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 37.254020758s ago: executing program 0 (id=409): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904", @ANYBLOB="35d5be36e7b53e632fe8e199e28666de477355778d4ed5385c12fc40c1e3ab8b9df4d7cbc222dfd356fa967584475626bdaa343cfb717b92f6c0cc14300a274e97f4df5d20b041d7561531fe805eaa8817bda88809fb37476eab9dede682614cf3be906912b0e418997a22835db5be8c1c3860275108b53edcc17065c387fc1f090b9a"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x6, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x10, "3498125f4cc3035fa82d7d4272ac6210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x73e37000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x8, 0x7, 0x9, 0x9, 0x4, 0x90, 0x4, 0x8, 0x5, 0x9, 0x1, 0x2, 0x0, 0x5, 0xe]}, &(0x7f0000000240)=0x100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d, 0x400) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x0, "69bbed9682b06e3f361ed4e57a83c956b1b194884ea943826213b3c865a4371e"}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904", @ANYBLOB="35d5be36e7b53e632fe8e199e28666de477355778d4ed5385c12fc40c1e3ab8b9df4d7cbc222dfd356fa967584475626bdaa343cfb717b92f6c0cc14300a274e97f4df5d20b041d7561531fe805eaa8817bda88809fb37476eab9dede682614cf3be906912b0e418997a22835db5be8c1c3860275108b53edcc17065c387fc1f090b9a"], 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x6, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x10, "3498125f4cc3035fa82d7d4272ac6210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x73e37000) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x8, 0x7, 0x9, 0x9, 0x4, 0x90, 0x4, 0x8, 0x5, 0x9, 0x1, 0x2, 0x0, 0x5, 0xe]}, &(0x7f0000000240)=0x100) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000280), 0x4d, 0x400) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x0, "69bbed9682b06e3f361ed4e57a83c956b1b194884ea943826213b3c865a4371e"}) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000100)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 36.356578488s ago: executing program 0 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x296a03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x4000009d, 0x0, 0x1}]}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@int=0xf5dc, 0x4) 36.145818029s ago: executing program 0 (id=416): r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000404) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000003c0)={0x7, 0xfff, 0x10, 0x80000, 0xffffffffffffffff}) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80000) r6 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$netlink(r1, &(0x7f0000000780)={&(0x7f0000000000), 0xc, &(0x7f0000000140)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000000280)={0x114, 0x2, 0x800, 0x70bd26, 0x25dfdbfd, "", [@generic="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", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast1}]}, 0x114}], 0x2, &(0x7f0000000680)=[@rights={{0x38, 0x1, 0x1, [r2, r3, r0, r0, r4, r5, r7, r0, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r15]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r1, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd0, 0xc041}, 0x10) 35.925585799s ago: executing program 0 (id=418): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a04000000a83e421dd783924e7f13b914c4b89e62451287a0d668ecf0dd5267c8ccadd47d9777398cd509941b1c8d46c43e14a677a92ae4403c58717e80a15ee330ee630bef9ea499bb9bf381b302e845874677793eb50b2de79920c7fb8921f91ef05513c039243e4604b94d1d64519dbd2141c0b3e95089fdeac726e23a04e31b88ceb25fc818b39f6dedbda91897dbadacfd6782863e62108104873cdc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xfffffffc) 35.711001123s ago: executing program 32 (id=418): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a04000000a83e421dd783924e7f13b914c4b89e62451287a0d668ecf0dd5267c8ccadd47d9777398cd509941b1c8d46c43e14a677a92ae4403c58717e80a15ee330ee630bef9ea499bb9bf381b302e845874677793eb50b2de79920c7fb8921f91ef05513c039243e4604b94d1d64519dbd2141c0b3e95089fdeac726e23a04e31b88ceb25fc818b39f6dedbda91897dbadacfd6782863e62108104873cdc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xfffffffc) 7.251710577s ago: executing program 2 (id=549): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0xf9, 0x718, 0x46, 0xe482, 0x6, 0x9, 0x8, 0xfff, 0x3, 0x1ec, 0x300, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000480)={0x14, &(0x7f0000000280)={0x40, 0x22, 0xfd, {0xfd, 0x22, "b1c420c180171b1b6fa8cc831fababad230915cf8572bdcd75978792bc7940b855cea8001099b82cb43309b419c9e813e3edf361251ca7335f8d702080df4f2bbbf037865a90a9fc07cd4149672dadff1ac5c3ef18a5632cddb956c159bea3aef2e9089e0726931d3166d58f2513768cd252f73843cae9beba915a648991a76296c15b95ed9f2928c58a99fe4b3d14506a88020816037d71f5fcd1563807e587c866815517c92814ba1c0bcdacb5fe316a2617eae3816a7e488e3285a8637b03c15f7b5e39c3a8ba9e29d4e49ee5591268cdc96584eeef88844286598cd20309b3970775068d31d0fea722c48b199750aa53b44200fd3b182d8bdb"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000500)={0xe5810ce67f423844, 0x9, 0x6c, "1b00df725fd7e9bc9b1a8ce03de32773c1400820192ff1347e327124a2dc886fe1fe4b76f1043dacdc3e6e157df69ec9e606e5eef1e8a73c20d6592029db4c1f80da8a1b723f7354a6805ba59172885e2a9d5d39a325d51ea6fff0ae5708b4d76104dd06abaadbc242462282"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xc3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3a}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x5, 0xb34, 0x3, 0x3, 0x8, 0x0, 0x0, 0x9, 0x400, 0x1000, 0x7fff, 0x592}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000680)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000006c0)={0x20, 0x87, 0x2}, &(0x7f0000000700)={0x20, 0x89, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x1, 0x0, &(0x7f00000004c0)) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x1, 0x90, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xe7, 0x21, 0xca, 0x8, 0x19d2, 0x118, 0xf518, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x6, 0xa0, 0x223c6840dbd52558, 0x78, [{{0x9, 0x4, 0x54, 0xcf, 0x1, 0xff, 0xff, 0xff, 0xf, [], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x4, 0x6, 0xaf, [@generic={0x63, 0x7, "751ee0f9528e03e21c68587c4215d7d40f4d8cc95550d90e8e75ba620c432837a99493d6c3cb645f4e6eb2681b9c7d904a0d73c56494094337fbf7b16280e13ce5b3615d028ca812e293b864c841e019ac4fccb8e4456627db77a5003fac539ffe"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(r1, 0x0, 0x0) 6.378124341s ago: executing program 3 (id=551): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x4000000, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}}, 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001f1000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0xc, 0x6, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.721493934s ago: executing program 2 (id=555): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1a) prctl$PR_SET_SECUREBITS(0x1c, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000240)={0x8, {0x4, 0x2, 0x1, 0x6}}) read$char_usb(r0, &(0x7f0000000100)=""/169, 0xa9) 4.609032404s ago: executing program 2 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xf8, {{0x6, 0x24, 0x6, 0x0, 0x0, '~'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x6, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x10}, @country_functional={0xe, 0x24, 0x7, 0x72, 0x5, [0x8, 0x8db7, 0x4, 0x4282]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x4c, 0x8, 0xa0}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0xfffc}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x0, 0x806}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x71, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x238, 0x1, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x3f}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x47, 0x3b, 0x25, 0x10, 0x2}, 0x65, &(0x7f0000000100)={0x5, 0xf, 0x65, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x9, 0x9, 0x4, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x6, 0x1, 0xfff}, @generic={0x41, 0x10, 0xb, "a3284909d25aa68a0c6bb82d3e3a930d7dca981faeece7393f079c4b470d3305b683c7d31233cc76380e446aa4d06976c6addb3ddac228ba025446ff2a2c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xb7, 0x6, 0x7}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x240e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}, {0x69, &(0x7f00000002c0)=@string={0x69, 0x3, "7d52ed4795e7483798a6ba3e923a570fe69273c0faffe391a80571e214a6e83c81da0fd70d2af6f46565f1691592c752119e1389c62f4a6affdc4cd2a8241291aef006048a391553a93b40fe8fc4f638597f41aa08215e553b1e70583d9dc89846e5c348065d65"}}, {0xd6, &(0x7f00000004c0)=@string={0xd6, 0x3, "84b102432fd2c20394e91bce0a25b8a1ec368876c6c4533ff6017d4901763fe70b4335c2ea5c9fe9798826d5dd2b78c31c975f513a10957f27d0e584f003cd7947c00f7fe0711457ddd9a9ff6fb6389bd26655865360a3bd8ae86d3356a314b1b2364bde2f271e839e7a809fc49d58161c40ff7a35ef46f579ede5afdf762d55fbfb4db0ef968eff1b97f6126efc8d2b07cee7a8928bf407c69bc8c7e5a8310283bdcdc94aa1e41d166ebaf254a8e13ef26b6c1c85019a9674e24f9f52b6a8d4f34cdcf18ccd2f15fc93a45cb720ce66f4b72669"}}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 3.917843071s ago: executing program 1 (id=562): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@private}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r3, 0x0) write$dsp(r3, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x208004, 0x0) 3.747293503s ago: executing program 1 (id=563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="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", 0xff9d}, {&(0x7f0000000000)="c599be9aa9c70348e7975315d83b4e86c6b395ab98f7a76143dbf2bbddb77680472e22f4367ea8e7dd1e010f72080039f2e593fd2c5e1a491ed0b1237a0b246eefd2738c3908da98b347aa227ab82bf225592af9458a7f79d1e6", 0x5a}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x4815) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000004900)=""/4116, 0x1014}], 0x1}, 0x5}], 0x1, 0x2101, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020600030300000026bd7000fddbdf250100180006970044"], 0x18}}, 0x1c840) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04090300c901"], 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r9, 0x509, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x167, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x141, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x400, 0x1, 0x3}}, @mesh_chsw={0x76, 0x6, {0x4, 0x63, 0x19, 0x8}}, @peer_mgmt={0x75, 0x6, {0x1, 0x8000, @void, @val=0x37, @void}}, @random={0x6, 0xf4, "050c63464bc3d1e67f1bc47341b4063004ba0debd7861c36835373193b01c09230870540f915ef90fabc13f2ed78cca0d50dc863d5065ab3d5c4615cedf0a9ceec9bc9b6e0c932883cca1ce2ad655dfe1c44df9502d65f5bb155d46da34612aee42b6fd325723638a248c3df7c9b61db8222db4a610d2f21fa382862a9723c593424537b6c8a0bf3f0ce1306abb773539d2199e7435616c668d6f7a845e3c6be0a1f77bd55ab98227810c8070729d89cf443e89d51a68f0755d163533df83195955f76285524711b539b188c5ecfe5e6a540f93b0c74d0d4d1ccc4e34cb6ae930650f65c931dd4bd222dbd615dc3ea38d026ef6c"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @ibss={0x6, 0x2, 0x2e66}, @tim={0x5, 0x22, {0x0, 0x1c, 0x0, "51bbf8800bd073741ed70942aeb329177f0e189d76146165ad3b445e9b1a70"}}, @mesh_chsw={0x76, 0x6, {0x1, 0x81, 0x2c, 0x4}}, @chsw_timing={0x68, 0x4, {0x9, 0x1}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1a4}}, 0x4044000) 3.5219598s ago: executing program 1 (id=565): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) fcntl$setlease(r0, 0x400, 0x0) 3.475666231s ago: executing program 1 (id=567): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc090, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x1, 0xfb, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xa6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x208, 0x1, 0x5, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x40, {0x40, 0x22, "8033659ee28fe0466f7d9736e2703ab94ab84454c0086bae9773f9b0cda65a0bc2d0ebd1079e02c7c830f3cf9f2e7b6a94c6fe157369d67e5d20173b52cb"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x7, 0xde, "131202fabee517537bc903c4a8f555d124d159521f72cbb33fcdeef6e4be6faac1f28244841eba5f2abdf23e6d5284c3744bf14b91b7e76d8d26fd594a197112992be94170a57940baef7b867a44323c7ed1f1c4a0cb02f137cc7c742bb158f904895a0b567e207f11dae418b09c637d334c67ed2799d67a0d17d28683b5a1899c8b0895d2d3ce83a67127509e52254cfb7fc332848a154221b7c8079380f0bde2d8d62f740fb61a3976d959e9fc3b0df18c3883e1de896aa6c55636e030b1eb13e9e210053ff3bcf1c204f4f560a717a7de1d4ec03042500536e0978d74"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "1ac7d0f353"}, &(0x7f0000000380)={0x40, 0x5, 0x1, "b1"}}) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) (rerun: 64) 3.467084432s ago: executing program 3 (id=568): syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x8000f766, 0x101f, 0xffffffff, 0x1f3, 0x0, 0x0}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x4400) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x800454e1, 0x1) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="022206000000922efe710000"], 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$VT_RELDISP(r3, 0x5605) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x4, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x7, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x4, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002800028005000300500000000b000100736f636b657400000800024000000001140000001100010000000000000000000300000aee7fc7f3f21bd4a71867841590b635033938892e1cffebb28d2f19f71199c21ec6a86874247abf291d44b85a5b5e8f26aa89b0"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 3.361877758s ago: executing program 4 (id=569): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'team_slave_0\x00', {0x4000}, 0x4}) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) (async) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) (async) close(r2) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffc}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x68) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000001c0)={0xfffffffe, "1eab8bd1722b014530deebf1add8647bb4dd161d0c0bcc01b05eea3ae1e391d8", 0x2, 0x20, 0x80000000, 0xffffffff, 0x2, 0x4, 0xb962, 0x4}) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0xb}) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x4080, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000340)={0x80a0000, 0xc000}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000380)={0x1, 'ipvlan0\x00'}, 0x18) (async) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f00000003c0)={0x33d, 'syz0\x00'}) mkdirat(r3, &(0x7f0000000400)='./file0\x00', 0x1df) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000580), 0x440481, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000005c0)={0x9, r4}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x11120400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async, rerun: 64) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r9) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r11, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44005}, 0x8080) (async, rerun: 32) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940)=0x4) (rerun: 32) 3.269202202s ago: executing program 4 (id=570): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c06, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0xd, 0xe, 0x1, {0x22, 0xe8e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x4d, 0x56}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x0, 0x2b}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0xc4, 0xbf, 0x20, 0x8}, 0x12e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x4, [{0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="56032d439a63241e440e30ae0960a9b540c8c521fb11e27060f53b593bffbb6e8048b602e1e313390e2dd172f860ce774244f1b579bbd2612b0392bea3ba8a12715cea325105321d8cd5a798e98128a5ff045c3553a5f2846f04b37cd525eeb59b3f3b6fae1a730501819a3dc728f2d5e318b97bdaf41443ef4bf853cb5aeb7fb3e812ced598ad3911466b250577bd09b3855671b914c0779b7affda3e85837b5756d0e4e85dbb55a039ba8cef36f13fe1364dc7c3b4c530f625a45d349a98966fb0788ae409de069170047d154b27b1052df88513fae6706f83d57baf5f776ae76a"]}, {0xa1, &(0x7f0000000600)=ANY=[@ANYBLOB="a103181bb29b1328dc2accd27f8013ec83a9d56711793a42e9f9e7038c58422ff884f2043a4319c79067d9b6405b9f4ed69e77d2a578932946798c1f73752c2c412b5c24740b2f99ddd6e9586ad0547d0baa513e991f60b690c7c724ac6f262a3a93099127975ca2e66e6ce18eac8c4f87b5e36f6d53fbe872556e8405882c9703f9d9741fed072ddc4c4294e379e037eeb81528eb4ddbd4900d9193b4ce3d03bfa6e3ad3b6556e7a5a559a3c23daca23722697c8d0f4f0af58baec13d69666247e44de56b58c29feaa12cd98248c724b423fd3445ea62353c3dfb0b12ceb6ea5c639594bed39dced4db9a7dbb24aa23"]}, {0xbf, &(0x7f00000004c0)=@string={0xbf, 0x3, "d6efa1299dd8ad2d4d0acd343a7c4834406d03ade9b02d60858db497302330f066abc78a9b17e2531ff3b66a503b1de7e0f0a506771436fa64e69a6fe533123d8673eff5835c6a11d491839c697ae2e5e160c5469a8ffe432f7143db450aaac850368f787087fbb0e0c00c40234f93d29ec1edf9fcf97727b58cfd926f1574db8d7a877beb797568d55d8f9cf5fbcf99355b06fbecf51f79677cdecb5f816978394cca69a165c7bfc0e5db341649ba735c6e2e93ce126d4263599e35ab"}}, {0x40, &(0x7f0000000080)=@string={0x40, 0x3, "c3075949cb22607a40357d755e0d8ee9f0d5e56ca1a8d53b19b51711109979be7d67a78bf3ac4836fa439b8f72a543a1a2af803778a4f2ab3bc5c6549e9e"}}]}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r2, &(0x7f0000000000)="ee", 0x1, 0x40050, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)={0x0, 0xdbc, 0x45}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004d29000800010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x3}, 0x20) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x0, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2}) r7 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000700)={0x3, 0x8, 0x6, 0x2, 0x1, 0x0, [{0x100000001, 0x5, 0x1, '\x00', 0x3104}]}) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80) write$6lowpan_enable(r7, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x20, 0x22, 0x19, {0xffffffffffffff18, 0x21, "a26a612146df1b90d42c934e2b3cccdefe6652da8648bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.17367024s ago: executing program 4 (id=571): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) mount(&(0x7f0000000100)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='romfs\x00', 0x2008087, 0x0) 3.037758374s ago: executing program 4 (id=572): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b04101e8c00000001090212000100000000090401"], 0x0) 1.758263443s ago: executing program 4 (id=573): syz_usb_connect(0x5, 0x4f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x13, 0xc8, 0x2f, 0x20, 0x6cd, 0x104, 0xc86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xec, 0x1, 0x68, 0x83, 0xb6, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x5, 0x5}}]}}, {{0x9, 0x4, 0x2b, 0xfa, 0x2, 0x93, 0x5c, 0x95, 0x1, [], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x8, 0x40, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1a, 0x6, [@generic={0x7, 0x5, "ce37064ab4"}]}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0) 1.741143588s ago: executing program 3 (id=574): set_mempolicy(0x1, 0x0, 0x3ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f00000008c0)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x40698060, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6, 0x6, 0x0, {0x5, 0x6, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x2000002, 0x0, r4, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r5, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4112, 0x1010}], 0x1, 0x304, 0xfffffffe) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./file1\x00') r7 = socket(0x2, 0x1, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 1.466087424s ago: executing program 2 (id=575): syz_io_uring_setup(0x8d2, &(0x7f0000000100)={0x0, 0x951a, 0xb038, 0xffffffff}, 0x0, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.465459372s ago: executing program 2 (id=576): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x5, 0x2, 0x10, {0xa, 0x4e22, 0x181, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x24) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="403c293e914efe733964bcdbd1", 0xd}], 0x1}, 0x818) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x9, 0xd, @private2, 0x6}}, 0x24) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) ptrace(0x4208, r4) 1.396709909s ago: executing program 2 (id=577): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000580)={{0x3, @netrom}, [@bcast, @bcast, @netrom, @rose, @remote, @netrom, @null, @rose]}, &(0x7f0000000100)=0x48, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r1, &(0x7f0000000680)={0x1, 0x4d0, 0x1, 0x4}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x7) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x10, 0xe4, {0xe4, 0xe, "8cab1b2bac6d3defcd111f14e954336e9a45ff7896d8a26693481dcdc8c9a33c119e13c120a2181bdddd502169c944ab771b13ac00a2217ec04bf2d4949a3c721007b5b7eac60f85174f2e86e73a3a9a52688fe69abc424506e0e3cd0d12c2fba1a831191909c4692d3d137454ef5c5bf83a50ee7a87b01793d093fee15fa8cdb4f3d5b86d37730cf45b959cb0e89d1e20a3aec470ae2e11e7e070499640931b71e943efb38f7061290b7a3ffc95caa75894b866dcc68c555ec5fedb4f025dda900f30b48d0d66c850fabd6af9eaeed20c4dd351fd301cd5c236cad5b663d34f5367"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="f613add30001f0ffffffffffffd7"]}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x89, "a62be185ede3ed2416361f7827ba6d631238748728f1b0ccaeffc84ac69cb9d1289733317894023a631a621c5094f71b752e34bd63f003dd64582533e3cbc2e106bc3b0b5383d71989e2838195c162a1d7a525f7e176ec1136ab9a4bc4853ab41d88cdce6d1c95106456a1e9a6744db063ce994449b0354d25eaa490b5ac97283093f83a57ee25a913"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)=ANY=[@ANYBLOB="2081030000006b9e02"], &(0x7f0000000480)=ANY=[@ANYBLOB="2082010000f9ff11f39914a63229663be35dc5d76851024a82b1da370604eb6650ac391b4fda8b9a806d55902f5027bc40c321c0836d877d0e63f0cd7974ba770000"], &(0x7f0000000340)={0x20, 0x83, 0x1, "c7"}, &(0x7f0000000380)={0x20, 0x84, 0x1, "c8"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "64a1cb"}}) 842.199013ms ago: executing program 3 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x83292000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000800094000000006340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000009e1f4858495bc9ff84d13207060500000000000000000003"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 654.069805ms ago: executing program 3 (id=579): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)}, 0x200048d4) 625.323654ms ago: executing program 3 (id=580): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d7000000", @ANYRES16=r4, @ANYBLOB="01001fff0000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) syz_usb_connect(0x2, 0x1cb, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d7000000", @ANYRES16=r4, @ANYBLOB="01001fff0000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) (async) syz_usb_connect(0x2, 0x1cb, &(0x7f00000000c0)=ANY=[], 0x0) (async) 380.478468ms ago: executing program 1 (id=581): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) migrate_pages(0x0, 0x1, &(0x7f0000000300)=0x3, &(0x7f0000000000)=0xfe) mmap(&(0x7f000045b000/0x4000)=nil, 0x4000, 0x1, 0x30, 0xffffffffffffffff, 0x2000) 280.652354ms ago: executing program 4 (id=582): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x42140, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r1, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000800)=0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xd3, 0x43, 0x20, 0xe41, 0x414d, 0x2a63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x25, 0x3b, 0xb8}}]}}]}}, 0x0) 0s ago: executing program 1 (id=583): set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x20002}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0xfffffffffffffffe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000380)) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010808}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8846}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf6fe2b517a0e0878}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400602, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) get_robust_list(r7, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f00000001c0), 0x0, &(0x7f0000000200)}, &(0x7f00000002c0)=0x18) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) kernel console output (not intermixed with test programs): om the descriptor's value: 9 [ 159.964716][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.975805][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 159.985063][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.991039][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 159.995677][ T5894] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.005569][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.006885][ T5894] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.024851][ T5894] usb 3-1: Product: syz [ 160.029155][ T5894] usb 3-1: Manufacturer: syz [ 160.033700][ T5881] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 160.034042][ T10] usb 2-1: device descriptor read/8, error -71 [ 160.049501][ T5894] usb 3-1: SerialNumber: syz [ 160.053533][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.058961][ T5894] usb 3-1: config 0 descriptor?? [ 160.085913][ T5894] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 160.096036][ T5881] usb 4-1: config 0 descriptor?? [ 160.151906][ T10] usb usb2-port1: unable to enumerate USB device [ 160.262662][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 160.276544][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.286187][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.302746][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.312143][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.338722][ T5914] usb 3-1: USB disconnect, device number 38 [ 160.371813][ T5914] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 160.598466][ T5881] creative-sb0540 0003:041E:3100.0007: item fetching failed at offset 0/1 [ 160.608613][ T5881] creative-sb0540 0003:041E:3100.0007: parse failed [ 160.616069][ T5881] creative-sb0540 0003:041E:3100.0007: probe with driver creative-sb0540 failed with error -22 [ 160.803996][ T10] usb 4-1: USB disconnect, device number 28 [ 161.084680][ T7146] XFS (loop2): SB validate failed with error -5. [ 161.133509][ T7146] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 161.149782][ T5881] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 161.160373][ T7146] CIFS mount error: No usable UNC path provided in device string! [ 161.160373][ T7146] [ 161.178010][ T7146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.849837][ T980] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 161.999800][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 162.007876][ T980] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 162.018636][ T980] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.031013][ T980] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.041386][ T980] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.054421][ T980] usb 2-1: config 7 interface 0 has no altsetting 0 [ 162.061140][ T980] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 162.070316][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.168351][ T5894] usb 1-1: USB disconnect, device number 46 [ 162.177274][ T5881] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 162.276112][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 162.333630][ T5881] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.355306][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.367995][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.383094][ T5881] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 162.399742][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.431848][ T5881] usb 3-1: config 0 descriptor?? [ 162.497561][ T7171] syz.0.303 (7171) used obsolete PPPIOCDETACH ioctl [ 162.530867][ T980] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0008/input/input20 [ 162.570364][ T980] kye 0003:0458:5010.0008: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 162.656872][ T7165] netlink: 14 bytes leftover after parsing attributes in process `syz.2.300'. [ 162.684924][ T7165] hsr_slave_0: left promiscuous mode [ 162.705713][ T7165] hsr_slave_1: left promiscuous mode [ 162.732130][ T980] usb 2-1: USB disconnect, device number 46 [ 162.956319][ T5881] uclogic 0003:5543:0064.0009: item fetching failed at offset 0/3 [ 162.965019][ T5881] uclogic 0003:5543:0064.0009: parse failed [ 162.971583][ T5881] uclogic 0003:5543:0064.0009: probe with driver uclogic failed with error -22 [ 163.153937][ T980] usb 3-1: USB disconnect, device number 40 [ 163.330132][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'. [ 163.782312][ T7204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.889894][ T5881] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 164.039729][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 164.048523][ T5881] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 164.057887][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.065985][ T5881] usb 2-1: Product: syz [ 164.070284][ T5914] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 164.079153][ T5881] usb 2-1: Manufacturer: syz [ 164.084056][ T5881] usb 2-1: SerialNumber: syz [ 164.092291][ T5881] usb 2-1: config 0 descriptor?? [ 164.100522][ T5881] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 164.242657][ T5914] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 164.266374][ T5914] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.279458][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.287878][ T5914] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 164.297115][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.310979][ T5914] usb 1-1: config 0 descriptor?? [ 164.320820][ T7206] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 164.325150][ T7210] netlink: 108 bytes leftover after parsing attributes in process `syz.3.319'. [ 164.346381][ T7211] netlink: 108 bytes leftover after parsing attributes in process `syz.3.319'. [ 164.478676][ T7213] input: syz1 as /devices/virtual/input/input21 [ 164.496503][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 164.689759][ T5908] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 164.754709][ T5914] kye 0003:0458:5015.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 164.768836][ T5914] kye 0003:0458:5015.000A: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 164.780183][ T5914] kye 0003:0458:5015.000A: tablet-enabling feature report not found [ 164.788368][ T5914] kye 0003:0458:5015.000A: tablet enabling failed [ 164.869719][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 164.876807][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.891681][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 164.904241][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.915652][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 164.924960][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.936189][ T5908] usb 4-1: config 0 descriptor?? [ 164.942481][ T7217] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 164.952409][ T5908] hub 4-1:0.0: USB hub found [ 164.964399][ T9] usb 1-1: USB disconnect, device number 47 [ 165.289537][ T5908] hub 4-1:0.0: 8 ports detected [ 165.305660][ T5908] hub 4-1:0.0: insufficient power available to use all downstream ports [ 165.551644][ T7232] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7232] [ 165.752883][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'. [ 166.059703][ T5894] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 166.109807][ T5914] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 166.134211][ T7200] loop6: detected capacity change from 0 to 524288000 [ 166.156687][ T5881] gspca_stk1135: reg_w 0x203 err -71 [ 166.187201][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.207086][ T5881] gspca_stk1135: Sensor write failed [ 166.219678][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 166.229449][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.237699][ T5894] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 166.246677][ T5881] gspca_stk1135: Sensor write failed [ 166.255582][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.255715][ T5894] usb 1-1: config 0 has no interface number 0 [ 166.267053][ T5881] gspca_stk1135: Sensor read failed [ 166.270845][ T5894] usb 1-1: config 0 interface 12 has no altsetting 0 [ 166.275372][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.285259][ T5894] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 166.287568][ T5881] gspca_stk1135: Sensor read failed [ 166.304657][ T5881] gspca_stk1135: Detected sensor type unknown (0x0) [ 166.305419][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.306717][ T5914] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 166.317532][ T5894] usb 1-1: Product: syz [ 166.344719][ T5914] usb 3-1: config 0 has no interface number 0 [ 166.349409][ T5894] usb 1-1: Manufacturer: syz [ 166.353250][ T5908] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 166.363164][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.370694][ T5908] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 166.371068][ T5894] usb 1-1: SerialNumber: syz [ 166.378719][ T5914] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 166.394198][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.402355][ T5881] gspca_stk1135: Sensor read failed [ 166.411358][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.415778][ T5894] usb 1-1: config 0 descriptor?? [ 166.418175][ T5914] usb 3-1: Product: syz [ 166.430200][ T5908] usbhid 4-1:0.0: can't add hid device: -32 [ 166.439760][ T5914] usb 3-1: Manufacturer: syz [ 166.444412][ T5914] usb 3-1: SerialNumber: syz [ 166.451477][ T5881] gspca_stk1135: Sensor read failed [ 166.456753][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.463630][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 166.474672][ T5914] usb 3-1: config 0 descriptor?? [ 166.483769][ T5881] gspca_stk1135: Sensor write failed [ 166.489141][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 166.500257][ T5881] gspca_stk1135: Sensor write failed [ 166.507235][ T5881] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 166.532388][ T5881] usb 2-1: USB disconnect, device number 47 [ 166.721268][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.739378][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.009747][ T5908] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 167.039467][ T5914] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.081423][ T5914] usb 3-1: USB disconnect, device number 41 [ 167.143799][ T5908] usb 2-1: device descriptor read/64, error -71 [ 167.255295][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.264436][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.302935][ T5894] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 167.322920][ T5894] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 167.340788][ T5894] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 167.351622][ T5894] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 167.380111][ T5894] usb 1-1: USB disconnect, device number 48 [ 167.400656][ T5908] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 167.540257][ T5908] usb 2-1: device descriptor read/64, error -71 [ 167.629973][ T5914] usb 4-1: USB disconnect, device number 29 [ 167.650782][ T5908] usb usb2-port1: attempt power cycle [ 167.749755][ T5894] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 167.787689][ T30] audit: type=1326 audit(1759622778.273:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.3.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e1bd8eec9 code=0x0 [ 167.839087][ T7264] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 167.853201][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.863969][ T7264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 167.880015][ T5980] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 167.899688][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 167.906563][ T5894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.914835][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.925005][ T5894] usb 1-1: config 0 has no interface number 0 [ 167.931302][ T5894] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 167.942875][ T5894] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 167.952955][ T5894] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 167.963157][ T5894] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.978454][ T5894] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 167.987646][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.995800][ T5894] usb 1-1: SerialNumber: syz [ 168.005369][ T5894] usb 1-1: config 0 descriptor?? [ 168.014925][ T5894] hso 1-1:0.1: Failed to find BULK OUT ep [ 168.019725][ T5908] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 168.049772][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 168.055635][ T5908] usb 2-1: device descriptor read/8, error -71 [ 168.064235][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 168.079350][ T5980] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.089119][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.097617][ T5980] usb 3-1: Product: syz [ 168.101886][ T5980] usb 3-1: Manufacturer: syz [ 168.106688][ T5980] usb 3-1: SerialNumber: syz [ 168.115126][ T5980] usb 3-1: config 0 descriptor?? [ 168.215809][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 168.256291][ T5980] usb 1-1: USB disconnect, device number 49 [ 168.301770][ T5908] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 168.328069][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.342176][ T5908] usb 2-1: device descriptor read/8, error -71 [ 168.342194][ T5894] usb 3-1: USB disconnect, device number 42 [ 168.461098][ T5908] usb usb2-port1: unable to enumerate USB device [ 168.814844][ T7268] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.823959][ T7269] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.831678][ T7268] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.832195][ T7268] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.841847][ T7269] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.849386][ T7268] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.856370][ T7269] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.863311][ T7268] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 168.879888][ T5980] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 168.934955][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 169.061200][ T7276] xt_time: unknown flags 0xf4 [ 169.062141][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.077194][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.087723][ T5980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.103017][ T5980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.112690][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.134911][ T24] usb 1-1: [UEAGLE-ATM] firmware is not available [ 169.144431][ T5980] usb 4-1: config 0 descriptor?? [ 169.519812][ T5908] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 169.613776][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.621364][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 169.629028][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.637527][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.645551][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.653203][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.661105][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.668527][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.676077][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.683674][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.692304][ T5980] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 169.709171][ T5908] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 169.721918][ T5980] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 169.734480][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.744970][ T5908] usb 1-1: Product: syz [ 169.749200][ T5908] usb 1-1: Manufacturer: syz [ 169.769902][ T5908] usb 1-1: SerialNumber: syz [ 169.778024][ T5908] usb 1-1: config 0 descriptor?? [ 169.787173][ T5908] ch341 1-1:0.0: ch341-uart converter detected [ 169.799734][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 169.821736][ T24] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 169.843998][ T24] usb 3-1: config 11 has no interface number 0 [ 169.851858][ T24] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.863232][ T24] usb 3-1: config 11 interface 95 has no altsetting 0 [ 169.883748][ T89] usb 4-1: USB disconnect, device number 30 [ 169.892377][ T24] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 169.906887][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.917665][ T24] usb 3-1: Product: syz [ 169.929191][ T24] usb 3-1: Manufacturer: syz [ 169.936116][ T24] usb 3-1: SerialNumber: syz [ 169.989127][ T5908] usb 1-1: failed to receive control message: -121 [ 169.997084][ T5908] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 170.158333][ T24] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 170.174573][ T24] usb 3-1: USB disconnect, device number 43 [ 170.230132][ T5894] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 170.379815][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 170.387126][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.397470][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.409479][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.418969][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.428586][ T5894] usb 2-1: Product: syz [ 170.432904][ T5894] usb 2-1: Manufacturer: syz [ 170.437550][ T5894] usb 2-1: SerialNumber: syz [ 170.649007][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.659295][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.676610][ T5894] usb 2-1: 0:2 : does not exist [ 170.682614][ T5894] usb 2-1: unit 9 not found! [ 170.693034][ T5894] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 170.706548][ T5894] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 170.726089][ T5894] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 170.758667][ T5894] usb 2-1: USB disconnect, device number 52 [ 170.838768][ T30] audit: type=1326 audit(1759622781.323:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.873522][ T30] audit: type=1326 audit(1759622781.323:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.897403][ T30] audit: type=1326 audit(1759622781.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.920016][ T30] audit: type=1326 audit(1759622781.323:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.943818][ T30] audit: type=1326 audit(1759622781.323:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.966258][ T30] audit: type=1326 audit(1759622781.323:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 170.988843][ T30] audit: type=1326 audit(1759622781.323:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 171.011484][ T30] audit: type=1326 audit(1759622781.323:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 171.033835][ T30] audit: type=1326 audit(1759622781.323:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d038eec9 code=0x7ffc0000 [ 171.365497][ T24] IPVS: starting estimator thread 0... [ 171.459897][ T7312] IPVS: using max 25 ests per chain, 60000 per kthread [ 171.609916][ T5894] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 171.759717][ T5894] usb 2-1: device descriptor read/64, error -71 [ 171.935883][ T7325] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 171.979974][ T89] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 172.019873][ T5894] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 172.139715][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 172.147663][ T89] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.159443][ T5894] usb 2-1: device descriptor read/64, error -71 [ 172.166293][ T89] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.180322][ T89] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.194604][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.201692][ T89] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 172.211819][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.226690][ T89] usb 3-1: config 0 descriptor?? [ 172.288285][ T5908] usb 1-1: USB disconnect, device number 50 [ 172.297510][ T5908] ch341 1-1:0.0: device disconnected [ 172.300145][ T5894] usb usb2-port1: attempt power cycle [ 172.355657][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 172.669697][ T5894] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 172.691207][ T5894] usb 2-1: device descriptor read/8, error -71 [ 172.707436][ T89] hid-retrode 0003:0403:97C1.000C: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 172.817834][ T7346] input: syz0 as /devices/virtual/input/input23 [ 172.921734][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 172.921753][ T30] audit: type=1326 audit(1759622783.413:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1bd8eec9 code=0x0 [ 172.950021][ T5894] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 172.970665][ T5894] usb 2-1: device descriptor read/8, error -71 [ 173.093283][ T5894] usb usb2-port1: unable to enumerate USB device [ 173.200245][ T5908] usb 3-1: USB disconnect, device number 44 [ 173.374836][ T7362] binder: 7361:7362 ioctl 40046205 0 returned -22 [ 173.487308][ T7362] 9pnet_fd: Insufficient options for proto=fd [ 173.496066][ T7362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.704378][ T5908] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.798845][ T7373] hfsplus: unable to find HFS+ superblock [ 173.849125][ T5845] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 173.861743][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.874018][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.884440][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.898237][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.910430][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.922063][ T5908] usb 4-1: config 0 descriptor?? [ 174.310015][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 174.353515][ T5908] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 174.473098][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 174.482962][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.494565][ T24] usb 3-1: config 0 descriptor?? [ 174.504439][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 174.530318][ T89] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 174.603017][ T5894] usb 4-1: USB disconnect, device number 31 [ 174.673051][ T89] usb 1-1: device descriptor read/64, error -71 [ 174.704199][ T7375] netlink: 774 bytes leftover after parsing attributes in process `syz.2.365'. [ 174.713695][ T7375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.365'. [ 174.724636][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.735101][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.744698][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.753760][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.761904][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 174.923102][ T89] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 174.937692][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 174.945778][ T9] usb 2-1: can't read configurations, error -71 [ 174.969250][ T30] audit: type=1326 audit(1759623014.452:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8d038eec9 code=0x0 [ 174.993271][ T24] gspca_sn9c2028: read1 error -71 [ 175.001153][ T24] gspca_sn9c2028: read1 error -71 [ 175.007819][ T24] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 175.019182][ T24] usb 3-1: USB disconnect, device number 45 [ 175.064073][ T89] usb 1-1: device descriptor read/64, error -71 [ 175.175398][ T89] usb usb1-port1: attempt power cycle [ 175.447020][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 175.538951][ T89] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 175.558625][ T89] usb 1-1: device descriptor read/8, error -71 [ 175.608261][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 175.615290][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.633376][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.646068][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.655938][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.668408][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.683791][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.693249][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.708074][ T24] usb 4-1: Manufacturer: syz [ 175.718473][ T24] usb 4-1: config 0 descriptor?? [ 175.820683][ T89] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 175.840816][ T89] usb 1-1: device descriptor read/8, error -71 [ 175.951367][ T89] usb usb1-port1: unable to enumerate USB device [ 175.992559][ T24] rc_core: IR keymap rc-hauppauge not found [ 175.998504][ T24] Registered IR keymap rc-empty [ 176.003605][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.022389][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.042955][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 176.057304][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 176.074624][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.102319][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.122328][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.142519][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.145494][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.161239][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.171705][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.173278][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.181986][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.213159][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.233223][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.253309][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.273562][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.303818][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.323889][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.348885][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 176.358523][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.465430][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.493348][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.517630][ T7394] erofs (device nbd1): cannot find valid erofs superblock [ 176.857565][ T89] usb 4-1: USB disconnect, device number 32 [ 176.991417][ T7400] netlink: 44 bytes leftover after parsing attributes in process `syz.1.373'. [ 177.001264][ T7400] netlink: 43 bytes leftover after parsing attributes in process `syz.1.373'. [ 177.011087][ T7400] validate_nla: 1 callbacks suppressed [ 177.011105][ T7400] netlink: 'syz.1.373': attribute type 5 has an invalid length. [ 177.026254][ T7400] netlink: 43 bytes leftover after parsing attributes in process `syz.1.373'. [ 177.164764][ T7404] netlink: 'syz.1.374': attribute type 6 has an invalid length. [ 177.209634][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.218810][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.229694][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.244120][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 177.254599][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 177.332928][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.416382][ T10] usb 3-1: config 9 has an invalid interface number: 252 but max is 0 [ 177.433704][ T10] usb 3-1: config 9 has no interface number 0 [ 177.447023][ T10] usb 3-1: config 9 interface 252 has no altsetting 0 [ 177.457630][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c [ 177.471604][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.480886][ T10] usb 3-1: Product: syz [ 177.486580][ T10] usb 3-1: Manufacturer: syz [ 177.491251][ T10] usb 3-1: SerialNumber: syz [ 177.694203][ T5914] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 177.713195][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.252/input/input26 [ 177.726065][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 177.726539][ T5196] bcm5974 3-1:9.252: could not read from device [ 177.742628][ T5196] bcm5974 3-1:9.252: could not read from device [ 177.750786][ T10] usb 3-1: USB disconnect, device number 46 [ 177.758636][ T5196] bcm5974 3-1:9.252: could not read from device [ 177.845311][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 177.852464][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.863528][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.877002][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.886334][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.888238][ T5845] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 177.898246][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 177.904211][ T5845] Bluetooth: hci0: Injecting HCI hardware error event [ 177.914386][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 177.922052][ T5849] Bluetooth: hci0: hardware error 0x00 [ 177.933461][ T5914] usb 4-1: config 0 descriptor?? [ 177.951010][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 177.968104][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 177.977338][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.985383][ T24] usb 1-1: Product: syz [ 177.989706][ T24] usb 1-1: Manufacturer: syz [ 177.994383][ T24] usb 1-1: SerialNumber: syz [ 178.002028][ T24] usb 1-1: config 0 descriptor?? [ 178.008197][ T7413] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.015688][ T7413] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.024722][ T24] usb 1-1: ucan: probing device on interface #0 [ 178.359765][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 178.366004][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.377197][ T5914] usb 4-1: USB disconnect, device number 33 [ 178.490188][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 178.637419][ T24] ucan 1-1:0.0 can0: registered device [ 178.643569][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.656078][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.665350][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.676202][ T10] usb 2-1: config 0 descriptor?? [ 178.832680][ T24] ucan 1-1:0.0 can0: firmware string: Hp~q0%wyIUCcY$#hc: [ 178.918436][ T30] audit: type=1800 audit(1759623018.372:60): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.382" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 178.980968][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 179.005482][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.038258][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.050829][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.056021][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.071670][ T10] usb 2-1: USB disconnect, device number 59 [ 179.102745][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.103144][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.127018][ T7440] unsupported nlmsg_type 40 [ 179.135464][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.177230][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.186948][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.228809][ T9] usb 1-1: USB disconnect, device number 55 [ 179.266851][ T5914] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 179.449238][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.468117][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.503857][ T5914] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 179.533620][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.545521][ T7454] Bluetooth: MGMT ver 1.23 [ 179.552700][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 179.570631][ T5914] usb 4-1: config 0 descriptor?? [ 179.592308][ T7435] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.693401][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 179.719221][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 179.727044][ T10] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 179.746026][ T10] usb 3-1: config 0 has no interface number 0 [ 179.758692][ T10] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 179.778164][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.808268][ T10] usb 3-1: Product: syz [ 179.819310][ T10] usb 3-1: Manufacturer: syz [ 179.824230][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 179.834263][ T10] usb 3-1: SerialNumber: syz [ 179.840481][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 179.879872][ T5914] usb 4-1: USB disconnect, device number 34 [ 179.891875][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 179.898061][ T10] usb 3-1: config 0 descriptor?? [ 179.918836][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 179.945238][ T10] kobil_sct 3-1:0.148: KOBIL USB smart card terminal converter detected [ 179.964195][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 179.976245][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 179.986318][ T10] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 179.996626][ T9] usb 1-1: Product: syz [ 180.000855][ T9] usb 1-1: Manufacturer: syz [ 180.007735][ T9] usb 1-1: SerialNumber: syz [ 180.019127][ T9] usb 1-1: config 0 descriptor?? [ 180.168603][ T7439] __nla_validate_parse: 2 callbacks suppressed [ 180.168656][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 180.218848][ T9] usb 3-1: USB disconnect, device number 47 [ 180.236167][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.257338][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.264209][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 180.293977][ T9] kobil_sct 3-1:0.148: device disconnected [ 180.418256][ T89] usb 1-1: USB disconnect, device number 56 [ 180.657048][ T5908] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 180.678953][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 180.821311][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.842301][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.855791][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.865203][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.890258][ T7497] ./bus: Can't lookup blockdev [ 181.028567][ T89] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 181.116418][ T5908] usb 2-1: GET_CAPABILITIES returned 0 [ 181.122180][ T5908] usbtmc 2-1:16.0: can't read capabilities [ 181.205568][ T89] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 181.225178][ T89] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 181.237885][ T89] usb 1-1: config 220 has no interface number 2 [ 181.259451][ T89] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 181.279922][ T89] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 181.292365][ T89] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 181.308245][ T89] usb 1-1: config 220 interface 0 has no altsetting 0 [ 181.315482][ T89] usb 1-1: config 220 interface 76 has no altsetting 0 [ 181.322824][ T89] usb 1-1: config 220 interface 1 has no altsetting 0 [ 181.324745][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.337295][ T89] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 181.366021][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.372594][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.381899][ T89] usb 1-1: Product: syz [ 181.391358][ T89] usb 1-1: Manufacturer: syz [ 181.401324][ T89] usb 1-1: SerialNumber: syz [ 181.403502][ T24] usb 2-1: USB disconnect, device number 60 [ 181.604151][ T7526] netlink: 64 bytes leftover after parsing attributes in process `syz.3.400'. [ 181.647317][ T89] usb 1-1: selecting invalid altsetting 0 [ 181.662580][ T89] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 181.671373][ T89] uvcvideo 1-1:220.0: No valid video chain found. [ 181.690216][ T89] usb 1-1: selecting invalid altsetting 0 [ 181.697929][ T89] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 181.715338][ T89] usb 1-1: USB disconnect, device number 57 [ 182.016440][ T7537] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 182.055157][ T7537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.171531][ T7546] 9pnet_fd: Insufficient options for proto=fd [ 182.438894][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 182.670131][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 182.823337][ T24] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 182.833997][ T24] usb 1-1: config 0 has no interface number 0 [ 182.840165][ T24] usb 1-1: too many endpoints for config 0 interface 53 altsetting 213: 190, using maximum allowed: 30 [ 182.851613][ T24] usb 1-1: config 0 interface 53 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 182.865229][ T24] usb 1-1: config 0 interface 53 has no altsetting 0 [ 182.875125][ T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 182.887022][ T24] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 182.896558][ T24] usb 1-1: Product: syz [ 182.901074][ T24] usb 1-1: Manufacturer: syz [ 182.905828][ T24] usb 1-1: SerialNumber: syz [ 182.932454][ T24] usb 1-1: config 0 descriptor?? [ 183.224979][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.245445][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.280423][ T24] ch341 1-1:0.53: ch341-uart converter detected [ 183.316832][ T24] usb 1-1: failed to receive control message: -71 [ 183.330765][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 183.368352][ T24] usb 1-1: USB disconnect, device number 58 [ 183.385716][ T24] ch341 1-1:0.53: device disconnected [ 183.707201][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 183.755540][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.768049][ T5908] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 183.829778][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.840709][ T9] usb 2-1: device descriptor read/64, error -71 [ 183.900123][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.958858][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 183.971777][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.982092][ T5908] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 183.991724][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.007962][ T5908] usb 3-1: config 0 descriptor?? [ 184.022719][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.079775][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 184.221075][ T9] usb 2-1: device descriptor read/64, error -71 [ 184.269998][ T12] bridge_slave_1: left allmulticast mode [ 184.276424][ T12] bridge_slave_1: left promiscuous mode [ 184.290666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.327220][ T12] bridge_slave_0: left allmulticast mode [ 184.333432][ T9] usb usb2-port1: attempt power cycle [ 184.349204][ T12] bridge_slave_0: left promiscuous mode [ 184.355961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.430579][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.444492][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.461884][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.490750][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.505261][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.507474][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 184.536111][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.557795][ T5908] usb 3-1: USB disconnect, device number 49 [ 184.683767][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 184.725018][ T9] usb 2-1: device descriptor read/8, error -71 [ 184.905787][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 184.967603][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 184.999232][ T9] usb 2-1: device descriptor read/8, error -71 [ 185.074258][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.086913][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 185.095456][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.108225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.118097][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.122461][ T9] usb usb2-port1: unable to enumerate USB device [ 185.140099][ T12] bond0 (unregistering): Released all slaves [ 185.155343][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.173318][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.186705][ T5914] usb 4-1: Product: syz [ 185.198092][ T5914] usb 4-1: Manufacturer: syz [ 185.205193][ T5914] usb 4-1: SerialNumber: syz [ 185.508470][ T5914] usb 4-1: 0:2 : does not exist [ 185.521968][ T5914] usb 4-1: unit 9 not found! [ 185.541383][ T5914] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 185.583133][ T5914] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 185.595662][ T5914] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 185.641146][ T5914] usb 4-1: USB disconnect, device number 35 [ 185.844915][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.425'. [ 186.063147][ T12] hsr_slave_0: left promiscuous mode [ 186.082429][ T12] hsr_slave_1: left promiscuous mode [ 186.102050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.115737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.155508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.163405][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.219954][ T12] veth1_macvtap: left promiscuous mode [ 186.244367][ T12] veth0_macvtap: left promiscuous mode [ 186.250336][ T12] veth1_vlan: left promiscuous mode [ 186.272769][ T12] veth0_vlan: left promiscuous mode [ 186.566295][ T5914] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 186.576358][ T5845] Bluetooth: hci3: command tx timeout [ 186.747742][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 186.761795][ T5914] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 186.787643][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.813464][ T5914] usb 3-1: config 0 descriptor?? [ 186.843380][ T5914] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 186.898542][ T89] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 187.059700][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 187.067363][ T89] usb 2-1: config 4 has an invalid interface number: 60 but max is 0 [ 187.075122][ T7636] qnx6: unable to read the first superblock [ 187.089134][ T89] usb 2-1: config 4 has no interface number 0 [ 187.099099][ T7636] Unsupported ieee802154 address type: 0 [ 187.111765][ T89] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 187.121887][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.143122][ T89] etas_es58x 2-1:4.60: Starting (null) (null) (Serial Number (null)) [ 187.173592][ T7649] trusted_key: syz.2.427 sent an empty control message without MSG_MORE. [ 187.400966][ T5914] gspca_sonixj: reg_r err -71 [ 187.410905][ T5914] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 187.434755][ T5914] usb 3-1: USB disconnect, device number 50 [ 187.466704][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.481730][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.505962][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 187.569364][ T5980] usb 2-1: USB disconnect, device number 65 [ 187.768128][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.775761][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.783087][ T7580] bridge_slave_0: entered allmulticast mode [ 187.801449][ T7580] bridge_slave_0: entered promiscuous mode [ 187.818761][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.827669][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.837865][ T7580] bridge_slave_1: entered allmulticast mode [ 187.847463][ T7580] bridge_slave_1: entered promiscuous mode [ 187.903922][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.922120][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.995470][ T5908] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 188.043394][ T7580] team0: Port device team_slave_0 added [ 188.062862][ T7580] team0: Port device team_slave_1 added [ 188.176673][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 188.198403][ T5908] usb 4-1: config 162 has an invalid interface number: 246 but max is 1 [ 188.227243][ T5908] usb 4-1: config 162 has an invalid interface number: 245 but max is 1 [ 188.257409][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.264558][ T5908] usb 4-1: config 162 has no interface number 0 [ 188.284693][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.312763][ T5908] usb 4-1: config 162 has no interface number 1 [ 188.319803][ T5908] usb 4-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.333410][ T5908] usb 4-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 188.346809][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.358254][ T5908] usb 4-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 188.373046][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.380299][ T5908] usb 4-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 188.392865][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.419233][ T5908] usb 4-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 188.431650][ T5908] usb 4-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 188.446973][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.457929][ T5908] usb 4-1: config 162 interface 246 has no altsetting 0 [ 188.458888][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 188.474046][ T89] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 188.478548][ T5908] usb 4-1: config 162 interface 245 has no altsetting 0 [ 188.503071][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 188.509630][ T5908] usb 4-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 188.528457][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.539187][ T5908] usb 4-1: Product: syz [ 188.543404][ T5908] usb 4-1: Manufacturer: syz [ 188.549029][ T5908] usb 4-1: SerialNumber: syz [ 188.623832][ T7580] hsr_slave_0: entered promiscuous mode [ 188.631293][ T7580] hsr_slave_1: entered promiscuous mode [ 188.644408][ T89] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.653726][ T89] usb 2-1: config 0 has no interface number 0 [ 188.669867][ T5845] Bluetooth: hci3: command tx timeout [ 188.675677][ T89] usb 2-1: config 0 interface 41 has no altsetting 0 [ 188.687526][ T89] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.697325][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.705730][ T89] usb 2-1: Product: syz [ 188.710607][ T89] usb 2-1: Manufacturer: syz [ 188.715244][ T89] usb 2-1: SerialNumber: syz [ 188.725339][ T89] usb 2-1: config 0 descriptor?? [ 188.821833][ T7659] netlink: 'syz.3.432': attribute type 40 has an invalid length. [ 188.838495][ T7690] Option ' ' to dns_resolver key: bad/missing value [ 188.940320][ T5908] Bluetooth: failed to set interface 0, alt 0 -22 [ 188.954342][ T5908] btusb 4-1:162.245: probe with driver btusb failed with error -22 [ 188.974083][ T5908] usb 4-1: USB disconnect, device number 36 [ 189.244067][ T7580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.260780][ T7580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.291271][ T7580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.313588][ T7580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.582209][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.595864][ T89] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 189.618409][ T89] usb 2-1: USB disconnect, device number 66 [ 189.636190][ T5908] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 189.673509][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.711833][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.719116][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.741577][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.748807][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.819823][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.850310][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.871147][ T5908] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 189.897779][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.928837][ T5908] usb 3-1: config 0 descriptor?? [ 189.974036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 190.352404][ T5908] razer 0003:1532:010E.000E: failed to enable macro keys: -71 [ 190.374033][ T5908] razer 0003:1532:010E.000E: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 190.415258][ T5908] usb 3-1: USB disconnect, device number 51 [ 190.431126][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.574840][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 190.763672][ T5845] Bluetooth: hci3: command tx timeout [ 190.881785][ T7580] veth0_vlan: entered promiscuous mode [ 190.902173][ T7580] veth1_vlan: entered promiscuous mode [ 190.966431][ T7580] veth0_macvtap: entered promiscuous mode [ 190.996153][ T7580] veth1_macvtap: entered promiscuous mode [ 191.024301][ T5908] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 191.038155][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.058583][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.078399][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.091705][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.099614][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.115282][ T7774] bridge0: entered promiscuous mode [ 191.120826][ T7774] bridge0: entered allmulticast mode [ 191.134681][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.143700][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.153264][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.160573][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.168168][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.175444][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.190705][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.210136][ T5908] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.218944][ T5908] usb 4-1: config 0 has no interface number 0 [ 191.230236][ T5908] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.264546][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.279926][ T5908] usb 4-1: Product: syz [ 191.284253][ T5908] usb 4-1: SerialNumber: syz [ 191.334492][ T5908] usb 4-1: config 0 descriptor?? [ 191.361175][ T5908] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input27 [ 191.384546][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.399881][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.533761][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.543245][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.571110][ T5894] usb 4-1: USB disconnect, device number 37 [ 191.571146][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.584296][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 191.603190][ T5894] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 192.031017][ T5980] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 192.040596][ T89] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.122833][ T7809] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.459'. [ 192.140004][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.153140][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.192628][ T5980] usb 2-1: Using ep0 maxpacket: 32 [ 192.199589][ T5980] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 192.208815][ T5980] usb 2-1: config 0 has no interface number 0 [ 192.211725][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 192.216350][ T5980] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 192.225309][ T89] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.231164][ T5980] usb 2-1: config 0 interface 196 has no altsetting 0 [ 192.239532][ T89] usb 5-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00 [ 192.254932][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.267754][ T89] usb 5-1: config 0 descriptor?? [ 192.284732][ T5980] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 192.298847][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.311489][ T5980] usb 2-1: Product: syz [ 192.319238][ T5980] usb 2-1: Manufacturer: syz [ 192.324244][ T5980] usb 2-1: SerialNumber: syz [ 192.343702][ T5980] usb 2-1: config 0 descriptor?? [ 192.368280][ T7815] syz.2.460 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.382476][ T5894] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 192.444349][ T7820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 192.455093][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 192.538317][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 192.550590][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 192.569123][ T5894] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 192.578431][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.586881][ T5894] usb 4-1: Product: syz [ 192.591112][ T5894] usb 4-1: Manufacturer: syz [ 192.595882][ T5894] usb 4-1: SerialNumber: syz [ 192.604182][ T5894] usb 4-1: config 0 descriptor?? [ 192.610253][ T7809] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 192.621039][ T5894] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 192.628818][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 192.636894][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 192.648101][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 192.656211][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 192.663936][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 192.673418][ T5894] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 192.692882][ T89] hid_parser_main: 10 callbacks suppressed [ 192.692906][ T89] nzxt-smart2 0003:1E71:2006.000F: unknown main item tag 0x0 [ 192.707754][ T5894] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 192.719369][ T89] nzxt-smart2 0003:1E71:2006.000F: unknown main item tag 0x0 [ 192.726943][ T89] nzxt-smart2 0003:1E71:2006.000F: unknown main item tag 0x0 [ 192.734396][ T89] nzxt-smart2 0003:1E71:2006.000F: unknown main item tag 0x0 [ 192.742078][ T89] nzxt-smart2 0003:1E71:2006.000F: unknown main item tag 0x0 [ 192.755320][ T89] nzxt-smart2 0003:1E71:2006.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2006] on usb-dummy_hcd.4-1/input0 [ 192.890933][ T5934] usb 4-1: USB disconnect, device number 38 [ 192.912978][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.927865][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.965261][ T5934] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 192.976654][ T5934] keyspan 4-1:0.0: device disconnected [ 193.041324][ T89] usb 5-1: USB disconnect, device number 2 [ 193.077523][ T5980] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 193.100205][ T5980] ipheth 2-1:0.196: probe with driver ipheth failed with error -110 [ 193.176631][ T5980] usb 2-1: USB disconnect, device number 67 [ 193.339904][ T5845] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 193.420042][ T89] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 193.579763][ T89] usb 5-1: Using ep0 maxpacket: 8 [ 193.612656][ T89] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 193.629781][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.640272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.649409][ T89] usb 5-1: Product: syz [ 193.661885][ T89] usb 5-1: Manufacturer: syz [ 193.666830][ T89] usb 5-1: SerialNumber: syz [ 193.695900][ T89] usb 5-1: config 0 descriptor?? [ 193.715145][ T30] audit: type=1326 audit(1759623033.075:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.3.471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1bd8eec9 code=0x0 [ 193.744015][ T89] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 193.754682][ T89] dvb-usb: bulk message failed: -22 (2/0) [ 193.769198][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.781260][ T89] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 193.791568][ T89] usb 5-1: media controller created [ 193.841081][ T5980] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 193.864491][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.945387][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.954387][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.963270][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.973151][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.985472][ T89] cxusb: set interface failed [ 194.025795][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.036203][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 194.043757][ T5980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 194.079356][ T5980] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 194.098353][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.100849][ T89] DVB: Unable to find symbol mt352_attach() [ 194.119108][ T89] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 194.152594][ T5980] usb 2-1: config 0 descriptor?? [ 194.229607][ T89] rc_core: IR keymap rc-dvico-portable not found [ 194.238226][ T89] Registered IR keymap rc-empty [ 194.249775][ T89] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 194.266687][ T89] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input28 [ 194.286493][ T89] dvb-usb: schedule remote query interval to 100 msecs. [ 194.294281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.304136][ T89] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 194.328998][ T89] usb 5-1: USB disconnect, device number 3 [ 194.381726][ T5980] Bluetooth: Can't get state to change to load ram patch err [ 194.398587][ T5980] Bluetooth: Loading patch file failed [ 194.404684][ T5980] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 194.444190][ T89] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 194.585733][ T7860] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 194.622053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 194.630907][ T10] usb 2-1: USB disconnect, device number 68 [ 194.841165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 195.058097][ T5980] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 195.138510][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 195.231462][ T5980] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 195.250632][ T5980] usb 4-1: config 1 has no interface number 0 [ 195.257215][ T5980] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 195.270969][ T5980] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 195.282409][ T5980] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 195.292864][ T5980] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.304670][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 195.307719][ T5980] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 195.321278][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.331589][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.335499][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.359546][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.370863][ T5980] usb 4-1: Product: syz [ 195.375202][ T5980] usb 4-1: Manufacturer: syz [ 195.380483][ T5980] usb 4-1: SerialNumber: syz [ 195.386342][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 195.404132][ T7870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.410077][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.412610][ T7870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.442545][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.481451][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.494174][ T10] usb 2-1: Manufacturer: syz [ 195.506969][ T10] usb 2-1: config 0 descriptor?? [ 195.571365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 195.700673][ T7870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.712206][ T7870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.730809][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 195.782327][ T5934] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 195.865686][ T10] rc_core: IR keymap rc-hauppauge not found [ 195.871655][ T10] Registered IR keymap rc-empty [ 195.877360][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.903149][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.925725][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 195.941162][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 195.956022][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 195.963308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 195.972341][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.982448][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 195.995479][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 196.009397][ T5934] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 196.018847][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.026844][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.035989][ T5934] usb 5-1: Product: syz [ 196.040298][ T5934] usb 5-1: Manufacturer: syz [ 196.045058][ T5934] usb 5-1: SerialNumber: syz [ 196.053745][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.063088][ T5934] usb 5-1: config 0 descriptor?? [ 196.075311][ T7876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 196.083381][ T7876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 196.084157][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.100603][ T5934] usb 5-1: ucan: probing device on interface #0 [ 196.124194][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.154995][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.174461][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.174962][ T5980] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 196.194654][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.214645][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.235855][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.264190][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 196.272655][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 196.294027][ T10] usb 2-1: USB disconnect, device number 69 [ 196.304760][ T5934] usb 5-1: ucan: could not read protocol version, ret=-71 [ 196.313547][ T5934] usb 5-1: ucan: probe failed; try to update the device firmware [ 196.360473][ T5934] usb 5-1: USB disconnect, device number 4 [ 196.366714][ T5980] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 196.366744][ T5980] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 196.374030][ T5980] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 196.394607][ T5980] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 196.498230][ T5980] usb 4-1: USB disconnect, device number 39 [ 196.506672][ T5980] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 196.658221][ T5980] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 196.965821][ T7891] (syz.4.482,7891,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 196.976817][ T7891] (syz.4.482,7891,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 197.180000][ T5980] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 197.250877][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 197.343854][ T5980] usb 3-1: too many endpoints for config 0 interface 0 altsetting 28: 191, using maximum allowed: 30 [ 197.354990][ T5980] usb 3-1: config 0 interface 0 altsetting 28 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.366285][ T5980] usb 3-1: config 0 interface 0 altsetting 28 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.377031][ T5980] usb 3-1: config 0 interface 0 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 197.388282][ T5980] usb 3-1: config 0 interface 0 altsetting 28 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.398119][ T5980] usb 3-1: config 0 interface 0 altsetting 28 has 2 endpoint descriptors, different from the interface descriptor's value: 191 [ 197.401180][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 197.412472][ T5980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.420220][ T5934] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 197.423845][ T5980] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 197.423873][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.435289][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.444652][ T5980] usb 3-1: config 0 descriptor?? [ 197.465186][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.475939][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.484346][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.492920][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.501161][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.510528][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.518876][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.527346][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.535617][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.545023][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.553295][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.560644][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.569049][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.577735][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 197.586001][ T5934] usb 4-1: config 0 has no interface number 0 [ 197.594745][ T5934] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 197.604143][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.612173][ T5934] usb 4-1: Product: syz [ 197.617931][ T5934] usb 4-1: Manufacturer: syz [ 197.622788][ T5934] usb 4-1: SerialNumber: syz [ 197.630109][ T5934] usb 4-1: config 0 descriptor?? [ 197.638583][ T5934] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 197.839113][ T5934] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 197.883410][ T5914] usb 4-1: USB disconnect, device number 40 [ 197.893730][ T7897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.901296][ T7897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.908926][ T7897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.916510][ T7897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.918674][ T5914] etas_es58x 4-1:0.2: Disconnecting syz syz [ 197.939267][ T7897] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.976739][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.997486][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.075928][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.487'. [ 198.215754][ T5934] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 198.366512][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 198.373721][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.383962][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.386662][ T5914] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 198.397251][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.410830][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.419144][ T5934] usb 2-1: Product: syz [ 198.423447][ T5934] usb 2-1: Manufacturer: syz [ 198.427718][ T5980] usbhid 3-1:0.0: can't add hid device: -71 [ 198.432400][ T5934] usb 2-1: SerialNumber: syz [ 198.435261][ T5980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 198.463712][ T5980] usb 3-1: USB disconnect, device number 53 [ 198.558663][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 198.565863][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.577332][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.592344][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.602004][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.610987][ T5914] usb 4-1: SerialNumber: syz [ 198.618611][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 198.685872][ T5934] usb 2-1: 0:2 : does not exist [ 198.702639][ T5934] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 198.759462][ T5934] usb 2-1: USB disconnect, device number 70 [ 198.809606][ T10] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 198.834296][ T10] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.839404][ T5914] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 198.855137][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.876555][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.892433][ T5914] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 198.892473][ T5914] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 198.909104][ T5914] usb 4-1: USB disconnect, device number 41 [ 198.919741][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 198.929010][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.969574][ T10] usb 5-1: config 0 descriptor?? [ 199.009778][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 199.132544][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.412089][ T5914] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 199.507834][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.518588][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.526442][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.534298][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.543219][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.552606][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.560900][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.570090][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.578368][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.586766][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 199.595090][ T5914] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 199.607367][ T5908] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.613283][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 199.617564][ T5914] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 199.641258][ T5914] usb 2-1: config 0 has no interface number 0 [ 199.647729][ T5914] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 199.658068][ T5914] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.669805][ T5914] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 199.681415][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.697789][ T5914] usb 2-1: config 0 descriptor?? [ 199.756401][ T7948] fido_id[7948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.794102][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 199.801070][ T10] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 199.811041][ T10] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 199.819592][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.832851][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 199.842019][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.850123][ T10] usb 3-1: Product: syz [ 199.855343][ T10] usb 3-1: Manufacturer: syz [ 199.860135][ T10] usb 3-1: SerialNumber: syz [ 199.867711][ T10] usb 3-1: config 0 descriptor?? [ 199.896723][ T7952] capability: warning: `syz.4.489' uses 32-bit capabilities (legacy support in use) [ 199.928564][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 199.937844][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.937855][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.967549][ T5914] usb 2-1: USB disconnect, device number 71 [ 199.985157][ T5934] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 200.023063][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.029656][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.088485][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.099188][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.131939][ T10] usb 3-1: USB disconnect, device number 54 [ 200.152386][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 200.164148][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.191173][ T5934] usb 4-1: config 0 has no interface number 0 [ 200.199588][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.212411][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.223077][ T5934] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 200.237482][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.265855][ T5934] usb 4-1: config 0 descriptor?? [ 200.591308][ T10] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 200.739359][ T10] usb 3-1: device descriptor read/64, error -71 [ 200.859730][ T5914] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 200.980409][ T10] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 201.026316][ T5914] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.035301][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.049842][ T5914] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.060241][ T5914] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.069308][ T5914] usb 2-1: Manufacturer: syz [ 201.080916][ T5914] usb 2-1: config 0 descriptor?? [ 201.090982][ T5934] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71 [ 201.104860][ T5934] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71 [ 201.119165][ T5934] uclogic 0003:28BD:0071.0011: pen probing failed: -71 [ 201.129483][ T5934] uclogic 0003:28BD:0071.0011: failed probing parameters: -71 [ 201.138165][ T10] usb 3-1: device descriptor read/64, error -71 [ 201.145051][ T5934] uclogic 0003:28BD:0071.0011: probe with driver uclogic failed with error -71 [ 201.167190][ T5934] usb 4-1: USB disconnect, device number 42 [ 201.231657][ T5914] rc_core: IR keymap rc-hauppauge not found [ 201.237914][ T5914] Registered IR keymap rc-empty [ 201.245089][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 201.258148][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 201.267047][ T10] usb usb3-port1: attempt power cycle [ 201.303380][ T30] audit: type=1800 audit(1759623040.623:62): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.501" name="file1" dev="overlay" ino=619 res=0 errno=0 [ 201.365720][ T5934] usb 2-1: USB disconnect, device number 72 [ 201.395851][ T5914] usb 5-1: USB disconnect, device number 5 [ 201.401319][ T30] audit: type=1800 audit(1759623040.643:63): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.501" name="file1" dev="overlay" ino=619 res=0 errno=0 [ 201.646545][ T10] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 201.675262][ T10] usb 3-1: device descriptor read/8, error -71 [ 201.885047][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.925282][ T10] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 201.946615][ T10] usb 3-1: device descriptor read/8, error -71 [ 202.016644][ T5914] usb 5-1: device descriptor read/64, error -71 [ 202.026127][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.066974][ T10] usb usb3-port1: unable to enumerate USB device [ 202.279710][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.387698][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 202.418036][ T5914] usb 5-1: device descriptor read/64, error -71 [ 202.528566][ T5914] usb usb5-port1: attempt power cycle [ 202.538599][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 202.545690][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.556535][ T5934] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 202.564849][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.576772][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.585956][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.595932][ T10] usb 2-1: Product: syz [ 202.600393][ T10] usb 2-1: Manufacturer: syz [ 202.605079][ T10] usb 2-1: SerialNumber: syz [ 202.699216][ T5934] usb 4-1: device descriptor read/64, error -71 [ 202.819085][ T10] usb 2-1: 0:2 : does not exist [ 202.833100][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 202.854037][ T10] usb 2-1: USB disconnect, device number 73 [ 202.883584][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.900109][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.921029][ T5914] usb 5-1: device descriptor read/8, error -71 [ 202.940476][ T5934] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 203.071137][ T5934] usb 4-1: device descriptor read/64, error -71 [ 203.172880][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.191925][ T5934] usb usb4-port1: attempt power cycle [ 203.192562][ T5914] usb 5-1: device descriptor read/8, error -71 [ 203.297550][ T8027] program syz.2.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.308645][ T8029] program syz.2.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.318508][ T5914] usb usb5-port1: unable to enumerate USB device [ 203.564849][ T5934] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 203.595084][ T5934] usb 4-1: device descriptor read/8, error -71 [ 203.684105][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 203.854992][ T5934] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 203.862718][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 203.869748][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.883577][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.895296][ T10] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 203.904570][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.912779][ T5934] usb 4-1: device descriptor read/8, error -71 [ 203.925952][ T10] usb 2-1: config 0 descriptor?? [ 204.026141][ T5934] usb usb4-port1: unable to enumerate USB device [ 204.045388][ T8050] Unknown options in mask b7f2 [ 204.117718][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.341034][ T10] hid (null): unknown global tag 0xe [ 204.347635][ T5881] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 204.353363][ T10] razer 0003:1532:011B.0012: unknown global tag 0xe [ 204.361960][ T10] razer 0003:1532:011B.0012: item 0 0 1 14 parsing failed [ 204.369994][ T10] razer 0003:1532:011B.0012: probe with driver razer failed with error -22 [ 204.508247][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 204.515199][ T5881] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 204.525659][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.533855][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.543234][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.546359][ T5934] usb 2-1: USB disconnect, device number 74 [ 204.552299][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.573164][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.582437][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.589500][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.597536][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.614047][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.624545][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.633082][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.644507][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.653149][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.662848][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.670968][ T5881] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 204.690108][ T5881] usb 3-1: config 0 has no interface number 0 [ 204.701428][ T5881] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 204.710966][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.720452][ T5881] usb 3-1: Product: syz [ 204.724679][ T5881] usb 3-1: Manufacturer: syz [ 204.729399][ T5881] usb 3-1: SerialNumber: syz [ 204.738792][ T5881] usb 3-1: config 0 descriptor?? [ 204.747079][ T5881] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 204.952862][ T5881] etas_es58x 3-1:0.2: could not parse product info: '﷘)' [ 205.653573][ T8101] cgroup: Name too long [ 205.744992][ T5914] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 205.784933][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.840186][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 205.851217][ C0] etas_es58x 3-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 205.858506][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 205.866501][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 205.874425][ T5506] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 205.904991][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 205.913173][ T5914] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.923003][ T5914] usb 4-1: config 0 has no interface number 0 [ 205.932192][ T5914] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.941700][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.950922][ T5914] usb 4-1: Product: syz [ 205.955353][ T5914] usb 4-1: Manufacturer: syz [ 205.959990][ T5914] usb 4-1: SerialNumber: syz [ 205.971704][ T5914] usb 4-1: config 0 descriptor?? [ 205.981726][ T5914] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.993294][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 206.002747][ T10] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 206.012139][ T10] usb 5-1: Product: syz [ 206.016761][ T10] usb 5-1: Manufacturer: syz [ 206.021465][ T10] usb 5-1: SerialNumber: syz [ 206.030562][ T10] usb 5-1: config 0 descriptor?? [ 206.042698][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 206.043511][ T5908] usb 3-1: USB disconnect, device number 59 [ 206.051989][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 206.052079][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 206.076453][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 206.085720][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 206.095024][ C0] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN [ 206.103924][ T5908] etas_es58x 3-1:0.2: Disconnecting syz syz [ 206.106762][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 206.117790][ T5506] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 206.194838][ T5914] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.214961][ T5914] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.278807][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 206.328523][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 206.363346][ T10] usb 5-1: USB disconnect, device number 10 [ 206.384553][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 206.440396][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.440948][ T5934] usb 4-1: USB disconnect, device number 47 [ 206.494596][ T5934] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.513861][ T5934] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.526558][ T5934] quatech2 4-1:0.51: device disconnected [ 206.587374][ T8116] netlink: 56 bytes leftover after parsing attributes in process `syz.3.523'. [ 206.663990][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 206.739881][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.753616][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.040428][ T5908] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 207.058446][ T5881] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 207.191290][ T5881] usb 4-1: device descriptor read/64, error -71 [ 207.211647][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 207.234243][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.251869][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.270038][ T5908] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 207.302508][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.316729][ T5908] usb 2-1: config 0 descriptor?? [ 207.452367][ T5881] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 207.464982][ T5934] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 207.593383][ T5881] usb 4-1: device descriptor read/64, error -71 [ 207.623534][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 207.643702][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.659389][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.669004][ T5934] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 207.678855][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.692773][ T5934] usb 3-1: config 0 descriptor?? [ 207.714469][ T5881] usb usb4-port1: attempt power cycle [ 207.743970][ T89] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.781973][ T5908] hid_parser_main: 33 callbacks suppressed [ 207.782000][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.798745][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.812092][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.820936][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.828387][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.835793][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.842816][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.850360][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.857834][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.866510][ T5908] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 207.875892][ T5908] cougar 0003:060B:500A.0013: ignoring exceeding usage max [ 207.885298][ T5908] cougar 0003:060B:500A.0013: unexpected long global item [ 207.893483][ T5908] cougar 0003:060B:500A.0013: parse failed [ 207.900026][ T5908] cougar 0003:060B:500A.0013: probe with driver cougar failed with error -22 [ 207.925665][ T89] usb 5-1: Using ep0 maxpacket: 8 [ 207.936839][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.949497][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.965063][ T89] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 207.979896][ T5908] usb 2-1: USB disconnect, device number 75 [ 207.988831][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.019766][ T89] usb 5-1: config 0 descriptor?? [ 208.065274][ T5881] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 208.086090][ T5881] usb 4-1: device descriptor read/8, error -71 [ 208.251365][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.269533][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.318471][ T89] usbhid 5-1:0.0: can't add hid device: -71 [ 208.326923][ T5881] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 208.345312][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.364621][ T89] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.367445][ T5881] usb 4-1: device descriptor read/8, error -71 [ 208.388168][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.417830][ T89] usb 5-1: USB disconnect, device number 11 [ 208.508252][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 208.519462][ T5881] usb usb4-port1: unable to enumerate USB device [ 208.521515][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 208.550209][ T5934] usb 3-1: USB disconnect, device number 60 [ 208.788635][ T89] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.899141][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 208.941396][ T89] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 208.953030][ T89] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.963865][ T89] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.977297][ T89] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.984227][ T89] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 208.993571][ T5934] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 209.001238][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.012054][ T89] usb 5-1: config 0 descriptor?? [ 209.059872][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 209.067569][ T10] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 209.076314][ T10] usb 2-1: config 0 has no interface number 0 [ 209.083169][ T10] usb 2-1: config 0 interface 96 has no altsetting 0 [ 209.092686][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=7d.9d [ 209.102637][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.110817][ T10] usb 2-1: Product: syz [ 209.115100][ T10] usb 2-1: Manufacturer: syz [ 209.119731][ T10] usb 2-1: SerialNumber: syz [ 209.127294][ T10] usb 2-1: config 0 descriptor?? [ 209.160499][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 209.167930][ T5934] usb 3-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 209.178282][ T5934] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.190149][ T5934] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 209.199586][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.207727][ T5934] usb 3-1: Product: syz [ 209.212001][ T5934] usb 3-1: Manufacturer: syz [ 209.216670][ T5934] usb 3-1: SerialNumber: syz [ 209.225434][ T5934] usb 3-1: config 0 descriptor?? [ 209.344776][ T10] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 209.352614][ T10] gspca_vc032x: reg_r err -71 [ 209.357399][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.362905][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.368275][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.374189][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.379529][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.385103][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.390546][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.395971][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.401530][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.406845][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.412228][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.417557][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.423208][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.428563][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.433937][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.439283][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.440478][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.444655][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.444670][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.444688][ T10] gspca_vc032x: Unknown sensor... [ 209.444803][ T10] vc032x 2-1:0.96: probe with driver vc032x failed with error -22 [ 209.462127][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.472110][ T10] usb 2-1: USB disconnect, device number 76 [ 209.497220][ T89] usbhid 5-1:0.0: can't add hid device: -71 [ 209.504116][ T89] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 209.522240][ T89] usb 5-1: USB disconnect, device number 12 [ 210.156397][ T5881] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 210.163342][ T30] audit: type=1800 audit(1759623049.440:64): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.541" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 210.316992][ T5881] usb 2-1: device descriptor read/64, error -71 [ 210.456265][ T5980] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 210.486363][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 210.566685][ T5881] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 210.619117][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 210.626760][ T5980] usb 4-1: can't read configurations, error -61 [ 210.639201][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 210.651469][ T10] usb 5-1: config 10 has an invalid interface number: 102 but max is 0 [ 210.659967][ T10] usb 5-1: config 10 has no interface number 0 [ 210.666228][ T10] usb 5-1: config 10 interface 102 altsetting 5 endpoint 0xB has invalid maxpacket 927, setting to 64 [ 210.677402][ T10] usb 5-1: config 10 interface 102 has no altsetting 0 [ 210.685597][ T10] usb 5-1: string descriptor 0 read error: -22 [ 210.692458][ T10] usb 5-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=c1.e2 [ 210.701599][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.709833][ T5881] usb 2-1: device descriptor read/64, error -71 [ 210.724883][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 210.731687][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 210.737873][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 210.746234][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 210.765233][ T10] dvb-usb: TeVii S421 PCI error while loading driver (-19) [ 210.777974][ T5980] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 210.818598][ T5881] usb usb2-port1: attempt power cycle [ 210.927883][ T5914] usb 5-1: USB disconnect, device number 13 [ 210.942812][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 210.951409][ T5980] usb 4-1: can't read configurations, error -61 [ 210.958712][ T5980] usb usb4-port1: attempt power cycle [ 211.159361][ T5881] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 211.180056][ T5881] usb 2-1: device descriptor read/8, error -71 [ 211.301491][ T5980] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 211.324779][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.332631][ T5980] usb 4-1: can't read configurations, error -61 [ 211.420637][ T5881] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 211.441147][ T5881] usb 2-1: device descriptor read/8, error -71 [ 211.460677][ T5980] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 211.494052][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.506558][ T5980] usb 4-1: can't read configurations, error -61 [ 211.514692][ T5980] usb usb4-port1: unable to enumerate USB device [ 211.551432][ T5881] usb usb2-port1: unable to enumerate USB device [ 211.711680][ T5980] usb 3-1: USB disconnect, device number 61 [ 211.760689][ T8223] syzkaller0: entered promiscuous mode [ 211.766648][ T8223] syzkaller0: entered allmulticast mode [ 211.864314][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.874193][ T5881] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.033167][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 212.040077][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.051065][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.061099][ T5881] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 212.070273][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.081526][ T5881] usb 5-1: config 0 descriptor?? [ 212.296156][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.305189][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.676129][ T5980] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 212.688636][ T5881] ntrig 0003:1B96:0008.0014: item fetching failed at offset 3/7 [ 212.697815][ T5881] ntrig 0003:1B96:0008.0014: parse failed [ 212.703658][ T5881] ntrig 0003:1B96:0008.0014: probe with driver ntrig failed with error -22 [ 212.849241][ T5980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.860362][ T5980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 212.871429][ T5980] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 212.882525][ T5980] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 212.899278][ T5980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.908760][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.917589][ T5980] usb 3-1: Product: syz [ 212.921791][ T5980] usb 3-1: Manufacturer: syz [ 212.926398][ T5980] usb 3-1: SerialNumber: syz [ 212.935418][ T8228] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 212.961796][ T5980] cdc_mbim 3-1:1.0: skipping garbage [ 213.154497][ T8228] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 213.162159][ T8228] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 213.361345][ T5881] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 213.529743][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 213.536817][ T5881] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 213.545137][ T5881] usb 2-1: config 0 has no interface number 0 [ 213.551424][ T5881] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 213.561674][ T5881] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 213.575130][ T5881] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 213.584383][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.592854][ T5881] usb 2-1: Product: syz [ 213.597199][ T5881] usb 2-1: Manufacturer: syz [ 213.601937][ T5881] usb 2-1: SerialNumber: syz [ 213.609381][ T5881] usb 2-1: config 0 descriptor?? [ 213.615547][ T8230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.620104][ T10] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 213.623126][ T8230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.650128][ T5881] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3a:1b:b5:a9:68:77 [ 213.775023][ T8228] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 213.783220][ T8228] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 213.791486][ T5980] cdc_mbim 3-1:1.0: dwNtbInMaxSize=70 is too small. Using 2048 [ 213.792545][ T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 213.799450][ T5980] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 213.820832][ T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 213.829109][ T10] usb 4-1: config 0 has no interface number 0 [ 213.835358][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 213.852984][ T89] usb 2-1: USB disconnect, device number 81 [ 213.869082][ T89] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 213.881790][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 213.890969][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.920050][ T10] usb 4-1: config 0 descriptor?? [ 213.941829][ T8232] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 214.004640][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.018103][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.035925][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.050913][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.063541][ T5980] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 214.084774][ T5980] wwan wwan0: port wwan0mbim0 attached [ 214.106174][ T5980] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 06:0b:d3:c4:64:01 [ 214.268333][ T5980] usb 3-1: USB disconnect, device number 62 [ 214.284313][ T5980] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 214.347525][ T5980] wwan wwan0: port wwan0mbim0 disconnected [ 214.869406][ T89] usb 5-1: USB disconnect, device number 14 [ 215.185885][ T10] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input32 [ 215.377559][ T89] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 215.407947][ T10] usb 4-1: USB disconnect, device number 56 [ 215.413976][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 215.548528][ T89] usb 3-1: Invalid ep0 maxpacket: 64 [ 215.627017][ T8285] trusted_key: encrypted_key: keyword 'uew' not recognized [ 215.698981][ T89] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 215.801458][ T8294] fuse: Bad value for 'fd' [ 215.836992][ T8285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.843606][ T8285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.851672][ T8285] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 215.861933][ T8285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.871874][ T89] usb 3-1: Invalid ep0 maxpacket: 64 [ 215.881493][ T89] usb usb3-port1: attempt power cycle [ 216.272853][ T89] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 216.322676][ T89] usb 3-1: Invalid ep0 maxpacket: 64 [ 216.431191][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.440244][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.451843][ T5881] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 216.451898][ T89] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 216.488965][ T89] usb 3-1: Invalid ep0 maxpacket: 64 [ 216.494476][ T5934] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 216.502812][ T89] usb usb3-port1: unable to enumerate USB device [ 216.530096][ T8320] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 216.540000][ T8320] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 216.632585][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 216.640139][ T5881] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.655275][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.661914][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 216.672348][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.682840][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 216.682863][ T5881] usb 2-1: config 0 descriptor?? [ 216.696513][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.708390][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.718985][ T5934] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 216.728920][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.741801][ T5934] usb 4-1: config 0 descriptor?? [ 216.900145][ T5881] usb 2-1: string descriptor 0 read error: -32 [ 216.954178][ T5914] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.116383][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.124644][ T5914] usb 5-1: config 0 has no interface number 0 [ 217.132322][ T5914] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 217.141653][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.153303][ T5914] usb 5-1: config 0 descriptor?? [ 217.160561][ T8309] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 217.171909][ T5914] usb 5-1: selecting invalid altsetting 1 [ 217.175290][ T8309] netlink: 17 bytes leftover after parsing attributes in process `syz.3.568'. [ 217.182171][ T5914] dvb_ttusb_budget: ttusb_init_controller: error [ 217.194068][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 217.212286][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 217.247778][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 217.265244][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 217.282163][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.287089][ T5914] DVB: Unable to find symbol ves1820_attach() [ 217.332443][ T5934] usb 4-1: USB disconnect, device number 57 [ 217.358463][ T5914] DVB: Unable to find symbol stv0297_attach() [ 217.364663][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 217.387364][ T5914] usb 5-1: USB disconnect, device number 15 [ 217.721370][ T5881] hid_parser_main: 50 callbacks suppressed [ 217.721395][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.735733][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.744631][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.753570][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.762156][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.770667][ T5881] logitech-hidpp-device 0003:046D:C090.0015: unknown main item tag 0x0 [ 217.780564][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.791061][ T5881] logitech-hidpp-device 0003:046D:C090.0015: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.1-1/input0 [ 217.857710][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.939666][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.208932][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.359569][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 218.366916][ T10] usb 5-1: config 0 has an invalid interface number: 145 but max is 1 [ 218.375650][ T10] usb 5-1: config 0 has an invalid interface number: 43 but max is 1 [ 218.384527][ T10] usb 5-1: config 0 has no interface number 0 [ 218.391414][ T10] usb 5-1: config 0 has no interface number 1 [ 218.398474][ T10] usb 5-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 218.408816][ T10] usb 5-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 218.419811][ T10] usb 5-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 218.431643][ T10] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 218.443122][ T10] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 218.454696][ T10] usb 5-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.468540][ T10] usb 5-1: config 0 interface 145 has no altsetting 0 [ 218.475501][ T10] usb 5-1: config 0 interface 43 has no altsetting 0 [ 218.484853][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 218.494202][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.503470][ T10] usb 5-1: Product: syz [ 218.507719][ T10] usb 5-1: Manufacturer: syz [ 218.512549][ T10] usb 5-1: SerialNumber: syz [ 218.519498][ T10] usb 5-1: config 0 descriptor?? [ 218.524642][ T5934] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 218.680805][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 218.688117][ T5934] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 218.696358][ T5934] usb 3-1: config 0 has no interface number 0 [ 218.703008][ T5934] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.717330][ T5934] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 218.726642][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 218.735020][ T5934] usb 3-1: Product: syz [ 218.739981][ T5934] usb 3-1: SerialNumber: syz [ 218.749999][ T5934] usb 3-1: config 0 descriptor?? [ 218.762131][ T10] keyspan_pda 5-1:0.145: required endpoints missing [ 218.772239][ T5934] cm109 3-1:0.8: invalid payload size 255, expected 4 [ 218.786076][ T10] keyspan_pda 5-1:0.43: Keyspan PDA converter detected [ 218.794003][ T5934] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input33 [ 218.811650][ T10] usb 5-1: Keyspan PDA converter now attached to ttyUSB0 [ 218.836498][ T10] usb 5-1: USB disconnect, device number 16 [ 218.874468][ T10] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 218.898372][ T10] keyspan_pda 5-1:0.43: device disconnected [ 219.256118][ T5934] usb 2-1: USB disconnect, device number 82 [ 219.311674][ T8343] infiniband syz2: set active [ 219.329578][ T8343] infiniband syz2: added bridge_slave_0 [ 219.361166][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 219.488814][ T8343] RDS/IB: syz2: added [ 219.515251][ T10] usb 4-1: device descriptor read/64, error -71 [ 219.614426][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 219.712986][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 219.720013][ C0] ------------[ cut here ]------------ [ 219.725495][ C0] URB ffff88805eb84400 submitted while active [ 219.732584][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: syz.2.577/8336 [ 219.742737][ C0] Modules linked in: [ 219.747041][ C0] CPU: 0 UID: 0 PID: 8336 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT(full) [ 219.756292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.766409][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 219.772015][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 219.775204][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 219.791661][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 219.791729][ C0] RAX: 10ed20ca74e2e700 RBX: ffff88805eb84400 RCX: 0000000000040000 [ 219.791749][ C0] RDX: ffffc90002191000 RSI: 0000000000004355 RDI: 0000000000004356 [ 219.791766][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 219.791782][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 219.791800][ C0] R13: ffff88807917c830 R14: ffff88805eb84408 R15: dffffc0000000000 [ 219.791819][ C0] FS: 000055556bf2e500(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 219.791841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.791858][ C0] CR2: 0000200000000018 CR3: 0000000072ce4000 CR4: 00000000003526f0 [ 219.791881][ C0] DR0: 0000000000000000 DR1: 00000000000000d8 DR2: 0000000000000000 [ 219.791897][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 219.791912][ C0] Call Trace: [ 219.791935][ C0] [ 219.791944][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 219.791984][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 219.825548][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.827185][ C0] ? kcov_remote_start+0x97/0x7f0 [ 219.848667][ T5914] usb 5-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice=2a.63 [ 219.852168][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 219.864053][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.866749][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 219.866794][ C0] dummy_timer+0x85f/0x44c0 [ 219.866849][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.866880][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 219.866940][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 219.866972][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 219.882668][ T5914] usb 5-1: Product: syz [ 219.883113][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 219.891220][ T5914] usb 5-1: Manufacturer: syz [ 219.894635][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 219.912027][ T5914] usb 5-1: SerialNumber: syz [ 219.912210][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 219.942806][ T5914] usb 5-1: config 0 descriptor?? [ 219.944662][ C0] ? read_tsc+0x9/0x20 [ 219.944699][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 219.952735][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.955837][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 219.955888][ C0] handle_softirqs+0x286/0x870 [ 219.955928][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 219.990372][ T5914] snd_usb_podhd 5-1:0.0: Line 6 POD HD500 found [ 219.995085][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 219.995136][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 220.012965][ T5914] usb 5-1: selecting invalid altsetting 1 [ 220.016019][ C0] __irq_exit_rcu+0xca/0x1f0 [ 220.016062][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 220.016106][ C0] irq_exit_rcu+0x9/0x30 [ 220.034263][ T5914] snd_usb_podhd 5-1:0.0: set_interface failed [ 220.037050][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 220.037090][ C0] [ 220.037100][ C0] [ 220.037111][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.037137][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 220.053974][ T5914] snd_usb_podhd 5-1:0.0: Line 6 POD HD500 now disconnected [ 220.058009][ C0] Code: 74 05 e8 9b 53 81 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 da 49 f6 65 8b 05 dc 38 4a 07 85 c0 74 40 48 c7 04 24 0e 36 [ 220.058038][ C0] RSP: 0018:ffffc9000aa4fa00 EFLAGS: 00000206 [ 220.058064][ C0] RAX: 10ed20ca74e2e700 RBX: 0000000000000a02 RCX: 10ed20ca74e2e700 [ 220.058083][ C0] RDX: 0000000000000006 RSI: ffffffff8d80f124 RDI: 0000000000000001 [ 220.058099][ C0] RBP: ffffc9000aa4fa90 R08: ffffffff8f9e6677 R09: 1ffffffff1f3ccce [ 220.058117][ C0] R10: dffffc0000000000 R11: fffffbfff1f3cccf R12: dffffc0000000000 [ 220.058138][ C0] R13: ffff8880281aea00 R14: ffffffff8eda4180 R15: 1ffff92001549f40 [ 220.068299][ T5914] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 220.073783][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.179199][ T5914] usb 5-1: USB disconnect, device number 17 [ 220.179759][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 220.198876][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 220.204355][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 220.210312][ C0] dummy_pullup+0x19b/0x200 [ 220.214848][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 220.219915][ C0] usb_gadget_disconnect_locked+0x143/0x4b0 [ 220.225835][ C0] gadget_unbind_driver+0xc4/0x430 [ 220.230971][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 220.236719][ C0] device_release_driver_internal+0x46f/0x800 [ 220.242826][ C0] driver_detach+0x1f3/0x2d0 [ 220.247442][ C0] bus_remove_driver+0x226/0x2f0 [ 220.252417][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 220.258158][ C0] raw_release+0xd7/0x260 [ 220.262505][ C0] ? __pfx_raw_release+0x10/0x10 [ 220.267455][ C0] __fput+0x44c/0xa70 [ 220.271476][ C0] task_work_run+0x1d4/0x260 [ 220.276087][ C0] ? __pfx_task_work_run+0x10/0x10 [ 220.281220][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 220.286723][ C0] exit_to_user_mode_loop+0xe9/0x130 [ 220.292052][ C0] do_syscall_64+0x2bd/0xfa0 [ 220.296697][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.302784][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.308959][ C0] ? clear_bhb_loop+0x60/0xb0 [ 220.313747][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.319657][ C0] RIP: 0033:0x7fa8d038eec9 [ 220.324115][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.343757][ C0] RSP: 002b:00007ffda20f5778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 220.352192][ C0] RAX: 0000000000000000 RBX: 00007fa8d05e7da0 RCX: 00007fa8d038eec9 [ 220.360183][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 220.368173][ C0] RBP: 00007fa8d05e7da0 R08: 00000000000000e4 R09: 00000008a20f5a6f [ 220.376187][ C0] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 00000000000363f4 [ 220.384175][ C0] R13: 00007ffda20f5870 R14: ffffffffffffffff R15: 00007ffda20f5890 [ 220.392186][ C0] [ 220.395223][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.402524][ C0] CPU: 0 UID: 0 PID: 8336 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT(full) [ 220.412197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.422271][ C0] Call Trace: [ 220.425561][ C0] [ 220.428420][ C0] dump_stack_lvl+0x99/0x250 [ 220.433031][ C0] ? __asan_memcpy+0x40/0x70 [ 220.437649][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.442861][ C0] ? __pfx__printk+0x10/0x10 [ 220.447473][ C0] vpanic+0x237/0x6d0 [ 220.451485][ C0] ? __pfx_vpanic+0x10/0x10 [ 220.456013][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 220.461245][ C0] panic+0xb9/0xc0 [ 220.464997][ C0] ? __pfx_panic+0x10/0x10 [ 220.469457][ C0] __warn+0x334/0x4c0 [ 220.473463][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 220.478431][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 220.483391][ C0] report_bug+0x2be/0x4f0 [ 220.487755][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 220.492733][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 220.497702][ C0] ? usb_submit_urb+0xf8e/0x18b0 [ 220.502678][ C0] handle_bug+0x84/0x160 [ 220.506945][ C0] exc_invalid_op+0x1a/0x50 [ 220.511510][ C0] asm_exc_invalid_op+0x1a/0x20 [ 220.516418][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 220.522019][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 220.541659][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 220.547761][ C0] RAX: 10ed20ca74e2e700 RBX: ffff88805eb84400 RCX: 0000000000040000 [ 220.555747][ C0] RDX: ffffc90002191000 RSI: 0000000000004355 RDI: 0000000000004356 [ 220.563740][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 220.571758][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 220.579754][ C0] R13: ffff88807917c830 R14: ffff88805eb84408 R15: dffffc0000000000 [ 220.587780][ C0] ? usb_submit_urb+0xf8b/0x18b0 [ 220.592762][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 220.598192][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 220.604142][ C0] ? kcov_remote_start+0x97/0x7f0 [ 220.609213][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 220.614616][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 220.620011][ C0] dummy_timer+0x85f/0x44c0 [ 220.624551][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.629958][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 220.635739][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 220.640717][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 220.645693][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 220.650656][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 220.655900][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 220.661659][ C0] ? read_tsc+0x9/0x20 [ 220.665866][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 220.671821][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 220.677000][ C0] handle_softirqs+0x286/0x870 [ 220.681790][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 220.686580][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 220.691923][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 220.697174][ C0] __irq_exit_rcu+0xca/0x1f0 [ 220.701783][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 220.707097][ C0] irq_exit_rcu+0x9/0x30 [ 220.711357][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 220.717031][ C0] [ 220.719987][ C0] [ 220.722955][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.728996][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 220.735541][ C0] Code: 74 05 e8 9b 53 81 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 da 49 f6 65 8b 05 dc 38 4a 07 85 c0 74 40 48 c7 04 24 0e 36 [ 220.755715][ C0] RSP: 0018:ffffc9000aa4fa00 EFLAGS: 00000206 [ 220.761838][ C0] RAX: 10ed20ca74e2e700 RBX: 0000000000000a02 RCX: 10ed20ca74e2e700 [ 220.770006][ C0] RDX: 0000000000000006 RSI: ffffffff8d80f124 RDI: 0000000000000001 [ 220.777999][ C0] RBP: ffffc9000aa4fa90 R08: ffffffff8f9e6677 R09: 1ffffffff1f3ccce [ 220.786094][ C0] R10: dffffc0000000000 R11: fffffbfff1f3cccf R12: dffffc0000000000 [ 220.794105][ C0] R13: ffff8880281aea00 R14: ffffffff8eda4180 R15: 1ffff92001549f40 [ 220.802169][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.808549][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 220.814045][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 220.819448][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 220.825369][ C0] dummy_pullup+0x19b/0x200 [ 220.829907][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 220.834989][ C0] usb_gadget_disconnect_locked+0x143/0x4b0 [ 220.840930][ C0] gadget_unbind_driver+0xc4/0x430 [ 220.846096][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 220.851887][ C0] device_release_driver_internal+0x46f/0x800 [ 220.858007][ C0] driver_detach+0x1f3/0x2d0 [ 220.862723][ C0] bus_remove_driver+0x226/0x2f0 [ 220.867707][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 220.873453][ C0] raw_release+0xd7/0x260 [ 220.877823][ C0] ? __pfx_raw_release+0x10/0x10 [ 220.882861][ C0] __fput+0x44c/0xa70 [ 220.886880][ C0] task_work_run+0x1d4/0x260 [ 220.891505][ C0] ? __pfx_task_work_run+0x10/0x10 [ 220.896641][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 220.902115][ C0] exit_to_user_mode_loop+0xe9/0x130 [ 220.907420][ C0] do_syscall_64+0x2bd/0xfa0 [ 220.912030][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.918105][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.924267][ C0] ? clear_bhb_loop+0x60/0xb0 [ 220.928961][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.934863][ C0] RIP: 0033:0x7fa8d038eec9 [ 220.939391][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.959044][ C0] RSP: 002b:00007ffda20f5778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 220.967503][ C0] RAX: 0000000000000000 RBX: 00007fa8d05e7da0 RCX: 00007fa8d038eec9 [ 220.975496][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 220.983489][ C0] RBP: 00007fa8d05e7da0 R08: 00000000000000e4 R09: 00000008a20f5a6f [ 220.991487][ C0] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 00000000000363f4 [ 220.999476][ C0] R13: 00007ffda20f5870 R14: ffffffffffffffff R15: 00007ffda20f5890 [ 221.007498][ C0] [ 221.010918][ C0] Kernel Offset: disabled [ 221.015272][ C0] Rebooting in 86400 seconds..