last executing test programs: 2m48.359432129s ago: executing program 2 (id=395): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) socket(0x22, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex:\x88\xfe\xf7\x01') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$unlink(0x9, r1, r1) r5 = socket(0x10, 0x3, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r6, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r6, &(0x7f0000000380)={0x18, 0x0, r7, {0x5}}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0xc048aeca, &(0x7f0000000080)={0x6, 0x0, [{0x94b, 0x0, 0x4}, {0x9fa, 0x0, 0x7}, {0x991, 0x0, 0x20298ced}, {0x3f2, 0x0, 0x7fffffffffffffff}, {0x57f, 0x0, 0x101}, {0x8a8, 0x0, 0x1}]}) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c02c800", @ANYRES16=r10, @ANYBLOB="000226bd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="414601", @ANYRES32=r3, @ANYRES64=r3, @ANYRES8=r8], 0x4) 2m47.468685661s ago: executing program 2 (id=404): madvise(&(0x7f00002c7000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 2m47.409799743s ago: executing program 2 (id=405): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0xb, 0xb, 0x200, &(0x7f00000005c0)="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"}) 2m47.25200406s ago: executing program 2 (id=406): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) utimensat(r0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4050) 2m47.251367335s ago: executing program 2 (id=407): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="68d9ea94ccf25b0a623693", 0xb}], 0x1}}], 0x1, 0x4001c00) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700ac0f00004000000060ec97000fc83c00fe80000000000007ffffff00000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xffe) 2m47.144557463s ago: executing program 2 (id=408): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300)={0x77359400}, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000e80)={0x0, 0xa, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'multiq3\x00', [0x4f27, 0x5, 0x4010000, 0x2f, 0x66, 0xcc7, 0x1, 0x80007, 0x2, 0x102, 0x9, 0x2, 0xeffeffff, 0x5, 0x0, 0x80000101, 0x7, 0x1a449, 0x3, 0x40020003, 0x100208d, 0xf, 0x3, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x8, 0x800, 0xe7]}) 2m38.723821012s ago: executing program 1 (id=437): syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f0f00010c"], 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x5, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x9, 0x5}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x91, 0x10, 0x40, 0x6}, 0xd9, &(0x7f00000003c0)={0x5, 0xf, 0xd9, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x9b}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x40e, 0x780, 0x4, [0x7, 0xff3f, 0xde, 0xc06f, 0x1fec00f, 0x3fcf]}, @generic={0x6d, 0x10, 0x2, "7031e4d1168cfa6b0d036558d1b7aacf71e09c3c764129534dc5b6a0dee6b2d310f88361e0cb87abcf7c8f22455c9f359c8bf2b1b795d42c89f0c9a0806f64be7b58a266ea4e0f91ccf63e24df3c3b70bd1c091d0585d110341a5738690d8ff754f20000000000000000"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x2, 0x3}, @generic={0x2f, 0x10, 0x3, "649732bc1d598904b55843508307e494c6f4f1c9717ec250e3181924b63005b92a8a7f218cddf24435df65d0"}]}, 0x3, [{0xba, &(0x7f0000000100)=@string={0xba, 0x3, "7d059d154c2d6c80aa5fa88385977d6e5e059aad3cc0208eef80a5315a844b32bf1ce43c03db7dc1b212127c23d11f598bf8ed8bddf686f9ac7ee687ecce4ec2c3c5f0ef4627cfe17ff303bd529faf11fb3e51c2ca421146bbf3077ad7872d7f240e17980da59e80b04b3dbd05d7e68c0aa98f785522e0fe7be30e83000ba5276d70ee328f85c20f54fb9c2429c52f4a57bc54ff71f5139bddaa985cca7021737272a192080944d5b1e01d6bd83ba22f750757671877d215"}}, {0x102, &(0x7f00000004c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}]}) 2m37.39494453s ago: executing program 1 (id=440): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x0, 0x7}}}}}]}}]}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5e00281ad251f9", 0xfc88}, {&(0x7f0000000100)="b9a7c60c94d422f271df2fa4f14f04b10fa53885ffff54a461", 0x20}], 0x2) 2m35.90835681s ago: executing program 1 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)=0x8) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x106) 2m34.866905515s ago: executing program 1 (id=449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x70d, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000240)={'ip_vti0\x00', @ifru_names='vlan0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000180)=0x68) 2m34.762603807s ago: executing program 1 (id=451): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) (async) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f00000002c0)=""/215, 0xd7) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host, 0x3}, 0x0, 0x0, 0xb}) 2m34.655640528s ago: executing program 1 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x602, 0x5, 0x10000, 0x4, 0x1, 0x7, 0x5, 0x7, 0xa, 0x100, 0x2, 0x1, 0x9, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7, 0x8, 0x6, 0x0, 0x6]}) ioctl$COMEDI_POLL(r2, 0x640f) ftruncate(0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00003b6000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000006c0)=0x7fffffff, 0x7f, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x8000451b, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 2m31.683784323s ago: executing program 32 (id=408): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300)={0x77359400}, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000e80)={0x0, 0xa, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'multiq3\x00', [0x4f27, 0x5, 0x4010000, 0x2f, 0x66, 0xcc7, 0x1, 0x80007, 0x2, 0x102, 0x9, 0x2, 0xeffeffff, 0x5, 0x0, 0x80000101, 0x7, 0x1a449, 0x3, 0x40020003, 0x100208d, 0xf, 0x3, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x8, 0x800, 0xe7]}) 2m19.553943853s ago: executing program 33 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x602, 0x5, 0x10000, 0x4, 0x1, 0x7, 0x5, 0x7, 0xa, 0x100, 0x2, 0x1, 0x9, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7, 0x8, 0x6, 0x0, 0x6]}) ioctl$COMEDI_POLL(r2, 0x640f) ftruncate(0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00003b6000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000006c0)=0x7fffffff, 0x7f, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x8000451b, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 5.560547494s ago: executing program 0 (id=1168): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) unshare(0xe000480) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5.512712613s ago: executing program 0 (id=1169): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x14, 0x25, "70bf7dc5a1714135ffe23221b0cdff4670bbf6da5f1b5ea1bedc5990d047e5ddaca91b3a95"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) 4.356556505s ago: executing program 3 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.014633974s ago: executing program 3 (id=1176): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.754632386s ago: executing program 4 (id=1177): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 3.754389351s ago: executing program 3 (id=1178): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003296fb608229084d488ff0102030109023300010484008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x155555555555563e}) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000001640)=[{0x1, 0x1811, 0x41, &(0x7f0000000d40)="94b401666cdddae0c972d6ad567dfff8723664417c890898fab115f5e513c30f4faed0b6b063f01e9c4d97ce5bc2a6e53ce85bc445410fb1d0fd5aa2ed4062cf4c"}], 0x1}) 3.201351224s ago: executing program 4 (id=1181): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x80e}]}) 3.120918674s ago: executing program 4 (id=1182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.119092059s ago: executing program 0 (id=1183): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x10001, 0x12) 2.928174687s ago: executing program 0 (id=1184): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8b, 0x0, 0xfffffffffffffffe}]}) 2.925345129s ago: executing program 4 (id=1185): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.810429536s ago: executing program 0 (id=1186): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.658298013s ago: executing program 0 (id=1187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00000009003d140f3c36"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x302, 0x8, 0x1e5, 0x9, 0x2}) 2.259663424s ago: executing program 3 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa0c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 2.021670871s ago: executing program 3 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000100000808000a400000000008000640000000000900010073797a300000000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 1.795849081s ago: executing program 5 (id=1191): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1.792301997s ago: executing program 3 (id=1192): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x14, 0x25, "70bf7dc5a1714135ffe23221b0cdff4670bbf6da5f1b5ea1bedc5990d047e5ddaca91b3a95"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) 1.569433371s ago: executing program 5 (id=1193): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) 1.439615833s ago: executing program 5 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.398119402s ago: executing program 5 (id=1195): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.351394983s ago: executing program 4 (id=1196): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003296fb608229084d488ff0102030109023300010484008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x155555555555563e}) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000001640)=[{0x1, 0x1811, 0x41, &(0x7f0000000d40)="94b401666cdddae0c972d6ad567dfff8723664417c890898fab115f5e513c30f4faed0b6b063f01e9c4d97ce5bc2a6e53ce85bc445410fb1d0fd5aa2ed4062cf4c"}], 0x1}) 1.253272354s ago: executing program 5 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa0c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)) 1.126734535s ago: executing program 5 (id=1198): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) 0s ago: executing program 4 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x80e}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): dpoint descriptors, different from the interface descriptor's value: 1 [ 257.816027][ T7505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.826519][ T7505] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 257.835578][ T7505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.876882][ T7505] usb 4-1: config 0 descriptor?? [ 257.896455][ T7505] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 258.193127][ T5836] usb 4-1: USB disconnect, device number 70 [ 258.388629][ T6664] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 258.546709][ T6664] usb 1-1: Using ep0 maxpacket: 32 [ 258.560895][ T6664] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.571769][ T6664] usb 1-1: config 0 has no interface number 0 [ 258.578503][ T6664] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 258.605985][ T6664] usb 1-1: config 0 interface 1 has no altsetting 0 [ 258.617226][ T6664] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 258.632159][ T6664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.633889][ T5916] usb 6-1: USB disconnect, device number 16 [ 258.654192][ T6664] usb 1-1: Product: syz [ 258.659349][ T6664] usb 1-1: Manufacturer: syz [ 258.663966][ T6664] usb 1-1: SerialNumber: syz [ 258.690156][ T6664] usb 1-1: config 0 descriptor?? [ 258.800394][ T8482] syzkaller1: entered promiscuous mode [ 258.813322][ T8482] syzkaller1: entered allmulticast mode [ 258.933401][ T6664] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 258.943250][ T6664] cx231xx 1-1:0.1: Failed to read PCB config [ 258.951339][ T6664] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 258.962495][ T6664] usb 1-1: USB disconnect, device number 73 [ 259.446936][ T6664] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 259.546508][ T5916] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 259.615916][ T6664] usb 1-1: Using ep0 maxpacket: 32 [ 259.623925][ T6664] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.635238][ T6664] usb 1-1: config 0 has no interface number 0 [ 259.641907][ T6664] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 259.654348][ T6664] usb 1-1: config 0 interface 1 has no altsetting 0 [ 259.792011][ T6664] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 259.801501][ T6664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.810501][ T6664] usb 1-1: Product: syz [ 259.814748][ T6664] usb 1-1: Manufacturer: syz [ 259.820472][ T5916] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.829837][ T5916] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.840831][ T6664] usb 1-1: SerialNumber: syz [ 259.847409][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.857392][ T6664] usb 1-1: config 0 descriptor?? [ 259.869757][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.881144][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.894714][ T5916] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.904761][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.913259][ T5916] usb 6-1: Product: syz [ 259.917922][ T5916] usb 6-1: Manufacturer: syz [ 259.925248][ T30] audit: type=1326 audit(1764104551.060:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.3.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18f749 code=0x0 [ 259.954856][ T5916] cdc_wdm 6-1:1.0: skipping garbage [ 259.961199][ T5916] cdc_wdm 6-1:1.0: skipping garbage [ 260.007506][ T5916] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 260.013475][ T5916] cdc_wdm 6-1:1.0: Unknown control protocol [ 260.084114][ T6664] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 260.116708][ T6664] cx231xx 1-1:0.1: Failed to read PCB config [ 260.132898][ T6664] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 260.159027][ T6664] usb 1-1: USB disconnect, device number 74 [ 261.197819][ T5909] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 261.369882][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.381317][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.391507][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.425499][ T5909] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.439481][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.469164][ T5909] usb 1-1: config 0 descriptor?? [ 261.891832][ T5909] usbhid 1-1:0.0: can't add hid device: -71 [ 261.904634][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 261.922184][ T5909] usb 1-1: USB disconnect, device number 75 [ 262.336929][ T7500] usb 6-1: USB disconnect, device number 17 [ 262.358867][ T5909] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 262.545542][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 262.560078][ T8545] binder: 8543:8545 ioctl c0306201 200000000180 returned -14 [ 262.569061][ T5909] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.597804][ T5909] usb 4-1: config 0 has no interface number 0 [ 262.603957][ T5909] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 262.747909][ T5909] usb 4-1: config 0 interface 1 has no altsetting 0 [ 262.764933][ T5909] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 262.787049][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.797126][ T5909] usb 4-1: Product: syz [ 262.801322][ T5909] usb 4-1: Manufacturer: syz [ 262.835876][ T5909] usb 4-1: SerialNumber: syz [ 262.843985][ T5909] usb 4-1: config 0 descriptor?? [ 262.957458][ T30] audit: type=1326 audit(1764104554.100:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.0.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4e58f749 code=0x0 [ 263.166316][ T8556] futex_wake_op: syz.5.908 tries to shift op by 36; fix this program [ 263.257521][ T5909] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 263.469404][ T5909] cx231xx 4-1:0.1: Failed to read PCB config [ 263.475473][ T5909] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 263.501016][ T5909] usb 4-1: USB disconnect, device number 71 [ 263.725918][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 263.805930][ T6664] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 263.805933][ T5909] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 263.896018][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 263.903424][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.913890][ T5916] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.926833][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.933585][ T5916] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 263.942878][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.954304][ T5916] usb 5-1: config 0 descriptor?? [ 263.965959][ T6664] usb 6-1: device descriptor read/64, error -71 [ 263.977204][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 263.979306][ T5916] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 263.994128][ T5909] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.009757][ T5909] usb 4-1: config 0 has no interface number 0 [ 264.016508][ T5909] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 264.027498][ T5909] usb 4-1: config 0 interface 1 has no altsetting 0 [ 264.037033][ T5909] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 264.046462][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.054464][ T5909] usb 4-1: Product: syz [ 264.058859][ T5909] usb 4-1: Manufacturer: syz [ 264.063458][ T5909] usb 4-1: SerialNumber: syz [ 264.076069][ T3095] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 264.085005][ T5909] usb 4-1: config 0 descriptor?? [ 264.206030][ T6664] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 264.227794][ T3095] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.236727][ T3095] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.247422][ T3095] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.256765][ T3095] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.268050][ T3095] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.282824][ T3095] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.292234][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.303590][ T3095] usb 1-1: Product: syz [ 264.308860][ T5879] usb 5-1: USB disconnect, device number 21 [ 264.311154][ T3095] usb 1-1: Manufacturer: syz [ 264.324075][ T5909] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 264.337204][ T6664] usb 6-1: device descriptor read/64, error -71 [ 264.348179][ T3095] cdc_wdm 1-1:1.0: skipping garbage [ 264.352356][ T5909] cx231xx 4-1:0.1: Failed to read PCB config [ 264.356156][ T3095] cdc_wdm 1-1:1.0: skipping garbage [ 264.367704][ T5909] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 264.367971][ T3095] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 264.384616][ T3095] cdc_wdm 1-1:1.0: Unknown control protocol [ 264.397440][ T5909] usb 4-1: USB disconnect, device number 72 [ 264.448934][ T6664] usb usb6-port1: attempt power cycle [ 264.797186][ T6664] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 264.847656][ T6664] usb 6-1: device descriptor read/8, error -71 [ 265.009174][ T8571] binder: 8570:8571 ioctl c0306201 200000000180 returned -14 [ 265.096189][ T6664] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 265.126748][ T6664] usb 6-1: device descriptor read/8, error -71 [ 265.237040][ T6664] usb usb6-port1: unable to enumerate USB device [ 266.741879][ T30] audit: type=1326 audit(1764104557.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8037b8f749 code=0x0 [ 266.834393][ T6664] usb 1-1: USB disconnect, device number 76 [ 267.256094][ T6664] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 267.435888][ T6664] usb 1-1: Using ep0 maxpacket: 16 [ 267.447324][ T6664] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.476098][ T6664] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.489361][ T6664] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.496428][ T6664] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 267.505489][ T6664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.520776][ T6664] usb 1-1: config 0 descriptor?? [ 267.543892][ T6664] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 267.675951][ T7558] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 267.895905][ T7558] usb 4-1: Using ep0 maxpacket: 32 [ 267.902430][ T7558] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.911545][ T7558] usb 4-1: config 0 has no interface number 0 [ 267.927281][ T7558] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 267.990563][ T7558] usb 4-1: config 0 interface 1 has no altsetting 0 [ 268.009014][ T6664] usb 1-1: USB disconnect, device number 77 [ 268.012304][ T7558] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 268.032647][ T7558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.055110][ T7558] usb 4-1: Product: syz [ 268.065425][ T7558] usb 4-1: Manufacturer: syz [ 268.078185][ T7558] usb 4-1: SerialNumber: syz [ 268.098389][ T7558] usb 4-1: config 0 descriptor?? [ 268.349890][ T7558] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 268.359592][ T7558] cx231xx 4-1:0.1: Failed to read PCB config [ 268.365785][ T7558] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 268.403872][ T7558] usb 4-1: USB disconnect, device number 73 [ 268.885969][ T7558] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 268.966623][ T7505] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 269.055921][ T7558] usb 4-1: Using ep0 maxpacket: 32 [ 269.066934][ T7558] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.084129][ T7558] usb 4-1: config 0 has no interface number 0 [ 269.091403][ T7558] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 269.116066][ T7558] usb 4-1: config 0 interface 1 has no altsetting 0 [ 269.135647][ T7558] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 269.149838][ T7505] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 269.187382][ T7558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.195521][ T7505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.212883][ T7558] usb 4-1: Product: syz [ 269.225463][ T7505] usb 1-1: Product: syz [ 269.229989][ T7558] usb 4-1: Manufacturer: syz [ 269.234723][ T7505] usb 1-1: Manufacturer: syz [ 269.239734][ T7558] usb 4-1: SerialNumber: syz [ 269.244861][ T7505] usb 1-1: SerialNumber: syz [ 269.252488][ T7558] usb 4-1: config 0 descriptor?? [ 269.261284][ T7505] usb 1-1: config 0 descriptor?? [ 269.488597][ T7505] usb 1-1: USB disconnect, device number 78 [ 269.504994][ T7558] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 269.533283][ T7558] cx231xx 4-1:0.1: Failed to read PCB config [ 269.561419][ T7558] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 269.581034][ T7558] usb 4-1: USB disconnect, device number 74 [ 269.865989][ T6664] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 270.038870][ T6664] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.055909][ T6664] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 270.077913][ T6664] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.095892][ T6664] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 270.136101][ T6664] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 270.167366][ T6664] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.185917][ T6664] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.200618][ T6664] usb 6-1: Product: syz [ 270.212058][ T30] audit: type=1326 audit(1764104561.350:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.3.931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18f749 code=0x0 [ 270.246715][ T6664] usb 6-1: Manufacturer: syz [ 270.271207][ T6664] cdc_wdm 6-1:1.0: skipping garbage [ 270.286211][ T6664] cdc_wdm 6-1:1.0: skipping garbage [ 270.299092][ T6664] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 270.311891][ T6664] cdc_wdm 6-1:1.0: Unknown control protocol [ 270.765952][ T7505] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 270.808018][ T7558] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 270.936028][ T7505] usb 1-1: Using ep0 maxpacket: 32 [ 270.948225][ T7505] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.961003][ T7505] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.973893][ T7505] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 270.983163][ T7558] usb 5-1: Using ep0 maxpacket: 8 [ 270.988495][ T7505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.996965][ T7505] usb 1-1: Product: syz [ 271.002665][ T7505] usb 1-1: Manufacturer: syz [ 271.008498][ T7558] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 271.017059][ T7505] usb 1-1: SerialNumber: syz [ 271.022213][ T7558] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.040115][ T7505] usb 1-1: config 0 descriptor?? [ 271.055967][ T7558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.066511][ T7558] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 271.078429][ T7558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 271.089175][ T7558] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.102429][ T7558] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.124021][ T7558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.179058][ T8629] syzkaller1: entered promiscuous mode [ 271.184632][ T8629] syzkaller1: entered allmulticast mode [ 271.285225][ T7505] usb 1-1: USB disconnect, device number 79 [ 271.357649][ T7558] usb 5-1: usb_control_msg returned -32 [ 271.373247][ T7558] usbtmc 5-1:16.0: can't read capabilities [ 272.485937][ T7505] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 272.645978][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 272.660021][ T7505] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.677378][ T7505] usb 4-1: config 0 has no interface number 0 [ 272.691732][ T7505] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 272.704488][ T5909] usb 6-1: USB disconnect, device number 22 [ 272.711762][ T7505] usb 4-1: config 0 interface 1 has no altsetting 0 [ 272.730691][ T7505] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 272.751941][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.775121][ T7505] usb 4-1: Product: syz [ 272.786862][ T7505] usb 4-1: Manufacturer: syz [ 272.798178][ T7505] usb 4-1: SerialNumber: syz [ 272.822625][ T7505] usb 4-1: config 0 descriptor?? [ 272.893313][ T30] audit: type=1326 audit(1764104564.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4e58f749 code=0x0 [ 272.935625][ T8652] syzkaller1: entered promiscuous mode [ 272.941278][ T8652] syzkaller1: entered allmulticast mode [ 273.063372][ T7505] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 273.084314][ T7505] cx231xx 4-1:0.1: Failed to read PCB config [ 273.102621][ T7505] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 273.118857][ T7505] usb 4-1: USB disconnect, device number 75 [ 273.356082][ T6664] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 273.506119][ T6664] usb 6-1: Using ep0 maxpacket: 16 [ 273.514011][ T6664] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.527758][ T6664] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.541377][ T6664] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.550990][ T6664] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 273.564889][ T6664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.580975][ T6664] usb 6-1: config 0 descriptor?? [ 273.586196][ T7505] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 273.616968][ T7558] usb 5-1: USB disconnect, device number 22 [ 273.617271][ T6664] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 273.766269][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 273.776594][ T7505] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.784609][ T7505] usb 4-1: config 0 has no interface number 0 [ 273.811724][ T7505] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 273.832813][ T7505] usb 4-1: config 0 interface 1 has no altsetting 0 [ 273.869276][ T7505] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 273.894014][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.925897][ T7505] usb 4-1: Product: syz [ 273.930112][ T7505] usb 4-1: Manufacturer: syz [ 273.934727][ T7505] usb 4-1: SerialNumber: syz [ 273.946182][ T6664] usb 6-1: USB disconnect, device number 23 [ 273.950186][ T7505] usb 4-1: config 0 descriptor?? [ 274.115896][ T3095] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 274.185394][ T7505] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 274.198788][ T7505] cx231xx 4-1:0.1: Failed to read PCB config [ 274.210194][ T7505] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 274.227720][ T7505] usb 4-1: USB disconnect, device number 76 [ 274.275900][ T3095] usb 1-1: Using ep0 maxpacket: 32 [ 274.282611][ T3095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.293242][ T3095] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.304960][ T3095] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 274.315280][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.323490][ T3095] usb 1-1: Product: syz [ 274.328334][ T3095] usb 1-1: Manufacturer: syz [ 274.332943][ T3095] usb 1-1: SerialNumber: syz [ 274.340481][ T3095] usb 1-1: config 0 descriptor?? [ 274.566502][ T3095] usb 1-1: USB disconnect, device number 80 [ 274.755895][ T7505] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 274.928228][ T7505] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.937225][ T7505] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 274.947837][ T7505] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.957396][ T7505] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 274.968747][ T7505] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 274.982281][ T7505] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.992510][ T7505] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.000720][ T7505] usb 6-1: Product: syz [ 275.005159][ T7505] usb 6-1: Manufacturer: syz [ 275.023612][ T7505] cdc_wdm 6-1:1.0: skipping garbage [ 275.031241][ T7505] cdc_wdm 6-1:1.0: skipping garbage [ 275.038570][ T7505] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 275.045213][ T7505] cdc_wdm 6-1:1.0: Unknown control protocol [ 275.405930][ T7505] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 275.586068][ T7505] usb 1-1: Using ep0 maxpacket: 32 [ 275.595478][ T7505] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 275.605285][ T7505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.618432][ T7505] usb 1-1: config 0 descriptor?? [ 275.765966][ T5879] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 275.886392][ T7505] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 275.907015][ T7505] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.920265][ T7505] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 275.937202][ T30] audit: type=1326 audit(1764104567.070:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.3.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18f749 code=0x0 [ 275.939653][ T7505] usb 1-1: media controller created [ 276.000285][ T7505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.035930][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 276.049569][ T5879] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 276.076598][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.107977][ T8673] dib0700: tx buffer length is larger than 4. Not supported. [ 276.115877][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.125665][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 276.206803][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 276.229898][ T7505] DVB: Unable to find symbol dib7000p_attach() [ 276.236213][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.249407][ T7505] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 276.267519][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.285879][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.376021][ T7505] rc_core: IR keymap rc-dib0700-rc5 not found [ 276.382367][ T7505] Registered IR keymap rc-empty [ 276.507614][ T7505] dvb-usb: could not initialize remote control. [ 276.513990][ T7505] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 276.537454][ T5879] usb 5-1: usb_control_msg returned -32 [ 276.543220][ T5879] usbtmc 5-1:16.0: can't read capabilities [ 276.551317][ T7505] usb 1-1: USB disconnect, device number 81 [ 276.632632][ T7505] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 277.266013][ T3095] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 277.435930][ T3095] usb 1-1: Using ep0 maxpacket: 16 [ 277.447179][ T3095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.475893][ T3095] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.495862][ T3095] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.502590][ T3095] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 277.513051][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.524712][ T3095] usb 1-1: config 0 descriptor?? [ 277.533699][ T3095] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 277.570675][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 277.570826][ T3095] usb 6-1: USB disconnect, device number 24 [ 277.577622][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 277.589495][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 277.659063][ T8697] syzkaller1: entered promiscuous mode [ 277.664627][ T8697] syzkaller1: entered allmulticast mode [ 277.881993][ T5879] usb 1-1: USB disconnect, device number 82 [ 278.527198][ T3095] usb 5-1: USB disconnect, device number 23 [ 278.696139][ T5920] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 278.866061][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 278.873851][ T5920] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 278.893256][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.930420][ T5920] usb 1-1: config 0 descriptor?? [ 279.035932][ T3095] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 279.055397][ T30] audit: type=1326 audit(1764104570.190:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.3.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ddc18f749 code=0x0 [ 279.151536][ T5920] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 279.169887][ T5920] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 279.179817][ T5920] dib0700: firmware download failed at 7 with -22 [ 279.200108][ T3095] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.212536][ T5920] usb 1-1: USB disconnect, device number 83 [ 279.219466][ T3095] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.238342][ T3095] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.247925][ T3095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 279.259219][ T3095] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 279.265933][ T5879] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 279.275385][ T3095] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.310016][ T3095] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.340440][ T3095] usb 6-1: Product: syz [ 279.344831][ T3095] usb 6-1: Manufacturer: syz [ 279.363905][ T3095] cdc_wdm 6-1:1.0: skipping garbage [ 279.369678][ T3095] cdc_wdm 6-1:1.0: skipping garbage [ 279.378065][ T3095] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 279.384136][ T3095] cdc_wdm 6-1:1.0: Unknown control protocol [ 279.405997][ T5879] usb 5-1: device descriptor read/64, error -71 [ 279.785998][ T5879] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.926622][ T5879] usb 5-1: device descriptor read/64, error -71 [ 280.046520][ T5879] usb usb5-port1: attempt power cycle [ 280.070884][ T8732] binder: 8731:8732 ioctl c0306201 200000000240 returned -11 [ 280.152583][ T8735] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 280.219698][ T3095] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 280.395981][ T5879] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 280.406808][ T3095] usb 1-1: Using ep0 maxpacket: 16 [ 280.415980][ T3095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.429208][ T3095] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.436559][ T5879] usb 5-1: device descriptor read/8, error -71 [ 280.443810][ T3095] usb 1-1: config 0 interface 0 has no altsetting 0 [ 280.460018][ T3095] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 280.470495][ T5920] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 280.478670][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.491737][ T3095] usb 1-1: config 0 descriptor?? [ 280.501585][ T3095] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 280.648750][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.660977][ T5920] usb 4-1: not running at top speed; connect to a high speed hub [ 280.671146][ T5920] usb 4-1: config 0 has no interfaces? [ 280.685357][ T5920] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 280.695395][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.704239][ T5920] usb 4-1: Product: syz [ 280.705962][ T5879] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 280.713773][ T5920] usb 4-1: Manufacturer: syz [ 280.721312][ T5920] usb 4-1: SerialNumber: syz [ 280.730525][ T5920] usb 4-1: config 0 descriptor?? [ 280.762991][ T5879] usb 5-1: device descriptor read/8, error -71 [ 280.862430][ T5920] usb 1-1: USB disconnect, device number 84 [ 280.877403][ T5879] usb usb5-port1: unable to enumerate USB device [ 281.441583][ T5920] usb 4-1: USB disconnect, device number 77 [ 281.803484][ T3095] usb 6-1: USB disconnect, device number 25 [ 281.895907][ T5920] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 282.045935][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 282.057771][ T5920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.067526][ T5920] usb 4-1: config 0 has no interface number 0 [ 282.073647][ T5920] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 282.085215][ T5920] usb 4-1: config 0 interface 1 has no altsetting 0 [ 282.095360][ T5920] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 282.109039][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.118694][ T5920] usb 4-1: Product: syz [ 282.125897][ T5920] usb 4-1: Manufacturer: syz [ 282.132839][ T5920] usb 4-1: SerialNumber: syz [ 282.149838][ T5920] usb 4-1: config 0 descriptor?? [ 282.198205][ T3095] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 282.497745][ T5920] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 282.523981][ T5920] cx231xx 4-1:0.1: Failed to read PCB config [ 282.536212][ T5920] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 282.545935][ T3095] usb 6-1: Using ep0 maxpacket: 32 [ 282.553035][ T3095] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 282.568375][ T5920] usb 4-1: USB disconnect, device number 78 [ 282.579365][ T3095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.606206][ T3095] usb 6-1: config 0 descriptor?? [ 282.620737][ T30] audit: type=1326 audit(1764104573.760:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8748 comm="syz.4.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8a118f749 code=0x0 [ 282.899938][ T8759] binder: 8758:8759 ioctl c0306201 200000000240 returned -11 [ 282.942452][ T3095] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 282.983756][ T3095] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 283.016925][ T3095] dib0700: firmware download failed at 7 with -22 [ 283.056277][ T3095] usb 6-1: USB disconnect, device number 26 [ 283.076058][ T5920] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 283.235927][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 283.245179][ T5920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.263607][ T5920] usb 4-1: config 0 has no interface number 0 [ 283.273824][ T5920] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 283.305068][ T5920] usb 4-1: config 0 interface 1 has no altsetting 0 [ 283.314122][ T5920] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 283.334324][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.344466][ T5920] usb 4-1: Product: syz [ 283.354622][ T5920] usb 4-1: Manufacturer: syz [ 283.355946][ T7505] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 283.359319][ T5920] usb 4-1: SerialNumber: syz [ 283.376006][ T5920] usb 4-1: config 0 descriptor?? [ 283.537322][ T7505] usb 1-1: Using ep0 maxpacket: 8 [ 283.544388][ T7505] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 283.568737][ T7505] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.592370][ T5920] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 283.595898][ T7505] usb 1-1: config 0 has no interface number 0 [ 283.602902][ T5920] cx231xx 4-1:0.1: Failed to read PCB config [ 283.615903][ T7505] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 283.626991][ T5920] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 283.634750][ T5920] usb 4-1: USB disconnect, device number 79 [ 283.652547][ T8765] loop8: detected capacity change from 0 to 8 [ 283.670597][ T7505] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 283.684079][ T6247] Dev loop8: unable to read RDB block 8 [ 283.695903][ T6247] loop8: unable to read partition table [ 283.702849][ T6247] loop8: partition table beyond EOD, truncated [ 283.705991][ T7505] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 283.732483][ T8765] Dev loop8: unable to read RDB block 8 [ 283.738257][ T8765] loop8: unable to read partition table [ 283.744093][ T8765] loop8: partition table beyond EOD, truncated [ 283.750876][ T8765] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 283.766366][ T7505] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 283.795899][ T7505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.804268][ T7505] usb 1-1: Product: syz [ 283.832245][ T7505] usb 1-1: Manufacturer: syz [ 283.840951][ T7505] usb 1-1: SerialNumber: syz [ 283.853611][ T7505] usb 1-1: config 0 descriptor?? [ 283.888964][ T8761] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 284.155931][ T3095] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 284.225921][ T5920] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 284.318182][ T3095] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.329275][ T7505] usb 1-1: NFC: intf ffff888022fda000 id ffffffff8ed2fcc0 [ 284.329351][ T3095] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.346192][ T3095] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.360526][ T3095] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.369897][ T7505] usb 1-1: USB disconnect, device number 85 [ 284.385936][ T5920] usb 6-1: device descriptor read/64, error -71 [ 284.394493][ T3095] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.427953][ T3095] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.437293][ T3095] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.446121][ T3095] usb 5-1: Product: syz [ 284.450299][ T3095] usb 5-1: Manufacturer: syz [ 284.473758][ T3095] cdc_wdm 5-1:1.0: skipping garbage [ 284.479078][ T3095] cdc_wdm 5-1:1.0: skipping garbage [ 284.493559][ T3095] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 284.500827][ T3095] cdc_wdm 5-1:1.0: Unknown control protocol [ 284.625889][ T5920] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 284.757124][ T5920] usb 6-1: device descriptor read/64, error -71 [ 284.879155][ T5920] usb usb6-port1: attempt power cycle [ 285.198295][ T8784] binder: 8782:8784 ioctl c0306201 200000000240 returned -11 [ 285.247728][ T5920] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 285.286848][ T5920] usb 6-1: device descriptor read/8, error -71 [ 285.546005][ T3095] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 285.553817][ T5920] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 285.577847][ T5920] usb 6-1: device descriptor read/8, error -71 [ 285.696987][ T5920] usb usb6-port1: unable to enumerate USB device [ 285.785936][ T3095] usb 4-1: Using ep0 maxpacket: 32 [ 285.793553][ T3095] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 285.802983][ T3095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.815653][ T3095] usb 4-1: config 0 descriptor?? [ 286.033572][ T3095] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 286.062629][ T3095] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 286.087671][ T3095] dib0700: firmware download failed at 7 with -22 [ 286.114430][ T3095] usb 4-1: USB disconnect, device number 80 [ 286.800233][ T8801] syzkaller1: entered promiscuous mode [ 286.805739][ T8801] syzkaller1: entered allmulticast mode [ 286.957042][ T3095] usb 5-1: USB disconnect, device number 28 [ 286.965882][ T5879] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 287.138185][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 287.158721][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.175902][ T5879] usb 1-1: config 0 has no interface number 0 [ 287.182039][ T5879] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 287.201920][ T5879] usb 1-1: config 0 interface 1 has no altsetting 0 [ 287.211510][ T5879] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 287.222252][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.230695][ T5879] usb 1-1: Product: syz [ 287.234940][ T5879] usb 1-1: Manufacturer: syz [ 287.239628][ T5879] usb 1-1: SerialNumber: syz [ 287.247387][ T5879] usb 1-1: config 0 descriptor?? [ 287.435985][ T7505] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 287.469529][ T5879] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 287.479238][ T5879] cx231xx 1-1:0.1: Failed to read PCB config [ 287.485356][ T5879] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 287.499384][ T5879] usb 1-1: USB disconnect, device number 86 [ 287.567092][ T7505] usb 5-1: device descriptor read/64, error -71 [ 287.826473][ T7505] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 287.976181][ T5879] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 287.996126][ T7505] usb 5-1: device descriptor read/64, error -71 [ 288.117924][ T7505] usb usb5-port1: attempt power cycle [ 288.156181][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 288.175507][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.192789][ T5879] usb 1-1: config 0 has no interface number 0 [ 288.200976][ T5879] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 288.222692][ T5879] usb 1-1: config 0 interface 1 has no altsetting 0 [ 288.242809][ T5879] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 288.267630][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.286988][ T5879] usb 1-1: Product: syz [ 288.295940][ T5879] usb 1-1: Manufacturer: syz [ 288.300609][ T5879] usb 1-1: SerialNumber: syz [ 288.309227][ T5879] usb 1-1: config 0 descriptor?? [ 288.331567][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1007'. [ 288.466140][ T7505] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 288.497936][ T7505] usb 5-1: device descriptor read/8, error -71 [ 288.524684][ T5879] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 288.542147][ T5879] cx231xx 1-1:0.1: Failed to read PCB config [ 288.553230][ T5879] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 288.572640][ T5879] usb 1-1: USB disconnect, device number 87 [ 288.603362][ T8824] syzkaller1: entered promiscuous mode [ 288.615599][ T8824] syzkaller1: entered allmulticast mode [ 288.735910][ T7505] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 288.772287][ T7505] usb 5-1: device descriptor read/8, error -71 [ 288.896956][ T7505] usb usb5-port1: unable to enumerate USB device [ 289.065971][ T7505] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 289.218103][ T7505] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.232766][ T7505] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 289.244481][ T7505] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.253898][ T7505] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 289.285875][ T7505] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 289.301557][ T7505] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.313322][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.323489][ T7505] usb 4-1: Product: syz [ 289.329419][ T7505] usb 4-1: Manufacturer: syz [ 289.349598][ T7505] cdc_wdm 4-1:1.0: skipping garbage [ 289.361430][ T7505] cdc_wdm 4-1:1.0: skipping garbage [ 289.376079][ T7505] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 289.382952][ T7505] cdc_wdm 4-1:1.0: Unknown control protocol [ 289.406274][ T5879] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 289.536361][ T5879] usb 1-1: device descriptor read/64, error -71 [ 289.785977][ T5879] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 289.915911][ T5879] usb 1-1: device descriptor read/64, error -71 [ 290.027089][ T5879] usb usb1-port1: attempt power cycle [ 290.366034][ T5879] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 290.386802][ T5879] usb 1-1: device descriptor read/8, error -71 [ 290.636052][ T7505] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 290.643779][ T5879] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 290.666573][ T5879] usb 1-1: device descriptor read/8, error -71 [ 290.777056][ T5879] usb usb1-port1: unable to enumerate USB device [ 290.795872][ T7505] usb 5-1: Using ep0 maxpacket: 16 [ 290.807152][ T7505] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.817353][ T7505] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.830323][ T7505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 290.837012][ T7505] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 290.846117][ T7505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.858409][ T7505] usb 5-1: config 0 descriptor?? [ 290.876909][ T7505] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 291.063086][ T8844] syzkaller1: entered promiscuous mode [ 291.074262][ T8844] syzkaller1: entered allmulticast mode [ 291.201793][ T24] usb 5-1: USB disconnect, device number 33 [ 291.565916][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 291.715893][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 291.732792][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.748799][ T24] usb 6-1: config 0 has no interface number 0 [ 291.768178][ T24] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 291.798408][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 291.827832][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 291.850107][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.850817][ T7505] usb 4-1: USB disconnect, device number 81 [ 291.858270][ T24] usb 6-1: Product: syz [ 291.858291][ T24] usb 6-1: Manufacturer: syz [ 291.858307][ T24] usb 6-1: SerialNumber: syz [ 291.909562][ T24] usb 6-1: config 0 descriptor?? [ 292.144219][ T24] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 292.163498][ T24] cx231xx 6-1:0.1: Failed to read PCB config [ 292.170100][ T24] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 292.184678][ T24] usb 6-1: USB disconnect, device number 31 [ 292.325913][ T7505] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 292.495883][ T7505] usb 4-1: Using ep0 maxpacket: 8 [ 292.507522][ T7505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.526131][ T7505] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.546078][ T7505] usb 4-1: can't read configurations, error -61 [ 292.685982][ T7505] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 292.705984][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 292.845870][ T7505] usb 4-1: Using ep0 maxpacket: 8 [ 292.853586][ T7505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.864248][ T7505] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.865950][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 292.878937][ T7505] usb 4-1: can't read configurations, error -61 [ 292.886113][ T7505] usb usb4-port1: attempt power cycle [ 292.894425][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.915862][ T24] usb 6-1: config 0 has no interface number 0 [ 292.921997][ T24] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 292.945882][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 292.961149][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 292.985883][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.993899][ T24] usb 6-1: Product: syz [ 293.016083][ T24] usb 6-1: Manufacturer: syz [ 293.020706][ T24] usb 6-1: SerialNumber: syz [ 293.038251][ T24] usb 6-1: config 0 descriptor?? [ 293.161782][ T8869] syzkaller1: entered promiscuous mode [ 293.169370][ T8869] syzkaller1: entered allmulticast mode [ 293.236095][ T7505] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 293.256792][ T7505] usb 4-1: Using ep0 maxpacket: 8 [ 293.259628][ T24] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 293.281256][ T24] cx231xx 6-1:0.1: Failed to read PCB config [ 293.288530][ T24] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 293.305179][ T24] usb 6-1: USB disconnect, device number 32 [ 293.311541][ T7505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.332729][ T7505] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.345916][ T7505] usb 4-1: can't read configurations, error -61 [ 293.496761][ T7505] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 293.526485][ T7505] usb 4-1: Using ep0 maxpacket: 8 [ 293.540191][ T7505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.556870][ T7505] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.570285][ T7505] usb 4-1: can't read configurations, error -61 [ 293.590840][ T7505] usb usb4-port1: unable to enumerate USB device [ 293.845899][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 294.005956][ T7505] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 294.039071][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 294.063547][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 294.075897][ T5879] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 294.088942][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.104634][ T24] usb 1-1: Product: syz [ 294.112693][ T24] usb 1-1: Manufacturer: syz [ 294.117352][ T24] usb 1-1: SerialNumber: syz [ 294.151427][ T24] usb 1-1: config 0 descriptor?? [ 294.178084][ T7505] usb 5-1: Using ep0 maxpacket: 16 [ 294.187110][ T7505] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.197437][ T7505] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.230089][ T7505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.238979][ T5879] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.256002][ T5879] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.267026][ T7505] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 294.286060][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.295043][ T7505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.308174][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.321320][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.333568][ T7505] usb 5-1: config 0 descriptor?? [ 294.353389][ T7505] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 294.434156][ T5879] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.445860][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.470529][ T5879] usb 6-1: Product: syz [ 294.486779][ T5879] usb 6-1: Manufacturer: syz [ 294.509859][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 294.519163][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 294.533548][ T5879] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 294.545400][ T5879] cdc_wdm 6-1:1.0: Unknown control protocol [ 294.631740][ T8873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1028'. [ 294.698066][ T5879] usb 5-1: USB disconnect, device number 34 [ 295.765923][ T5920] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 295.895903][ T5920] usb 4-1: device descriptor read/64, error -71 [ 296.135875][ T5920] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 296.285881][ T5920] usb 4-1: device descriptor read/64, error -71 [ 296.396530][ T5920] usb usb4-port1: attempt power cycle [ 296.736004][ T5920] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 296.766740][ T5920] usb 4-1: device descriptor read/8, error -71 [ 296.865241][ T5879] usb 6-1: USB disconnect, device number 33 [ 296.953254][ T8895] syzkaller1: entered promiscuous mode [ 296.960126][ T8895] syzkaller1: entered allmulticast mode [ 297.036713][ T5920] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 297.066503][ T5920] usb 4-1: device descriptor read/8, error -71 [ 297.115593][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1037'. [ 297.189521][ T5920] usb usb4-port1: unable to enumerate USB device [ 297.243070][ T5879] usb 1-1: USB disconnect, device number 92 [ 297.784926][ T5879] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 298.245981][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 298.254258][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.271353][ T5879] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 298.282964][ T5879] usb 1-1: can't read configurations, error -61 [ 298.445985][ T5879] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 298.595986][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 298.610865][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.628741][ T5879] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 298.638501][ T5879] usb 1-1: can't read configurations, error -61 [ 298.645288][ T5879] usb usb1-port1: attempt power cycle [ 298.666247][ T8920] syzkaller1: entered promiscuous mode [ 298.671756][ T8920] syzkaller1: entered allmulticast mode [ 298.795884][ T7505] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 298.952922][ T7505] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.961769][ T7505] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 298.972241][ T7505] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.981607][ T7505] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 298.993607][ T5879] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 299.001582][ T7505] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 299.014600][ T7505] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.024081][ T7505] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.025920][ T8757] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 299.034173][ T7505] usb 5-1: Product: syz [ 299.047496][ T7505] usb 5-1: Manufacturer: syz [ 299.052244][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 299.061541][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.074255][ T5879] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.085386][ T7505] cdc_wdm 5-1:1.0: skipping garbage [ 299.095906][ T5879] usb 1-1: can't read configurations, error -61 [ 299.102238][ T7505] cdc_wdm 5-1:1.0: skipping garbage [ 299.110745][ T7505] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 299.117166][ T7505] cdc_wdm 5-1:1.0: Unknown control protocol [ 299.205888][ T8757] usb 6-1: Using ep0 maxpacket: 32 [ 299.212535][ T8757] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 299.223100][ T8757] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 299.234396][ T8757] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 299.243926][ T8757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.252962][ T8757] usb 6-1: Product: syz [ 299.255941][ T5879] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 299.268241][ T8757] usb 6-1: Manufacturer: syz [ 299.272858][ T8757] usb 6-1: SerialNumber: syz [ 299.286630][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 299.303752][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.332115][ T5879] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.346129][ T5879] usb 1-1: can't read configurations, error -61 [ 299.358755][ T5879] usb usb1-port1: unable to enumerate USB device [ 299.522433][ T8757] usb 6-1: USB disconnect, device number 34 [ 299.675934][ T48] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 299.836074][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 299.848706][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.865834][ T48] usb 4-1: config 0 has no interface number 0 [ 299.872345][ T48] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 299.883994][ T48] usb 4-1: config 0 interface 1 has no altsetting 0 [ 299.917966][ T48] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 299.927773][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.936825][ T48] usb 4-1: Product: syz [ 299.941256][ T48] usb 4-1: Manufacturer: syz [ 299.948260][ T48] usb 4-1: SerialNumber: syz [ 299.974514][ T48] usb 4-1: config 0 descriptor?? [ 300.220091][ T48] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 300.237360][ T48] cx231xx 4-1:0.1: Failed to read PCB config [ 300.244921][ T48] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 300.259714][ T48] usb 4-1: USB disconnect, device number 90 [ 300.756893][ T48] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 300.927059][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 300.935483][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.944605][ T48] usb 4-1: config 0 has no interface number 0 [ 300.965550][ T48] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 300.982707][ T48] usb 4-1: config 0 interface 1 has no altsetting 0 [ 301.007955][ T48] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 301.018171][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.033936][ T48] usb 4-1: Product: syz [ 301.043472][ T48] usb 4-1: Manufacturer: syz [ 301.060185][ T48] usb 4-1: SerialNumber: syz [ 301.071970][ T48] usb 4-1: config 0 descriptor?? [ 301.077118][ T7500] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 301.097546][ T5879] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 301.215987][ T7500] usb 6-1: device descriptor read/64, error -71 [ 301.236212][ T5879] usb 1-1: device descriptor read/64, error -71 [ 301.307762][ T48] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 301.333963][ T48] cx231xx 4-1:0.1: Failed to read PCB config [ 301.342126][ T48] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 301.358655][ T48] usb 4-1: USB disconnect, device number 91 [ 301.455926][ T7500] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 301.491274][ T5879] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 301.568624][ T7505] usb 5-1: USB disconnect, device number 35 [ 301.589891][ T7500] usb 6-1: device descriptor read/64, error -71 [ 301.637010][ T5879] usb 1-1: device descriptor read/64, error -71 [ 301.807264][ T7500] usb usb6-port1: attempt power cycle [ 301.817144][ T5879] usb usb1-port1: attempt power cycle [ 301.876057][ T30] audit: type=1326 audit(1764104593.010:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.4.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8a118f749 code=0x0 [ 301.983467][ T8944] syzkaller1: entered promiscuous mode [ 302.005947][ T8944] syzkaller1: entered allmulticast mode [ 302.358859][ T8947] binder: 8946:8947 ioctl 4018620d 0 returned -22 [ 302.484269][ T7500] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 302.492007][ T5879] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 302.516621][ T7500] usb 6-1: device descriptor read/8, error -71 [ 302.523345][ T5879] usb 1-1: device descriptor read/8, error -71 [ 302.715481][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1056'. [ 302.725729][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1056'. [ 302.735591][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1056'. [ 302.744862][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1056'. [ 302.776793][ T7500] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 302.786162][ T5879] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 302.806917][ T7500] usb 6-1: device descriptor read/8, error -71 [ 302.813485][ T5879] usb 1-1: device descriptor read/8, error -71 [ 302.926134][ T5879] usb usb1-port1: unable to enumerate USB device [ 302.932907][ T7500] usb usb6-port1: unable to enumerate USB device [ 303.095883][ T5920] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 303.265882][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 303.272803][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.297396][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.304994][ T5920] usb 5-1: can't read configurations, error -61 [ 303.465960][ T5920] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 303.615874][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 303.623459][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.633759][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.641658][ T5920] usb 5-1: can't read configurations, error -61 [ 303.654204][ T5920] usb usb5-port1: attempt power cycle [ 303.996182][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 304.047104][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 304.058940][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.105471][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 304.119858][ T5920] usb 5-1: can't read configurations, error -61 [ 304.147776][ T8966] syzkaller1: entered promiscuous mode [ 304.153428][ T8966] syzkaller1: entered allmulticast mode [ 304.196736][ T48] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 304.256009][ T5920] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 304.335914][ T30] audit: type=1326 audit(1764104595.430:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4e58f749 code=0x0 [ 304.371320][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 304.465695][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.479040][ T48] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.490278][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 304.498283][ T48] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 304.540642][ T5920] usb 5-1: can't read configurations, error -61 [ 304.555402][ T5920] usb usb5-port1: unable to enumerate USB device [ 304.581603][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.611882][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 304.654367][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 304.732099][ T48] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.753609][ T48] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.769747][ T48] usb 4-1: Product: syz [ 304.776088][ T5879] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 304.786081][ T48] usb 4-1: Manufacturer: syz [ 304.829817][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 304.842897][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 305.024896][ T48] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.063991][ T48] cdc_wdm 4-1:1.0: Unknown control protocol [ 305.096483][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.133955][ T5879] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.143483][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.152445][ T5879] usb 6-1: Product: syz [ 305.165888][ T5879] usb 6-1: Manufacturer: syz [ 305.180748][ T5879] usb 6-1: SerialNumber: syz [ 305.202209][ T5879] usb 6-1: config 0 descriptor?? [ 305.431231][ T8978] binder: 8977:8978 ioctl 4018620d 0 returned -22 [ 306.966260][ T5879] usb 4-1: USB disconnect, device number 92 [ 307.076302][ T7505] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 307.225900][ T7505] usb 1-1: device descriptor read/64, error -71 [ 307.385895][ T7500] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 307.405889][ T5879] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 307.475894][ T7505] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 307.516685][ T7500] usb 5-1: device descriptor read/64, error -71 [ 307.575990][ T5872] usb 6-1: USB disconnect, device number 39 [ 307.606365][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 307.622883][ T5879] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 307.633573][ T5879] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 307.646202][ T7505] usb 1-1: device descriptor read/64, error -71 [ 307.657502][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.669645][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.757308][ T7500] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 307.765571][ T7505] usb usb1-port1: attempt power cycle [ 307.906042][ T7500] usb 5-1: device descriptor read/64, error -71 [ 308.026515][ T7500] usb usb5-port1: attempt power cycle [ 308.115969][ T7505] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 308.136492][ T7505] usb 1-1: device descriptor read/8, error -71 [ 308.365992][ T7500] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 308.381575][ T7505] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 308.406679][ T7500] usb 5-1: device descriptor read/8, error -71 [ 308.415252][ T7505] usb 1-1: device descriptor read/8, error -71 [ 308.529189][ T7505] usb usb1-port1: unable to enumerate USB device [ 308.666241][ T7500] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 308.696601][ T7500] usb 5-1: device descriptor read/8, error -71 [ 308.827518][ T7500] usb usb5-port1: unable to enumerate USB device [ 309.069568][ T8999] syzkaller1: entered promiscuous mode [ 309.075071][ T8999] syzkaller1: entered allmulticast mode [ 309.417032][ T7500] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 309.575877][ T7500] usb 6-1: Using ep0 maxpacket: 16 [ 309.583173][ T7500] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.594812][ T7500] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.608325][ T7500] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.615057][ T7500] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 309.624773][ T7500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.642195][ T7500] usb 6-1: config 0 descriptor?? [ 309.653002][ T7500] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 309.793385][ T9003] binder: 9002:9003 ioctl 4018620d 0 returned -22 [ 309.880164][ T7500] usb 6-1: USB disconnect, device number 40 [ 310.124402][ T7500] usb 4-1: USB disconnect, device number 93 [ 310.498598][ T7500] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 310.528075][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 310.537882][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1078'. [ 310.546933][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 310.558595][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 310.676112][ T7500] usb 4-1: Using ep0 maxpacket: 8 [ 310.694486][ T7500] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.727651][ T7500] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 310.767954][ T7500] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 310.804798][ T7500] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee [ 310.814883][ T7500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.818290][ T9022] syzkaller1: entered promiscuous mode [ 310.824266][ T7500] usb 4-1: Product: syz [ 310.838016][ T7500] usb 4-1: Manufacturer: syz [ 310.842634][ T7500] usb 4-1: SerialNumber: syz [ 310.849090][ T9021] binder: BINDER_SET_CONTEXT_MGR already set [ 310.855347][ T9021] binder: 9019:9021 ioctl 4018620d 200000000040 returned -16 [ 310.858877][ T9022] syzkaller1: entered allmulticast mode [ 310.881325][ T9021] binder: 9019:9021 ioctl c0306201 200000000240 returned -11 [ 311.107442][ T7500] usb 4-1: USB disconnect, device number 94 [ 311.236275][ T5872] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 311.265939][ T8757] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 311.365866][ T5879] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 311.396593][ T5872] usb 5-1: no configurations [ 311.401546][ T5872] usb 5-1: can't read configurations, error -22 [ 311.405933][ T8757] usb 6-1: device descriptor read/64, error -71 [ 311.515913][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 311.525407][ T5879] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 311.534290][ T5879] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 311.546725][ T5872] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 311.554412][ T5879] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.564808][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.645918][ T8757] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 311.730267][ T5872] usb 5-1: no configurations [ 311.734978][ T5872] usb 5-1: can't read configurations, error -22 [ 311.742223][ T5872] usb usb5-port1: attempt power cycle [ 311.786062][ T8757] usb 6-1: device descriptor read/64, error -71 [ 311.906122][ T8757] usb usb6-port1: attempt power cycle [ 311.955856][ T5879] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 312.085975][ T5872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 312.109007][ T5872] usb 5-1: no configurations [ 312.113650][ T5872] usb 5-1: can't read configurations, error -22 [ 312.120501][ T5879] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.132900][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.140782][ T5879] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 312.150370][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.161677][ T5879] usb 4-1: config 0 descriptor?? [ 312.245898][ T8757] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 312.267080][ T5872] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 312.275155][ T8757] usb 6-1: device descriptor read/8, error -71 [ 312.287010][ T5872] usb 5-1: no configurations [ 312.291650][ T5872] usb 5-1: can't read configurations, error -22 [ 312.302817][ T5872] usb usb5-port1: unable to enumerate USB device [ 312.525916][ T8757] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 312.546998][ T8757] usb 6-1: device descriptor read/8, error -71 [ 312.657513][ T8757] usb usb6-port1: unable to enumerate USB device [ 312.734253][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 312.746736][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.765226][ T5879] usb 4-1: USB disconnect, device number 95 [ 313.565887][ T7500] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 313.716792][ T7500] usb 4-1: Using ep0 maxpacket: 32 [ 313.724724][ T7500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 313.739448][ T7500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 313.749647][ T7500] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 313.761621][ T7500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 313.778975][ T7500] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 313.788547][ T7500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.796877][ T7500] usb 4-1: Product: syz [ 313.801279][ T7500] usb 4-1: Manufacturer: syz [ 313.806297][ T7500] usb 4-1: SerialNumber: syz [ 313.814861][ T7500] usb 4-1: config 0 descriptor?? [ 313.833889][ T7500] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 313.847261][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.867193][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.896600][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.926933][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.976101][ T6247] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.998923][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 314.035606][ T7500] usb 4-1: USB disconnect, device number 96 [ 314.115456][ T9041] binder: BINDER_SET_CONTEXT_MGR already set [ 314.127916][ T9041] binder: 9040:9041 ioctl 4018620d 200000004a80 returned -16 [ 314.145928][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 314.165849][ T9043] binder: BINDER_SET_CONTEXT_MGR already set [ 314.180106][ T9043] binder: 9042:9043 ioctl 4018620d 200000000040 returned -16 [ 314.190673][ T9043] binder: 9042:9043 ioctl c0306201 200000000240 returned -11 [ 314.195163][ T8757] usb 1-1: USB disconnect, device number 105 [ 314.323392][ T9047] syzkaller1: entered promiscuous mode [ 314.329662][ T9047] syzkaller1: entered allmulticast mode [ 314.815872][ T8757] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 314.895978][ T3095] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 315.004092][ T8757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.061031][ T8757] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.081539][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 315.213975][ T3095] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.230291][ T8757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.243120][ T3095] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 315.264208][ T8757] usb 1-1: Product: syz [ 315.271232][ T3095] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 315.281893][ T8757] usb 1-1: Manufacturer: syz [ 315.291291][ T8757] usb 1-1: SerialNumber: syz [ 315.310947][ T3095] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee [ 315.324381][ T8757] usb 1-1: config 0 descriptor?? [ 315.330003][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.343940][ T3095] usb 4-1: Product: syz [ 315.356077][ T3095] usb 4-1: Manufacturer: syz [ 315.360718][ T3095] usb 4-1: SerialNumber: syz [ 315.375864][ T5813] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 315.445926][ T9065] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 315.576591][ T5813] usb 5-1: no configurations [ 315.581281][ T5813] usb 5-1: can't read configurations, error -22 [ 315.587770][ T9065] usb 6-1: device descriptor read/64, error -71 [ 315.632894][ T3095] usb 4-1: USB disconnect, device number 97 [ 315.725927][ T5813] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.825883][ T9065] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 315.877625][ T5813] usb 5-1: no configurations [ 315.883460][ T5813] usb 5-1: can't read configurations, error -22 [ 315.890821][ T5813] usb usb5-port1: attempt power cycle [ 315.955877][ T9065] usb 6-1: device descriptor read/64, error -71 [ 316.066319][ T9065] usb usb6-port1: attempt power cycle [ 316.245946][ T5813] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 316.267260][ T5813] usb 5-1: no configurations [ 316.271950][ T5813] usb 5-1: can't read configurations, error -22 [ 316.410799][ T5813] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 316.418661][ T3095] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 316.426292][ T9065] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 316.457236][ T5813] usb 5-1: no configurations [ 316.461865][ T5813] usb 5-1: can't read configurations, error -22 [ 316.468948][ T9065] usb 6-1: device descriptor read/8, error -71 [ 316.476417][ T5813] usb usb5-port1: unable to enumerate USB device [ 316.586003][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 316.593879][ T3095] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 316.603947][ T3095] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 316.614684][ T3095] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.624098][ T3095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.706369][ T9065] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 316.726749][ T9065] usb 6-1: device descriptor read/8, error -71 [ 316.836983][ T9065] usb usb6-port1: unable to enumerate USB device [ 317.197021][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.203639][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.336606][ T3095] usb 1-1: USB disconnect, device number 106 [ 317.464657][ T9070] binder_alloc: 9069: binder_alloc_buf, no vma [ 317.473023][ T9070] binder: 9069:9070 ioctl c0306201 200000000240 returned -11 [ 317.875875][ T3095] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 318.035904][ T3095] usb 1-1: Using ep0 maxpacket: 32 [ 318.043248][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 318.065231][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 318.083940][ T3095] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 318.115959][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 318.142418][ T3095] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 318.158536][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.167830][ T3095] usb 1-1: Product: syz [ 318.172190][ T3095] usb 1-1: Manufacturer: syz [ 318.186934][ T3095] usb 1-1: SerialNumber: syz [ 318.199198][ T3095] usb 1-1: config 0 descriptor?? [ 318.224971][ T3095] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 318.250865][ T5180] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 318.278613][ T5180] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 318.314659][ T5180] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 318.332585][ T5180] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 318.391487][ T6247] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 318.430973][ T3095] usb 1-1: USB disconnect, device number 107 [ 318.511533][ T9080] binder: BINDER_SET_CONTEXT_MGR already set [ 318.521033][ T9080] binder: 9079:9080 ioctl 4018620d 200000004a80 returned -16 [ 318.545928][ T5879] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 318.675876][ T5879] usb 6-1: device descriptor read/64, error -71 [ 318.925891][ T5879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 319.078303][ T5879] usb 6-1: device descriptor read/64, error -71 [ 319.192058][ T794] usb 4-1: USB disconnect, device number 98 [ 319.198410][ T5879] usb usb6-port1: attempt power cycle [ 319.271688][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 319.325887][ T3095] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 319.495868][ T3095] usb 1-1: Using ep0 maxpacket: 8 [ 319.502783][ T3095] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.512402][ T3095] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 319.522957][ T3095] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 319.535219][ T3095] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee [ 319.545302][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.553762][ T3095] usb 1-1: Product: syz [ 319.555872][ T5879] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 319.558309][ T3095] usb 1-1: Manufacturer: syz [ 319.574440][ T3095] usb 1-1: SerialNumber: syz [ 319.587364][ T5879] usb 6-1: device descriptor read/8, error -71 [ 319.678347][ T5813] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 319.715891][ T5872] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 319.799326][ T3095] usb 1-1: USB disconnect, device number 108 [ 319.826185][ T5879] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 319.857598][ T5813] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.872323][ T5879] usb 6-1: device descriptor read/8, error -71 [ 319.872571][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.885891][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 319.892735][ T5813] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 319.892895][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.904075][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.927575][ T5813] usb 5-1: config 0 descriptor?? [ 319.928947][ T5872] usb 4-1: config index 0 descriptor too short (expected 51, got 18) [ 319.955870][ T5872] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 319.963967][ T5872] usb 4-1: config 4 has no interface number 0 [ 319.970236][ T5872] usb 4-1: config 4 interface 30 has no altsetting 0 [ 319.980362][ T5872] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 319.989630][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.998043][ T5879] usb usb6-port1: unable to enumerate USB device [ 320.004522][ T5872] usb 4-1: Product: syz [ 320.010027][ T5872] usb 4-1: Manufacturer: syz [ 320.014644][ T5872] usb 4-1: SerialNumber: syz [ 320.236524][ T5872] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 320.247773][ T5872] dw2102: su3000_power_ctrl: 1, initialized 0 [ 320.253884][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 320.267506][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 320.277966][ T5872] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 320.286339][ T5872] usb 4-1: media controller created [ 320.291820][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.297789][ T5872] dw2102: i2c transfer failed. [ 320.302803][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.308587][ T5872] dw2102: i2c transfer failed. [ 320.313583][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.319403][ T5872] dw2102: i2c transfer failed. [ 320.325908][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.331643][ T5872] dw2102: i2c transfer failed. [ 320.357066][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.369527][ T5872] dw2102: i2c transfer failed. [ 320.397518][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 320.403268][ T5872] dw2102: i2c transfer failed. [ 320.435432][ T5872] dvb-usb: MAC address: 02:02:02:02:02:02 [ 320.458867][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.516393][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 320.522378][ T5872] dw2102: command 0x0e transfer failed. [ 320.531140][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 320.544090][ T5872] dw2102: command 0x0e transfer failed. [ 320.545045][ T5813] usbhid 5-1:0.0: can't add hid device: -71 [ 320.576234][ T5813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.600621][ T5813] usb 5-1: USB disconnect, device number 52 [ 320.705926][ T5879] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 320.858575][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 320.876015][ T5872] dw2102: command 0x0e transfer failed. [ 320.882271][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 320.888783][ T5879] usb 1-1: no configurations [ 320.896285][ T5879] usb 1-1: can't read configurations, error -22 [ 320.916375][ T5872] dw2102: command 0x0e transfer failed. [ 320.921954][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 320.935966][ T5872] dw2102: command 0x51 transfer failed. [ 320.944416][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 320.951884][ T5872] dw2102: i2c probe for address 0x68 failed. [ 320.963499][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 320.970254][ T5872] dw2102: i2c probe for address 0x69 failed. [ 320.976562][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 320.982299][ T5872] dw2102: i2c probe for address 0x6a failed. [ 320.988548][ T5872] dw2102: probing for demodulator failed. Is the external power switched on? [ 320.997886][ T5872] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 321.057730][ T5879] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 321.078463][ T5872] rc_core: IR keymap rc-tt-1500 not found [ 321.088166][ T5872] Registered IR keymap rc-empty [ 321.094775][ T5872] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 321.108720][ T5872] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input45 [ 321.127406][ T5872] dvb-usb: schedule remote query interval to 250 msecs. [ 321.145285][ T5872] dw2102: su3000_power_ctrl: 0, initialized 1 [ 321.158962][ T5872] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 321.178408][ T5872] usb 4-1: USB disconnect, device number 99 [ 321.217450][ T5879] usb 1-1: no configurations [ 321.226934][ T5879] usb 1-1: can't read configurations, error -22 [ 321.251163][ T5879] usb usb1-port1: attempt power cycle [ 321.313918][ T9105] binder: BINDER_SET_CONTEXT_MGR already set [ 321.320771][ T9105] binder: 9104:9105 ioctl 4018620d 200000004a80 returned -16 [ 321.321989][ T5872] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 321.605929][ T5879] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 321.626984][ T5879] usb 1-1: no configurations [ 321.631635][ T5879] usb 1-1: can't read configurations, error -22 [ 321.655949][ T5872] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 321.685966][ T5813] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 321.765923][ T5879] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 321.787590][ T5879] usb 1-1: no configurations [ 321.792273][ T5879] usb 1-1: can't read configurations, error -22 [ 321.802238][ T5879] usb usb1-port1: unable to enumerate USB device [ 321.808728][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 321.817191][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 321.830002][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 321.842811][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 321.845872][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 321.854964][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 321.873561][ T5872] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 321.886751][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.887882][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 321.894875][ T5872] usb 4-1: Product: syz [ 321.910688][ T5813] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 321.910857][ T5872] usb 4-1: Manufacturer: syz [ 321.927233][ T5872] usb 4-1: SerialNumber: syz [ 321.932426][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.949229][ T5872] usb 4-1: config 0 descriptor?? [ 321.964146][ T5872] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input46 [ 321.965872][ T5813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.983333][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.992003][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.004562][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.021870][ T5813] usbtmc 6-1:16.0: bulk endpoints not found [ 322.049405][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.068294][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.118071][ T6247] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.139535][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 322.193796][ T5872] usb 4-1: USB disconnect, device number 100 [ 322.675888][ T5916] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 322.825884][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 322.833638][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.846939][ T5916] usb 5-1: config index 0 descriptor too short (expected 51, got 18) [ 322.855299][ T5916] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 322.864712][ T5916] usb 5-1: config 4 has no interface number 0 [ 322.872099][ T5916] usb 5-1: config 4 interface 30 has no altsetting 0 [ 322.881914][ T5916] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 322.891508][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.899921][ T5916] usb 5-1: Product: syz [ 322.904244][ T5916] usb 5-1: Manufacturer: syz [ 322.912143][ T5916] usb 5-1: SerialNumber: syz [ 323.015981][ T5813] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 323.140396][ T5916] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 323.148071][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 323.155595][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 323.166720][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.176287][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 323.187411][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.196157][ T5916] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 323.204609][ T5813] usb 4-1: config 0 has no interface number 0 [ 323.210996][ T5916] usb 5-1: media controller created [ 323.216345][ T5813] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 323.227362][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.233311][ T5916] dw2102: i2c transfer failed. [ 323.238283][ T5813] usb 4-1: config 0 interface 1 has no altsetting 0 [ 323.245018][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.254491][ T5916] dw2102: i2c transfer failed. [ 323.260051][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.266287][ T5916] dw2102: i2c transfer failed. [ 323.271818][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.278084][ T5916] dw2102: i2c transfer failed. [ 323.283193][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.283462][ T5813] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 323.299590][ T5916] dw2102: i2c transfer failed. [ 323.304383][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 323.311346][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.319381][ T5916] dw2102: i2c transfer failed. [ 323.324355][ T5813] usb 4-1: Product: syz [ 323.328567][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 323.334557][ T5813] usb 4-1: Manufacturer: syz [ 323.339417][ T5813] usb 4-1: SerialNumber: syz [ 323.360392][ T5813] usb 4-1: config 0 descriptor?? [ 323.371400][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.397636][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 323.403621][ T5916] dw2102: command 0x0e transfer failed. [ 323.410664][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 323.417842][ T5916] dw2102: command 0x0e transfer failed. [ 323.605114][ T5813] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 323.619977][ T5813] cx231xx 4-1:0.1: Failed to read PCB config [ 323.629045][ T5813] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 323.655927][ T5813] usb 4-1: USB disconnect, device number 101 [ 323.729052][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 323.751503][ T5916] dw2102: command 0x0e transfer failed. [ 323.774961][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 323.797123][ T5916] dw2102: command 0x0e transfer failed. [ 323.805703][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 323.812053][ T5916] dw2102: command 0x51 transfer failed. [ 323.829819][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 323.848500][ T5916] dw2102: i2c probe for address 0x68 failed. [ 323.855188][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 323.861441][ T5916] dw2102: i2c probe for address 0x69 failed. [ 323.868832][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 323.874707][ T5916] dw2102: i2c probe for address 0x6a failed. [ 323.881597][ T5916] dw2102: probing for demodulator failed. Is the external power switched on? [ 323.892062][ T5916] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 323.978903][ T5916] rc_core: IR keymap rc-tt-1500 not found [ 323.982157][ T9129] binder: 9128:9129 ioctl c0306201 0 returned -14 [ 323.990193][ T5916] Registered IR keymap rc-empty [ 324.007199][ T5916] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 324.020331][ T5916] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input47 [ 324.032765][ T5916] dvb-usb: schedule remote query interval to 250 msecs. [ 324.040193][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 324.046493][ T5916] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 324.064828][ T5916] usb 5-1: USB disconnect, device number 53 [ 324.068072][ T5879] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 324.146197][ T5813] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 324.157307][ T5916] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 324.225935][ T5879] usb 1-1: device descriptor read/64, error -71 [ 324.305857][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 324.315658][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.324239][ T5813] usb 4-1: config 0 has no interface number 0 [ 324.331101][ T5813] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 324.343176][ T5813] usb 4-1: config 0 interface 1 has no altsetting 0 [ 324.358779][ T5813] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 324.376789][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.395253][ T5916] usb 6-1: USB disconnect, device number 53 [ 324.405818][ T5813] usb 4-1: Product: syz [ 324.421080][ T5813] usb 4-1: Manufacturer: syz [ 324.432057][ T5813] usb 4-1: SerialNumber: syz [ 324.449078][ T5813] usb 4-1: config 0 descriptor?? [ 324.466549][ T5879] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 324.606025][ T5879] usb 1-1: device descriptor read/64, error -71 [ 324.661813][ T5813] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 324.675207][ T5813] cx231xx 4-1:0.1: Failed to read PCB config [ 324.682724][ T5813] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 324.706824][ T5813] usb 4-1: USB disconnect, device number 102 [ 324.735752][ T5879] usb usb1-port1: attempt power cycle [ 325.016766][ T794] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 325.075993][ T5879] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 325.098485][ T5879] usb 1-1: device descriptor read/8, error -71 [ 325.155962][ T5872] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 325.168864][ T794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.179249][ T794] usb 6-1: config 0 has no interfaces? [ 325.188968][ T794] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 325.198319][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.208984][ T794] usb 6-1: Product: syz [ 325.213162][ T794] usb 6-1: Manufacturer: syz [ 325.218198][ T794] usb 6-1: SerialNumber: syz [ 325.231596][ T794] usb 6-1: config 0 descriptor?? [ 325.306358][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 325.326648][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.335906][ T5879] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 325.360249][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 325.375323][ T5872] usb 5-1: can't read configurations, error -71 [ 325.386595][ T5879] usb 1-1: device descriptor read/8, error -71 [ 325.465236][ T9147] loop8: detected capacity change from 0 to 8 [ 325.472577][ T5813] usb 6-1: USB disconnect, device number 54 [ 325.496518][ T5830] Dev loop8: unable to read RDB block 8 [ 325.507152][ T5879] usb usb1-port1: unable to enumerate USB device [ 325.509788][ T5830] loop8: unable to read partition table [ 325.519572][ T5830] loop8: partition table beyond EOD, truncated [ 325.530059][ T9147] Dev loop8: unable to read RDB block 8 [ 325.535659][ T9147] loop8: unable to read partition table [ 325.544082][ T9147] loop8: partition table beyond EOD, truncated [ 325.555969][ T9147] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 325.660611][ T9149] binder: BINDER_SET_CONTEXT_MGR already set [ 325.666675][ T9149] binder: 9148:9149 ioctl 4018620d 200000000040 returned -16 [ 325.675073][ T9149] binder: 9148:9149 ioctl c0306201 200000000240 returned -11 [ 325.741814][ T9151] loop6: detected capacity change from 0 to 2560 [ 325.752168][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.760570][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.769491][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.777843][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.786126][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.794174][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.809057][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.829386][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.838320][ T5830] ldm_validate_partition_table(): Disk read failed. [ 325.844985][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.854461][ T5830] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.862871][ T5830] Dev loop6: unable to read RDB block 0 [ 325.869380][ T5830] loop6: unable to read partition table [ 325.876928][ T9151] ldm_validate_partition_table(): Disk read failed. [ 325.897015][ T9151] Dev loop6: unable to read RDB block 0 [ 325.904021][ T9151] loop6: unable to read partition table [ 325.926267][ T9151] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 325.940902][ T5195] ldm_validate_partition_table(): Disk read failed. [ 325.949989][ T5195] Dev loop6: unable to read RDB block 0 [ 325.956671][ T5195] loop6: unable to read partition table [ 326.114816][ T9158] binder: 9155:9158 ioctl c0306201 0 returned -14 [ 326.414254][ T9168] binder: BINDER_SET_CONTEXT_MGR already set [ 326.421363][ T9168] binder: 9167:9168 ioctl 4018620d 200000000040 returned -16 [ 326.431949][ T9168] binder: 9167:9168 ioctl c0306201 200000000240 returned -11 [ 326.435945][ T5872] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 326.615904][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 326.623359][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.642726][ T5872] usb 5-1: config 0 has no interface number 0 [ 326.649140][ T5872] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 326.660129][ T5872] usb 5-1: config 0 interface 1 has no altsetting 0 [ 326.670586][ T5872] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 326.680351][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.688473][ T5872] usb 5-1: Product: syz [ 326.693041][ T5872] usb 5-1: Manufacturer: syz [ 326.700167][ T5872] usb 5-1: SerialNumber: syz [ 326.715731][ T5872] usb 5-1: config 0 descriptor?? [ 326.735973][ T5879] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 326.906656][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 326.921568][ T5879] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.951392][ T5872] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 326.966259][ T5879] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 326.975234][ T5879] usb 6-1: can't read configurations, error -71 [ 326.981876][ T5872] cx231xx 5-1:0.1: Failed to read PCB config [ 326.989333][ T5872] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 327.001519][ T5872] usb 5-1: USB disconnect, device number 55 [ 327.355891][ T794] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 327.476053][ T5872] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 327.525930][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.545868][ T794] usb 4-1: config 0 has no interfaces? [ 327.554896][ T794] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 327.573117][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.591552][ T794] usb 4-1: Product: syz [ 327.595759][ T794] usb 4-1: Manufacturer: syz [ 327.610531][ T794] usb 4-1: SerialNumber: syz [ 327.628662][ T794] usb 4-1: config 0 descriptor?? [ 327.646305][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 327.655434][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.664180][ T5872] usb 5-1: config 0 has no interface number 0 [ 327.695937][ T5872] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 327.726620][ T5872] usb 5-1: config 0 interface 1 has no altsetting 0 [ 327.757453][ T5872] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 327.775990][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.784030][ T5872] usb 5-1: Product: syz [ 327.806158][ T5872] usb 5-1: Manufacturer: syz [ 327.810790][ T5872] usb 5-1: SerialNumber: syz [ 327.837629][ T5872] usb 5-1: config 0 descriptor?? [ 327.860967][ T794] usb 4-1: USB disconnect, device number 103 [ 328.055297][ T5872] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 328.088102][ T5872] cx231xx 5-1:0.1: Failed to read PCB config [ 328.094157][ T5872] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 328.106589][ T9191] binder: BINDER_SET_CONTEXT_MGR already set [ 328.112595][ T9191] binder: 9190:9191 ioctl 4018620d 200000000040 returned -16 [ 328.139175][ T9191] binder: 9190:9191 ioctl c0306201 200000000240 returned -11 [ 328.158399][ T5872] usb 5-1: USB disconnect, device number 56 [ 328.348984][ T9195] binder: 9194:9195 ioctl c0306201 0 returned -14 [ 328.476260][ T5813] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 328.615881][ T5813] usb 6-1: device descriptor read/64, error -71 [ 328.770000][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.780955][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.791902][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.801753][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.855894][ T5813] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 328.887699][ T5872] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 328.952453][ T9211] binder: 9210:9211 ioctl c0306201 200000000240 returned -11 [ 329.005894][ T5813] usb 6-1: device descriptor read/64, error -71 [ 329.055951][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 329.081271][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.099700][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 329.107759][ T5872] usb 5-1: can't read configurations, error -71 [ 329.116330][ T5813] usb usb6-port1: attempt power cycle [ 329.315896][ T9183] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 329.456193][ T5813] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 329.490203][ T9183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.501273][ T5813] usb 6-1: device descriptor read/8, error -71 [ 329.513165][ T9183] usb 4-1: config 0 has no interfaces? [ 329.538632][ T9183] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 329.547938][ T9183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.556416][ T9183] usb 4-1: Product: syz [ 329.560587][ T9183] usb 4-1: Manufacturer: syz [ 329.565182][ T9183] usb 4-1: SerialNumber: syz [ 329.572754][ T9183] usb 4-1: config 0 descriptor?? [ 329.735876][ T48] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 329.765879][ T5813] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 329.789141][ T9183] usb 4-1: USB disconnect, device number 104 [ 329.806357][ T5813] usb 6-1: device descriptor read/8, error -71 [ 329.905901][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 329.914210][ T48] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.922796][ T5813] usb usb6-port1: unable to enumerate USB device [ 329.931418][ T48] usb 1-1: config 0 has no interface number 0 [ 329.938566][ T48] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 329.952405][ T48] usb 1-1: config 0 interface 1 has no altsetting 0 [ 329.963711][ T48] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 329.973205][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.981397][ T48] usb 1-1: Product: syz [ 329.986022][ T48] usb 1-1: Manufacturer: syz [ 329.990621][ T48] usb 1-1: SerialNumber: syz [ 329.999475][ T48] usb 1-1: config 0 descriptor?? [ 330.146290][ T5872] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 330.227040][ T48] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 330.237668][ T48] cx231xx 1-1:0.1: Failed to read PCB config [ 330.243720][ T48] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 330.255215][ T48] usb 1-1: USB disconnect, device number 117 [ 330.295868][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 330.316273][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.332257][ T5872] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.365908][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.372566][ T5872] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 330.395866][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.416884][ T5872] usb 5-1: config 0 descriptor?? [ 330.433811][ T9230] binder: 9229:9230 ioctl c0306201 200000000240 returned -11 [ 330.437510][ T5872] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 330.654317][ T5813] usb 5-1: USB disconnect, device number 58 [ 330.745942][ T48] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 330.915849][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 330.926878][ T48] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.937866][ T48] usb 1-1: config 0 has no interface number 0 [ 330.944018][ T48] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 330.955235][ T48] usb 1-1: config 0 interface 1 has no altsetting 0 [ 330.977753][ T48] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 330.987883][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.998843][ T48] usb 1-1: Product: syz [ 331.003153][ T48] usb 1-1: Manufacturer: syz [ 331.008358][ T48] usb 1-1: SerialNumber: syz [ 331.025993][ T48] usb 1-1: config 0 descriptor?? [ 331.251449][ T48] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 331.273446][ T48] cx231xx 1-1:0.1: Failed to read PCB config [ 331.280330][ T48] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 331.292149][ T48] usb 1-1: USB disconnect, device number 118 [ 331.310934][ T9244] loop6: detected capacity change from 0 to 2560 [ 331.320557][ T9244] buffer_io_error: 43 callbacks suppressed [ 331.320572][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.350539][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.390397][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.416258][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.436218][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.444185][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.495952][ T3095] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 331.496021][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.544615][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.554250][ T9244] ldm_validate_partition_table(): Disk read failed. [ 331.561478][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.569698][ T9244] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.579149][ T9244] Dev loop6: unable to read RDB block 0 [ 331.585178][ T9244] loop6: unable to read partition table [ 331.611903][ T9244] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 331.653169][ T5195] ldm_validate_partition_table(): Disk read failed. [ 331.660400][ T5195] Dev loop6: unable to read RDB block 0 [ 331.666382][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 331.667248][ T5195] loop6: unable to read partition table [ 331.673585][ T3095] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.707278][ T3095] usb 4-1: config index 0 descriptor too short (expected 51, got 18) [ 331.715392][ T3095] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 331.734069][ T3095] usb 4-1: config 4 has no interface number 0 [ 331.753551][ T3095] usb 4-1: config 4 interface 30 has no altsetting 0 [ 331.781105][ T3095] usb 4-1: string descriptor 0 read error: -22 [ 331.787641][ T48] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 331.796136][ T3095] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 331.805218][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.833453][ T3095] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 331.851423][ T3095] dw2102: su3000_power_ctrl: 1, initialized 0 [ 331.860893][ T3095] dvb-usb: bulk message failed: -22 (2/0) [ 331.888975][ T3095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.918529][ T3095] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 331.922202][ T9253] binder: 9252:9253 ioctl c0306201 200000000240 returned -11 [ 331.926571][ T3095] usb 4-1: media controller created [ 331.939498][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 331.945235][ T3095] dw2102: i2c transfer failed. [ 331.950323][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 331.963568][ T3095] dw2102: i2c transfer failed. [ 331.968592][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 331.974665][ T3095] dw2102: i2c transfer failed. [ 331.980408][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 331.986822][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.004849][ T48] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.014112][ T3095] dw2102: i2c transfer failed. [ 332.033453][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 332.049420][ T48] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 332.061704][ T3095] dw2102: i2c transfer failed. [ 332.072449][ T3095] dvb-usb: bulk message failed: -22 (6/0) [ 332.078598][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.086778][ T3095] dw2102: i2c transfer failed. [ 332.091561][ T3095] dvb-usb: MAC address: 02:02:02:02:02:02 [ 332.097711][ T48] usb 6-1: Product: syz [ 332.101896][ T48] usb 6-1: Manufacturer: syz [ 332.107826][ T48] usb 6-1: SerialNumber: syz [ 332.126896][ T48] usb 6-1: config 0 descriptor?? [ 332.150306][ T3095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.200101][ T3095] dvb-usb: bulk message failed: -22 (3/0) [ 332.213730][ T3095] dw2102: command 0x0e transfer failed. [ 332.233135][ T3095] dvb-usb: bulk message failed: -22 (3/0) [ 332.239158][ T3095] dw2102: command 0x0e transfer failed. [ 332.366212][ T48] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 332.380192][ T5916] usb 6-1: USB disconnect, device number 61 [ 332.535868][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 332.556991][ T3095] dvb-usb: bulk message failed: -22 (3/0) [ 332.563571][ T3095] dw2102: command 0x0e transfer failed. [ 332.570848][ T3095] dvb-usb: bulk message failed: -22 (3/0) [ 332.577489][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.588552][ T9065] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 332.607143][ T48] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.621375][ T3095] dw2102: command 0x0e transfer failed. [ 332.627822][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 332.634232][ T3095] dw2102: command 0x51 transfer failed. [ 332.640428][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.647342][ T3095] dvb-usb: bulk message failed: -22 (5/0) [ 332.653077][ T3095] dw2102: i2c probe for address 0x68 failed. [ 332.659374][ T48] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 332.668659][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.678408][ T3095] dvb-usb: bulk message failed: -22 (5/0) [ 332.684237][ T3095] dw2102: i2c probe for address 0x69 failed. [ 332.694559][ T48] usb 5-1: config 0 descriptor?? [ 332.705927][ T3095] dvb-usb: bulk message failed: -22 (5/0) [ 332.711773][ T3095] dw2102: i2c probe for address 0x6a failed. [ 332.722591][ T48] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 332.732260][ T3095] dw2102: probing for demodulator failed. Is the external power switched on? [ 332.753220][ T3095] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 332.761141][ T9065] usb 1-1: device descriptor read/64, error -71 [ 332.836980][ T3095] rc_core: IR keymap rc-tt-1500 not found [ 332.842986][ T3095] Registered IR keymap rc-empty [ 332.855732][ T3095] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 332.871904][ T3095] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input48 [ 332.912597][ T3095] dvb-usb: schedule remote query interval to 250 msecs. [ 332.935891][ T3095] dw2102: su3000_power_ctrl: 0, initialized 1 [ 332.950176][ T3095] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 332.975521][ T3095] usb 4-1: USB disconnect, device number 105 [ 333.008773][ T9065] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 333.026212][ T9270] netlink: 'syz.3.1189': attribute type 5 has an invalid length. [ 333.058727][ T5872] usb 5-1: USB disconnect, device number 59 [ 333.115000][ T3095] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 333.159677][ T9065] usb 1-1: device descriptor read/64, error -71 [ 333.198516][ T9273] loop6: detected capacity change from 0 to 2560 [ 333.216293][ T9273] ldm_validate_partition_table(): Disk read failed. [ 333.223170][ T9273] Dev loop6: unable to read RDB block 0 [ 333.230136][ T9273] loop6: unable to read partition table [ 333.255876][ T9273] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 333.286250][ T9065] usb usb1-port1: attempt power cycle [ 333.315279][ T5195] ldm_validate_partition_table(): Disk read failed. [ 333.322571][ T5195] Dev loop6: unable to read RDB block 0 [ 333.334961][ T5195] loop6: unable to read partition table [ 333.486336][ T3095] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 333.503998][ T9279] binder: BINDER_SET_CONTEXT_MGR already set [ 333.513375][ T9279] binder: 9278:9279 ioctl 4018620d 200000000040 returned -16 [ 333.522857][ T9279] binder: 9278:9279 ioctl c0306201 200000000240 returned -11 [ 333.645874][ T3095] usb 4-1: Using ep0 maxpacket: 32 [ 333.651128][ T9065] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 333.664458][ T3095] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.677463][ T9065] usb 1-1: device descriptor read/8, error -71 [ 333.686116][ T3095] usb 4-1: config 0 has no interface number 0 [ 333.702636][ T3095] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 333.723795][ T3095] usb 4-1: config 0 interface 1 has no altsetting 0 [ 333.745441][ T3095] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 333.755846][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.764030][ T3095] usb 4-1: Product: syz [ 333.768461][ T3095] usb 4-1: Manufacturer: syz [ 333.773063][ T3095] usb 4-1: SerialNumber: syz [ 333.786980][ T3095] usb 4-1: config 0 descriptor?? [ 333.886228][ T794] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 333.945917][ T9065] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 333.967277][ T9065] usb 1-1: device descriptor read/8, error -71 [ 334.007935][ T3095] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 334.018263][ T3095] cx231xx 4-1:0.1: Failed to read PCB config [ 334.024313][ T3095] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 334.042241][ T3095] usb 4-1: USB disconnect, device number 106 [ 334.056320][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 334.076426][ T9065] usb usb1-port1: unable to enumerate USB device [ 334.077827][ T794] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.095949][ T5813] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 334.107072][ T794] usb 5-1: config index 0 descriptor too short (expected 51, got 18) [ 334.116185][ T794] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 334.124271][ T794] usb 5-1: config 4 has no interface number 0 [ 334.131439][ T794] usb 5-1: config 4 interface 30 has no altsetting 0 [ 334.140988][ T794] usb 5-1: string descriptor 0 read error: -22 [ 334.147457][ T794] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 334.156580][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.172765][ T794] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 334.180903][ T794] dw2102: su3000_power_ctrl: 1, initialized 0 [ 334.187595][ T794] dvb-usb: bulk message failed: -22 (2/0) [ 334.197470][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.231073][ T794] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 334.239149][ T794] usb 5-1: media controller created [ 334.244372][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.248015][ T5813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.250216][ T794] dw2102: i2c transfer failed. [ 334.266887][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.270423][ T5813] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.272609][ T794] dw2102: i2c transfer failed. [ 334.287453][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.293187][ T794] dw2102: i2c transfer failed. [ 334.298122][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.298584][ T5813] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 334.303905][ T794] dw2102: i2c transfer failed. [ 334.303928][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.325955][ T794] dw2102: i2c transfer failed. [ 334.330745][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 334.335840][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.337773][ T794] dw2102: i2c transfer failed. [ 334.344440][ T5813] usb 6-1: Product: syz [ 334.349783][ T794] dvb-usb: MAC address: 02:02:02:02:02:02 [ 334.365855][ T5813] usb 6-1: Manufacturer: syz [ 334.370472][ T5813] usb 6-1: SerialNumber: syz [ 334.383479][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.388381][ T5813] usb 6-1: config 0 descriptor?? [ 334.424069][ T794] dvb-usb: bulk message failed: -22 (3/0) [ 334.443641][ T794] dw2102: command 0x0e transfer failed. [ 334.452367][ T794] dvb-usb: bulk message failed: -22 (3/0) [ 334.458710][ T794] dw2102: command 0x0e transfer failed. [ 334.515902][ T3095] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 334.635113][ T5813] usb 6-1: USB disconnect, device number 62 [ 334.665886][ T3095] usb 4-1: Using ep0 maxpacket: 32 [ 334.679555][ T3095] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.687918][ T3095] usb 4-1: config 0 has no interface number 0 [ 334.694057][ T3095] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 334.705317][ T3095] usb 4-1: config 0 interface 1 has no altsetting 0 [ 334.714902][ T3095] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 334.728291][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.738792][ T3095] usb 4-1: Product: syz [ 334.742966][ T3095] usb 4-1: Manufacturer: syz [ 334.748095][ T3095] usb 4-1: SerialNumber: syz [ 334.755481][ T3095] usb 4-1: config 0 descriptor?? [ 334.765900][ T794] dvb-usb: bulk message failed: -22 (3/0) [ 334.771712][ T794] dw2102: command 0x0e transfer failed. [ 334.779889][ T794] dvb-usb: bulk message failed: -22 (3/0) [ 334.785703][ T794] dw2102: command 0x0e transfer failed. [ 334.793299][ T794] dvb-usb: bulk message failed: -22 (1/0) [ 334.800073][ T794] dw2102: command 0x51 transfer failed. [ 334.805624][ T794] dvb-usb: bulk message failed: -22 (5/0) [ 334.811989][ T794] dw2102: i2c probe for address 0x68 failed. [ 334.818256][ T794] dvb-usb: bulk message failed: -22 (5/0) [ 334.824055][ T794] dw2102: i2c probe for address 0x69 failed. [ 334.831651][ T794] dvb-usb: bulk message failed: -22 (5/0) [ 334.837742][ T794] dw2102: i2c probe for address 0x6a failed. [ 334.843725][ T794] dw2102: probing for demodulator failed. Is the external power switched on? [ 334.854867][ T794] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 334.953735][ T794] rc_core: IR keymap rc-tt-1500 not found [ 334.964758][ T794] Registered IR keymap rc-empty [ 334.976338][ T794] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 334.977787][ T3095] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 335.016214][ T3095] cx231xx 4-1:0.1: Failed to read PCB config [ 335.018762][ T794] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input49 [ 335.046722][ T3095] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 335.057529][ T794] dvb-usb: schedule remote query interval to 250 msecs. [ 335.073057][ T3095] usb 4-1: USB disconnect, device number 107 [ 335.085875][ T794] dw2102: su3000_power_ctrl: 0, initialized 1 [ 335.091970][ T794] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 335.119279][ T31] INFO: task syz.1.453:7294 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.144744][ T31] Not tainted syzkaller #0 [ 335.150080][ T794] usb 5-1: USB disconnect, device number 60 [ 335.164875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.174983][ T31] task:syz.1.453 state:D stack:28120 pid:7294 tgid:7290 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 335.188354][ T31] Call Trace: [ 335.191669][ T31] [ 335.194610][ T31] __schedule+0x14bc/0x5000 [ 335.199215][ T31] ? __pfx___schedule+0x10/0x10 [ 335.211958][ T31] ? schedule+0x91/0x360 [ 335.235190][ T31] schedule+0x165/0x360 [ 335.261770][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.295978][ T31] __mutex_lock+0x7e6/0x1350 [ 335.300638][ T31] ? __mutex_lock+0x5bb/0x1350 [ 335.305439][ T31] ? comedi_open+0xc0/0x5f0 [ 335.359971][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.365053][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 335.395855][ T31] ? __kmalloc_cache_noprof+0x3e2/0x6f0 [ 335.401458][ T31] ? comedi_open+0x8b/0x5f0 [ 335.406405][ T31] comedi_open+0xc0/0x5f0 [ 335.410762][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 335.455931][ T31] chrdev_open+0x4cc/0x5e0 [ 335.460414][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 335.465386][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 335.491194][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 335.505911][ T31] do_dentry_open+0x7ce/0x1420 [ 335.510758][ T31] vfs_open+0x3b/0x340 [ 335.514852][ T31] ? path_openat+0x33b3/0x3d90 [ 335.535882][ T31] path_openat+0x33ce/0x3d90 [ 335.540574][ T31] ? stack_depot_save_flags+0x40/0x850 [ 335.561565][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 335.579440][ T31] ? __pfx_path_openat+0x10/0x10 [ 335.584437][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 335.595886][ T31] do_filp_open+0x1fa/0x410 [ 335.600438][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 335.605490][ T31] ? _raw_spin_unlock+0x28/0x50 [ 335.627590][ T31] ? alloc_fd+0x64c/0x6c0 [ 335.631981][ T31] do_sys_openat2+0x121/0x200 [ 335.645841][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.651153][ T31] ? exc_page_fault+0x82/0x100 [ 335.665846][ T31] __x64_sys_openat+0x138/0x170 [ 335.670755][ T31] do_syscall_64+0xfa/0xf80 [ 335.675279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.695891][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.700614][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.706949][ T31] RIP: 0033:0x7f3964b8f749 [ 335.711380][ T31] RSP: 002b:00007f3962dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.720251][ T31] RAX: ffffffffffffffda RBX: 00007f3964de6090 RCX: 00007f3964b8f749 [ 335.728499][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 335.736788][ T31] RBP: 00007f3964c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.744771][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.754422][ T31] R13: 00007f3964de6128 R14: 00007f3964de6090 R15: 00007ffe375433f8 [ 335.762906][ T31] [ 335.769337][ T31] [ 335.769337][ T31] Showing all locks held in the system: [ 335.777548][ T31] 1 lock held by khungtaskd/31: [ 335.782865][ T31] #0: ffffffff8e33d820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 335.793848][ T31] 7 locks held by kworker/0:2/794: [ 335.799359][ T31] #0: ffff88801e283948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 335.816008][ T31] #1: ffffc90003517b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 335.849477][ T31] #2: ffff888028b77198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 335.876081][ T31] #3: ffff88806bb0f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 335.885299][ T31] #4: ffff88801fb0a160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 335.945838][ T31] #5: ffffffff8f182088 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 335.991653][ T31] #6: ffffffff8e3432f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 336.036799][ T31] 3 locks held by kworker/1:2/3095: [ 336.042024][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 336.095908][ T31] #1: ffffc9000c207b80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 336.105730][ T31] #2: ffffffff8e3432f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 336.165850][ T31] 2 locks held by getty/5578: [ 336.170571][ T31] #0: ffff88814d3ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 336.225871][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 336.255960][ T31] 2 locks held by syz.2.408/7156: [ 336.261557][ T31] 1 lock held by syz.1.453/7294: [ 336.285860][ T31] #0: ffff88814cddd8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x5f0 [ 336.295061][ T31] 4 locks held by syz.4.645/7870: [ 336.335857][ T31] #0: ffff888033098ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 336.369065][ T31] #1: ffff8880330980c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 336.388169][ T31] #2: ffffffff8f85fb28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 336.398614][ T31] #3: ffff888022746b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 336.408346][ T31] 3 locks held by syz.5.847/8397: [ 336.413381][ T31] #0: ffff88805aa6cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 336.423834][ T31] #1: ffff88805aa6c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 336.433907][ T31] #2: ffffffff8f85fb28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 336.444246][ T31] 1 lock held by syz.0.1187/9264: [ 336.449577][ T31] #0: ffffffff8f6f5b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 336.458837][ T31] 1 lock held by syz.3.1192/9274: [ 336.464451][ T31] #0: ffffffff8f6f5b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 336.521947][ T31] [ 336.524365][ T31] ============================================= [ 336.524365][ T31] [ 336.611161][ T31] NMI backtrace for cpu 1 [ 336.611183][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 336.611208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.611220][ T31] Call Trace: [ 336.611229][ T31] [ 336.611238][ T31] dump_stack_lvl+0x189/0x250 [ 336.611272][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.611298][ T31] ? __pfx__printk+0x10/0x10 [ 336.611341][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 336.611368][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.611393][ T31] ? __pfx__printk+0x10/0x10 [ 336.611421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.611444][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 336.611470][ T31] sys_info+0x135/0x170 [ 336.611490][ T31] watchdog+0xf95/0xfe0 [ 336.611522][ T31] ? watchdog+0x20a/0xfe0 [ 336.611557][ T31] kthread+0x711/0x8a0 [ 336.611587][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.611614][ T31] ? __pfx_kthread+0x10/0x10 [ 336.611642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.611667][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 336.611693][ T31] ? __pfx_kthread+0x10/0x10 [ 336.611721][ T31] ret_from_fork+0x599/0xb30 [ 336.611745][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.611776][ T31] ? __switch_to_asm+0x39/0x70 [ 336.611801][ T31] ? __switch_to_asm+0x33/0x70 [ 336.611826][ T31] ? __pfx_kthread+0x10/0x10 [ 336.611853][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.611896][ T31] [ 336.611904][ T31] Sending NMI from CPU 1 to CPUs 0: [ 336.633774][ T794] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 336.635649][ C0] NMI backtrace for cpu 0 [ 336.635664][ C0] CPU: 0 UID: 0 PID: 794 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 336.635685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.635697][ C0] Workqueue: usb_hub_wq hub_event [ 336.635719][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 336.635738][ C0] Code: e8 ce b5 9e fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 06 05 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 336.635753][ C0] RSP: 0018:ffffc90003516cb0 EFLAGS: 00000002 [ 336.635772][ C0] RAX: 1ffffffff33fd000 RBX: 00000000000003fd RCX: 0000000000000000 [ 336.635784][ C0] RDX: 00000000000003fd RSI: 000000000002548e RDI: 000000000002548f [ 336.635795][ C0] RBP: ffffffff99fe8470 R08: ffff888024bd0237 R09: 1ffff1100497a046 [ 336.635808][ C0] R10: dffffc0000000000 R11: ffffffff85232a60 R12: dffffc0000000000 [ 336.635822][ C0] R13: 0000000000000000 R14: ffffffff99fe81e0 R15: 0000000000000000 [ 336.635834][ C0] FS: 0000000000000000(0000) GS:ffff888125a41000(0000) knlGS:0000000000000000 [ 336.635850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.635863][ C0] CR2: 000055c12d24bf40 CR3: 00000000304e8000 CR4: 00000000003526f0 [ 336.635879][ C0] Call Trace: [ 336.635886][ C0] [ 336.635895][ C0] wait_for_lsr+0x1a1/0x2f0 [ 336.635918][ C0] serial8250_console_write+0x134c/0x1ba0 [ 336.635952][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 336.635978][ C0] ? console_flush_all+0x131/0xb60 [ 336.636003][ C0] ? console_flush_all+0x131/0xb60 [ 336.636029][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 336.636054][ C0] ? console_flush_all+0x131/0xb60 [ 336.636076][ C0] console_flush_all+0x745/0xb60 [ 336.636099][ C0] ? console_flush_all+0x131/0xb60 [ 336.636125][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 336.636149][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 336.636170][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 336.636188][ C0] console_unlock+0xbb/0x190 [ 336.636209][ C0] ? vprintk_emit+0x321/0x5f0 [ 336.636229][ C0] ? __pfx_console_unlock+0x10/0x10 [ 336.636253][ C0] ? vprintk_emit+0x321/0x5f0 [ 336.636272][ C0] ? vprintk_emit+0x321/0x5f0 [ 336.636293][ C0] vprintk_emit+0x4f8/0x5f0 [ 336.636315][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 336.636335][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 336.636364][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 336.636387][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.636410][ C0] ? __free_frozen_pages+0x65e/0xd30 [ 336.636432][ C0] _printk+0xcf/0x120 [ 336.636453][ C0] ? __pfx__printk+0x10/0x10 [ 336.636472][ C0] ? __free_frozen_pages+0x695/0xd30 [ 336.636493][ C0] dvb_usb_device_exit+0x29b/0x350 [ 336.636513][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 336.636536][ C0] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 336.636553][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.636577][ C0] ? usb_disable_interface+0x31d/0x350 [ 336.636599][ C0] usb_unbind_interface+0x26e/0x910 [ 336.636623][ C0] ? __pfx_usb_unbind_interface+0x10/0x10 [ 336.636643][ C0] device_release_driver_internal+0x4d9/0x800 [ 336.636670][ C0] bus_remove_device+0x34d/0x440 [ 336.636691][ C0] device_del+0x511/0x8e0 [ 336.636713][ C0] ? __pm_runtime_barrier+0x212/0x460 [ 336.636737][ C0] ? __pfx_device_del+0x10/0x10 [ 336.636757][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 336.636785][ C0] usb_disable_device+0x3d4/0x8e0 [ 336.636808][ C0] usb_disconnect+0x32f/0x990 [ 336.636835][ C0] hub_event+0x1ca9/0x4ef0 [ 336.636867][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.636898][ C0] ? __pfx_hub_event+0x10/0x10 [ 336.636915][ C0] ? process_one_work+0x868/0x15a0 [ 336.636935][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.636957][ C0] ? process_one_work+0x868/0x15a0 [ 336.636974][ C0] process_one_work+0x93a/0x15a0 [ 336.637001][ C0] ? __pfx_process_one_work+0x10/0x10 [ 336.637023][ C0] ? assign_work+0x3a1/0x410 [ 336.637042][ C0] worker_thread+0x9f5/0xee0 [ 336.637072][ C0] kthread+0x711/0x8a0 [ 336.637095][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.637113][ C0] ? __pfx_kthread+0x10/0x10 [ 336.637135][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.637155][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 336.637176][ C0] ? __pfx_kthread+0x10/0x10 [ 336.637198][ C0] ret_from_fork+0x599/0xb30 [ 336.637216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 336.637238][ C0] ? __switch_to_asm+0x39/0x70 [ 336.637261][ C0] ? __switch_to_asm+0x33/0x70 [ 336.637282][ C0] ? __pfx_kthread+0x10/0x10 [ 336.637304][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.637333][ C0] [ 337.492483][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.571633][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.646126][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.728069][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.480885][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.507733][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.536488][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 338.561286][ T36] bond0 (unregistering): Released all slaves [ 338.652055][ T36] tipc: Left network mode [ 338.687912][ T36] IPVS: stopping backup sync thread 8735 ... [ 338.965901][ T36] hsr_slave_0: left promiscuous mode [ 338.972211][ T36] hsr_slave_1: left promiscuous mode [ 338.986896][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.994348][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.028766][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.045877][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.080435][ T36] veth1_macvtap: left promiscuous mode [ 339.096079][ T36] veth0_macvtap: left promiscuous mode [ 339.101810][ T36] veth1_vlan: left promiscuous mode [ 339.126181][ T36] veth0_vlan: left promiscuous mode [ 339.703589][ T36] team0 (unregistering): Port device team_slave_1 removed [ 339.752064][ T36] team0 (unregistering): Port device team_slave_0 removed [ 340.691680][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.819515][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.908822][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.995532][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.273131][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.410171][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.512233][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.617895][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.826346][ T36] bridge_slave_1: left allmulticast mode [ 341.832449][ T36] bridge_slave_1: left promiscuous mode [ 341.847883][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.870174][ T36] bridge_slave_0: left allmulticast mode [ 341.876603][ T36] bridge_slave_0: left promiscuous mode [ 341.882383][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.900451][ T36] bridge_slave_1: left allmulticast mode [ 341.907214][ T36] bridge_slave_1: left promiscuous mode [ 341.912979][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.938112][ T36] bridge_slave_0: left allmulticast mode [ 341.943782][ T36] bridge_slave_0: left promiscuous mode [ 341.956175][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.449801][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.461182][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.477248][ T36] bond0 (unregistering): Released all slaves [ 342.841842][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.854272][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.867329][ T36] bond0 (unregistering): Released all slaves [ 342.994480][ T36] tipc: Left network mode [ 343.495404][ T36] hsr_slave_0: left promiscuous mode [ 343.514253][ T36] hsr_slave_1: left promiscuous mode [ 343.526766][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.534177][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.563256][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.570970][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.591757][ T36] hsr_slave_0: left promiscuous mode [ 343.605917][ T36] hsr_slave_1: left promiscuous mode [ 343.612156][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.620054][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.629458][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.637172][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.677793][ T36] veth1_macvtap: left promiscuous mode [ 343.683361][ T36] veth0_macvtap: left promiscuous mode [ 343.691201][ T36] veth1_vlan: left promiscuous mode [ 343.696676][ T36] veth0_vlan: left promiscuous mode [ 343.703719][ T36] veth1_macvtap: left promiscuous mode [ 343.709805][ T36] veth0_macvtap: left promiscuous mode [ 343.715619][ T36] veth1_vlan: left promiscuous mode [ 343.721597][ T36] veth0_vlan: left promiscuous mode [ 344.337332][ T36] team0 (unregistering): Port device team_slave_1 removed [ 344.382918][ T36] team0 (unregistering): Port device team_slave_0 removed