last executing test programs: 26.501938193s ago: executing program 2 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbb", 0x39}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x40040000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) syz_clone(0x88202c80, 0x0, 0x0, 0x0, 0x0, 0x0) 26.117641251s ago: executing program 2 (id=744): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2, 0x0, 0xb03}, 0x200002b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86, 0x0, 0x0, 0x0, 0x800]}, 0x45c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0bc9"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ef"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x240040c5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000000040)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) 26.056536688s ago: executing program 2 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x7, 0x8, 0x59455247, 0x5, 0x2, [{0x1, 0x1000}, {0x200, 0x800007}, {0x7, 0x9}, {0x2, 0x480}, {0x3}, {0x2, 0x3}, {0xa0, 0x8000}, {0x400, 0xffff}], 0x6, 0x0, 0x1, 0x0, 0x7}}) r4 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000000), 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000000c0)={0x7, "88b173"}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0xa46f}}, './file0\x00'}) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000280)=0xfe, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000100)) 23.486762683s ago: executing program 2 (id=772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x41}, 0xfc, 0xb9a5, 0xfff, 0x700, 0x7, 0x400000}) syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109027600020180900f0904000001020d0000052406000105240001000d240f01bb040000030001000706241a0f003c05240100071524121000a317a88b045e4f01a607c0ffcb7e392a0905810300040208050904010000020d00000904010102020d000009058202ff03028f0609e16b0260000c0301"], 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e") socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="07000000010000", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x3, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0xff, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "a204ed584a940dadd45cd3afc43914fce1d5cbd011a5397d4966db2cf1ab4e6b10cac9f89be94b14a5b2d53bb7a59aa3d279268a3474e759aa7df64542364541", 0x2c}, 0x48, 0xfffffffffffffff8) add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000540)="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", 0x194, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="9eacc7a4ffcb23", 0x7}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 21.545610487s ago: executing program 2 (id=781): syz_init_net_socket$ax25(0x3, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001380)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x8, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0x45, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x4, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x8d3, 0x800006, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x1200, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000081, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0xfffffffc, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="00442dbd7000fddbdf25254de903"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002300040029bd7000fddbdf25000000002c663d3be167b6a6927958dd0b27df074919700d4a8ba3463d93e2379bc5d4e814f066c71accce33bbd3f13f267ba73222ab90ae1a8271ad2742d7348c99bcb56f43f17f5f840f03d5a40bf3e20db7e60afcf2f74383367e12dc4348f9b0451575f2753e37a8711d77cd9208db708e5648a1cca7f36d8a0c4568e3e3dca8b205764622bbd8634055b629d77d94e61ca99d49c15ba1a692f09377307008a187136d7f7444210e17dc41e8eace86fa900000a427972e2e429c079a1953eb10a9534100f2"], 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x200040c0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) readv(r2, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000740)={{}, {0x1}, 0x29, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)="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", 0x13e, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x216}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18.573712505s ago: executing program 2 (id=801): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) read(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000640)="fc8b", 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r4, 0x2, 0xfffffff6, 0x0, 0xff00, 0x3, 0x40, 0x0, {r4, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x49, 0xc, 0x2, 0x8001}}, &(0x7f00000003c0)=0xb0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) 7.87928723s ago: executing program 1 (id=832): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$packet(r0, &(0x7f0000000080)={0x11, 0xf4, r3, 0x1, 0x5, 0x6, @remote}, 0x14) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="66001f00b9519de1e0902ce9aad77ea011d511a62f861dacdeee40ba6a42ddb3c7de6eeab47f9e6952211519a08aa6a54b348baba37cc9774fa5ae2189737619c746b49f99d5b7b524bc9452750d0eb1b8d0cc775529cc2c3b395bd207fd6dfb60e7b53e9dc30000"], 0x84}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) fsmount(r5, 0x1, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7.73779917s ago: executing program 1 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0xc1025, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r2, &(0x7f0000000040)=""/27, 0x1b) renameat(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000600)='./file0\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c020000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250300000008000100", @ANYRES32=r4], 0x28c}}, 0x40080) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x40}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) exit(0x6) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x164, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x143, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac, {0x4, 0x8}, @value=@ver_80211n={0x0, 0x53, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x2, 0x5c, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x2, 0x0, {0x231, 0x500, 0x0, 0xff, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x8, 0x9}}, [{0xdd, 0xff, "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"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6.900165758s ago: executing program 1 (id=838): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_usb_connect(0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e4aa92082053300578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12012002179c3108fd0b0e0904fdfe01f892a65c8904ed074000024f0500"/45], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="6d56b7b41b89b2f781948d6748007d187934729a6b6523664335676e8b4ae438c112c75e4fcd81c9acd58f39ad597a086d8d2a1acc89ba2469ee4dae2b23ebb1d06f08821bdb90385b883b05a754d870", 0x50}, {&(0x7f0000000180)="6efc0ea304eb58d544acbf29066e153e293edeabf31b8c1234ce53229b3a007e045362d068fc91bf02e38ac5792298e7f741d5639d597b84a12f27915aeb8f4a52454af16c257a8a8b3cf42e51e4a2c0fb22f46b4f01f011dae44b875bc3562ec3e7c48af76472116eab73a9f0aeb152f1c7336680f31abc2a826e76eb8cb270f53bf125de83b3d657143606189723f6f3434b4beaa5d27dfa82080b2754250d1bd677665bcdfacfd7418d48c43bfe60d73860520eaf8228d0c19f694b47c02172f9c9b9d3b34beaa873b65bc49bc44b2db5cba6fbfeb07fe4d697c49ccf03c8a51184fc8bec05f7d153dba0", 0xec}, {&(0x7f0000000300)="bc5333a95234f8a8b02d9f614427d477d134e6dd5d421848d8ac151ed750176a7dc68328e9a2cc2b8de479fb11426d7991a69efb2002043fe8bdb813c06cd3a14990045c948e3aef74f5603dbedcaac8e5b0d93e512e044280a6da9b81ab3fd5460cf70af3509552f860311e4a411fb8aa78dda171ffe9d21d0ead18bf935e6f952cda3596558c7a532bf1f5455b5f00", 0x90}], 0x3}, 0x40000) socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x4c, @none, 0x9f, 0x1}, 0xe) 5.878014266s ago: executing program 3 (id=841): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001900010000000000000000a20af3ff000500f8ff00000000040002"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.876659813s ago: executing program 3 (id=842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="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", 0xff9d}, {&(0x7f0000000000)="c599be9aa9c70348e7975315d83b4e86c6b395ab98f7a76143dbf2bbddb77680472e22f4367ea8e7dd1e010f72080039f2e593fd2c5e1a491ed0b1237a0b246eefd2738c3908da98b347aa227ab82bf225592af9458a7f79d1e6", 0x5a}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x4815) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000004900)=""/4116, 0x1014}], 0x1}, 0x5}], 0x1, 0x2101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$KDDISABIO(r5, 0x4b37) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x600}) 5.774313427s ago: executing program 3 (id=843): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000140)={0x0, 0xd, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r0], 0x0) 3.805749423s ago: executing program 1 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000029700001294", 0x2e}], 0x1}, 0x4080) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f00000000c0)={0x2}) r4 = epoll_create1(0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x50540) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000200)={'dvmrp1\x00', @ifru_hwaddr=@remote}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d000000000001090224000100000000090400000103000200092100000001220500090581030014000000"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) fanotify_init(0x4000, 0x1) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010103000000070000000000000002030109022400010106900d0904000a012701017f09050102000400028f090582020002070506"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000180)={0x7, 0x7, 0xc, 0x1}) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f00000002c0)={0x4, 0x9, 0x1, 0x1ff}) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x1, &(0x7f0000000080)={[0x96]}, 0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="300001800800030002000000080003000000000014000200776732000000000000000000000800000800030005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 3.519189221s ago: executing program 32 (id=801): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) read(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000640)="fc8b", 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r4, 0x2, 0xfffffff6, 0x0, 0xff00, 0x3, 0x40, 0x0, {r4, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x49, 0xc, 0x2, 0x8001}}, &(0x7f00000003c0)=0xb0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) 3.513530443s ago: executing program 3 (id=852): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) clock_settime(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0x4, 0x4f, {0x4f, 0xa, "c205b518f9b40a4c146b1a3535b91fd995d80d913f35277d83e1636377f24dae3172e65934edacd26bd35b53da568afebd68c28ef4cfa2a9021ffd1c7a9942a79ab2aea05beb7990a830d5215e"}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x7f, 0x4, 0x0, 0x2, 0x2abc}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x45b}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000280)={r6}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) close(r9) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.286461239s ago: executing program 3 (id=861): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='ramfs\x00', &(0x7f0000000180)='./file0\x00', r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='ramfs\x00', &(0x7f00000000c0)='ramfs\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x000\r'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x20, 0x3a, 0xe, {0xe, 0xb, "b6e2c351a8b4c49d752548ee"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000004c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x80, 0x6, 0xff, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x5, 0x5}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0xeb, 0xf, "426bd6c2", "f9d10fd9"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xf, 0x40, 0xf, 0x18f, 0xd030}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0xe, 0x5f, "a96ce166bc714e252ad88a16393b69f8fd42dfbb01dddb7afa023ef44eb890941b581c1bfef947169d56467ca1d93d5e8391e3d98bd554ab49b1fed1ce33a2324409fec5808b4eef0274c55212122a45c281bdb361471f04f1966edc38395e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0xa0, 0x40}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000000880)={0x40, 0xb, 0x2, 'S\t'}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000900)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b80)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, "cd6f"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xfd}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x8}}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000000101010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001"], 0x98}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fgetxattr(r5, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)=""/201, 0xc9) r8 = fsmount(r0, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000040)='./file0\x00') 906.216183ms ago: executing program 4 (id=851): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x4d, @private1, @loopback={0x0, 0xffff888101827518}, 0x700, 0x0, 0x3}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) syz_usb_connect(0x5, 0x2c, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0xbe, 0x67, 0x2f, 0x10, 0x5ac, 0x241, 0xd09c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x9, 0x4, 0xa0, 0xf8, [{{0x9, 0x4, 0x81, 0x2, 0x0, 0x2, 0x2, 0xff, 0xfc, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x8}]}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 713.991665ms ago: executing program 1 (id=866): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) fcntl$dupfd(r0, 0x406, r1) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa3a37b34809015e7dea9a00002a", @ANYRES32=r1, @ANYRES16=r0], 0x0) socket$kcm(0x2, 0x3, 0x2) 477.958137ms ago: executing program 0 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xed) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) bind$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r4, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) 457.399485ms ago: executing program 0 (id=870): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000540)={0x1f, @none, 0x15}, 0xa) r1 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x405c5503, &(0x7f0000000780)) 408.196333ms ago: executing program 0 (id=871): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x112, 0xe, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 305.857954ms ago: executing program 0 (id=872): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmallocinfo\x00', 0x0, 0x0) tkill(r1, 0x12) ptrace(0x4208, r1) sched_getscheduler(r1) tkill(r1, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000100)) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMRU1(r4, 0x40047452, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000080)=""/74, &(0x7f00000002c0)=0x4a) 210.83087ms ago: executing program 0 (id=873): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x6, 0x8, '\x00', 0x1, &(0x7f0000000140)=[0x0]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fcdbf5254f000000080003008b880fa7d3a07c5a0f65711f0838278e8af3eccca83c13b7581663d6bfabc10b99544e0b0659f8c60ca2bca2ec6d59086d681e92ca51195f47b5c21886d59436dfc1fda811c7e10b44536c83c809fd4077894d420dcab7972bbeffc23fb6273f", @ANYRES32=r2, @ANYBLOB="48007a801400020006e00a257c29ce1f55ed606c82a002370c00030083390a7d854f775524000100dc795a695a0727a940e72dec12f276e1e41a9bb129b1cc751db6785c0c9d15de"], 0x64}, 0x1, 0x0, 0x0, 0x400c811}, 0x4004090) 135.699778ms ago: executing program 1 (id=874): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x3, 0x4}, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848410000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.9531ms ago: executing program 3 (id=875): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000003c0)=0xffffffc0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x20080c4, 0x0) 0s ago: executing program 0 (id=876): prctl$PR_GET_FP_MODE(0x2e) r0 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x58) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x8, "3f291a30"}, @global=@item_4={0x3, 0x1, 0x8, "6d3f7aa2"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_4={0x3, 0x2, 0x4, "f626ada3"}, @global=@item_4={0x3, 0x1, 0xb, "5ba89564"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_012={0x2, 0x2, 0x2, "27b3"}]}}, 0x0}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0xa, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="120000001a005f0400f9f407000924018000", 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x3, 0xff) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4, 0x2}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) read$alg(r4, &(0x7f0000000840)=""/4096, 0x1000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fr=0, Product=0, SerialNumber=0 [ 160.674223][ T5954] usb 1-1: config 0 descriptor?? [ 160.930981][ T7318] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 160.949387][ T7318] team0: Port device dummy0 added [ 160.963342][ T7318] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 160.975722][ T7318] team0: Port device dummy0 removed [ 160.986551][ T7318] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.053006][ T7323] netlink: 228 bytes leftover after parsing attributes in process `syz.1.409'. [ 161.099730][ T5954] lua 0003:1E7D:2C2E.0009: unbalanced collection at end of report description [ 161.105923][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 161.122989][ T5954] lua 0003:1E7D:2C2E.0009: parse failed [ 161.148273][ T5954] lua 0003:1E7D:2C2E.0009: probe with driver lua failed with error -22 [ 161.236999][ T7328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.259290][ T7329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 161.266002][ T7329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.283385][ T7329] vhci_hcd vhci_hcd.0: Device attached [ 161.297839][ T5928] usb 1-1: USB disconnect, device number 38 [ 161.527824][ T981] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 161.557675][ T5954] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 161.707872][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 161.713118][ T5892] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 161.723009][ T5954] usb 4-1: config 0 has no interfaces? [ 161.728646][ T5954] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 161.737739][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.747674][ T5954] usb 4-1: config 0 descriptor?? [ 161.874846][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.886366][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.896589][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 161.906600][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.917068][ T5892] usb 2-1: config 0 descriptor?? [ 161.960680][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.970077][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.987988][ T7331] vhci_hcd: connection closed [ 161.993129][ T68] vhci_hcd: stop threads [ 162.003208][ T68] vhci_hcd: release socket [ 162.010321][ T68] vhci_hcd: disconnect device [ 162.017893][ T981] vhci_hcd: vhci_device speed not set [ 162.036719][ T10] usb 4-1: USB disconnect, device number 48 [ 162.107724][ T5928] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 162.199162][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.215903][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.247754][ T5928] usb 1-1: device descriptor read/64, error -71 [ 162.460239][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 162.466419][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 162.477207][ T5892] usb 2-1: USB disconnect, device number 38 [ 162.488136][ T5928] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 162.608032][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 162.639324][ T5928] usb 1-1: device descriptor read/64, error -71 [ 162.755092][ T5928] usb usb1-port1: attempt power cycle [ 163.018210][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 163.097734][ T5928] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 163.172409][ T5928] usb 1-1: device descriptor read/8, error -71 [ 163.189278][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.210373][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 163.239186][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 163.255944][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.266692][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.294912][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 163.327987][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.340974][ T9] usb 4-1: Product: syz [ 163.346046][ T9] usb 4-1: Manufacturer: syz [ 163.350782][ T9] usb 4-1: SerialNumber: syz [ 163.372001][ T9] usb 4-1: config 0 descriptor?? [ 163.420470][ T5928] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 163.446577][ T7370] binder: 7369:7370 ioctl c00c620f 200000000180 returned -22 [ 163.455729][ T5928] usb 1-1: device descriptor read/8, error -71 [ 163.487674][ T9] rc_core: IR keymap rc-imon-rsc not found [ 163.493523][ T9] Registered IR keymap rc-empty [ 163.518217][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 163.531647][ T9] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 163.557760][ T9] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 163.571003][ T43] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 163.576692][ T5928] usb usb1-port1: unable to enumerate USB device [ 163.601652][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.610985][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.625359][ T43] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 163.695883][ T43] usb 3-1: USB disconnect, device number 18 [ 163.757882][ T9] usb 4-1: USB disconnect, device number 49 [ 164.077648][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 164.137752][ T981] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 164.239738][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.255695][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.276162][ T43] usb 3-1: config 0 descriptor?? [ 164.342185][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 164.484488][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.493460][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.503775][ T43] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.540805][ T43] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 164.547527][ T43] [drm] Initialized udl on minor 2 [ 164.714400][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.726035][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 164.736357][ T5892] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.746946][ T43] usb 3-1: USB disconnect, device number 19 [ 164.755711][ T5892] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 164.908542][ T5928] IPVS: starting estimator thread 0... [ 164.918240][ T5954] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 164.998711][ T981] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 165.008090][ T7397] IPVS: using max 31 ests per chain, 74400 per kthread [ 165.069422][ T5954] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 165.080361][ T5954] usb 4-1: config 128 has no interface number 0 [ 165.086767][ T5954] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.097228][ T5954] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 165.108808][ T5954] usb 4-1: config 128 interface 148 has no altsetting 0 [ 165.118980][ T5954] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 165.128118][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.136136][ T5954] usb 4-1: Product: syz [ 165.137662][ T981] usb 2-1: device descriptor read/64, error -71 [ 165.140357][ T5954] usb 4-1: Manufacturer: syz [ 165.151300][ T5954] usb 4-1: SerialNumber: syz [ 165.251211][ T981] usb usb2-port1: attempt power cycle [ 165.384603][ T5954] usb 4-1: USB disconnect, device number 50 [ 165.607998][ T981] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 165.629675][ T981] usb 2-1: device descriptor read/8, error -71 [ 165.767679][ T5892] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 165.817668][ T5928] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 165.867780][ T981] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 165.889510][ T981] usb 2-1: device descriptor read/8, error -71 [ 165.917787][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 165.925568][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.934412][ T5892] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.943556][ T5892] usb 1-1: config 1 has no interface number 1 [ 165.949808][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 165.962860][ T5892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 165.976911][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.979037][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 165.986311][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.998238][ T5928] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 166.000228][ T5892] usb 1-1: Product: syz [ 166.010106][ T981] usb usb2-port1: unable to enumerate USB device [ 166.016529][ T5892] usb 1-1: Manufacturer: syz [ 166.018980][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.022939][ T5892] usb 1-1: SerialNumber: syz [ 166.036976][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.048766][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 166.058933][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.072851][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.081954][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.275659][ T5892] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 166.284523][ T5892] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 166.295414][ T5928] usb 4-1: usb_control_msg returned -32 [ 166.296470][ T5892] usb 1-1: 2:1 : invalid channels 0 [ 166.308502][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 166.341207][ T5892] usb 1-1: USB disconnect, device number 43 [ 166.527982][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 166.657669][ T43] usb 3-1: device descriptor read/64, error -71 [ 166.897748][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 167.013679][ T7417] i2c i2c-0: Invalid block write size 34 [ 167.020377][ T7417] overlayfs: missing 'lowerdir' [ 167.027708][ T43] usb 3-1: device descriptor read/64, error -71 [ 167.097817][ T5892] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 167.139773][ T43] usb usb3-port1: attempt power cycle [ 167.211618][ T24] usb 4-1: USB disconnect, device number 51 [ 167.247902][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 167.254967][ T5892] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 167.262983][ T5892] usb 1-1: can't read configurations, error -22 [ 167.397705][ T5892] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 167.481548][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 167.519105][ T43] usb 3-1: device descriptor read/8, error -71 [ 167.547804][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 167.556752][ T5892] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 167.564813][ T5892] usb 1-1: can't read configurations, error -22 [ 167.571653][ T5892] usb usb1-port1: attempt power cycle [ 167.758529][ T43] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 167.786908][ T7421] netlink: 128 bytes leftover after parsing attributes in process `syz.3.443'. [ 167.797368][ T43] usb 3-1: device descriptor read/8, error -71 [ 167.888646][ T981] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 167.908653][ T43] usb usb3-port1: unable to enumerate USB device [ 167.917752][ T5892] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 167.938482][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 167.946711][ T5892] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 167.954834][ T5892] usb 1-1: can't read configurations, error -22 [ 168.050717][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.059028][ T981] usb 2-1: not running at top speed; connect to a high speed hub [ 168.067957][ T981] usb 2-1: config 5 has an invalid interface number: 137 but max is 2 [ 168.076143][ T981] usb 2-1: config 5 has an invalid interface number: 171 but max is 2 [ 168.084476][ T981] usb 2-1: config 5 has an invalid interface number: 143 but max is 2 [ 168.092746][ T981] usb 2-1: config 5 has an invalid interface number: 36 but max is 2 [ 168.097760][ T5892] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 168.100934][ T981] usb 2-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 168.114473][ T5954] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 168.117405][ T981] usb 2-1: config 5 has no interface number 0 [ 168.117434][ T981] usb 2-1: config 5 has no interface number 1 [ 168.137790][ T981] usb 2-1: config 5 has no interface number 2 [ 168.144108][ T981] usb 2-1: config 5 has no interface number 3 [ 168.145378][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 168.151193][ T981] usb 2-1: config 5 interface 137 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 168.167224][ T981] usb 2-1: config 5 interface 171 altsetting 130 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 168.179139][ T981] usb 2-1: config 5 interface 171 altsetting 130 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.180073][ T5892] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 168.194517][ T981] usb 2-1: too many endpoints for config 5 interface 143 altsetting 127: 118, using maximum allowed: 30 [ 168.201766][ T5892] usb 1-1: can't read configurations, error -22 [ 168.215821][ T981] usb 2-1: config 5 interface 143 altsetting 127 endpoint 0x7 has invalid maxpacket 1024, setting to 1023 [ 168.219079][ T5892] usb usb1-port1: unable to enumerate USB device [ 168.236657][ T981] usb 2-1: config 5 interface 143 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 118 [ 168.250409][ T981] usb 2-1: config 5 interface 36 altsetting 64 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 168.262241][ T981] usb 2-1: config 5 interface 36 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 168.273213][ T981] usb 2-1: config 5 interface 36 altsetting 64 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 168.284157][ T981] usb 2-1: config 5 interface 36 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 168.289761][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.295396][ T981] usb 2-1: config 5 interface 36 altsetting 64 has an endpoint descriptor with address 0x3E, changing to 0xE [ 168.314495][ T981] usb 2-1: config 5 interface 36 altsetting 64 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 168.325738][ T981] usb 2-1: config 5 interface 36 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 168.336995][ T981] usb 2-1: config 5 interface 137 has no altsetting 0 [ 168.344210][ T981] usb 2-1: config 5 interface 171 has no altsetting 0 [ 168.351295][ T981] usb 2-1: config 5 interface 143 has no altsetting 0 [ 168.353871][ T5954] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 168.359192][ T981] usb 2-1: config 5 interface 36 has no altsetting 0 [ 168.376965][ T5954] usb 4-1: string descriptor 0 read error: -22 [ 168.379302][ T981] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e360, bcdDevice=95.b7 [ 168.389109][ T5954] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 168.392752][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.404693][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.410195][ T981] usb 2-1: Product: syz [ 168.422208][ T981] usb 2-1: Manufacturer: syz [ 168.427687][ T981] usb 2-1: SerialNumber: syz [ 168.563245][ T5954] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 168.649609][ T981] dvb-usb: found a 'MSI Digivox Mini SL' in cold state, will try to load a firmware [ 168.662782][ T981] usb 2-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 168.674293][ T981] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 169.260371][ T5954] usb 4-1: device descriptor read/64, error -71 [ 169.500809][ T5954] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 169.663592][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.672590][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.700792][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.717757][ T5954] usb 4-1: device firmware changed [ 169.743733][ T5954] usb 4-1: USB disconnect, device number 52 [ 169.787799][ T5892] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 169.957714][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 169.967057][ T5892] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 169.976391][ T5892] usb 3-1: config 0 has no interface number 0 [ 169.986648][ T5892] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 169.996708][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.005123][ T5892] usb 3-1: Product: syz [ 170.009670][ T5892] usb 3-1: Manufacturer: syz [ 170.014277][ T5892] usb 3-1: SerialNumber: syz [ 170.028312][ T5892] usb 3-1: config 0 descriptor?? [ 170.039086][ T5892] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 170.057212][ T5892] pctv452e: pctv452e_power_ctrl: 1 [ 170.057212][ T5892] [ 170.065419][ T5892] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 170.065419][ T5892] [ 170.076651][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 170.090125][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.101012][ T5954] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 170.111271][ T5892] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 170.130163][ T5892] usb 3-1: media controller created [ 170.136103][ T5892] dvb-usb: bulk message failed: -22 (8/0) [ 170.144740][ T5892] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 170.154889][ T5892] dvb-usb: MAC address reading failed. [ 170.185968][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.259795][ T5954] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 170.278255][ T5954] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 170.293617][ T5892] DVB: Unable to find symbol stb0899_attach() [ 170.303452][ T5954] usb 4-1: config 8 has no interface number 0 [ 170.310265][ T5892] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 170.319031][ T5954] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 170.333635][ T5954] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.346611][ T5954] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 170.371148][ T5954] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 170.384455][ T5954] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 170.393635][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.424445][ T5954] usb 4-1: NFC: intf ffff8880328b0000 id ffffffff8ef6fbe0 [ 170.467938][ T5892] rc_core: IR keymap rc-tt-1500 not found [ 170.473708][ T5892] Registered IR keymap rc-empty [ 170.487252][ T5892] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 170.497971][ T5954] nfcmrvl 4-1:8.80: NFC: registered with nci successfully [ 170.512208][ T5892] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input23 [ 170.525220][ T5892] dvb-usb: schedule remote query interval to 100 msecs. [ 170.532797][ T5892] pctv452e: pctv452e_power_ctrl: 0 [ 170.532797][ T5892] [ 170.540568][ T5892] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 170.571026][ T5892] usb 3-1: USB disconnect, device number 24 [ 170.636399][ T5928] usb 4-1: USB disconnect, device number 53 [ 170.640062][ T5892] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 170.670381][ T5928] usb 4-1: NFC: intf ffff8880328b0000 [ 170.850525][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 171.007791][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 171.016203][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.025258][ T9] usb 1-1: config 0 has no interface number 0 [ 171.035880][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 171.045042][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.053165][ T9] usb 1-1: Product: syz [ 171.057332][ T9] usb 1-1: Manufacturer: syz [ 171.061947][ T9] usb 1-1: SerialNumber: syz [ 171.068337][ T9] usb 1-1: config 0 descriptor?? [ 171.075922][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 171.139822][ T5892] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 171.301987][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 171.313014][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 171.325637][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.336874][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 171.346277][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.357503][ T5892] usb 3-1: config 0 descriptor?? [ 171.369760][ T5892] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 171.379557][ T5892] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 171.437719][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 171.590810][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.602558][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.613500][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.623355][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.637395][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.646598][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.657472][ T24] usb 4-1: config 0 descriptor?? [ 172.271426][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 172.277506][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.280429][ T9] gspca_spca1528: reg_w err -71 [ 172.294598][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 172.301600][ T24] usb 4-1: USB disconnect, device number 54 [ 172.323735][ T9] usb 1-1: USB disconnect, device number 48 [ 172.508091][ T5892] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 172.514613][ T5892] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 172.523192][ T5892] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 172.527822][ T5867] Bluetooth: hci0: command tx timeout [ 172.535698][ T5892] em28xx 3-1:0.0: No AC97 audio processor [ 172.970960][ T5867] Bluetooth: Unexpected continuation frame (len 51) [ 173.143217][ T7510] syzkaller1: entered promiscuous mode [ 173.152240][ T7510] syzkaller1: entered allmulticast mode [ 173.256310][ T7512] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 173.281587][ T7512] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 173.497735][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 173.647782][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 173.654416][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.665867][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.676096][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.686816][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.699873][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.708962][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.839105][ T10] usb 3-1: USB disconnect, device number 25 [ 173.854678][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 173.865037][ T10] em28xx 3-1:0.0: Freeing device [ 173.901297][ T7523] Bluetooth: MGMT ver 1.23 [ 173.923010][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 173.928915][ T9] usbtmc 1-1:16.0: can't read capabilities [ 174.132556][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.142034][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.152825][ T7507] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 174.160438][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.169661][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.178959][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.188254][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.199468][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.208386][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.218489][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.227325][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.236994][ T10] usb 1-1: USB disconnect, device number 49 [ 174.348994][ T5955] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 174.500566][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.513490][ T5955] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 174.522646][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.534424][ T5955] usb 3-1: config 0 descriptor?? [ 174.567854][ T9] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 174.719723][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.731021][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.741111][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.748043][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 174.757199][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.769080][ T9] usb 4-1: config 0 descriptor?? [ 174.974179][ T5955] microsoft 0003:045E:009D.000A: item fetching failed at offset 2/5 [ 174.985162][ T5955] microsoft 0003:045E:009D.000A: parse failed [ 174.991648][ T5955] microsoft 0003:045E:009D.000A: probe with driver microsoft failed with error -22 [ 175.176352][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.185970][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.203873][ T9] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 175.220870][ T5928] usb 3-1: USB disconnect, device number 26 [ 175.337789][ T5955] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 175.486351][ T9] lenovo 0003:17EF:60EE.000B: Failed to switch middle button: -71 [ 175.496375][ T9] lenovo 0003:17EF:60EE.000B: Fn-lock setting failed: -71 [ 175.498083][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 175.515936][ T9] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71 [ 175.530767][ T5955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.533779][ T9] usb 4-1: USB disconnect, device number 55 [ 175.543061][ T5955] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.565312][ T5955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 175.574818][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.585523][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.596757][ T5955] usb 1-1: Product: syz [ 175.601037][ T5955] usb 1-1: Manufacturer: syz [ 175.605635][ T5955] usb 1-1: SerialNumber: syz [ 175.822761][ T5955] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 175.835765][ T5955] usb 1-1: USB disconnect, device number 50 [ 175.967836][ T53] Bluetooth: hci2: command 0x0401 tx timeout [ 175.973975][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 176.347679][ T5955] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 176.509149][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.519346][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.530724][ T5955] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.539987][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.549386][ T5955] usb 4-1: SerialNumber: syz [ 176.607698][ T5892] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 176.737674][ T5892] usb 1-1: device descriptor read/64, error -71 [ 176.768765][ T5955] usb 4-1: 0:2 : does not exist [ 176.773737][ T5955] usb 4-1: unit 5: unexpected type 0x09 [ 176.788404][ T5955] usb 4-1: USB disconnect, device number 56 [ 176.811983][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.888200][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 176.977644][ T5892] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 177.037702][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 177.044281][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.054778][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.064462][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 177.075743][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 177.086961][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 177.096038][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.107758][ T5892] usb 1-1: device descriptor read/64, error -71 [ 177.108793][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 177.120743][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 177.128473][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 177.133690][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 177.142723][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 177.148800][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 177.249106][ T5892] usb usb1-port1: attempt power cycle [ 177.549331][ T5955] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 177.597748][ T5892] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 177.618347][ T5892] usb 1-1: device descriptor read/8, error -71 [ 177.710044][ T5955] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 177.719340][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 177.727442][ T5955] usb 4-1: SerialNumber: syz [ 177.737727][ T5955] usb 4-1: config 0 descriptor?? [ 177.857742][ T5892] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 177.879952][ T5892] usb 1-1: device descriptor read/8, error -71 [ 177.951326][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.960797][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.971394][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.984669][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.992886][ T5892] usb usb1-port1: unable to enumerate USB device [ 177.999470][ T5955] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 178.006597][ T5955] hackrf 4-1:0.0: Could not detect board [ 178.013337][ T5955] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 178.023081][ T5955] usb 4-1: USB disconnect, device number 57 [ 178.040060][ T7562] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 178.405392][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.414585][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.518252][ T5955] usb 3-1: USB disconnect, device number 27 [ 179.282619][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 179.345866][ T7579] tmpfs: Bad value for 'nr_inodes' [ 179.469416][ T9] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 179.490769][ T9] usb 3-1: config 0 has no interface number 0 [ 179.515181][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 179.527805][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.535964][ T9] usb 3-1: Product: syz [ 179.550015][ T9] usb 3-1: Manufacturer: syz [ 179.554639][ T9] usb 3-1: SerialNumber: syz [ 179.562013][ T9] usb 3-1: config 0 descriptor?? [ 179.767644][ T5892] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 179.776446][ T7570] netlink: 232 bytes leftover after parsing attributes in process `syz.2.489'. [ 179.788837][ T9] f81534a_ctrl 3-1:0.74: failed to set register 0x116: -5 [ 179.795991][ T9] f81534a_ctrl 3-1:0.74: failed to enable ports: -5 [ 179.802652][ T9] f81534a_ctrl 3-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 179.815285][ T9] usb 3-1: USB disconnect, device number 28 [ 179.828522][ T5955] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 179.897824][ T5892] usb 4-1: device descriptor read/64, error -71 [ 179.987755][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 179.994750][ T5955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.005014][ T5955] usb 1-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.018388][ T5955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.027066][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.037168][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.045238][ T5955] usb 1-1: Product: syz [ 180.049465][ T5955] usb 1-1: Manufacturer: syz [ 180.054061][ T5955] usb 1-1: SerialNumber: syz [ 180.147780][ T5892] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 180.270704][ T5955] usb 1-1: bad CDC descriptors [ 180.280638][ T5955] usb 1-1: USB disconnect, device number 55 [ 180.298247][ T5892] usb 4-1: device descriptor read/64, error -71 [ 180.418958][ T5892] usb usb4-port1: attempt power cycle [ 180.758939][ T5892] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 180.779190][ T5892] usb 4-1: device descriptor read/8, error -71 [ 181.017729][ T5892] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 181.038268][ T5892] usb 4-1: device descriptor read/8, error -71 [ 181.147997][ T5892] usb usb4-port1: unable to enumerate USB device [ 181.687642][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 181.844893][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 181.854529][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.872628][ T9] usb 3-1: Product: syz [ 181.876844][ T9] usb 3-1: Manufacturer: syz [ 181.882883][ T9] usb 3-1: SerialNumber: syz [ 181.898959][ T9] usb 3-1: config 0 descriptor?? [ 181.905507][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 181.911970][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 181.920507][ T9] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 182.027777][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 182.217874][ T24] usb 3-1: USB disconnect, device number 29 [ 182.224495][ T24] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 182.319416][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 182.494163][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.520464][ T9] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 182.539912][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.562138][ T9] usb 1-1: config 0 descriptor?? [ 182.987766][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 183.050867][ T7642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.063835][ T7642] block device autoloading is deprecated and will be removed. [ 183.084036][ T9] hid_parser_main: 2 callbacks suppressed [ 183.084058][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.098363][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.106208][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.113791][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.120985][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.127665][ T24] usb 3-1: device descriptor read/64, error -71 [ 183.128573][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.141809][ T9] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 183.151101][ T9] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 183.231494][ T9] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 183.240377][ T9] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 183.255321][ T9] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 183.262172][ T9] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 183.287217][ T10] usb 1-1: USB disconnect, device number 56 [ 183.318383][ T5928] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 183.368015][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 183.467649][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 183.476130][ T5928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 183.486510][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.494896][ T5928] usb 4-1: Product: syz [ 183.499177][ T5928] usb 4-1: Manufacturer: syz [ 183.500408][ T24] usb 3-1: device descriptor read/64, error -71 [ 183.504736][ T5928] usb 4-1: SerialNumber: syz [ 183.515696][ T5928] usb 4-1: config 0 descriptor?? [ 183.630858][ T24] usb usb3-port1: attempt power cycle [ 183.724535][ T5928] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.749778][ T5928] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 183.765385][ T5928] usb 4-1: USB disconnect, device number 62 [ 183.871892][ T7652] netlink: 'syz.0.516': attribute type 4 has an invalid length. [ 183.937279][ T7654] program syz.3.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.987657][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 184.020500][ T24] usb 3-1: device descriptor read/8, error -71 [ 184.267781][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 184.288366][ T24] usb 3-1: device descriptor read/8, error -71 [ 184.297935][ T5927] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 184.398124][ T24] usb usb3-port1: unable to enumerate USB device [ 184.437690][ T5927] usb 4-1: device descriptor read/64, error -71 [ 184.457695][ T5955] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 184.607724][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 184.614908][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.624003][ T5955] usb 1-1: config 128 has an invalid interface number: 111 but max is 0 [ 184.632462][ T5955] usb 1-1: config 128 has no interface number 0 [ 184.642083][ T5955] usb 1-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 184.651523][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.659917][ T5955] usb 1-1: Product: syz [ 184.664196][ T5955] usb 1-1: Manufacturer: syz [ 184.669413][ T5955] usb 1-1: SerialNumber: syz [ 184.677734][ T5927] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 184.807751][ T5927] usb 4-1: device descriptor read/64, error -71 [ 184.884555][ T5955] go7007 1-1:128.111: probe with driver go7007 failed with error -12 [ 184.894976][ T5955] usb 1-1: USB disconnect, device number 57 [ 184.917929][ T5927] usb usb4-port1: attempt power cycle [ 185.267699][ T5927] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 185.300429][ T5927] usb 4-1: device descriptor read/8, error -71 [ 185.540658][ T5927] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 185.571251][ T5927] usb 4-1: device descriptor read/8, error -71 [ 185.679149][ T5927] usb usb4-port1: unable to enumerate USB device [ 185.697683][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 185.841606][ T7691] @: renamed from vlan0 (while UP) [ 185.866680][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.879247][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.897789][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 185.918538][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.932314][ T10] usb 1-1: config 0 descriptor?? [ 186.137707][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 186.287615][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 186.294406][ T5927] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.305366][ T5927] usb 3-1: config 0 has no interface number 0 [ 186.311617][ T5927] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.322790][ T5927] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.332656][ T5927] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 186.341904][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.355105][ T5927] usb 3-1: config 0 descriptor?? [ 186.362697][ T10] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 186.373341][ T10] hid-steam 0003:28DE:1142.000D: item fetching failed at offset 4/5 [ 186.382700][ T10] hid-steam 0003:28DE:1142.000D: steam_probe:parse of hid interface failed [ 186.391494][ T10] hid-steam 0003:28DE:1142.000D: probe with driver hid-steam failed with error -22 [ 186.554490][ T10] usb 1-1: USB disconnect, device number 58 [ 186.966614][ T5927] hid (null): unknown global tag 0xc [ 187.136980][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 187.172911][ T5927] uclogic 0003:28BD:0071.000E: failed retrieving string descriptor #100: -71 [ 187.181909][ T5927] uclogic 0003:28BD:0071.000E: failed retrieving pen parameters: -71 [ 187.190600][ T5927] uclogic 0003:28BD:0071.000E: pen probing failed: -71 [ 187.198256][ T5927] uclogic 0003:28BD:0071.000E: failed probing parameters: -71 [ 187.206206][ T5927] uclogic 0003:28BD:0071.000E: probe with driver uclogic failed with error -71 [ 187.220112][ T5927] usb 3-1: USB disconnect, device number 34 [ 187.407743][ T5954] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 187.559932][ T5954] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 187.568649][ T5954] usb 1-1: config 0 has no interface number 0 [ 187.576700][ T5954] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 187.585991][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.594041][ T5954] usb 1-1: Product: syz [ 187.598379][ T5954] usb 1-1: Manufacturer: syz [ 187.603018][ T5954] usb 1-1: SerialNumber: syz [ 187.610623][ T5954] usb 1-1: config 0 descriptor?? [ 187.828892][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.838716][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.905512][ T5954] usb 1-1: USB disconnect, device number 59 [ 188.347967][ T5954] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 188.507768][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 188.533966][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.559590][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.559640][ T30] audit: type=1326 audit(1758068171.799:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.561482][ T7735] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.591623][ T30] audit: type=1326 audit(1758068171.799:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.627132][ T5954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.638147][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.646264][ T5954] usb 3-1: Product: syz [ 188.660707][ T5954] usb 3-1: Manufacturer: syz [ 188.665351][ T5954] usb 3-1: SerialNumber: syz [ 188.706783][ T30] audit: type=1326 audit(1758068171.799:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.728832][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.735953][ T30] audit: type=1326 audit(1758068171.799:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.758588][ T30] audit: type=1326 audit(1758068171.799:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.784347][ T30] audit: type=1326 audit(1758068171.799:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.805825][ T30] audit: type=1326 audit(1758068171.799:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.817855][ T7740] binfmt_misc: Unknown parameter 'uid' [ 188.827710][ T30] audit: type=1326 audit(1758068171.799:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.854970][ T30] audit: type=1326 audit(1758068171.839:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164598eba9 code=0x7ffc0000 [ 188.876406][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.937640][ T5928] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 189.067650][ T5927] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 189.087247][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.103189][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.116965][ T5954] usb 3-1: cannot find UAC_HEADER [ 189.130436][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 189.140164][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 189.165823][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.181539][ T5954] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 189.194608][ T5954] usb 3-1: USB disconnect, device number 35 [ 189.199297][ T5928] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 189.222886][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.231150][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.247791][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 189.260520][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.274889][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.291325][ T5927] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 189.302512][ T5928] usb 1-1: config 0 descriptor?? [ 189.310545][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.328026][ T5927] usb 4-1: SerialNumber: syz [ 189.337445][ T5927] usb 4-1: config 0 descriptor?? [ 189.684089][ T7764] netlink: 256 bytes leftover after parsing attributes in process `syz.2.545'. [ 189.751648][ T5928] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 189.803310][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 189.813245][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.833428][ T5927] usb 4-1: USB disconnect, device number 67 [ 189.933903][ T5928] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 53 [ 189.946703][ T5928] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 189.956261][ T5928] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 189.967066][ T5928] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 189.982037][ T5928] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 190.141020][ T5927] usb 1-1: USB disconnect, device number 60 [ 190.277682][ T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 190.331121][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.549'. [ 190.432025][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.443158][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.453669][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 190.464722][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.475989][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 190.485253][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.496356][ T24] usb 3-1: config 0 descriptor?? [ 190.657747][ T5954] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 190.757189][ T7786] trusted_key: syz.0.553 sent an empty control message without MSG_MORE. [ 190.817956][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 190.825274][ T5954] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.836968][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.850235][ T5954] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.859335][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.867350][ T5954] usb 4-1: Product: syz [ 190.871809][ T5954] usb 4-1: Manufacturer: syz [ 190.876431][ T5954] usb 4-1: SerialNumber: syz [ 190.886058][ T5954] usb 4-1: config 0 descriptor?? [ 190.895419][ T5954] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.904755][ T5954] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 190.916490][ T24] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x0 [ 190.924079][ T24] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x0 [ 190.932188][ T24] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x0 [ 190.939719][ T24] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x0 [ 190.947193][ T24] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x0 [ 190.959614][ T24] hid-u2fzero 0003:10C4:8ACF.0010: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 190.980829][ T24] hid-u2fzero 0003:10C4:8ACF.0010: U2F Zero LED initialised [ 190.990004][ T24] hid-u2fzero 0003:10C4:8ACF.0010: U2F Zero RNG initialised [ 191.030523][ T5928] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 191.115356][ T7775] sctp: [Deprecated]: syz.2.548 (pid 7775) Use of int in maxseg socket option. [ 191.115356][ T7775] Use struct sctp_assoc_value instead [ 191.131532][ T5927] usb 3-1: USB disconnect, device number 36 [ 191.193523][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.205691][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.215988][ T5928] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 191.225674][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.238014][ T5928] usb 1-1: config 0 descriptor?? [ 191.495261][ T5954] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 191.502864][ T5954] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 192.007759][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 192.177690][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 192.184585][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.195628][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.205446][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 192.219322][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 192.228687][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.248696][ T24] usb 3-1: config 0 descriptor?? [ 192.255560][ T5928] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 192.325108][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.334449][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.346492][ T5954] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 192.366540][ T5954] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 192.375875][ T5954] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 192.386701][ T5954] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 192.411678][ T5954] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 192.428703][ T5954] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 192.443067][ T5954] usb 4-1: USB disconnect, device number 68 [ 192.674445][ T24] elecom 0003:056E:00FE.0012: item fetching failed at offset 6/70 [ 192.682873][ T24] elecom 0003:056E:00FE.0012: probe with driver elecom failed with error -22 [ 192.878283][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.904033][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.915893][ T24] usb 3-1: USB disconnect, device number 37 [ 193.003412][ T5954] usb 1-1: USB disconnect, device number 61 [ 193.016405][ T7804] tmpfs: Cannot change global quota limit on remount [ 193.086955][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.111368][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.214653][ T7807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.225701][ T7809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.481597][ T7828] netlink: 6 bytes leftover after parsing attributes in process `syz.2.566'. [ 193.613071][ T7837] netdevsim netdevsim2: Direct firmware load for . [ 193.613071][ T7837] failed with error -2 [ 193.624025][ T7837] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 193.624025][ T7837] [ 193.648389][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 193.828511][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 193.836048][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.845041][ T24] usb 4-1: config 5 has an invalid interface number: 103 but max is 0 [ 193.854334][ T24] usb 4-1: config 5 has no interface number 0 [ 193.860532][ T24] usb 4-1: config 5 interface 103 has no altsetting 0 [ 193.871392][ T24] usb 4-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=3c.61 [ 193.880544][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.888716][ T5954] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 193.896417][ T24] usb 4-1: Product: syz [ 193.900697][ T24] usb 4-1: Manufacturer: syz [ 193.905670][ T24] usb 4-1: SerialNumber: syz [ 194.059748][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.070922][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.080784][ T5954] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 194.089892][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.101290][ T5954] usb 1-1: config 0 descriptor?? [ 194.299233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305706][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.331338][ T5954] usbhid 1-1:0.0: can't add hid device: -71 [ 194.347856][ T5954] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.378764][ T5954] usb 1-1: USB disconnect, device number 62 [ 194.475228][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 194.637902][ T24] mct_u232 4-1:5.103: MCT U232 converter detected [ 194.645650][ T24] mct_u232 ttyUSB0: expected endpoint missing [ 194.660555][ T24] usb 4-1: USB disconnect, device number 69 [ 194.680645][ T24] mct_u232 4-1:5.103: device disconnected [ 194.718173][ T5927] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 194.718514][ T5954] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 194.880308][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.887698][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 194.891472][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.909887][ T5954] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.912109][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.920062][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.930247][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.943277][ T5954] usb 1-1: config 0 descriptor?? [ 194.948355][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.963469][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.966027][ T5954] hub 1-1:0.0: USB hub found [ 194.973199][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.974607][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.979463][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 194.997623][ T5927] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.015885][ T5927] usb 3-1: Manufacturer: syz [ 195.035028][ T5927] usb 3-1: config 0 descriptor?? [ 195.152274][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.161506][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.166348][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.169797][ T5954] hub 1-1:0.0: 3 ports detected [ 195.178839][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.186781][ T24] usb 4-1: Product: syz [ 195.196580][ T24] usb 4-1: Manufacturer: syz [ 195.203851][ T24] usb 4-1: SerialNumber: syz [ 195.216768][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.257298][ T5955] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.317630][ T5927] rc_core: IR keymap rc-hauppauge not found [ 195.323573][ T5927] Registered IR keymap rc-empty [ 195.331200][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.357809][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.378654][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 195.385526][ T5954] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 195.397848][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 195.410722][ T5874] Bluetooth: hci2: command 0x0401 tx timeout [ 195.416976][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 195.422814][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.432770][ T5954] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 195.445186][ T5954] usbhid 1-1:0.0: can't add hid device: -71 [ 195.451516][ T5954] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 195.461880][ T7846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.467828][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.470965][ T7846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.501097][ T24] usb 4-1: USB disconnect, device number 70 [ 195.512063][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.517327][ T5954] usb 1-1: USB disconnect, device number 63 [ 195.538229][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.558272][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.577944][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.597839][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.627747][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.649784][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.667824][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.691076][ T5927] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 195.699736][ T5927] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.718105][ T5927] usb 3-1: USB disconnect, device number 38 [ 195.742082][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.756053][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.024142][ T7857] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 196.039059][ T7857] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.289928][ T5955] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 196.312433][ T5955] ath9k_htc: Failed to initialize the device [ 196.325043][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 196.370070][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 196.457702][ T7873] netlink: 763 bytes leftover after parsing attributes in process `syz.2.581'. [ 196.658379][ T5892] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 196.666035][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 196.818694][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 196.830355][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.841620][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.852773][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.862722][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.876735][ T24] usb 4-1: Product: syz [ 196.881473][ T24] usb 4-1: Manufacturer: syz [ 196.886092][ T24] usb 4-1: SerialNumber: syz [ 196.890953][ T5892] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 196.901866][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.916875][ T5892] usb 1-1: config 0 descriptor?? [ 196.928371][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.969097][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.978170][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.987626][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 197.005450][ T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 197.014558][ T9] usb 3-1: config 0 has no interface number 0 [ 197.022483][ T9] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 197.034900][ T9] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 197.050488][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 197.060647][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.068826][ T9] usb 3-1: Product: syz [ 197.073077][ T9] usb 3-1: Manufacturer: syz [ 197.077722][ T9] usb 3-1: SerialNumber: syz [ 197.084857][ T9] usb 3-1: config 0 descriptor?? [ 197.174808][ T43] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 197.175980][ T5928] usb 4-1: USB disconnect, device number 71 [ 197.200388][ T5928] usb 4-1: ath9k_htc: USB layer deinitialized [ 197.292580][ T9] radio-si470x 3-1:0.35: this is not a si470x device. [ 197.341393][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 197.347488][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.358926][ T5892] usb 1-1: USB disconnect, device number 64 [ 197.497888][ T5867] Bluetooth: hci2: command 0x0401 tx timeout [ 197.505795][ T9] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 197.522518][ T9] usb 3-1: USB disconnect, device number 39 [ 197.695467][ T7887] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 198.368604][ T5892] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 198.534282][ T5892] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 198.543585][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.553944][ T5892] usb 4-1: config 0 descriptor?? [ 198.565208][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 199.259090][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 199.267864][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 199.420081][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 199.436661][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 199.436744][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.457648][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 199.471712][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 199.480858][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.493799][ T9] usb 3-1: config 0 descriptor?? [ 199.510105][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 238, changing to 11 [ 199.534324][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 252 [ 199.552963][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 199.562453][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.594631][ T24] usb 1-1: config 0 descriptor?? [ 199.603922][ T5892] gspca_sunplus: reg_w_riv err -110 [ 199.616260][ T5892] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 199.912460][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.929921][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.961313][ T9] wacom 0003:17EF:6004.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 [ 200.019622][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.042022][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.084684][ T24] lg-g15 0003:046D:C222.0014: hidraw1: USB HID v0.08 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 200.153986][ T9] usb 3-1: USB disconnect, device number 40 [ 200.274739][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.289907][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.320365][ T5927] usb 1-1: USB disconnect, device number 65 [ 200.523076][ T7929] netlink: 'syz.0.598': attribute type 21 has an invalid length. [ 200.535829][ T7929] netlink: 388 bytes leftover after parsing attributes in process `syz.0.598'. [ 200.816669][ T7934] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 200.857647][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 200.901372][ T7934] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 201.077651][ T5927] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 201.151503][ T43] usb 4-1: USB disconnect, device number 72 [ 201.180307][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 201.239015][ T5927] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 201.282167][ T5927] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 201.292725][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 201.302687][ T5927] usb 1-1: Product: syz [ 201.306985][ T5927] usb 1-1: Manufacturer: syz [ 201.313597][ T5927] usb 1-1: SerialNumber: syz [ 201.324213][ T5927] usb 1-1: config 0 descriptor?? [ 201.370439][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 201.390630][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 201.400977][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.410293][ T9] usb 3-1: Product: syz [ 201.415029][ T9] usb 3-1: Manufacturer: syz [ 201.422605][ T9] usb 3-1: SerialNumber: syz [ 201.451884][ T9] usb 3-1: config 0 descriptor?? [ 201.474373][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 201.497303][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 201.777760][ T43] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 201.837940][ T9] usb 3-1: USB disconnect, device number 41 [ 201.940108][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.956572][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 201.967098][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.983949][ T43] usb 4-1: config 0 descriptor?? [ 201.990012][ T7950] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.404935][ T43] ryos 0003:1E7D:3138.0015: unknown main item tag 0x4 [ 202.426767][ T43] ryos 0003:1E7D:3138.0015: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 202.683117][ T7964] input: syz1 as /devices/virtual/input/input28 [ 202.881173][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 203.257758][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 203.427651][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 203.434702][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.446153][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.455653][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.469774][ T24] usb 3-1: config 0 descriptor?? [ 203.650097][ T9] usb 1-1: USB disconnect, device number 66 [ 203.697632][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.807504][ T7974] kvm: pic: non byte write [ 203.816094][ T7974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (368 ns). Using initial count to start timer. [ 204.143017][ T9] usb 3-1: USB disconnect, device number 42 [ 204.207946][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 204.357752][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 204.364820][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.373902][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 204.382842][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 204.392033][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.400704][ T24] usb 1-1: Product: syz [ 204.404902][ T24] usb 1-1: Manufacturer: syz [ 204.409577][ T24] usb 1-1: SerialNumber: syz [ 204.488120][ T9] usb 4-1: USB disconnect, device number 73 [ 204.575970][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.615'. [ 204.632295][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.664844][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.702375][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input29 [ 204.743059][ T5216] bcm5974 1-1:1.0: could not read from device [ 204.744119][ T24] usb 1-1: USB disconnect, device number 67 [ 204.758209][ T5216] bcm5974 1-1:1.0: could not read from device [ 205.333300][ T7995] ./file0: Can't lookup blockdev [ 205.431392][ T5867] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 205.442983][ T7999] gfs2: gfs2 mount does not exist [ 205.857779][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 205.917649][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 206.017839][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 206.025391][ T24] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 206.033552][ T24] usb 4-1: config 0 has no interface number 0 [ 206.043069][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 206.047812][ T9] usb 3-1: device descriptor read/64, error -71 [ 206.053504][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.066594][ T24] usb 4-1: Product: syz [ 206.070908][ T24] usb 4-1: Manufacturer: syz [ 206.075531][ T24] usb 4-1: SerialNumber: syz [ 206.082009][ T24] usb 4-1: config 0 descriptor?? [ 206.292444][ T24] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 206.305878][ T24] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 206.307697][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 206.334019][ T24] usb 4-1: USB disconnect, device number 74 [ 206.448196][ T9] usb 3-1: device descriptor read/64, error -71 [ 206.568235][ T9] usb usb3-port1: attempt power cycle [ 206.817660][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 206.908548][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 206.928688][ T9] usb 3-1: device descriptor read/8, error -71 [ 206.979607][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.991429][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.002479][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.013788][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.030157][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.053351][ T8014] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.179032][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 207.208383][ T9] usb 3-1: device descriptor read/8, error -71 [ 207.318034][ T9] usb usb3-port1: unable to enumerate USB device [ 208.496453][ T5867] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 208.562498][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 208.807735][ T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 208.948831][ T9] usb 4-1: device descriptor read/64, error -71 [ 209.197735][ T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 209.337884][ T9] usb 4-1: device descriptor read/64, error -71 [ 209.449859][ T9] usb usb4-port1: attempt power cycle [ 209.505287][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 209.525828][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input30 [ 209.558454][ T10] usb 1-1: USB disconnect, device number 68 [ 209.564447][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 209.680714][ T8048] syzkaller1: entered promiscuous mode [ 209.688812][ T8048] syzkaller1: entered allmulticast mode [ 209.797935][ T9] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 209.829994][ T9] usb 4-1: device descriptor read/8, error -71 [ 210.078073][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 210.119821][ T9] usb 4-1: device descriptor read/8, error -71 [ 210.232778][ T9] usb usb4-port1: unable to enumerate USB device [ 210.787651][ T5954] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 210.946139][ T5954] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 210.955201][ T5954] usb 3-1: config 0 has no interface number 0 [ 210.964202][ T5954] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 210.975961][ T5954] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 210.988110][ T5954] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 210.997284][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.005535][ T5954] usb 3-1: Product: syz [ 211.014400][ T5954] usb 3-1: Manufacturer: syz [ 211.019105][ T5954] usb 3-1: SerialNumber: syz [ 211.026202][ T5954] usb 3-1: config 0 descriptor?? [ 211.246443][ T5954] usb 3-1: USB disconnect, device number 47 [ 211.496392][ T30] audit: type=1804 audit(1758068194.729:13): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.651" name="cgroup.controllers" dev="tmpfs" ino=1007 res=1 errno=0 [ 211.517690][ T30] audit: type=1800 audit(1758068194.729:14): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.651" name="cgroup.controllers" dev="tmpfs" ino=1007 res=0 errno=0 [ 211.781751][ T8090] netlink: 'syz.2.654': attribute type 15 has an invalid length. [ 211.941129][ T8105] nfs: Unknown parameter '' [ 211.990657][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 212.157803][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 212.164642][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.175742][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.185993][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 212.199710][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 212.209587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.221084][ T9] usb 4-1: config 0 descriptor?? [ 212.328070][ T5928] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 212.480688][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 212.488527][ T5928] usb 3-1: can't read configurations, error -61 [ 212.620680][ T5928] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 212.646735][ T5867] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 212.790762][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 212.806724][ T5928] usb 3-1: can't read configurations, error -61 [ 212.813867][ T5928] usb usb3-port1: attempt power cycle [ 212.837040][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 212.843118][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 212.854375][ T9] usb 4-1: USB disconnect, device number 79 [ 213.105349][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 213.114756][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 213.169201][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 213.213453][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.233101][ T5928] usb 3-1: can't read configurations, error -61 [ 213.383304][ T5928] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 213.440504][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.459891][ T5928] usb 3-1: can't read configurations, error -61 [ 213.480093][ T5928] usb usb3-port1: unable to enumerate USB device [ 213.694737][ T8153] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 213.703855][ T8153] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 213.716422][ T8154] netlink: 596 bytes leftover after parsing attributes in process `syz.3.670'. [ 213.721782][ T8153] program syz.3.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.971519][ T8167] overlayfs: failed to resolve './file1/file0': -2 [ 214.537640][ T5928] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 214.687823][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 214.694715][ T5928] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 214.703151][ T5928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.711381][ T5928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.719641][ T5928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.727953][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.736819][ T5928] usb 4-1: config 0 has no interface number 0 [ 214.743562][ T5928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 214.754724][ T5928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 214.764596][ T5928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 214.784438][ T5928] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.798650][ T5928] usb 4-1: config 0 interface 125 has no altsetting 0 [ 214.805435][ T5928] usb 4-1: config 0 interface 125 has no altsetting 2 [ 214.814439][ T5928] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 214.824081][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.832129][ T5928] usb 4-1: Product: syz [ 214.836287][ T5928] usb 4-1: Manufacturer: syz [ 214.841081][ T5928] usb 4-1: SerialNumber: syz [ 214.848229][ T5928] usb 4-1: config 0 descriptor?? [ 214.860004][ T5928] usb 4-1: selecting invalid altsetting 2 [ 215.059938][ C0] usb 4-1: async_complete: urb error -71 [ 215.065716][ C0] usb 4-1: async_complete: urb error -71 [ 215.071430][ C0] usb 4-1: async_complete: urb error -71 [ 215.077093][ C0] usb 4-1: async_complete: urb error -71 [ 215.106146][ T5928] get_1284_register: usb error -71 [ 215.111580][ T5928] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 215.130271][ T5928] usb 4-1: USB disconnect, device number 80 [ 215.499188][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 215.667643][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 215.675697][ T9] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 215.679067][ T8209] tipc: Started in network mode [ 215.687908][ T8209] tipc: Node identity 8aeaea4e03a6, cluster identity 4711 [ 215.689916][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.695310][ T8209] tipc: Enabled bearer , priority 0 [ 215.713720][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.725549][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.735474][ T9] usb 3-1: Product: syz [ 215.741619][ T9] usb 3-1: Manufacturer: syz [ 215.746368][ T9] usb 3-1: SerialNumber: syz [ 215.759899][ T8209] syzkaller0: entered promiscuous mode [ 215.765394][ T8209] syzkaller0: entered allmulticast mode [ 215.773681][ T8209] tipc: Resetting bearer [ 215.967329][ T9] usb 3-1: 0:2 : does not exist [ 215.977318][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 215.992052][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 216.004841][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 216.023031][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 216.034877][ T9] usb 3-1: USB disconnect, device number 52 [ 216.058279][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.089602][ T5928] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 216.219923][ T8220] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 216.228005][ T8220] netlink: 'syz.0.686': attribute type 6 has an invalid length. [ 216.242062][ T8220] dvmrp0: entered allmulticast mode [ 216.247790][ T5928] usb 4-1: device descriptor read/64, error -71 [ 216.465638][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.693'. [ 216.497662][ T5928] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 216.647973][ T5928] usb 4-1: device descriptor read/64, error -71 [ 216.698710][ T8254] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 216.706002][ T8254] cramfs: wrong magic [ 216.707963][ T8255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.698'. [ 216.759309][ T5928] usb usb4-port1: attempt power cycle [ 216.779698][ T9] tipc: Node number set to 2303519310 [ 216.927769][ T5892] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 216.973660][ T24] IPVS: starting estimator thread 0... [ 216.986370][ T8268] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 217.069494][ T8267] IPVS: using max 28 ests per chain, 67200 per kthread [ 217.078082][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 217.084675][ T5892] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 217.093278][ T5892] usb 3-1: config 0 has no interface number 0 [ 217.100434][ T5892] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.112465][ T5892] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 217.117810][ T5928] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 217.121583][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.137117][ T5892] usb 3-1: Product: syz [ 217.141360][ T5892] usb 3-1: Manufacturer: syz [ 217.145955][ T5892] usb 3-1: SerialNumber: syz [ 217.151164][ T5928] usb 4-1: device descriptor read/8, error -71 [ 217.153815][ T5892] usb 3-1: config 0 descriptor?? [ 217.164782][ T5892] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 217.397880][ T5928] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 217.438447][ T5928] usb 4-1: device descriptor read/8, error -71 [ 217.549079][ T5928] usb usb4-port1: unable to enumerate USB device [ 217.974637][ T5892] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 218.180668][ T5892] usb 3-1: USB disconnect, device number 53 [ 218.679415][ T8208] tipc: Resetting bearer [ 218.780278][ T8290] hfsplus: unable to find HFS+ superblock [ 220.066152][ T8208] tipc: Disabling bearer [ 220.217343][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.721'. [ 220.439302][ T8329] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 220.447767][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 220.597734][ T5928] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 220.607647][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 220.615262][ T9] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 220.623468][ T9] usb 4-1: config 0 has no interface number 0 [ 220.629645][ T9] usb 4-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.639514][ T9] usb 4-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.649454][ T9] usb 4-1: config 0 interface 58 has no altsetting 0 [ 220.658700][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 220.668034][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.676024][ T9] usb 4-1: Product: syz [ 220.680675][ T9] usb 4-1: Manufacturer: syz [ 220.686556][ T9] usb 4-1: SerialNumber: syz [ 220.696921][ T9] usb 4-1: config 0 descriptor?? [ 220.702623][ T8323] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.710229][ T8323] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.719899][ T9] ums-isd200 4-1:0.58: USB Mass Storage device detected [ 220.757650][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 220.764577][ T5928] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 220.774697][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.785349][ T5928] usb 3-1: config 0 has no interface number 0 [ 220.793381][ T5928] usb 3-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30 [ 220.804537][ T5928] usb 3-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 220.818064][ T5928] usb 3-1: config 0 interface 54 has no altsetting 0 [ 220.826916][ T5928] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 220.836799][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.844856][ T5928] usb 3-1: Product: syz [ 220.849371][ T5928] usb 3-1: Manufacturer: syz [ 220.854200][ T5928] usb 3-1: SerialNumber: syz [ 220.861506][ T5928] usb 3-1: config 0 descriptor?? [ 220.926207][ T9] scsi host1: usb-storage 4-1:0.58 [ 220.942359][ T9] usb 4-1: USB disconnect, device number 85 [ 221.122712][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.132248][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.152262][ T5928] usb 3-1: USB disconnect, device number 54 [ 221.242789][ T8342] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8342 comm: syz.2.726) [ 221.258870][ T30] audit: type=1800 audit(1758068204.499:15): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=25385 res=0 errno=0 [ 221.473636][ T8348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.727780][ T5954] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 221.753885][ T8358] loop2: detected capacity change from 0 to 8 [ 221.763581][ T5872] Dev loop2: unable to read RDB block 8 [ 221.769465][ T5872] loop2: unable to read partition table [ 221.775387][ T5872] loop2: partition table beyond EOD, truncated [ 221.784809][ T8358] Dev loop2: unable to read RDB block 8 [ 221.791179][ T8358] loop2: unable to read partition table [ 221.796926][ T8358] loop2: partition table beyond EOD, truncated [ 221.803772][ T8358] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 221.881671][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.893515][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.907563][ T5954] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 221.920684][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.931761][ T5954] usb 3-1: config 0 descriptor?? [ 222.267647][ T5928] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 222.351094][ T5954] betop 0003:8380:1850.0016: item fetching failed at offset 0/2 [ 222.359862][ T5954] betop 0003:8380:1850.0016: parse failed [ 222.365639][ T5954] betop 0003:8380:1850.0016: probe with driver betop failed with error -22 [ 222.418058][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 222.425446][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.434919][ T5928] usb 4-1: config 7 has an invalid interface number: 58 but max is 0 [ 222.443064][ T5928] usb 4-1: config 7 has no interface number 0 [ 222.449316][ T5928] usb 4-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 222.460265][ T5928] usb 4-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.473177][ T5928] usb 4-1: config 7 interface 58 has no altsetting 0 [ 222.482451][ T5928] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 222.491561][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.499598][ T5928] usb 4-1: Product: syz [ 222.503784][ T5928] usb 4-1: Manufacturer: syz [ 222.508416][ T5928] usb 4-1: SerialNumber: syz [ 222.558171][ T8345] syz.2.727 (8345) used obsolete PPPIOCDETACH ioctl [ 222.743752][ T10] usb 3-1: USB disconnect, device number 55 [ 222.778342][ T5928] usb 4-1: USB disconnect, device number 86 [ 223.368799][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.391381][ T8395] : renamed from dummy0 (while UP) [ 223.409018][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.597196][ T8403] dvmrp0: entered allmulticast mode [ 223.988571][ T5954] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 224.147617][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 224.154816][ T5954] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 224.169322][ T5954] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 224.186538][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.199484][ T5954] usb 4-1: Product: syz [ 224.206458][ T5954] usb 4-1: Manufacturer: syz [ 224.211459][ T5954] usb 4-1: SerialNumber: syz [ 224.229366][ T8435] netlink: 104 bytes leftover after parsing attributes in process `syz.0.748'. [ 224.437769][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 224.445751][ T5954] pn533_usb 4-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint [ 224.464468][ T5954] usb 4-1: USB disconnect, device number 87 [ 224.561410][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.0.752'. [ 224.575351][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 224.607737][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 224.614639][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 224.623108][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.632951][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.642994][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.653943][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.669305][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.682228][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.897908][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 224.903460][ T43] usbtmc 3-1:16.0: can't read capabilities [ 224.995271][ T8459] netlink: 'syz.0.755': attribute type 21 has an invalid length. [ 225.005575][ T8459] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.755'. [ 225.116911][ T5928] usb 3-1: USB disconnect, device number 56 [ 225.189099][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 225.577643][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 225.727675][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 225.734993][ T10] usb 3-1: config index 0 descriptor too short (expected 29970, got 18) [ 225.745293][ T10] usb 3-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 225.754475][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 225.764274][ T10] usb 3-1: config 0 has no interface number 0 [ 225.770450][ T10] usb 3-1: too many endpoints for config 0 interface 97 altsetting 109: 101, using maximum allowed: 30 [ 225.781584][ T10] usb 3-1: config 0 interface 97 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 225.795064][ T10] usb 3-1: config 0 interface 97 has no altsetting 0 [ 225.804536][ T10] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 225.813704][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.821747][ T10] usb 3-1: Product: syz [ 225.825898][ T10] usb 3-1: Manufacturer: syz [ 225.830519][ T10] usb 3-1: SerialNumber: syz [ 225.837206][ T10] usb 3-1: config 0 descriptor?? [ 226.066231][ T10] usb 3-1: USB disconnect, device number 57 [ 226.837684][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 226.986448][ T8510] fuse: Bad value for 'fd' [ 227.001139][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 227.012408][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 227.022920][ T10] usb 3-1: config 0 has no interface number 0 [ 227.029475][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.042870][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 227.053556][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 227.064572][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.072854][ T10] usb 3-1: Product: syz [ 227.077122][ T10] usb 3-1: Manufacturer: syz [ 227.082062][ T10] usb 3-1: SerialNumber: syz [ 227.089998][ T10] usb 3-1: config 0 descriptor?? [ 227.706516][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 227.718340][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input33 [ 227.747636][ T5954] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 227.907703][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 227.918002][ T5954] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.922229][ T10] usb 3-1: USB disconnect, device number 58 [ 227.927755][ T5954] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 227.927784][ T5954] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 227.927813][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.942043][ T5954] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 227.971244][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.979379][ T5954] usb 4-1: Product: syz [ 227.983547][ T5954] usb 4-1: Manufacturer: syz [ 227.983793][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 227.988940][ T5954] usb 4-1: SerialNumber: syz [ 228.006664][ T5954] usb 4-1: config 0 descriptor?? [ 228.224046][ T5954] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 228.234771][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.247247][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.256394][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.270462][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.298675][ T5875] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.310652][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.340496][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.362145][ T5216] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 228.432475][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.444885][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.503323][ T10] usb 4-1: USB disconnect, device number 88 [ 228.787842][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 228.947672][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 228.954681][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.964186][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.984376][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.994366][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.006215][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.008071][ T8543] fuse: Bad value for 'rootmode' [ 229.036669][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.070889][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.096188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.114919][ T9] usb 3-1: config 0 descriptor?? [ 229.205872][ T8555] netlink: 'syz.3.788': attribute type 16 has an invalid length. [ 229.213856][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'. [ 229.213919][ T8556] netlink: 'syz.3.788': attribute type 16 has an invalid length. [ 229.234414][ T8556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'. [ 229.297376][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.790'. [ 229.344851][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.377077][ T9] usb 3-1: USB disconnect, device number 59 [ 229.391070][ T9] usblp0: removed [ 229.724357][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.739590][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.857639][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 229.967618][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 229.968697][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 230.007611][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 230.014462][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.023006][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.031790][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 230.040920][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.050780][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.060591][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.073687][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 230.082779][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.092757][ T9] usb 3-1: config 0 descriptor?? [ 230.131077][ T981] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.148743][ T981] dvb_usb_dibusb_mc 2-1:5.137: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 230.161816][ T981] dvb-usb: found a 'MSI Digivox Mini SL' in cold state, will try to load a firmware [ 230.172700][ T981] usb 2-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 230.182152][ T981] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 230.303183][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.506172][ T5892] usb 3-1: USB disconnect, device number 60 [ 230.872386][ T8535] usblp0: removed [ 231.427632][ T9] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 231.581456][ T9] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 231.595444][ T9] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 231.606993][ T9] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 231.619670][ T9] usb 4-1: config 150 has no interface number 0 [ 231.626084][ T9] usb 4-1: config 150 interface 204 has no altsetting 0 [ 231.637152][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 231.651641][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.663211][ T9] usb 4-1: Product: syz [ 231.670121][ T9] usb 4-1: Manufacturer: syz [ 231.675035][ T9] usb 4-1: SerialNumber: syz [ 231.787835][ T5928] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 231.910043][ T9] usb 4-1: USB disconnect, device number 89 [ 231.959713][ T5928] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 231.967510][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.986943][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.000157][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 232.011814][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 232.025216][ T5928] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 232.034333][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.045638][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.058506][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 232.070356][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 232.083471][ T5928] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 232.091281][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.102493][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.115380][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 232.127004][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 232.145161][ T5928] usb 3-1: string descriptor 0 read error: -22 [ 232.153015][ T5928] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 232.162545][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.188929][ T5928] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 232.828139][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 232.987822][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 232.999974][ T9] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 233.011228][ T9] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 233.020863][ T9] usb 4-1: config 0 has no interface number 0 [ 233.027071][ T9] usb 4-1: config 0 has no interface number 1 [ 233.039261][ T9] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 233.051540][ T9] usb 4-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 233.064429][ T9] usb 4-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 233.077712][ T9] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 233.089644][ T9] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 233.101700][ T9] usb 4-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.116441][ T9] usb 4-1: config 0 interface 145 has no altsetting 0 [ 233.125759][ T9] usb 4-1: config 0 interface 43 has no altsetting 0 [ 233.136872][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 233.149605][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.160045][ T9] usb 4-1: Product: syz [ 233.164316][ T9] usb 4-1: Manufacturer: syz [ 233.169581][ T9] usb 4-1: SerialNumber: syz [ 233.178395][ T9] usb 4-1: config 0 descriptor?? [ 235.340990][ T8617] sit0: entered promiscuous mode [ 235.353853][ T8617] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 235.366086][ T8617] netlink: 1 bytes leftover after parsing attributes in process `syz.0.809'. [ 235.582010][ T9] keyspan_pda 4-1:0.145: required endpoints missing [ 235.599155][ T9] keyspan_pda 4-1:0.43: Keyspan PDA converter detected [ 235.623726][ T9] usb 4-1: Keyspan PDA converter now attached to ttyUSB0 [ 235.639427][ T9] usb 4-1: USB disconnect, device number 90 [ 235.660254][ T9] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 235.671228][ T9] keyspan_pda 4-1:0.43: device disconnected [ 235.991940][ T8632] netlink: 5820 bytes leftover after parsing attributes in process `syz.1.813'. [ 237.027657][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 237.177684][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 237.184976][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.194627][ T9] usb 4-1: config 8 interface 0 has no altsetting 0 [ 237.202998][ T9] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 237.212103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.220125][ T9] usb 4-1: Product: syz [ 237.224419][ T9] usb 4-1: Manufacturer: syz [ 237.229058][ T9] usb 4-1: SerialNumber: syz [ 237.453734][ T9] usb 4-1: USB disconnect, device number 91 [ 237.537081][ T8663] overlayfs: failed to resolve './bus': -2 [ 237.545971][ T8663] fuse: Bad value for 'fd' [ 237.562513][ T5864] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 237.569836][ T5864] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 238.307620][ T5892] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 238.463002][ T5892] usb 4-1: config index 0 descriptor too short (expected 11538, got 18) [ 238.471901][ T5892] usb 4-1: config 242 has too many interfaces: 106, using maximum allowed: 32 [ 238.487706][ T5892] usb 4-1: config 242 has an invalid descriptor of length 147, skipping remainder of the config [ 238.507639][ T5892] usb 4-1: config 242 has 0 interfaces, different from the descriptor's value: 106 [ 238.529722][ T5892] usb 4-1: New USB device found, idVendor=10b8, idProduct=0002, bcdDevice= 0.00 [ 238.547575][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.560258][ T5892] usb 4-1: Product: syz [ 238.564447][ T5892] usb 4-1: Manufacturer: syz [ 238.570089][ T5892] usb 4-1: SerialNumber: syz [ 238.786601][ T8670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.801461][ T8670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.096648][ T5892] usb 4-1: USB disconnect, device number 92 [ 241.147104][ T8695] 9pnet_fd: p9_fd_create_tcp (8695): problem connecting socket to 127.0.0.1 [ 241.457748][ T5892] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 241.567818][ T5864] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 241.578168][ T5864] Bluetooth: hci0: Injecting HCI hardware error event [ 241.586435][ T5867] Bluetooth: hci0: hardware error 0x00 [ 241.622951][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.631053][ T5892] usb 4-1: can't read configurations, error -61 [ 241.767619][ T5892] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 241.923308][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.935350][ T5892] usb 4-1: can't read configurations, error -61 [ 241.946215][ T5892] usb usb4-port1: attempt power cycle [ 242.295266][ T5892] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 242.314479][ T8699] netlink: 624 bytes leftover after parsing attributes in process `syz.1.834'. [ 242.340632][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 242.354026][ T5892] usb 4-1: can't read configurations, error -61 [ 242.490061][ T5864] Bluetooth: hci0: Malformed LE Event: 0x0d [ 242.499694][ T5892] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 242.530860][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 242.538599][ T5892] usb 4-1: can't read configurations, error -61 [ 242.545188][ T5892] usb usb4-port1: unable to enumerate USB device [ 243.647823][ T5867] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 244.537626][ T5907] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 244.697633][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 244.704425][ T5907] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 244.714448][ T5907] usb 4-1: config 0 has no interface number 0 [ 244.720632][ T5907] usb 4-1: config 0 interface 12 has no altsetting 0 [ 244.730925][ T5907] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 244.740047][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.748887][ T5907] usb 4-1: Product: syz [ 244.753078][ T5907] usb 4-1: Manufacturer: syz [ 244.757816][ T5907] usb 4-1: SerialNumber: syz [ 244.764827][ T5907] usb 4-1: config 0 descriptor?? [ 245.584756][ T8737] overlayfs: failed to clone lowerpath [ 245.980628][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.989499][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.006716][ T5907] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 246.014556][ T5907] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 246.022445][ T5907] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.030660][ T5907] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 246.045698][ T5907] usb 4-1: USB disconnect, device number 97 [ 246.154604][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 246.768102][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.779043][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.787794][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.797315][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.805018][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.830319][ T5954] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 246.987835][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 247.004615][ T5954] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 247.013876][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.021949][ T5954] usb 4-1: Product: syz [ 247.026114][ T5954] usb 4-1: Manufacturer: syz [ 247.030768][ T5954] usb 4-1: SerialNumber: syz [ 247.041425][ T5954] usb 4-1: config 0 descriptor?? [ 247.053800][ T5954] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 247.104657][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 247.195504][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.203520][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.210942][ T8753] bridge_slave_0: entered allmulticast mode [ 247.219259][ T8753] bridge_slave_0: entered promiscuous mode [ 247.228334][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.235506][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.243357][ T8753] bridge_slave_1: entered allmulticast mode [ 247.251234][ T8753] bridge_slave_1: entered promiscuous mode [ 247.261652][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.272983][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.285397][ T8752] program syz.3.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.304586][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.318565][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.359607][ T8753] team0: Port device team_slave_0 added [ 247.368063][ T8753] team0: Port device team_slave_1 added [ 247.403843][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.411683][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.437907][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.450588][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.457601][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.483579][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.542932][ T8753] hsr_slave_0: entered promiscuous mode [ 247.549933][ T8753] hsr_slave_1: entered promiscuous mode [ 247.556373][ T8753] debugfs: 'hsr0' already exists in 'hsr' [ 247.562247][ T8753] Cannot create hsr debugfs directory [ 247.753929][ T8753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.766571][ T8753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.778422][ T8753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.789035][ T8753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.829109][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.836439][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.844854][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.852054][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.938981][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.967026][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.984272][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.006537][ T8753] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.026181][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.033357][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.049460][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.056628][ T4679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.211467][ T5954] gspca_stk1135: reg_w 0x7 err -71 [ 248.239425][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.245802][ T5954] gspca_stk1135: Sensor write failed [ 248.252852][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.265457][ T5954] gspca_stk1135: Sensor write failed [ 248.271666][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.284785][ T5954] gspca_stk1135: Sensor read failed [ 248.291502][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.306043][ T5954] gspca_stk1135: Sensor read failed [ 248.314301][ T5954] gspca_stk1135: Detected sensor type unknown (0x0) [ 248.322314][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.330249][ T5954] gspca_stk1135: Sensor read failed [ 248.344964][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.358175][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.364551][ T5954] gspca_stk1135: Sensor read failed [ 248.375832][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.392976][ T5954] gspca_stk1135: Sensor write failed [ 248.400757][ T5954] gspca_stk1135: serial bus timeout: status=0x00 [ 248.407837][ T5954] gspca_stk1135: Sensor write failed [ 248.413561][ T5954] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 248.438692][ T5954] usb 4-1: USB disconnect, device number 98 [ 248.606906][ T8753] veth0_vlan: entered promiscuous mode [ 248.620518][ T8753] veth1_vlan: entered promiscuous mode [ 248.652973][ T8753] veth0_macvtap: entered promiscuous mode [ 248.665061][ T8753] veth1_macvtap: entered promiscuous mode [ 248.681125][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.698886][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.714438][ T4679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.723485][ T4679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.735346][ T4679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.747378][ T4679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.847979][ T5867] Bluetooth: hci4: command tx timeout [ 248.885593][ T4679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.909659][ T4679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.984696][ T8101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.003977][ T8101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.245356][ T8803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.861'. [ 249.407839][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 249.486697][ T8822] 9pnet_fd: Insufficient options for proto=fd [ 249.558747][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 249.566626][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.587421][ T5927] usb 5-1: config 9 has an invalid interface number: 129 but max is 0 [ 249.597054][ T5927] usb 5-1: config 9 has no interface number 0 [ 249.605319][ T5927] usb 5-1: config 9 interface 129 has no altsetting 0 [ 249.615510][ T5927] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 249.625550][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.637331][ T5927] usb 5-1: Product: syz [ 249.642734][ T5927] usb 5-1: Manufacturer: syz [ 249.647474][ T5927] usb 5-1: SerialNumber: syz [ 249.691292][ T8830] netlink: 192 bytes leftover after parsing attributes in process `syz.0.871'. [ 249.754160][ T8832] netlink: 9 bytes leftover after parsing attributes in process `syz.0.872'. [ 249.768419][ T8832] gretap0: entered promiscuous mode [ 249.785558][ T8832] netlink: 5 bytes leftover after parsing attributes in process `syz.0.872'. [ 249.795135][ T8832] 0{X: renamed from gretap0 [ 249.802894][ T8832] 0{X: left promiscuous mode [ 249.809160][ T8832] 0{X: entered allmulticast mode [ 249.816305][ T8832] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 249.868911][ T5927] usb 5-1: bad CDC descriptors [ 249.895538][ T8835] netlink: 72 bytes leftover after parsing attributes in process `syz.0.873'. [ 249.918637][ T5927] usb 5-1: USB disconnect, device number 2 [ 250.037719][ T8837] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 250.069007][ T8841] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 250.080941][ T8841] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 250.089368][ T8841] CPU: 0 UID: 0 PID: 8841 Comm: syz.3.875 Not tainted syzkaller #0 PREEMPT(full) [ 250.098570][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.108630][ T8841] RIP: 0010:h5_recv+0x146/0x910 [ 250.113507][ T8841] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 4c 5c ab f9 4d 8b 65 00 31 ff 4c 89 [ 250.133117][ T8841] RSP: 0018:ffffc9001a5dfc20 EFLAGS: 00010202 [ 250.139200][ T8841] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 250.147183][ T8841] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 250.155179][ T8841] RBP: ffffc9001a5dfd40 R08: ffff88802eff741f R09: 1ffff11005dfee83 [ 250.163143][ T8841] R10: dffffc0000000000 R11: ffffffff88792fe0 R12: 0000000000000001 [ 250.171097][ T8841] R13: 00000000000002f8 R14: ffff88802eff7410 R15: ffffc9001a5dfde0 [ 250.179061][ T8841] FS: 00007f164681a6c0(0000) GS:ffff8881257a7000(0000) knlGS:0000000000000000 [ 250.187974][ T8841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.194539][ T8841] CR2: 00007f1646819f98 CR3: 000000007a04a000 CR4: 00000000003526f0 [ 250.202497][ T8841] Call Trace: [ 250.205758][ T8841] [ 250.208679][ T8841] ? __pfx_h5_recv+0x10/0x10 [ 250.213263][ T8841] ? rcu_read_lock_any_held+0xb3/0x120 [ 250.218707][ T8841] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 250.224583][ T8841] ? tty_audit_push+0x7c/0x250 [ 250.229333][ T8841] hci_uart_tty_receive+0x194/0x220 [ 250.234522][ T8841] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 250.240228][ T8841] tiocsti+0x23c/0x2c0 [ 250.244292][ T8841] ? __pfx_tiocsti+0x10/0x10 [ 250.248871][ T8841] ? __fget_files+0x3a0/0x420 [ 250.253535][ T8841] ? __fget_files+0x2a/0x420 [ 250.258111][ T8841] tty_ioctl+0x626/0xde0 [ 250.262337][ T8841] ? __pfx_tty_ioctl+0x10/0x10 [ 250.267086][ T8841] __se_sys_ioctl+0xfc/0x170 [ 250.271661][ T8841] do_syscall_64+0xfa/0xfa0 [ 250.276150][ T8841] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.281337][ T8841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.287387][ T8841] ? clear_bhb_loop+0x60/0xb0 [ 250.292047][ T8841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.297947][ T8841] RIP: 0033:0x7f164598eba9 [ 250.302356][ T8841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.321954][ T8841] RSP: 002b:00007f164681a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.330351][ T8841] RAX: ffffffffffffffda RBX: 00007f1645bd6180 RCX: 00007f164598eba9 [ 250.338307][ T8841] RDX: 00002000000003c0 RSI: 0000000000005412 RDI: 0000000000000004 [ 250.346261][ T8841] RBP: 00007f1645a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.354215][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.362169][ T8841] R13: 00007f1645bd6218 R14: 00007f1645bd6180 R15: 00007fff4f4851a8 [ 250.370131][ T8841] [ 250.373133][ T8841] Modules linked in: [ 250.378068][ T8841] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.392609][ T8837] team0: Port device geneve0 removed [ 250.496099][ T8841] RIP: 0010:h5_recv+0x146/0x910 [ 250.504407][ T8841] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 4c 5c ab f9 4d 8b 65 00 31 ff 4c 89 [ 250.524986][ T8841] RSP: 0018:ffffc9001a5dfc20 EFLAGS: 00010202 [ 250.560070][ T8841] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 250.568573][ T8841] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 250.576585][ T8841] RBP: ffffc9001a5dfd40 R08: ffff88802eff741f R09: 1ffff11005dfee83 [ 250.589754][ T8841] R10: dffffc0000000000 R11: ffffffff88792fe0 R12: 0000000000000001 [ 250.599608][ T8841] R13: 00000000000002f8 R14: ffff88802eff7410 R15: ffffc9001a5dfde0 [ 250.612647][ T8841] FS: 00007f164681a6c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 250.622020][ T8841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.630464][ T8841] CR2: 00005595165a6000 CR3: 000000007a04a000 CR4: 00000000003526f0 [ 250.638784][ T8841] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 250.646828][ T8841] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 250.656510][ T8841] Kernel panic - not syncing: Fatal exception [ 250.662729][ T8841] Kernel Offset: disabled [ 250.667050][ T8841] Rebooting in 86400 seconds..