last executing test programs: 10m46.860252809s ago: executing program 2 (id=1637): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x81000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) 10m44.583864875s ago: executing program 2 (id=1640): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b4d, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x3a, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x1, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x9, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x400009a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x3, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x4, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x2, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000006, 0xa, 0x34, 0x2, 0x9, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x8]}) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0xeb, 0x1) 10m43.443030882s ago: executing program 2 (id=1643): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) syz_emit_ethernet(0x46, 0x0, 0x0) 10m42.050760474s ago: executing program 2 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10m39.859194168s ago: executing program 2 (id=1657): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x2523, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, 0x1b2}, &(0x7f00000000c0), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_setup(0x5c08, &(0x7f0000000400)={0x0, 0xd146, 0x400, 0x3, 0x200eb}, &(0x7f0000000100), &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getrusage(0x3, &(0x7f0000000300)) 10m35.256071581s ago: executing program 2 (id=1671): syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 10m34.866941677s ago: executing program 32 (id=1671): syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 10.85803258s ago: executing program 5 (id=3960): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212e7"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.976027759s ago: executing program 4 (id=3967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000fbdbdf250a0000000000000008400100ffffffff"], 0x20}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x3, r5, 'id0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000340)={{0xc, @private=0xa010102, 0x4e22, 0x0, 'none\x00', 0x12, 0x7, 0x63}, {@multicast2, 0x4e23, 0x2000, 0x7ff, 0x1, 0x6}}, 0x44) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.756074858s ago: executing program 5 (id=3973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) 6.256543701s ago: executing program 1 (id=3977): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 6.096239874s ago: executing program 1 (id=3978): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 5.408262685s ago: executing program 5 (id=3981): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.257550817s ago: executing program 4 (id=3982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x50, 0x0, &(0x7f0000000840)="ef93bc94e6b28c651359c7e96fb11b16b58e2374fe61cb9115ed02563feba2ef1f5a41d42b01a2067af897d8d3de03262b6fdbe21a4919e988e2be40ec97a5fb9b6bbd69d2d2d685c67c8c5198348587"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0}) 5.168300939s ago: executing program 4 (id=3983): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.085746476s ago: executing program 1 (id=3985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) 3.632154343s ago: executing program 1 (id=3987): syz_usb_connect(0x2, 0x546, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000872de608110f0020bcc7010203010902340501000000000904e0"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60340, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bind$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd7e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0440, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) 3.614437233s ago: executing program 3 (id=3988): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 3.498824335s ago: executing program 3 (id=3989): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.219845419s ago: executing program 5 (id=3990): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 2.995430073s ago: executing program 5 (id=3991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.813238176s ago: executing program 5 (id=3992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000fbdbdf250a0000000000000008400100ffffffff"], 0x20}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x3, r5, 'id0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000340)={{0xc, @private=0xa010102, 0x4e22, 0x0, 'none\x00', 0x12, 0x7, 0x63}, {@multicast2, 0x4e23, 0x2000, 0x7ff, 0x1, 0x6}}, 0x44) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.734556517s ago: executing program 0 (id=3993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x50, 0x0, &(0x7f0000000840)="ef93bc94e6b28c651359c7e96fb11b16b58e2374fe61cb9115ed02563feba2ef1f5a41d42b01a2067af897d8d3de03262b6fdbe21a4919e988e2be40ec97a5fb9b6bbd69d2d2d685c67c8c5198348587"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x0, 0x0}) 2.593056199s ago: executing program 0 (id=3994): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.204966885s ago: executing program 4 (id=3995): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x6, 0x9, 0x151}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x80, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) 2.026529428s ago: executing program 3 (id=3996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000800000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x4054, &(0x7f0000000040)={0xa, 0x4622, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0xd010) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20, 0x0, r4, {0x0, 0x4, 0xe35, 0x65f638a7}}, 0x20) recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000005c0)=""/230, 0xe6}], 0x2, &(0x7f00000028c0)=""/171, 0xab}, 0x21) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_off}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x7, 0x3, 0x5, 0x6, 0x9, 0x1, {0x400000000001, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.083258053s ago: executing program 0 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.003159834s ago: executing program 3 (id=3998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) 824.236656ms ago: executing program 0 (id=3999): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 772.302448ms ago: executing program 3 (id=4000): r0 = syz_open_procfs(0x0, &(0x7f0000001380)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 723.208368ms ago: executing program 0 (id=4001): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 540.072931ms ago: executing program 3 (id=4002): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r4, &(0x7f0000000940), 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x5, 0xfff, 0x200, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 506.935672ms ago: executing program 0 (id=4003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 336.489854ms ago: executing program 4 (id=4004): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f7", 0x72}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) 292.561315ms ago: executing program 1 (id=4005): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a3000000000040006005c000000030a01"], 0xbc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 167.884257ms ago: executing program 4 (id=4006): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 0s ago: executing program 1 (id=4007): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x42d9, 0xfffff800, 0x1e3, 0xa1c9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fff, 0xffffff56}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffff}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): ew high-speed USB device number 30 using dummy_hcd [ 1113.883132][ T4299] usb 6-1: Using ep0 maxpacket: 32 [ 1113.896388][ T4299] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1114.053172][ T4299] usb 6-1: config 0 has no interface number 0 [ 1114.059451][ T4299] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1114.068918][ T4299] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1114.431950][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.617559][ T4299] usb 6-1: Product: syz [ 1114.631165][ T4299] usb 6-1: Manufacturer: syz [ 1114.635957][ T4299] usb 6-1: SerialNumber: syz [ 1114.656380][ T4299] usb 6-1: config 0 descriptor?? [ 1114.963212][ T126] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1115.143199][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 1115.149912][ T126] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1115.167390][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1115.187997][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1115.208218][ T126] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.237701][ T126] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.253251][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.274243][ T4299] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1115.289015][ T4299] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1115.309505][ T4299] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1115.322544][ T4299] f81534: probe of 6-1:0.12 failed with error -71 [ 1115.352382][ T4299] usb 6-1: USB disconnect, device number 30 [ 1115.501607][ T126] usb 5-1: usb_control_msg returned -71 [ 1115.510321][ T126] usbtmc 5-1:16.0: can't read capabilities [ 1115.540226][ T126] usb 5-1: USB disconnect, device number 57 [ 1115.854735][T16341] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.877508][T16341] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.889073][T16341] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.898561][T16341] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.903202][ T4299] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1115.935875][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.942232][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.142421][ T4299] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1116.162060][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.184878][ T4299] usb 4-1: config 0 descriptor?? [ 1116.357773][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3504'. [ 1116.771560][ T26] audit: type=1326 audit(1750522035.424:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16342 comm="syz.0.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243098e929 code=0x7ffc0000 [ 1116.804814][ T4299] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1116.831767][ T4299] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1116.848385][ T26] audit: type=1326 audit(1750522035.454:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16342 comm="syz.0.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f243092ab19 code=0x7ffc0000 [ 1116.881985][ T26] audit: type=1326 audit(1750522035.454:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16342 comm="syz.0.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243098e929 code=0x7ffc0000 [ 1116.912245][ T26] audit: type=1326 audit(1750522035.454:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16342 comm="syz.0.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f243092ab19 code=0x7ffc0000 [ 1116.941972][ T26] audit: type=1326 audit(1750522035.454:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16342 comm="syz.0.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243098e929 code=0x7ffc0000 [ 1117.023970][ T4299] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1117.044740][ T4299] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1117.269216][ T4299] asix 4-1:0.0 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 1117.306686][ T4299] usb 4-1: USB disconnect, device number 26 [ 1117.327462][ T4299] asix 4-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 1117.913693][ T4350] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1118.113199][ T4350] usb 6-1: Using ep0 maxpacket: 16 [ 1118.122021][ T4350] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 1118.133159][ T126] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1118.174399][ T4350] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1118.211706][ T4350] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1118.232841][ T4350] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1118.247390][ T4350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.261876][ T4350] usb 6-1: Product: syz [ 1118.266465][ T4350] usb 6-1: Manufacturer: syz [ 1118.274085][ T4350] usb 6-1: SerialNumber: syz [ 1118.289129][ T4350] usb 6-1: config 0 descriptor?? [ 1118.300103][ T4350] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1118.323350][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 1118.541581][T16392] tipc: Started in network mode [ 1118.582748][T16392] tipc: Node identity 7f000001, cluster identity 4711 [ 1118.656465][T16392] tipc: New replicast peer: 0.0.0.0 [ 1118.743259][T16392] tipc: Enabled bearer , priority 10 [ 1118.803460][ T4350] ssu100: probe of 6-1:0.0 failed with error -110 [ 1119.287190][ T6302] usb 6-1: USB disconnect, device number 31 [ 1119.836558][ T4299] tipc: Node number set to 2130706433 [ 1121.863747][ T26] kauditd_printk_skb: 277 callbacks suppressed [ 1121.863766][ T26] audit: type=1326 audit(1750522040.524:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1121.906691][ T26] audit: type=1326 audit(1750522040.524:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1121.960708][ T26] audit: type=1326 audit(1750522040.524:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1122.166034][ T26] audit: type=1326 audit(1750522040.524:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1122.166230][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1122.294873][ T126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1122.363029][ T26] audit: type=1326 audit(1750522040.524:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1122.399507][ T126] usb 4-1: can't read configurations, error -71 [ 1122.611972][ T26] audit: type=1326 audit(1750522040.524:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1122.772874][ T26] audit: type=1326 audit(1750522040.524:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1122.889584][ T26] audit: type=1326 audit(1750522040.524:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1123.060764][ T26] audit: type=1326 audit(1750522040.524:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1123.262399][ T26] audit: type=1326 audit(1750522040.524:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1123.383158][ T126] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1123.523332][ T4350] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1123.610547][ T126] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1123.643663][ T126] usb 4-1: config 0 has no interface number 0 [ 1123.681029][ T126] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 1123.721907][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.723272][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 1123.764471][ T126] usb 4-1: config 0 descriptor?? [ 1123.782563][ T4350] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 1123.794148][ T126] lan78xx 4-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 1123.837130][ T4350] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1123.842109][ T126] lan78xx: probe of 4-1:0.168 failed with error -5 [ 1123.933821][ T4350] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1124.034765][ T4350] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1124.054488][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.073771][ T4350] usb 5-1: Product: syz [ 1124.078188][ T4350] usb 5-1: Manufacturer: syz [ 1124.082784][ T4350] usb 5-1: SerialNumber: syz [ 1124.098161][ T4350] usb 5-1: config 0 descriptor?? [ 1124.119499][ T4350] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1124.312265][ T4350] ssu100: probe of 5-1:0.0 failed with error -32 [ 1124.838191][ T4350] usb 5-1: USB disconnect, device number 58 [ 1125.002777][T16483] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.035411][T16483] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.070795][T16483] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.111956][T16483] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.441558][T16491] loop1: detected capacity change from 0 to 2048 [ 1125.514753][T16492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1126.155823][T16491] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1126.165150][T16491] Remounting filesystem read-only [ 1126.283157][ T7] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1126.325976][T15122] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1126.385976][ T5537] usb 4-1: USB disconnect, device number 28 [ 1126.493136][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 1126.500182][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.517937][ T7] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.529701][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.542564][ T7] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1126.551840][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.561838][ T7] usb 5-1: config 0 descriptor?? [ 1127.002551][ T7] hid-generic 0003:28DE:1205.0007: unknown main item tag 0x0 [ 1127.013146][ T7] hid-generic 0003:28DE:1205.0007: unknown main item tag 0x0 [ 1127.024409][ T7] hid-generic 0003:28DE:1205.0007: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 1127.182402][ T4299] usb 5-1: USB disconnect, device number 59 [ 1127.305943][T16522] fido_id[16522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1127.664398][T16506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3538'. [ 1127.900581][T16519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3538'. [ 1128.327480][T16538] xt_policy: too many policy elements [ 1128.733455][ T4299] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1128.924796][ T4299] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.948283][ T4299] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1128.964099][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.988728][ T4299] usb 6-1: config 0 descriptor?? [ 1129.007309][ T4299] pwc: Askey VC010 type 2 USB webcam detected. [ 1129.243236][ T4350] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1129.409514][ T4299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1129.421455][ T4299] pwc: recv_control_msg error -32 req 02 val 2700 [ 1129.435178][ T4350] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1129.454484][ T4299] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1129.461977][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.470245][ T4299] pwc: recv_control_msg error -32 req 04 val 1000 [ 1129.479660][ T4350] usb 4-1: config 0 descriptor?? [ 1129.488282][ T4299] pwc: recv_control_msg error -32 req 04 val 1300 [ 1129.496202][ T4299] pwc: recv_control_msg error -32 req 04 val 1400 [ 1129.504035][ T4299] pwc: recv_control_msg error -32 req 02 val 2000 [ 1129.511525][ T4299] pwc: recv_control_msg error -32 req 02 val 2100 [ 1129.719379][ T4299] pwc: recv_control_msg error -71 req 02 val 2500 [ 1129.723830][ T7] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1129.735126][ T4299] pwc: recv_control_msg error -71 req 02 val 2400 [ 1129.741993][ T4299] pwc: recv_control_msg error -71 req 02 val 2600 [ 1129.749594][ T4299] pwc: recv_control_msg error -71 req 02 val 2900 [ 1129.756657][ T4299] pwc: recv_control_msg error -71 req 02 val 2800 [ 1129.763735][ T4299] pwc: recv_control_msg error -71 req 04 val 1100 [ 1129.770630][ T4299] pwc: recv_control_msg error -71 req 04 val 1200 [ 1129.778032][ T4299] pwc: Registered as video103. [ 1129.785351][ T4299] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 1129.799943][ T4299] usb 6-1: USB disconnect, device number 32 [ 1129.913469][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1129.922430][ T7] usb 2-1: config index 0 descriptor too short (expected 59154, got 18) [ 1129.931089][ T7] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1129.947788][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1129.959866][ T7] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1129.970709][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.993756][ T7] usb 2-1: Product: syz [ 1129.998290][ T7] usb 2-1: Manufacturer: syz [ 1130.009901][ T7] usb 2-1: SerialNumber: syz [ 1130.017849][ T7] usb 2-1: config 0 descriptor?? [ 1130.032726][ T7] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1130.100048][ T4350] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1130.112107][ T4350] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1130.228267][ T7] ssu100: probe of 2-1:0.0 failed with error -32 [ 1130.283508][ T4350] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1130.304884][ T4350] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1130.660425][T16582] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.679499][T16582] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.690104][T16582] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.699977][T16582] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.727612][ T4350] asix 4-1:0.0 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 1130.741583][ T4350] usb 4-1: USB disconnect, device number 29 [ 1130.748322][ T4350] asix 4-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 1130.773924][ T7] usb 2-1: USB disconnect, device number 45 [ 1131.153136][ T4350] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1131.323172][ T7] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1131.343145][ T4350] usb 4-1: Using ep0 maxpacket: 8 [ 1131.362886][ T4350] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1131.399456][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.409601][ T4350] usb 4-1: Product: syz [ 1131.419990][ T4350] usb 4-1: Manufacturer: syz [ 1131.427413][ T4350] usb 4-1: SerialNumber: syz [ 1131.516901][ T4350] usb 4-1: config 0 descriptor?? [ 1131.526706][ T4350] gspca_main: se401-2.14.0 probing 047d:5003 [ 1131.622246][T16601] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1132.361759][ T7] usb 2-1: config 0 has no interfaces? [ 1132.453655][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1132.470416][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.483498][ T7] usb 2-1: Product: syz [ 1132.488213][ T7] usb 2-1: Manufacturer: syz [ 1132.492966][ T7] usb 2-1: SerialNumber: syz [ 1132.504026][ T4350] gspca_se401: ExtraFeatures: 255 [ 1132.509476][ T4350] gspca_se401: Too many frame sizes [ 1132.510195][ T7] usb 2-1: config 0 descriptor?? [ 1132.712040][ T7] usb 4-1: USB disconnect, device number 30 [ 1133.026477][T16619] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1133.037497][T16619] fuse: Bad value for 'fd' [ 1133.909737][T16629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1134.178945][ T4300] usb 2-1: USB disconnect, device number 46 [ 1134.312729][T16637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1134.403413][ T7] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1134.595862][ T7] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1134.609951][ T7] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1134.650199][ T7] usb 6-1: config 0 has no interface number 0 [ 1134.676605][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1134.693770][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.703986][ T7] usb 6-1: Product: syz [ 1134.708279][ T7] usb 6-1: Manufacturer: syz [ 1134.724253][ T7] usb 6-1: SerialNumber: syz [ 1134.742634][ T7] usb 6-1: config 0 descriptor?? [ 1134.971314][ T7] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1134.998430][ T7] usb 6-1: No valid video chain found. [ 1135.020716][ T7] usb 6-1: USB disconnect, device number 33 [ 1135.062041][T16658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1135.413174][T11652] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1135.469738][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.477081][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.573245][T11652] usb 5-1: device descriptor read/64, error -71 [ 1135.843146][T11652] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1135.901058][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.936789][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.953447][ T4299] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1136.003142][T11652] usb 5-1: device descriptor read/64, error -71 [ 1136.123456][T11652] usb usb5-port1: attempt power cycle [ 1136.163188][ T4299] usb 6-1: Using ep0 maxpacket: 16 [ 1136.170240][ T4299] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1136.180980][ T4299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.192758][ T4299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.214837][ T4299] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.224868][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.243599][ T4299] usb 6-1: Product: syz [ 1136.247833][ T4299] usb 6-1: Manufacturer: syz [ 1136.256794][ T4299] usb 6-1: SerialNumber: syz [ 1136.456203][T16667] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.465529][T16667] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.475093][T16667] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.484298][T16667] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.535394][T11652] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1136.589216][T11652] usb 5-1: device descriptor read/8, error -71 [ 1136.698497][ T4299] usb 6-1: 0:2 : does not exist [ 1136.863266][T11652] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1136.903338][T16583] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1136.911948][T11652] usb 5-1: device descriptor read/8, error -71 [ 1137.043359][T11652] usb usb5-port1: unable to enumerate USB device [ 1137.097869][T16583] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1137.112318][ T4299] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1137.131192][T16583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.166433][ T4299] usb 6-1: USB disconnect, device number 34 [ 1137.177917][T16583] usb 4-1: config 0 descriptor?? [ 1137.188784][T16583] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1137.341593][T16689] vivid-007: ================= START STATUS ================= [ 1137.356688][T16689] vivid-007: Enable Output Cropping: true [ 1137.378010][T16689] vivid-007: Enable Output Composing: true [ 1137.399210][T16689] vivid-007: Enable Output Scaler: true [ 1137.436398][T16689] vivid-007: Tx RGB Quantization Range: Automatic [ 1137.470274][T16689] vivid-007: Transmit Mode: HDMI [ 1137.490714][T16689] vivid-007: Display Present: true inactive [ 1137.500689][T16689] vivid-007: Hotplug Present: 0x00000001 [ 1137.510943][T16689] vivid-007: RxSense Present: 0x00000001 [ 1137.516997][T16689] vivid-007: EDID Present: 0x00000001 [ 1137.522639][T16689] vivid-007: ================== END STATUS ================== [ 1137.807924][T16694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1138.654031][T16583] usb 4-1: USB disconnect, device number 31 [ 1139.026431][T16702] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1140.017126][T16583] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1140.183257][T16583] usb 6-1: device descriptor read/64, error -71 [ 1140.463211][T16583] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1140.634164][T16583] usb 6-1: device descriptor read/64, error -71 [ 1140.763308][T16583] usb usb6-port1: attempt power cycle [ 1141.121385][T16739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1141.183296][T16583] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1141.251353][T16583] usb 6-1: device descriptor read/8, error -71 [ 1141.263564][ T126] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1141.423153][ T126] usb 2-1: device descriptor read/64, error -71 [ 1141.444657][ T4264] Bluetooth: Frame is too long (len 16, expected len 4) [ 1141.543208][T11652] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1141.609618][T16583] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1141.655960][T16583] usb 6-1: device descriptor read/8, error -71 [ 1141.693569][ T126] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1141.731469][T16747] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3615'. [ 1141.776098][T16583] usb usb6-port1: unable to enumerate USB device [ 1142.333239][T11652] usb 4-1: Using ep0 maxpacket: 16 [ 1142.341349][T11652] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.439362][T11652] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 1 [ 1142.453190][ T126] usb 2-1: device descriptor read/64, error -71 [ 1142.472634][T11652] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1142.521612][T11652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.551314][T11652] usb 4-1: Product: syz [ 1142.560656][T11652] usb 4-1: Manufacturer: syz [ 1142.567290][T11652] usb 4-1: SerialNumber: syz [ 1142.573705][ T126] usb usb2-port1: attempt power cycle [ 1143.003190][ T126] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1143.039958][T11652] usb 4-1: USB disconnect, device number 32 [ 1143.053755][ T126] usb 2-1: device descriptor read/8, error -71 [ 1143.323145][ T126] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1143.363881][ T126] usb 2-1: device descriptor read/8, error -71 [ 1143.483343][ T126] usb usb2-port1: unable to enumerate USB device [ 1143.633136][T11652] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1143.813140][T11652] usb 6-1: Using ep0 maxpacket: 8 [ 1143.820016][T11652] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1143.829011][T11652] usb 6-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1143.839561][T11652] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.853110][T11652] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1143.862644][T11652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.897423][T11652] usbtmc 6-1:16.0: bulk endpoints not found [ 1144.082381][T16773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1144.635140][T16784] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1144.743906][ T4350] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1145.205208][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1145.218048][ T4350] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1145.235072][ T4350] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1145.244836][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.254131][ T4350] usb 2-1: Product: syz [ 1145.261705][ T4350] usb 2-1: Manufacturer: syz [ 1145.320247][ T4350] usb 2-1: SerialNumber: syz [ 1145.344925][ T4350] usb 2-1: config 0 descriptor?? [ 1145.350972][T16779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1145.358860][T16779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1145.367656][ T4350] usb 2-1: ucan: probing device on interface #0 [ 1145.374151][ T4350] usb 2-1: ucan: invalid EP count (1) [ 1145.379572][ T4350] usb 2-1: ucan: probe failed; try to update the device firmware [ 1145.713296][ T4350] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1145.873272][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1146.153299][ T4350] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1146.313276][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1146.375100][ T4299] usb 6-1: USB disconnect, device number 39 [ 1146.443507][ T4350] usb usb4-port1: attempt power cycle [ 1146.813410][ T4299] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1146.863173][ T4350] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1146.905256][ T4350] usb 4-1: device descriptor read/8, error -71 [ 1146.938758][T16798] sctp: [Deprecated]: syz.4.3631 (pid 16798) Use of int in maxseg socket option. [ 1146.938758][T16798] Use struct sctp_assoc_value instead [ 1147.004658][ T4299] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1147.021498][ T4299] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1147.041854][ T4299] usb 6-1: config 0 has no interface number 0 [ 1147.060408][ T4299] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1147.080298][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.100255][ T4299] usb 6-1: Product: syz [ 1147.107809][ T4299] usb 6-1: Manufacturer: syz [ 1147.120434][ T4299] usb 6-1: SerialNumber: syz [ 1147.132181][ T4299] usb 6-1: config 0 descriptor?? [ 1147.194787][ T4350] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1147.243945][ T4350] usb 4-1: device descriptor read/8, error -71 [ 1147.355998][ T4299] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1147.371836][ T4299] usb 6-1: No valid video chain found. [ 1147.377870][ T4350] usb usb4-port1: unable to enumerate USB device [ 1147.416417][ T4299] usb 6-1: USB disconnect, device number 40 [ 1147.466234][ T126] usb 2-1: USB disconnect, device number 51 [ 1147.545105][T16797] syz.4.3631 (16797): drop_caches: 2 [ 1147.938764][T16806] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1147.993399][ T4299] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1148.003305][ T126] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1148.195284][ T4299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.226853][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 1148.263188][ T4299] usb 5-1: config 0 has no interfaces? [ 1148.269088][ T4299] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1148.301194][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.324512][ T4299] usb 5-1: config 0 descriptor?? [ 1148.536778][T11652] usb 5-1: USB disconnect, device number 64 [ 1148.733350][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.746590][T16817] input: syz0 as /devices/virtual/input/input47 [ 1149.723130][ T4299] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1149.923156][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 1149.930310][ T4299] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1150.023120][ T4299] usb 5-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1150.059458][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.166264][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1150.207540][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.248865][ T4299] usbtmc 5-1:16.0: bulk endpoints not found [ 1150.352186][T16837] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1150.387094][T16837] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1150.510364][T16841] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1151.402331][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1151.403893][ T126] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1151.403930][ T126] usb 2-1: can't read configurations, error -71 [ 1151.923234][T11652] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1152.073331][T11652] usb 6-1: device descriptor read/64, error -71 [ 1152.133165][ T7] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1152.333627][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1152.346551][ T7] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1152.357479][T11652] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1152.377800][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1152.394366][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1152.488032][ T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1152.513357][T11652] usb 6-1: device descriptor read/64, error -71 [ 1152.527727][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.555166][ T126] usb 5-1: USB disconnect, device number 65 [ 1152.569583][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 1152.582967][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 1152.602096][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 1152.615864][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 1152.627734][ T7] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1152.644972][T11652] usb usb6-port1: attempt power cycle [ 1152.875240][ T7] usb 4-1: USB disconnect, device number 37 [ 1153.021112][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1153.053441][T11652] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1153.113781][T11652] usb 6-1: device descriptor read/8, error -71 [ 1153.233471][ T7] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1153.393386][T11652] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1153.423242][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1153.432547][ T7] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1153.447684][T11652] usb 6-1: device descriptor read/8, error -71 [ 1153.498956][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1153.518577][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1153.536196][ T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1153.554396][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.571989][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 1153.580149][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 1153.586643][T11652] usb usb6-port1: unable to enumerate USB device [ 1153.594587][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 1153.599861][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 1153.619830][ T7] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1153.653151][ T4350] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1153.843241][ T4350] usb 2-1: Using ep0 maxpacket: 16 [ 1153.883318][ T7] usb 4-1: USB disconnect, device number 38 [ 1155.083149][ T7] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1155.274739][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.319381][ T7] usb 6-1: config 0 has no interfaces? [ 1155.367100][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1155.393999][T11652] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1155.422798][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.444758][ T7] usb 6-1: config 0 descriptor?? [ 1155.605866][T11652] usb 5-1: Using ep0 maxpacket: 32 [ 1155.625047][T11652] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1155.649301][T11652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.672483][T11652] usb 5-1: config 0 has no interface number 0 [ 1155.680858][ T7] usb 6-1: USB disconnect, device number 45 [ 1155.692663][T11652] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1155.708833][T11652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.723196][T11652] usb 5-1: Product: syz [ 1155.746979][T11652] usb 5-1: Manufacturer: syz [ 1155.773331][T11652] usb 5-1: SerialNumber: syz [ 1155.828228][T11652] usb 5-1: config 0 descriptor?? [ 1156.282001][T16914] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1157.313159][ T4350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1157.329151][ T4350] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1157.339425][ T4350] usb 2-1: can't read configurations, error -71 [ 1158.133309][ T4299] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1158.333195][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 1158.340228][ T4299] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1158.391574][ T4299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1158.423700][ T4299] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.448714][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.477153][ T4299] usb 4-1: Product: syz [ 1158.491516][ T4299] usb 4-1: Manufacturer: syz [ 1158.497190][ T4299] usb 4-1: SerialNumber: syz [ 1158.726537][ T4299] usb 4-1: 0:2 : does not exist [ 1158.736539][ T4299] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1158.802584][ T4299] usb 4-1: USB disconnect, device number 39 [ 1159.065891][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.100108][ T126] usb 5-1: USB disconnect, device number 66 [ 1159.376550][T16953] netlink: 'syz.3.3676': attribute type 1 has an invalid length. [ 1159.523229][T11652] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1159.734694][T11652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.750488][T11652] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1159.761360][T11652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.780327][T11652] usb 6-1: config 0 descriptor?? [ 1159.792371][T11652] pwc: Askey VC010 type 2 USB webcam detected. [ 1159.930347][T16957] vivid-007: ================= START STATUS ================= [ 1159.955860][T16957] vivid-007: Enable Output Cropping: true [ 1159.980319][T16957] vivid-007: Enable Output Composing: true [ 1159.986597][T16957] vivid-007: Enable Output Scaler: true [ 1159.994950][T16957] vivid-007: Tx RGB Quantization Range: Automatic [ 1160.006910][T16957] vivid-007: Transmit Mode: HDMI [ 1160.012970][T16957] vivid-007: Display Present: true inactive [ 1160.020053][T16957] vivid-007: Hotplug Present: 0x00000001 [ 1160.035998][T16957] vivid-007: RxSense Present: 0x00000001 [ 1160.042543][T16957] vivid-007: EDID Present: 0x00000001 [ 1160.069595][T16957] vivid-007: ================== END STATUS ================== [ 1160.208170][T11652] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1160.216597][T11652] pwc: recv_control_msg error -32 req 02 val 2700 [ 1160.251067][T11652] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1160.268940][T11652] pwc: recv_control_msg error -32 req 04 val 1000 [ 1160.283948][T11652] pwc: recv_control_msg error -32 req 04 val 1300 [ 1160.299637][T11652] pwc: recv_control_msg error -32 req 04 val 1400 [ 1160.311765][T11652] pwc: recv_control_msg error -32 req 02 val 2000 [ 1160.330476][T11652] pwc: recv_control_msg error -32 req 02 val 2100 [ 1160.345490][T11652] pwc: recv_control_msg error -32 req 04 val 1500 [ 1160.562389][T11652] pwc: recv_control_msg error -71 req 02 val 2400 [ 1160.587341][T11652] pwc: recv_control_msg error -71 req 02 val 2600 [ 1160.634019][T11652] pwc: recv_control_msg error -71 req 02 val 2900 [ 1160.658198][T11652] pwc: recv_control_msg error -71 req 02 val 2800 [ 1160.697480][T11652] pwc: recv_control_msg error -71 req 04 val 1100 [ 1160.743498][T11652] pwc: recv_control_msg error -71 req 04 val 1200 [ 1160.770805][T11652] pwc: Registered as video103. [ 1160.801863][T11652] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 1160.919061][T11652] usb 6-1: USB disconnect, device number 46 [ 1161.783191][ T4299] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1162.063262][ T4350] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1162.107756][ T4299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1162.119494][ T4299] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1162.129022][ T4299] usb 4-1: can't read configurations, error -71 [ 1162.243151][ T4350] usb 2-1: Using ep0 maxpacket: 32 [ 1162.250089][ T4350] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1162.264928][ T4350] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1162.274718][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.285241][ T4350] usb 2-1: config 0 descriptor?? [ 1162.498507][T16988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.512941][T16988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.527216][ T4350] usbhid 2-1:0.0: can't add hid device: -71 [ 1162.538863][ T26] kauditd_printk_skb: 162 callbacks suppressed [ 1162.538878][ T26] audit: type=1326 audit(1750522081.194:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.590990][ T4350] usbhid: probe of 2-1:0.0 failed with error -71 [ 1162.600967][ T26] audit: type=1326 audit(1750522081.234:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.672030][ T26] audit: type=1326 audit(1750522081.234:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.687696][ T4350] usb 2-1: USB disconnect, device number 56 [ 1162.806923][ T26] audit: type=1326 audit(1750522081.234:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.882501][ T26] audit: type=1326 audit(1750522081.234:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.908886][ T26] audit: type=1326 audit(1750522081.244:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.931682][ T26] audit: type=1326 audit(1750522081.244:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.954753][ T26] audit: type=1326 audit(1750522081.254:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1162.986267][ T26] audit: type=1326 audit(1750522081.254:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1163.013004][ T26] audit: type=1326 audit(1750522081.254:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.5.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1163.393141][T11652] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1164.123249][T11652] usb 5-1: Using ep0 maxpacket: 16 [ 1164.153793][T11652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1164.199748][T11652] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1164.216116][T11652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.236146][T11652] usb 5-1: config 0 descriptor?? [ 1164.443152][ T129] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1164.454383][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1164.489850][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1164.565941][T11652] usb 5-1: string descriptor 0 read error: -71 [ 1164.596731][T11652] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input50 [ 1164.714320][ T3608] bcm5974 5-1:0.0: could not read from device [ 1164.775673][ T129] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1164.785584][T11652] usb 5-1: USB disconnect, device number 67 [ 1165.724775][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.742000][ T129] usb 4-1: config 0 descriptor?? [ 1165.798773][ T129] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1166.493308][T11652] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1166.673206][T11652] usb 6-1: Using ep0 maxpacket: 32 [ 1166.693404][T11652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1166.700347][T11652] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1166.709851][T11652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.727807][T11652] usb 6-1: config 0 descriptor?? [ 1166.739971][T17045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3704'. [ 1166.947422][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.975510][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.004307][T11652] usbhid 6-1:0.0: can't add hid device: -71 [ 1167.010347][T11652] usbhid: probe of 6-1:0.0 failed with error -71 [ 1167.079840][T11652] usb 6-1: USB disconnect, device number 47 [ 1167.353424][ T4299] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1167.362178][ T129] usb 4-1: USB disconnect, device number 42 [ 1167.703370][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 1167.712753][ T4299] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1167.733905][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.742065][ T4299] usb 5-1: Product: syz [ 1167.753448][ T4299] usb 5-1: Manufacturer: syz [ 1167.758395][ T4299] usb 5-1: SerialNumber: syz [ 1167.770800][ T4299] usb 5-1: config 0 descriptor?? [ 1168.190964][ T4299] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1168.211001][ T4299] gspca_sunplus: reg_w_riv err -71 [ 1168.237826][ T4299] sunplus: probe of 5-1:0.0 failed with error -71 [ 1168.248740][ T4299] usb 5-1: USB disconnect, device number 68 [ 1169.176905][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 1169.314455][T17084] loop1: detected capacity change from 0 to 2048 [ 1169.363368][T17085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1171.133328][ T4350] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1171.213140][T16583] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1171.265881][ T129] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1171.315439][ T4350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.332999][ T4350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.352548][ T4350] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1171.364301][ T4350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.382692][ T4350] usb 5-1: config 0 descriptor?? [ 1171.393153][T16583] usb 4-1: Using ep0 maxpacket: 32 [ 1171.399763][T16583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1171.412247][T16583] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1171.422000][T16583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.435964][T16583] usb 4-1: config 0 descriptor?? [ 1171.463149][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 1171.472282][ T129] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1171.481688][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.489895][ T129] usb 6-1: Product: syz [ 1171.494345][ T129] usb 6-1: Manufacturer: syz [ 1171.499072][ T129] usb 6-1: SerialNumber: syz [ 1171.512636][ T129] usb 6-1: config 0 descriptor?? [ 1171.648608][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.670432][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.699521][T16583] usbhid 4-1:0.0: can't add hid device: -71 [ 1171.709076][T16583] usbhid: probe of 4-1:0.0 failed with error -71 [ 1171.730132][ T129] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1171.753245][ T129] gspca_sunplus: reg_w_riv err -71 [ 1171.758469][T16583] usb 4-1: USB disconnect, device number 43 [ 1171.765807][ T129] sunplus: probe of 6-1:0.0 failed with error -71 [ 1171.810476][ T129] usb 6-1: USB disconnect, device number 48 [ 1172.103275][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1172.435564][ T4350] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 1172.445331][ T4350] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 1172.454227][ T4350] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 1172.462366][ T4350] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 1172.469932][ T4350] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 1172.473421][ T7] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1172.480012][ T4350] usb 5-1: USB disconnect, device number 69 [ 1173.243215][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1173.249922][ T7] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1173.262990][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1173.281553][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.290726][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.299078][ T7] usb 2-1: Product: syz [ 1173.313314][ T7] usb 2-1: Manufacturer: syz [ 1173.317927][ T7] usb 2-1: SerialNumber: syz [ 1173.528961][ T7] usb 2-1: 0:2 : does not exist [ 1173.546910][ T7] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1173.554259][T11652] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1173.583315][ T7] usb 2-1: USB disconnect, device number 57 [ 1173.650015][ T126] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1173.749196][T11652] usb 6-1: Using ep0 maxpacket: 8 [ 1173.756367][T11652] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1173.773336][T11652] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1173.782659][T11652] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1173.796334][T11652] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1173.805638][T11652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.815512][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.852764][T11652] hub 6-1:1.0: bad descriptor, ignoring hub [ 1173.859623][T11652] hub: probe of 6-1:1.0 failed with error -5 [ 1173.873295][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 1173.879790][T11652] cdc_wdm 6-1:1.0: skipping garbage [ 1173.901987][T11652] cdc_wdm 6-1:1.0: skipping garbage [ 1173.935159][T11652] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1174.097439][T17136] loop0: detected capacity change from 0 to 2048 [ 1174.135986][T17139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1174.186514][ T7] usb 6-1: USB disconnect, device number 49 [ 1174.554899][ T7] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1174.773192][T11652] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1174.903170][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1174.910274][ T7] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1174.953269][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1174.991156][T11652] usb 2-1: config 0 has no interfaces? [ 1175.012464][T11652] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1175.024424][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.037584][T11652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.046000][T11652] usb 2-1: Product: syz [ 1175.050240][ T7] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1175.059773][T11652] usb 2-1: Manufacturer: syz [ 1175.069250][T11652] usb 2-1: SerialNumber: syz [ 1175.104653][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.114791][T11652] usb 2-1: config 0 descriptor?? [ 1175.124800][ T7] hub 6-1:1.0: bad descriptor, ignoring hub [ 1175.134015][ T7] hub: probe of 6-1:1.0 failed with error -5 [ 1175.140545][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 1175.150150][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 1175.164061][ T7] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1175.324387][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1175.443369][ T7] usb 6-1: USB disconnect, device number 50 [ 1175.623162][ T7] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1175.639427][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1175.676407][T17145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.691776][T17145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.813434][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 1175.821674][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1175.837329][ T7] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1175.877094][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.902723][T11652] usb 2-1: USB disconnect, device number 58 [ 1175.926896][ T7] usb 4-1: config 0 descriptor?? [ 1176.178266][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.191860][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.205480][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 1176.212850][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 1176.223146][ T4350] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1176.256674][ T7] usb 4-1: USB disconnect, device number 44 [ 1176.310657][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1176.323563][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1176.331785][ T126] usb 5-1: can't read configurations, error -71 [ 1176.505148][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1176.521732][ T4350] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1176.536797][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.549656][ T4350] usb 6-1: config 0 descriptor?? [ 1176.560958][T17159] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1177.201783][ T4350] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1177.375348][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.381729][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.401471][ T7] usb 6-1: USB disconnect, device number 51 [ 1177.510912][T17165] fido_id[17165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1177.673228][ T126] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1177.864768][ T126] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1177.883500][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.926477][ T126] usb 5-1: config 0 descriptor?? [ 1178.538560][ T126] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1178.582396][ T126] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1178.654679][T17189] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1178.813497][ T126] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1178.912584][ T126] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1179.096171][ T126] asix 5-1:0.0 eth5: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 1179.124791][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1179.147498][ T126] usb 5-1: USB disconnect, device number 71 [ 1179.162794][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1179.169088][ T126] asix 5-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 1179.213313][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1179.314361][T17199] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.333349][T17199] binder: 17191:17199 ioctl 4018620d 200000000040 returned -16 [ 1179.453382][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 1180.212428][ T7] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1180.453262][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 1181.146611][T17231] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1181.213202][ T6302] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1181.413209][ T6302] usb 6-1: Using ep0 maxpacket: 32 [ 1181.420203][ T6302] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1181.438440][ T6302] usb 6-1: config 0 has no interface number 0 [ 1181.451416][ T6302] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1181.479517][ T6302] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1181.525233][ T6302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.550409][ T6302] usb 6-1: Product: syz [ 1181.561304][ T6302] usb 6-1: Manufacturer: syz [ 1181.575905][ T6302] usb 6-1: SerialNumber: syz [ 1181.600458][ T6302] usb 6-1: config 0 descriptor?? [ 1182.222563][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1182.230159][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1182.237786][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1182.245285][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1182.252657][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1182.261976][ T6302] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1182.279639][ T6302] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1182.311008][ T6302] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1182.333605][ T6302] f81534: probe of 6-1:0.12 failed with error -71 [ 1182.356959][ T6302] usb 6-1: USB disconnect, device number 52 [ 1182.959901][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1182.975467][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1182.983456][ T7] usb 4-1: can't read configurations, error -71 [ 1183.830420][ T6302] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1183.917267][ T126] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1184.023376][ T7] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1184.032899][ T6302] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1184.049469][ T6302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.072879][ T6302] usb 6-1: config 0 descriptor?? [ 1184.082828][ T6302] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1184.125533][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1184.148206][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1184.169394][ T126] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1184.181901][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.198050][ T126] usb 5-1: Product: syz [ 1184.202352][ T126] usb 5-1: Manufacturer: syz [ 1184.211274][ T126] usb 5-1: SerialNumber: syz [ 1184.233293][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1184.247530][ T126] usb 5-1: config 0 descriptor?? [ 1184.256675][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1184.270628][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.285794][ T126] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1184.322540][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1184.335839][ T7] pvrusb2: ********** [ 1184.339901][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1184.353341][ T7] pvrusb2: Important functionality might not be entirely working. [ 1184.361669][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1184.373712][ T7] pvrusb2: ********** [ 1184.519508][ T2305] pvrusb2: Invalid write control endpoint [ 1184.557148][ T126] usb 5-1: USB disconnect, device number 72 [ 1184.691757][ T2305] pvrusb2: Invalid write control endpoint [ 1184.699697][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1184.715869][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1184.724030][ T4350] usb 4-1: USB disconnect, device number 46 [ 1184.724524][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1184.743739][ T2305] pvrusb2: Device being rendered inoperable [ 1184.773585][ T2305] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1184.800703][ T2305] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1184.858792][ T2305] pvrusb2: Attached sub-driver cx25840 [ 1184.876773][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1184.892631][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1184.918912][T15286] udevd[15286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1185.260412][T17269] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1185.529655][ T6302] usb 6-1: USB disconnect, device number 53 [ 1186.383185][ T4350] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1186.563120][ T4350] usb 6-1: Using ep0 maxpacket: 32 [ 1186.570367][ T4350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1186.581520][ T4350] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1186.600920][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.613298][ T4350] usb 6-1: config 0 descriptor?? [ 1186.783318][ T129] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1186.822153][T17280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.838156][T17280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.858030][ T4350] usbhid 6-1:0.0: can't add hid device: -71 [ 1186.865976][ T4350] usbhid: probe of 6-1:0.0 failed with error -71 [ 1186.887576][ T4350] usb 6-1: USB disconnect, device number 54 [ 1186.963285][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 1187.066754][ T129] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1187.075829][ T129] usb 4-1: config 0 has no interface number 0 [ 1187.082705][ T129] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1187.092432][ T129] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1187.101891][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.110524][ T129] usb 4-1: Product: syz [ 1187.115061][ T129] usb 4-1: Manufacturer: syz [ 1187.119766][ T129] usb 4-1: SerialNumber: syz [ 1187.182191][T17291] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1187.193090][T17291] fuse: Bad value for 'group_id' [ 1187.207686][ T129] usb 4-1: config 0 descriptor?? [ 1187.888159][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1187.903196][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1188.158419][ T129] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1188.173686][ T129] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1188.190773][ T129] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1188.201735][ T129] f81534: probe of 4-1:0.12 failed with error -71 [ 1188.212926][ T129] usb 4-1: USB disconnect, device number 47 [ 1189.531252][T17325] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1189.542293][T17325] fuse: Bad value for 'group_id' [ 1189.703289][ T129] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1190.250689][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3798'. [ 1190.276552][T17331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1190.295300][ T129] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1190.313129][ T129] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1190.333410][ T129] usb 5-1: config 0 has no interface number 0 [ 1190.341911][ T129] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1190.360857][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.370163][ T129] usb 5-1: Product: syz [ 1190.374677][ T129] usb 5-1: Manufacturer: syz [ 1190.379307][ T129] usb 5-1: SerialNumber: syz [ 1190.387177][ T129] usb 5-1: config 0 descriptor?? [ 1190.455859][T17340] device syzkaller1 entered promiscuous mode [ 1190.813409][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1190.994834][ T129] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 1191.070846][ T129] usb 5-1: No valid video chain found. [ 1191.238682][ T129] usb 5-1: USB disconnect, device number 73 [ 1191.651557][T16583] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1191.673096][ T6302] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1191.772625][T17361] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3807'. [ 1191.783535][T17361] fuse: Bad value for 'group_id' [ 1191.913442][T16583] usb 4-1: Using ep0 maxpacket: 8 [ 1191.931408][T16583] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.352851][T16583] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1192.363181][ T6302] usb 2-1: Using ep0 maxpacket: 16 [ 1192.368786][T16583] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1192.370226][ T6302] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1192.448775][T16583] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1192.458177][T16583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.483787][ T6302] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.495013][T16583] hub 4-1:1.0: bad descriptor, ignoring hub [ 1192.500969][T16583] hub: probe of 4-1:1.0 failed with error -5 [ 1192.537231][ T6302] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1192.546989][T16583] cdc_wdm 4-1:1.0: skipping garbage [ 1192.552245][T16583] cdc_wdm 4-1:1.0: skipping garbage [ 1192.560196][T16583] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1192.574825][ T6302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.595910][ T6302] usb 2-1: Product: syz [ 1192.596256][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1192.600256][ T6302] usb 2-1: Manufacturer: syz [ 1192.621435][ T6302] usb 2-1: SerialNumber: syz [ 1192.640603][T17364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1192.803393][T16583] usb 4-1: USB disconnect, device number 48 [ 1192.839762][ T6302] usb 2-1: 0:2 : does not exist [ 1192.859495][ T4350] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1192.875106][ T6302] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1192.925873][ T6302] usb 2-1: USB disconnect, device number 59 [ 1193.044456][ T4350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.055199][ T4350] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1193.064563][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.080164][ T4350] usb 6-1: config 0 descriptor?? [ 1193.088131][ T4350] pwc: Askey VC010 type 2 USB webcam detected. [ 1193.144485][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.163728][T16583] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1193.343194][T16583] usb 4-1: Using ep0 maxpacket: 8 [ 1193.351258][T16583] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.371822][T16583] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1193.381207][T16583] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1193.402048][T16583] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1193.412277][T16583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.426438][T16583] hub 4-1:1.0: bad descriptor, ignoring hub [ 1193.432422][T16583] hub: probe of 4-1:1.0 failed with error -5 [ 1193.439968][T17380] netlink: 'syz.1.3815': attribute type 10 has an invalid length. [ 1193.440268][T16583] cdc_wdm 4-1:1.0: skipping garbage [ 1193.454616][T16583] cdc_wdm 4-1:1.0: skipping garbage [ 1193.459911][T16583] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1193.468027][T17380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1193.485747][T17380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.498756][T17380] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.500594][ T4350] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1193.514001][T17380] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.514133][T17380] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.524104][ T4350] pwc: recv_control_msg error -32 req 02 val 2700 [ 1193.547725][ T4350] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1193.555516][ T4350] pwc: recv_control_msg error -32 req 04 val 1000 [ 1193.562920][ T4350] pwc: recv_control_msg error -32 req 04 val 1300 [ 1193.570955][ T4350] pwc: recv_control_msg error -32 req 04 val 1400 [ 1193.578574][ T4350] pwc: recv_control_msg error -32 req 02 val 2000 [ 1193.594050][ T4350] pwc: recv_control_msg error -32 req 02 val 2100 [ 1193.650029][T17380] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1193.659751][T17380] team0: Failed to send options change via netlink (err -105) [ 1193.668538][T17380] team0: Port device geneve0 added [ 1193.806485][T16583] usb 4-1: USB disconnect, device number 49 [ 1193.813971][ T4350] pwc: recv_control_msg error -71 req 02 val 2500 [ 1193.827563][ T4350] pwc: recv_control_msg error -71 req 02 val 2400 [ 1193.848631][ T4350] pwc: recv_control_msg error -71 req 02 val 2600 [ 1193.860078][ T4350] pwc: recv_control_msg error -71 req 02 val 2900 [ 1193.870487][ T4350] pwc: recv_control_msg error -71 req 02 val 2800 [ 1193.880781][ T4350] pwc: recv_control_msg error -71 req 04 val 1100 [ 1193.890289][ T4350] pwc: recv_control_msg error -71 req 04 val 1200 [ 1193.936687][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3816'. [ 1194.449827][ T4350] pwc: Registered as video103. [ 1194.583167][ T4350] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 1194.583283][ T6302] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1194.601870][ T4350] usb 6-1: USB disconnect, device number 55 [ 1194.705289][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1194.794384][T17397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.835851][ T6302] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 1194.853196][ T6302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.863573][ T6302] usb 2-1: config 0 has no interface number 0 [ 1194.878321][ T6302] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1194.887728][ T6302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.904307][ T6302] usb 2-1: Product: syz [ 1194.914836][ T6302] usb 2-1: Manufacturer: syz [ 1194.919609][ T6302] usb 2-1: SerialNumber: syz [ 1194.928569][ T6302] usb 2-1: config 0 descriptor?? [ 1194.952482][ T6302] ldusb 2-1:0.224: Interrupt in endpoint not found [ 1195.234353][ T4350] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1195.281822][T17410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.308384][T17410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.400276][T17412] blktrace: Concurrent blktraces are not allowed on sg0 [ 1195.427105][ T4350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.447390][ T4350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1195.469814][ T4350] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1195.489532][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.510183][ T4350] usb 5-1: Product: syz [ 1195.515766][T16583] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1195.542599][ T4350] usb 5-1: Manufacturer: syz [ 1195.572422][ T4350] usb 5-1: SerialNumber: syz [ 1195.609938][ T4350] usb 5-1: config 0 descriptor?? [ 1195.636590][ T4350] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1195.658602][ T4350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.681106][ T4350] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1195.710075][ T4350] usb 5-1: media controller created [ 1195.723435][T16583] usb 4-1: Using ep0 maxpacket: 32 [ 1195.734899][T16583] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1195.747580][T16583] usb 4-1: config 0 has no interface number 0 [ 1195.763246][T16583] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1195.772480][ T4350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.789666][T16583] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1195.814929][T16583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.841507][T16583] usb 4-1: Product: syz [ 1195.846470][T16583] usb 4-1: Manufacturer: syz [ 1195.851196][T16583] usb 4-1: SerialNumber: syz [ 1195.866054][T16583] usb 4-1: config 0 descriptor?? [ 1195.931584][ T4350] DVB: Unable to find symbol tda10046_attach() [ 1195.938219][ T4350] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1195.949949][ T4350] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1196.183149][ T129] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1196.375345][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1196.408385][ T129] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1196.418802][ T129] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1196.428162][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.449007][ T129] usb 6-1: config 0 descriptor?? [ 1196.659538][ T129] ath6kl: Failed to submit usb control message: -71 [ 1196.674142][ T129] ath6kl: unable to send the bmi data to the device: -71 [ 1196.681297][ T129] ath6kl: Unable to send get target info: -71 [ 1196.688897][ T129] ath6kl: Failed to init ath6kl core: -71 [ 1196.723286][ T129] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1196.740711][ T129] usb 6-1: USB disconnect, device number 56 [ 1196.997681][T11652] usb 2-1: USB disconnect, device number 60 [ 1197.167630][ T4350] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 1197.186837][ T4350] usb 5-1: USB disconnect, device number 74 [ 1197.434195][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3831'. [ 1198.023120][T11652] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1198.112484][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1198.145960][T17440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1198.213344][T11652] usb 2-1: Using ep0 maxpacket: 8 [ 1198.224606][T11652] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.240408][T11652] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1198.249938][T11652] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1198.260916][T11652] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1198.271054][T11652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.295684][T11652] hub 2-1:1.0: bad descriptor, ignoring hub [ 1198.301650][T11652] hub: probe of 2-1:1.0 failed with error -5 [ 1198.322849][T11652] cdc_wdm 2-1:1.0: skipping garbage [ 1198.331430][T11652] cdc_wdm 2-1:1.0: skipping garbage [ 1198.337443][T11652] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1198.378681][T16583] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1198.391719][T16583] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1198.400260][T16583] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1198.415824][T16583] f81534: probe of 4-1:0.12 failed with error -71 [ 1198.431457][T16583] usb 4-1: USB disconnect, device number 50 [ 1198.614521][T11652] usb 2-1: USB disconnect, device number 61 [ 1198.977720][T11652] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1199.183117][T11652] usb 2-1: Using ep0 maxpacket: 8 [ 1199.190633][T11652] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.220505][T11652] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1199.258066][T11652] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1199.269085][ T126] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1199.301017][T11652] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1199.313186][T11652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.339545][T11652] hub 2-1:1.0: bad descriptor, ignoring hub [ 1199.345726][T11652] hub: probe of 2-1:1.0 failed with error -5 [ 1199.355397][T11652] cdc_wdm 2-1:1.0: skipping garbage [ 1199.368239][T11652] cdc_wdm 2-1:1.0: skipping garbage [ 1199.378468][T11652] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1199.467162][ T126] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 1199.498895][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.579076][ T126] usb 4-1: config 0 has no interface number 0 [ 1199.597487][ T126] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1199.612369][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.621753][ T126] usb 4-1: Product: syz [ 1199.626463][ T126] usb 4-1: Manufacturer: syz [ 1199.631336][ T126] usb 4-1: SerialNumber: syz [ 1199.647865][ T126] usb 4-1: config 0 descriptor?? [ 1199.658937][ T126] ldusb 4-1:0.224: Interrupt in endpoint not found [ 1199.714362][T11652] usb 2-1: USB disconnect, device number 62 [ 1199.951311][T17471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.971726][T17471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.057490][T17473] blktrace: Concurrent blktraces are not allowed on sg0 [ 1200.436127][T17481] input: syz0 as /devices/virtual/input/input57 [ 1200.865993][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'. [ 1202.202850][ T126] usb 4-1: USB disconnect, device number 51 [ 1202.743891][ T126] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1202.863145][ T129] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1202.943124][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 1202.949915][ T126] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1202.984180][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.995956][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1203.013422][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.021638][ T126] usb 4-1: Product: syz [ 1203.027447][ T126] usb 4-1: Manufacturer: syz [ 1203.032232][ T126] usb 4-1: SerialNumber: syz [ 1203.063197][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 1203.069897][ T129] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1203.098180][ T129] usb 6-1: config 0 has no interface number 0 [ 1203.110912][ T129] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1203.139889][ T129] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1203.168476][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.199917][ T129] usb 6-1: Product: syz [ 1203.204544][ T129] usb 6-1: Manufacturer: syz [ 1203.213318][ T129] usb 6-1: SerialNumber: syz [ 1203.233929][ T129] usb 6-1: config 0 descriptor?? [ 1203.257117][ T126] usb 4-1: 0:2 : does not exist [ 1203.271962][ T126] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1203.330448][ T126] usb 4-1: USB disconnect, device number 52 [ 1203.378109][ T4373] udevd[4373]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1203.414414][ T4373] udevd[4373]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1203.845658][ T129] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1203.858915][ T129] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1203.882175][ T129] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1203.898168][ T129] f81534: probe of 6-1:0.12 failed with error -71 [ 1203.909857][ T129] usb 6-1: USB disconnect, device number 57 [ 1204.161296][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1204.743167][ T126] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1204.933333][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 1204.944898][ T126] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1204.978857][ T126] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1204.997340][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.011530][ T126] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1205.021637][ T126] usb 2-1: config 0 has no interface number 0 [ 1205.028207][ T126] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1205.040796][ T126] usb 2-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.054102][ T6302] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1205.061770][ T126] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1205.077810][ T126] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1205.087676][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.096339][ T126] usb 2-1: Product: syz [ 1205.100512][ T126] usb 2-1: Manufacturer: syz [ 1205.112923][ T126] usb 2-1: SerialNumber: syz [ 1205.124682][ T126] usb 2-1: config 0 descriptor?? [ 1205.213195][ T4298] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1205.245288][ T6302] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 1205.254617][ T6302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.267934][ T6302] usb 5-1: config 0 has no interface number 0 [ 1205.287705][ T6302] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1205.303490][ T6302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.311738][ T6302] usb 5-1: Product: syz [ 1205.316860][ T6302] usb 5-1: Manufacturer: syz [ 1205.322126][ T6302] usb 5-1: SerialNumber: syz [ 1205.329097][ T6302] usb 5-1: config 0 descriptor?? [ 1205.349221][ T6302] ldusb 5-1:0.224: Interrupt in endpoint not found [ 1205.368757][ T6302] usb 2-1: USB disconnect, device number 63 [ 1205.405964][ T4298] usb 6-1: config 0 has no interfaces? [ 1205.411959][ T4298] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1205.425496][ T4298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.441263][ T4298] usb 6-1: config 0 descriptor?? [ 1205.616905][T17548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.647628][T17548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.658813][ T6302] usb 6-1: USB disconnect, device number 58 [ 1205.752948][T17551] blktrace: Concurrent blktraces are not allowed on sg0 [ 1205.847939][T17533] delete_channel: no stack [ 1206.623083][T16583] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1206.803126][T16583] usb 2-1: Using ep0 maxpacket: 16 [ 1206.809977][T16583] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1206.820358][T16583] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1206.831805][T16583] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.833280][ T6302] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1206.841013][T16583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.857247][T16583] usb 2-1: Product: syz [ 1206.861458][T16583] usb 2-1: Manufacturer: syz [ 1206.866533][T16583] usb 2-1: SerialNumber: syz [ 1207.033141][ T6302] usb 4-1: Using ep0 maxpacket: 32 [ 1207.040378][ T6302] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1207.048816][ T6302] usb 4-1: config 0 has no interface number 0 [ 1207.055146][ T6302] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1207.064278][ T6302] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1207.073555][ T6302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.081647][ T6302] usb 4-1: Product: syz [ 1207.088066][ T6302] usb 4-1: Manufacturer: syz [ 1207.088813][T16583] usb 2-1: 0:2 : does not exist [ 1207.092773][ T6302] usb 4-1: SerialNumber: syz [ 1207.110239][ T6302] usb 4-1: config 0 descriptor?? [ 1207.114752][T16583] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1207.139039][T16583] usb 2-1: USB disconnect, device number 64 [ 1207.363856][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.647309][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1208.338149][ T6302] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1208.356238][ T6302] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1208.364163][ T6302] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1208.372383][ T6302] f81534: probe of 4-1:0.12 failed with error -71 [ 1208.396573][ T6302] usb 4-1: USB disconnect, device number 53 [ 1208.595536][ T126] usb 5-1: USB disconnect, device number 75 [ 1208.613136][ T4350] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1208.813335][ T4298] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1208.815218][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.832434][ T4350] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1208.842050][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.853220][ T4350] usb 2-1: config 0 descriptor?? [ 1208.866167][ T4350] pwc: Askey VC010 type 2 USB webcam detected. [ 1208.993161][ T4298] usb 6-1: Using ep0 maxpacket: 8 [ 1209.013657][ T4298] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1209.075963][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.101915][ T4298] usb 6-1: Product: syz [ 1209.113315][ T4298] usb 6-1: Manufacturer: syz [ 1209.120351][ T4298] usb 6-1: SerialNumber: syz [ 1209.136515][ T4298] usb 6-1: config 0 descriptor?? [ 1209.265754][ T4350] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1209.290036][ T4350] pwc: recv_control_msg error -32 req 02 val 2700 [ 1209.322590][ T4350] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1209.344807][ T4350] pwc: recv_control_msg error -32 req 04 val 1000 [ 1209.364797][ T4350] pwc: recv_control_msg error -32 req 04 val 1300 [ 1209.388434][ T4350] pwc: recv_control_msg error -32 req 04 val 1400 [ 1209.410314][ T4350] pwc: recv_control_msg error -32 req 02 val 2000 [ 1209.429525][ T4350] pwc: recv_control_msg error -32 req 02 val 2100 [ 1209.552682][ T4298] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1209.563658][ T4298] gspca_sunplus: reg_w_riv err -71 [ 1209.568947][ T4298] sunplus: probe of 6-1:0.0 failed with error -71 [ 1209.577557][ T4298] usb 6-1: USB disconnect, device number 59 [ 1209.649381][ T4350] pwc: recv_control_msg error -71 req 02 val 2500 [ 1209.659994][ T4350] pwc: recv_control_msg error -71 req 02 val 2400 [ 1209.678785][ T4350] pwc: recv_control_msg error -71 req 02 val 2600 [ 1209.697746][ T4350] pwc: recv_control_msg error -71 req 02 val 2900 [ 1209.717357][ T4350] pwc: recv_control_msg error -71 req 02 val 2800 [ 1209.738221][ T4350] pwc: recv_control_msg error -71 req 04 val 1100 [ 1209.786182][ T4350] pwc: recv_control_msg error -71 req 04 val 1200 [ 1209.812766][ T4350] pwc: Registered as video103. [ 1209.913760][ T4350] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 1209.961458][ T4350] usb 2-1: USB disconnect, device number 65 [ 1210.029370][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1210.039366][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1210.048645][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1210.057889][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1210.067077][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1210.815902][ T26] audit: type=1326 audit(1750522129.474:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72dd38e929 code=0x7ffc0000 [ 1210.838393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.845598][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'. [ 1210.956596][T17610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1211.117400][ T26] audit: type=1326 audit(1750522129.474:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1211.234617][T17621] loop9: detected capacity change from 0 to 7 [ 1211.957972][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1211.967507][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.030919][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.040186][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.063118][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.072413][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.083067][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.092321][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.103319][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.112550][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.121628][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.130845][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.131730][ T26] audit: type=1326 audit(1750522129.474:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.139085][T17621] ldm_validate_partition_table(): Disk read failed. [ 1212.161995][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.177336][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.185501][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.194703][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.203173][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.212593][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.226061][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1212.235366][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1212.243486][T17621] Dev loop9: unable to read RDB block 0 [ 1212.291014][T17621] loop9: unable to read partition table [ 1212.297374][T17621] loop9: partition table beyond EOD, truncated [ 1212.303650][T17621] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1212.303650][T17621] ) failed (rc=-5) [ 1212.375358][ T26] audit: type=1326 audit(1750522129.474:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.403361][ T26] audit: type=1326 audit(1750522129.474:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.425811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.443066][ T26] audit: type=1326 audit(1750522129.474:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.466007][ T126] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1212.580816][ T26] audit: type=1326 audit(1750522129.474:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.670181][ T26] audit: type=1326 audit(1750522129.474:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.692630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.704429][ T126] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 1212.730501][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.753425][ T126] usb 5-1: config 0 has no interface number 0 [ 1212.762908][ T126] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1212.812809][ T26] audit: type=1326 audit(1750522129.474:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.823071][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.919140][ T26] audit: type=1326 audit(1750522129.474:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17612 comm="syz.5.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72dd32ab19 code=0x7ffc0000 [ 1212.955042][ T126] usb 5-1: Product: syz [ 1212.994055][ T126] usb 5-1: Manufacturer: syz [ 1213.029712][ T126] usb 5-1: SerialNumber: syz [ 1213.056217][ T126] usb 5-1: config 0 descriptor?? [ 1213.104381][ T126] ldusb 5-1:0.224: Interrupt in endpoint not found [ 1213.410812][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1213.420639][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1213.429938][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1213.439735][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1214.093257][ T4350] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1214.188076][T17649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.227710][T17649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.280171][T17655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1214.287122][ T4350] usb 2-1: Using ep0 maxpacket: 8 [ 1214.300297][ T4350] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1214.343195][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.355118][ T4350] usb 2-1: Product: syz [ 1214.359331][ T4350] usb 2-1: Manufacturer: syz [ 1214.364068][ T4350] usb 2-1: SerialNumber: syz [ 1214.370850][ T4350] usb 2-1: config 0 descriptor?? [ 1214.415119][T17661] blktrace: Concurrent blktraces are not allowed on sg0 [ 1214.613286][ T126] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1214.791570][ T4350] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1214.793225][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 1214.810121][ T4350] gspca_sunplus: reg_w_riv err -71 [ 1214.810679][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.833250][ T4350] sunplus: probe of 2-1:0.0 failed with error -71 [ 1214.840032][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1214.862894][ T4350] usb 2-1: USB disconnect, device number 66 [ 1214.877716][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1214.898392][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1214.919395][ T126] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1214.937160][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.950525][ T126] hub 4-1:1.0: bad descriptor, ignoring hub [ 1214.962059][ T126] hub: probe of 4-1:1.0 failed with error -5 [ 1214.977387][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 1214.986654][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 1215.003772][ T126] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1215.013230][ T126] cdc_wdm 4-1:1.0: Unknown control protocol [ 1215.096582][ T6302] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1215.304932][ T6302] usb 6-1: config 0 has no interfaces? [ 1215.318301][ T6302] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1215.365989][ T6302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.378850][ T6302] usb 6-1: Product: syz [ 1215.387798][ T6302] usb 6-1: Manufacturer: syz [ 1215.395095][ T6302] usb 6-1: SerialNumber: syz [ 1215.420226][ T6302] usb 6-1: config 0 descriptor?? [ 1215.716582][T16583] usb 5-1: USB disconnect, device number 76 [ 1215.900401][T17670] __nla_validate_parse: 2 callbacks suppressed [ 1215.900422][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3900'. [ 1215.975619][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.986997][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.236005][ T6302] usb 6-1: USB disconnect, device number 60 [ 1216.693173][ T126] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1216.741388][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1216.751498][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1216.760690][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1216.770311][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1216.779440][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1217.424955][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1217.458758][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.481309][ T126] usb 5-1: config 0 descriptor?? [ 1217.491430][ T126] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1217.993120][ T6302] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1218.184875][ T6302] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1218.203425][ T6302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.226966][ T6302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.237704][ T6302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1218.256259][ T6302] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1218.274152][ T6302] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1218.284883][ T6302] usb 2-1: Manufacturer: syz [ 1218.296777][ T6302] usb 2-1: config 0 descriptor?? [ 1218.711842][ T6302] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 1218.719464][ T6302] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 1218.902396][ T126] usb 5-1: USB disconnect, device number 77 [ 1219.697156][T17659] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1219.697351][ T4350] usb 4-1: USB disconnect, device number 54 [ 1219.729402][ T6302] appleir 0003:05AC:8243.000A: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1219.800651][ T6302] usb 2-1: USB disconnect, device number 67 [ 1219.974069][T17719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1219.985861][T17715] fido_id[17715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1220.313731][ T4350] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1220.513097][ T4350] usb 4-1: Using ep0 maxpacket: 32 [ 1220.546497][ T4350] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1220.592789][ T4350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1220.627801][ T4350] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1220.656811][ T4350] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1220.699714][ T4350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1220.751284][ T4350] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1220.774459][ T4350] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1220.796968][ T4350] usb 4-1: Product: syz [ 1220.801188][ T4350] usb 4-1: Manufacturer: syz [ 1220.806538][ T4350] usb 4-1: SerialNumber: syz [ 1220.820814][ T4350] usb 4-1: config 0 descriptor?? [ 1220.830839][ T4350] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1220.852277][ T4350] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1221.094893][ T126] usb 4-1: USB disconnect, device number 55 [ 1221.098368][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1221.120573][ T129] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1221.121089][ T126] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1221.340874][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1221.352058][ T129] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1221.392266][ T129] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1221.401694][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.416388][ T129] usb 2-1: Product: syz [ 1221.420620][ T129] usb 2-1: Manufacturer: syz [ 1221.429514][ T129] usb 2-1: SerialNumber: syz [ 1221.433383][ T6302] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1221.439588][ T129] usb 2-1: config 0 descriptor?? [ 1221.451479][T17728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1221.463472][T17728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1221.476129][ T129] usb 2-1: ucan: probing device on interface #0 [ 1221.497968][ T129] usb 2-1: ucan: invalid EP count (1) [ 1221.503952][ T129] usb 2-1: ucan: probe failed; try to update the device firmware [ 1221.629380][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1221.646932][ T6302] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1221.656095][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1221.692282][ T6302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.707441][ T6302] usb 6-1: Product: syz [ 1221.711671][ T6302] usb 6-1: Manufacturer: syz [ 1221.723310][ T6302] usb 6-1: SerialNumber: syz [ 1221.744753][ T6302] usb 6-1: config 0 descriptor?? [ 1221.871426][T17739] binder_alloc: 17738: binder_alloc_buf, no vma [ 1221.913402][T17739] binder_alloc: 17738: binder_alloc_buf, no vma [ 1221.954556][ T6302] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1222.173665][ T47] Bluetooth: hci0: command 0x0405 tx timeout [ 1222.253117][T11652] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1222.293156][ T126] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1222.443147][T11652] usb 4-1: Using ep0 maxpacket: 8 [ 1222.456822][T11652] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1222.472920][T11652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.484740][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.498425][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1222.507672][T11652] usb 4-1: Product: syz [ 1222.512133][T11652] usb 4-1: Manufacturer: syz [ 1222.516838][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.529725][T11652] usb 4-1: SerialNumber: syz [ 1222.542182][T11652] usb 4-1: config 0 descriptor?? [ 1222.551445][ T126] usb 5-1: config 0 descriptor?? [ 1222.970763][ T126] lg-g15 0003:046D:C222.000B: unbalanced delimiter at end of report description [ 1222.985469][T11652] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1222.992484][T11652] gspca_sunplus: reg_w_riv err -71 [ 1222.998932][ T126] lg-g15: probe of 0003:046D:C222.000B failed with error -22 [ 1223.006830][T11652] sunplus: probe of 4-1:0.0 failed with error -71 [ 1223.018623][T11652] usb 4-1: USB disconnect, device number 56 [ 1223.176472][ T4350] usb 5-1: USB disconnect, device number 78 [ 1223.789052][ T126] usb 2-1: USB disconnect, device number 68 [ 1223.803135][ T129] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1223.984530][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.001689][ T6302] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1224.003074][ T129] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1224.018297][ T4350] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1224.033140][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.054906][ T129] usb 4-1: config 0 descriptor?? [ 1224.213116][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 1224.223296][ T4350] usb 5-1: no configurations [ 1224.227965][ T4350] usb 5-1: can't read configurations, error -22 [ 1224.383162][ T4350] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1224.464906][ T129] razer 0003:1532:010E.000C: unknown main item tag 0x0 [ 1224.471806][ T129] razer 0003:1532:010E.000C: unknown main item tag 0x0 [ 1224.492471][ T129] razer 0003:1532:010E.000C: unknown main item tag 0x0 [ 1224.509008][ T129] razer 0003:1532:010E.000C: unknown main item tag 0x0 [ 1224.522847][ T129] razer 0003:1532:010E.000C: unknown main item tag 0x0 [ 1224.583131][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 1224.589055][ T4350] usb 5-1: no configurations [ 1224.598423][ T4350] usb 5-1: can't read configurations, error -22 [ 1224.615457][ T4350] usb usb5-port1: attempt power cycle [ 1224.665501][ T129] razer 0003:1532:010E.000C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 1224.928716][ T129] usb 4-1: USB disconnect, device number 57 [ 1225.036282][ T4350] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1225.076992][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 1225.084138][ T4350] usb 5-1: no configurations [ 1225.092482][ T4350] usb 5-1: can't read configurations, error -22 [ 1225.244870][ T126] usb 6-1: USB disconnect, device number 61 [ 1225.253147][ T4350] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1225.314829][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 1225.320793][ T4350] usb 5-1: no configurations [ 1225.339142][ T4350] usb 5-1: can't read configurations, error -22 [ 1225.359499][ T4350] usb usb5-port1: unable to enumerate USB device [ 1225.903173][ T4350] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1226.116618][ T4350] usb 4-1: config 0 has no interfaces? [ 1226.128382][ T4350] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1226.238319][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.320658][ T4350] usb 4-1: Product: syz [ 1226.347063][ T4350] usb 4-1: Manufacturer: syz [ 1226.351758][ T4350] usb 4-1: SerialNumber: syz [ 1226.387807][ T4350] usb 4-1: config 0 descriptor?? [ 1226.935549][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 1226.957286][T17785] vivid-007: ================= START STATUS ================= [ 1226.983176][T17785] vivid-007: Enable Output Cropping: true [ 1227.007637][ T126] usb 4-1: USB disconnect, device number 58 [ 1227.063800][T17785] vivid-007: Enable Output Composing: true [ 1227.089265][T17785] vivid-007: Enable Output Scaler: true [ 1227.107306][T17785] vivid-007: Tx RGB Quantization Range: Automatic [ 1227.132837][T17785] vivid-007: Transmit Mode: HDMI [ 1227.150626][T17785] vivid-007: Display Present: true inactive [ 1227.168411][T17785] vivid-007: Hotplug Present: 0x00000001 [ 1227.188033][T17785] vivid-007: RxSense Present: 0x00000001 [ 1227.196462][T17785] vivid-007: EDID Present: 0x00000001 [ 1227.219187][T17785] vivid-007: ================== END STATUS ================== [ 1227.263151][ T4350] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1227.460769][ T4350] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1227.480749][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.511139][ T4350] usb 5-1: Product: syz [ 1227.523286][ T4350] usb 5-1: Manufacturer: syz [ 1227.535688][ T4350] usb 5-1: SerialNumber: syz [ 1227.556723][ T4350] usb 5-1: config 0 descriptor?? [ 1227.781373][ T4350] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1228.283100][ T126] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1228.443114][ T126] usb 2-1: device descriptor read/64, error -71 [ 1228.713129][ T126] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1228.933101][ T126] usb 2-1: device descriptor read/64, error -71 [ 1229.063266][ T126] usb usb2-port1: attempt power cycle [ 1229.473196][ T126] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1229.528803][ T126] usb 2-1: device descriptor read/8, error -71 [ 1229.653140][ T6302] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1229.799636][ T4350] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1229.813455][ T126] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1229.854816][ T6302] usb 6-1: Using ep0 maxpacket: 16 [ 1229.861862][ T6302] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 1229.893256][ T6302] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.941158][ T6302] usb 6-1: config 0 has no interfaces? [ 1229.971033][ T6302] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1230.011827][ T6302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.041375][ T6302] usb 6-1: Product: syz [ 1230.050698][ T6302] usb 6-1: Manufacturer: syz [ 1230.056142][ T6302] usb 6-1: SerialNumber: syz [ 1230.082645][ T6302] usb 6-1: config 0 descriptor?? [ 1230.143114][ T126] usb 2-1: device descriptor read/8, error -71 [ 1230.263253][ T126] usb usb2-port1: unable to enumerate USB device [ 1230.807111][T17854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1231.052683][ T129] usb 5-1: USB disconnect, device number 83 [ 1231.643173][ T6302] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1231.734837][T17869] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.750070][T17869] binder: 17868:17869 ioctl 4018620d 200000000040 returned -16 [ 1231.855041][ T6302] usb 5-1: config 0 has no interfaces? [ 1231.864183][ T6302] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1231.900417][ T6302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.933299][ T6302] usb 5-1: Product: syz [ 1231.948893][ T6302] usb 5-1: Manufacturer: syz [ 1231.961191][ T6302] usb 5-1: SerialNumber: syz [ 1231.982009][ T6302] usb 5-1: config 0 descriptor?? [ 1232.263647][ T126] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1232.438026][ T129] usb 6-1: USB disconnect, device number 62 [ 1232.453254][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 1232.470511][ T126] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1232.533073][ T126] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1232.557636][ T126] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1232.576739][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 1232.593090][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.613249][ T126] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1232.694202][ T129] usb 5-1: USB disconnect, device number 84 [ 1232.700746][ T126] usb 4-1: config 0 has no interface number 0 [ 1232.715850][ T126] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1232.749117][ T126] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1232.791543][ T126] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1232.807492][ T126] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.831489][ T126] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1232.872488][ T126] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1232.888941][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.919652][ T126] usb 4-1: Product: syz [ 1232.925917][ T126] usb 4-1: Manufacturer: syz [ 1232.930687][ T126] usb 4-1: SerialNumber: syz [ 1232.959922][ T126] usb 4-1: config 0 descriptor?? [ 1233.178486][ T126] usb 4-1: USB disconnect, device number 59 [ 1233.811398][T17887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1234.127408][ T126] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1234.313228][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 1234.337629][ T126] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1234.377614][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.395458][ T126] usb 4-1: Product: syz [ 1234.401525][ T126] usb 4-1: Manufacturer: syz [ 1234.417454][ T126] usb 4-1: SerialNumber: syz [ 1234.436403][ T126] usb 4-1: config 0 descriptor?? [ 1234.603649][ T6302] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1234.823367][ T6302] usb 2-1: Using ep0 maxpacket: 16 [ 1234.831110][ T6302] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.862460][ T6302] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.874859][ T126] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1234.884252][ T126] gspca_sunplus: reg_w_riv err -71 [ 1234.889517][ T126] sunplus: probe of 4-1:0.0 failed with error -71 [ 1234.898592][ T6302] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1234.910628][ T126] usb 4-1: USB disconnect, device number 60 [ 1234.923255][ T6302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.945132][ T6302] usb 2-1: Product: syz [ 1234.951684][ T6302] usb 2-1: Manufacturer: syz [ 1234.956750][ T6302] usb 2-1: SerialNumber: syz [ 1235.000061][T17905] binder: BINDER_SET_CONTEXT_MGR already set [ 1235.007953][T17905] binder: 17904:17905 ioctl 4018620d 200000000040 returned -16 [ 1235.113261][ T4298] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1235.174039][ T6302] usb 2-1: 0:2 : does not exist [ 1235.181302][ T6302] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1235.199033][ T6302] usb 2-1: USB disconnect, device number 73 [ 1235.295188][ T4298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.305744][ T4298] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1235.315177][ T4298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.325195][ T4298] usb 6-1: config 0 descriptor?? [ 1235.332652][ T4298] pwc: Askey VC010 type 2 USB webcam detected. [ 1235.353180][T11652] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1235.424455][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.511570][T17910] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1235.550199][T11652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.612653][T11652] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1235.689711][T11652] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1235.785563][ T4298] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1235.805399][ T4298] pwc: recv_control_msg error -32 req 02 val 2700 [ 1235.822674][T11652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.859790][ T4298] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1235.885912][T11652] usb 5-1: Product: syz [ 1235.908920][ T4298] pwc: recv_control_msg error -32 req 04 val 1000 [ 1235.922176][T11652] usb 5-1: Manufacturer: syz [ 1235.953857][T11652] usb 5-1: SerialNumber: syz [ 1235.967016][ T4298] pwc: recv_control_msg error -32 req 04 val 1300 [ 1236.032236][ T4298] pwc: recv_control_msg error -32 req 04 val 1400 [ 1236.052620][T11652] usb 5-1: config 0 descriptor?? [ 1236.097329][ T4298] pwc: recv_control_msg error -32 req 02 val 2000 [ 1236.141648][T11652] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1236.175619][ T4298] pwc: recv_control_msg error -32 req 02 val 2100 [ 1236.296665][T11652] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1236.355854][T11652] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1236.371869][T11652] usb 5-1: media controller created [ 1236.372467][T17915] device syzkaller1 entered promiscuous mode [ 1236.397269][T11652] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1236.459371][ T4298] pwc: recv_control_msg error -71 req 02 val 2500 [ 1236.476460][ T4298] pwc: recv_control_msg error -71 req 02 val 2400 [ 1236.498940][T11652] DVB: Unable to find symbol tda10046_attach() [ 1236.505761][T11652] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1236.521150][T11652] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1236.539219][ T4298] pwc: recv_control_msg error -71 req 02 val 2600 [ 1236.546427][ T4298] pwc: recv_control_msg error -71 req 02 val 2900 [ 1236.554057][ T4298] pwc: recv_control_msg error -71 req 02 val 2800 [ 1236.561197][ T4298] pwc: recv_control_msg error -71 req 04 val 1100 [ 1236.568520][ T4298] pwc: recv_control_msg error -71 req 04 val 1200 [ 1236.585548][ T4298] pwc: Registered as video103. [ 1236.595157][ T4298] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 1236.624164][ T4298] usb 6-1: USB disconnect, device number 63 [ 1236.883162][ T126] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1237.013129][ T6302] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1237.095536][ T126] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 1237.105171][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.115880][ T126] usb 2-1: config 0 has no interface number 0 [ 1237.124961][ T126] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1237.134500][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.142592][ T126] usb 2-1: Product: syz [ 1237.147607][ T126] usb 2-1: Manufacturer: syz [ 1237.157567][ T126] usb 2-1: SerialNumber: syz [ 1237.168366][ T126] usb 2-1: config 0 descriptor?? [ 1237.176350][ T126] ldusb 2-1:0.224: Interrupt in endpoint not found [ 1237.201629][ T6302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.212377][ T6302] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1237.222416][ T6302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.241731][ T6302] usb 4-1: config 0 descriptor?? [ 1237.266412][T17932] kvm: emulating exchange as write [ 1237.464307][T11652] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 1237.477873][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.501101][T11652] usb 5-1: USB disconnect, device number 85 [ 1237.522756][T17940] binder: BINDER_SET_CONTEXT_MGR already set [ 1237.539312][T17940] binder: 17939:17940 ioctl 4018620d 200000000040 returned -16 [ 1237.589205][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.657082][ T6302] usbhid 4-1:0.0: can't add hid device: -71 [ 1237.665416][ T6302] usbhid: probe of 4-1:0.0 failed with error -71 [ 1237.683813][ T6302] usb 4-1: USB disconnect, device number 61 [ 1237.696885][T17937] blktrace: Concurrent blktraces are not allowed on sg0 [ 1237.833279][ T126] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1238.028458][ T126] usb 6-1: config 0 has no interfaces? [ 1238.042176][ T126] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1238.071165][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.080043][ T126] usb 6-1: Product: syz [ 1238.084499][ T126] usb 6-1: Manufacturer: syz [ 1238.089288][ T126] usb 6-1: SerialNumber: syz [ 1238.102606][ T126] usb 6-1: config 0 descriptor?? [ 1238.345925][T17950] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1238.815212][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.821645][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.072979][ T129] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1239.237960][T17955] device syzkaller1 entered promiscuous mode [ 1239.283080][ T129] usb 5-1: Using ep0 maxpacket: 16 [ 1239.301085][ T129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1239.344420][ T129] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1239.361382][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3992'. [ 1239.379562][ T129] usb 5-1: can't read configurations, error -71 [ 1239.626914][ T6302] usb 6-1: USB disconnect, device number 64 [ 1239.873915][ T4300] usb 2-1: USB disconnect, device number 74 [ 1240.001881][T17969] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1240.045477][T17969] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1240.110757][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 1240.110774][ T26] audit: type=1326 audit(1750522158.764:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17975 comm="syz.4.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af318e929 code=0x7ffc0000 [ 1240.181138][T17977] ------------[ cut here ]------------ [ 1240.186726][T17977] WARNING: CPU: 1 PID: 17977 at arch/x86/kvm/x86.c:11214 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.197342][T17977] Modules linked in: [ 1240.201368][T17977] CPU: 1 PID: 17977 Comm: syz.3.4002 Not tainted 6.1.141-syzkaller #0 [ 1240.209801][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1240.220040][T17977] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.226590][T17977] Code: e8 c7 85 c2 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 85 c2 00 e9 ce e5 ff ff e8 f2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1240.246763][T17977] RSP: 0018:ffffc9000672fc48 EFLAGS: 00010287 [ 1240.252947][T17977] RAX: ffffffff810fc97e RBX: ffff88802773a7c0 RCX: 0000000000080000 [ 1240.261780][T17977] RDX: ffffc90010dc1000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 1240.269809][T17977] RBP: ffff888063c3e000 R08: dffffc0000000000 R09: fffffbfff2117084 [ 1240.277817][T17977] R10: fffffbfff2117084 R11: 1ffffffff2117083 R12: ffff88802773aaac [ 1240.285824][T17977] R13: ffff88802773a898 R14: dffffc0000000000 R15: 0000000000000000 [ 1240.293927][T17977] FS: 00007f2ab13b36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1240.302888][T17977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1240.309527][T17977] CR2: 00007f2ab13b2f98 CR3: 0000000044c16000 CR4: 00000000003526e0 [ 1240.317666][T17977] Call Trace: [ 1240.320971][T17977] [ 1240.323982][T17977] ? mutex_lock_nested+0x10/0x10 [ 1240.328955][T17977] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1240.334726][T17977] kvm_vcpu_ioctl+0x887/0xb80 [ 1240.339408][T17977] ? xa_release+0x50/0x50 [ 1240.343764][T17977] ? __fget_files+0x28/0x4d0 [ 1240.348368][T17977] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1240.353328][T17977] ? security_file_ioctl+0x7c/0xa0 [ 1240.358439][T17977] ? xa_release+0x50/0x50 [ 1240.362765][T17977] __se_sys_ioctl+0xfa/0x170 [ 1240.367479][T17977] do_syscall_64+0x4c/0xa0 [ 1240.371903][T17977] ? clear_bhb_loop+0x60/0xb0 [ 1240.376617][T17977] ? clear_bhb_loop+0x60/0xb0 [ 1240.381310][T17977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.387232][T17977] RIP: 0033:0x7f2ab058e929 [ 1240.391644][T17977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.411294][T17977] RSP: 002b:00007f2ab13b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.419944][T17977] RAX: ffffffffffffffda RBX: 00007f2ab07b6240 RCX: 00007f2ab058e929 [ 1240.427941][T17977] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1240.435956][T17977] RBP: 00007f2ab0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1240.444070][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.452049][T17977] R13: 0000000000000001 R14: 00007f2ab07b6240 R15: 00007ffccf310358 [ 1240.460067][T17977] [ 1240.463126][T17977] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1240.470407][T17977] CPU: 1 PID: 17977 Comm: syz.3.4002 Not tainted 6.1.141-syzkaller #0 [ 1240.478644][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1240.488694][T17977] Call Trace: [ 1240.491958][T17977] [ 1240.494873][T17977] dump_stack_lvl+0x168/0x22e [ 1240.499557][T17977] ? memcpy+0x3c/0x60 [ 1240.503527][T17977] ? show_regs_print_info+0x12/0x12 [ 1240.508707][T17977] ? load_image+0x3b0/0x3b0 [ 1240.513235][T17977] panic+0x2c9/0x710 [ 1240.517137][T17977] ? bpf_jit_dump+0xd0/0xd0 [ 1240.521770][T17977] __warn+0x2f8/0x4f0 [ 1240.525751][T17977] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.531556][T17977] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.537348][T17977] report_bug+0x2ba/0x4f0 [ 1240.541669][T17977] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.547465][T17977] handle_bug+0x3a/0x70 [ 1240.551698][T17977] exc_invalid_op+0x16/0x40 [ 1240.556275][T17977] asm_exc_invalid_op+0x16/0x20 [ 1240.561112][T17977] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.567521][T17977] Code: e8 c7 85 c2 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 85 c2 00 e9 ce e5 ff ff e8 f2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1240.587298][T17977] RSP: 0018:ffffc9000672fc48 EFLAGS: 00010287 [ 1240.593443][T17977] RAX: ffffffff810fc97e RBX: ffff88802773a7c0 RCX: 0000000000080000 [ 1240.601399][T17977] RDX: ffffc90010dc1000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 1240.609366][T17977] RBP: ffff888063c3e000 R08: dffffc0000000000 R09: fffffbfff2117084 [ 1240.617340][T17977] R10: fffffbfff2117084 R11: 1ffffffff2117083 R12: ffff88802773aaac [ 1240.625310][T17977] R13: ffff88802773a898 R14: dffffc0000000000 R15: 0000000000000000 [ 1240.633282][T17977] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.639095][T17977] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1240.644919][T17977] ? mutex_lock_nested+0x10/0x10 [ 1240.649857][T17977] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1240.655575][T17977] kvm_vcpu_ioctl+0x887/0xb80 [ 1240.660265][T17977] ? xa_release+0x50/0x50 [ 1240.664600][T17977] ? __fget_files+0x28/0x4d0 [ 1240.669231][T17977] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1240.674230][T17977] ? security_file_ioctl+0x7c/0xa0 [ 1240.679353][T17977] ? xa_release+0x50/0x50 [ 1240.683677][T17977] __se_sys_ioctl+0xfa/0x170 [ 1240.688277][T17977] do_syscall_64+0x4c/0xa0 [ 1240.692698][T17977] ? clear_bhb_loop+0x60/0xb0 [ 1240.697405][T17977] ? clear_bhb_loop+0x60/0xb0 [ 1240.702089][T17977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.707976][T17977] RIP: 0033:0x7f2ab058e929 [ 1240.712378][T17977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.731985][T17977] RSP: 002b:00007f2ab13b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.740394][T17977] RAX: ffffffffffffffda RBX: 00007f2ab07b6240 RCX: 00007f2ab058e929 [ 1240.748350][T17977] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1240.756303][T17977] RBP: 00007f2ab0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1240.764882][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.773115][T17977] R13: 0000000000000001 R14: 00007f2ab07b6240 R15: 00007ffccf310358 [ 1240.781075][T17977] [ 1240.784365][T17977] Kernel Offset: disabled [ 1240.788895][T17977] Rebooting in 86400 seconds..