last executing test programs: 14.150384623s ago: executing program 1 (id=212): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001900)=[{&(0x7f0000001480)=""/239, 0xef}], 0x1, 0x2, 0x6, 0x2) 13.576452673s ago: executing program 1 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000002c0)={0x20, 0x5, 0x21, {0x21, 0x21, "17c36041ab85a18eb08fbbac69e39f74bdd6b0c1a81fe208ff66c47d6c969c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.943489977s ago: executing program 2 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 11.160430899s ago: executing program 2 (id=221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 11.066772816s ago: executing program 1 (id=222): r0 = syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x63, 0x10, 0x1, {0x22, 0x92f}}}}, 0x0) 10.494963187s ago: executing program 2 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) set_robust_list(&(0x7f0000000400), 0x18) 9.445338183s ago: executing program 2 (id=228): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000005ff309003c0000000000000055e921ab5b3fdc8d2d7fbd22595a0000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) 8.70961042s ago: executing program 1 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180cbd1c7e21016bbfcaaaa86dd6001070000641100fc010000000000000000000000000000ff"], 0x0) 7.850087257s ago: executing program 1 (id=232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000002c0)={0x20, 0x5, 0x21, {0x21, 0x21, "17c36041ab85a18eb08fbbac69e39f74bdd6b0c1a81fe208ff66c47d6c969c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.77890028s ago: executing program 0 (id=235): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.608019405s ago: executing program 4 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@journal_async_commit}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 6.181136497s ago: executing program 0 (id=237): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = gettid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)={0x1c, 0x2, 0x6}) 5.667922263s ago: executing program 0 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) socket(0x1a, 0x3, 0x0) r3 = epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10000, 0x12) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x0, 0x0, 0x278a, 0x1, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 5.597415732s ago: executing program 1 (id=239): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1a) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, 0x0, &(0x7f0000000280)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_hsr\x00', &(0x7f0000000a40)=@ethtool_dump={0x40, 0x4d8, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) 5.131903278s ago: executing program 4 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4.739674609s ago: executing program 2 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x41, &(0x7f0000000080), 0x64, 0x520, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x0) 4.532465709s ago: executing program 4 (id=243): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.489469096s ago: executing program 0 (id=244): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000010600), 0x1, 0x10572, &(0x7f0000010640)="$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") 3.644595567s ago: executing program 3 (id=245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001090003206d0414c3400000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000200)={0x0, 0x6, 0x1, "d3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.257687694s ago: executing program 4 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000001740)="0fc759bb66b91b09000066b80400000066ba000000000f30ba4100b83500ef660f383145000fc79febf80f01c30f20c06635000000200f22c0f0207b612e0fc7370fba70fc03", 0x46}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.612065313s ago: executing program 3 (id=247): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.558178294s ago: executing program 4 (id=248): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x41, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x1, 0x57f, &(0x7f0000000c00)="$eJzs3V1rHFUfAPD/bJK+P09TKEVFJNALK7WbJvGlgmC9FC0W9L4uyTTUbLqluylNLDS9sDfeSBFELIgfwHsvi1/AT1HQQpES9MKbldnMNttkN69rsnV/P5j2nJnZnHP2zDnzn51ZNoC+NZL9U4h4MRbj6yTiaMu2wcg3jizvt/Tk1mS2JFGvf/JHEkm+rrl/kv9/OM+8EBG/fBlxurC23Or8wkypXE6v5/nR2uy10er8wpkrs6XpdDq9Oj4xce7NifF33n6ra2197eJf33384INzX51c+vanR8fuJXE+juTbWtuxA4utmZEYyd+ToTi/asexLhTWS5K9rgDbMpCP86HI5oCjMZCPeuC/73ZE1IE+lRj/0KeacUDz2r5L18HPjcfvL18ArW3/4PJnI3GgcW10aCl55soou94d7kL5WRk//37/XrbEBp9D3O5CeQBNi3ci4uzg4Nr5L8nnv+072/jweH2ry+i38w/spQdZ/PN6u/in8DT+iTbxz+E2Y3c7Nh7/hUddKKajLP57t238+3TqGh7Ic/9rxHxDyeUr5fRsRPw/Ik7F0P4sv979nHNLD+udtrXGf9mSld+MBfN6PBrc/+xrpkq10k7a3OrxnYiXVuLfJNbM/wcase7q/s/ej4ubLONEev+VTts2bn+r7kfA9R8jXm3b/yt3tJL170+ONo6H0eZRsdafd0/82qn8rbW/+7L+P7R++4eT1vu11a2X8cOBv9NO27Z7/O9LPm2k9+XrbpZqtetjEfuSj9auH195bTPf3D9r/6mT689/7Y7/gxHx2Sbbf/f43Y679kL/T22p/7eeePjhF993Kn9z/f9GI3UqX7OZ+W+zFdzJewcAAAAAAAC9phARRyIpFJ+mC4Vicfn5juNxqFCuVGunL1fmrk5F47uywzFUaN7pPtryPMRY/jxsMz++Kj8REcci4puBg418cbJSntrrxgMAAAAAAAAAAAAAAAAAAECPONzh+/+Z3wb2unbAv85PfkP/2nD8d+OXnoCe5PwP/avD+DctQB8w0KF/Gf/Qv9YZ/4u7WQ9g9zn/Q//qOP4P1pfd3t36ALvH+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAC66uKFC9lSX3pyazLLT92Yn5up3DgzlVZnBiKiOFnZH8XpSmW6nBYnK7Mb/b1ypXJtbDzmbo7W0mpttDq/cGm2Mne1dunKbGk6vZQO7UqrAAAAAAAAAAAAAAAAAAAA4PlSnV+YKZXL6XWJjon3Yq+r8fnLO3l50r6Xk5YGLttWEYO90k0SXU3s8cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3+CQAA//9OHjk4") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) chdir(0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2.066679587s ago: executing program 3 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={[0xffffffffffffffff]}, 0x0, 0x800) 1.448052252s ago: executing program 3 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.402276072s ago: executing program 4 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8080) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 947.959651ms ago: executing program 0 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 775.800558ms ago: executing program 3 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 363.953275ms ago: executing program 0 (id=254): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') 98.111042ms ago: executing program 2 (id=255): r0 = syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=256): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): [ 247.517567][ T5848] cdc_wdm 4-1:1.0: skipping garbage [ 247.523177][ T5848] cdc_wdm 4-1:1.0: skipping garbage [ 247.549375][ T5848] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 247.555582][ T5848] cdc_wdm 4-1:1.0: Unknown control protocol [ 247.740519][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.750560][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.779123][ T1718] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 247.919515][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 247.959171][ T1718] usb 3-1: Using ep0 maxpacket: 16 [ 247.986206][ T1718] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 247.995234][ T1718] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 248.005740][ T1718] usb 3-1: config 8 has no interface number 0 [ 248.012169][ T1718] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 248.024262][ T1718] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 248.036017][ T1718] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.049472][ T1718] usb 3-1: config 8 interface 206 has no altsetting 0 [ 248.083368][ T1718] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 248.092856][ T1718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.101340][ T1718] usb 3-1: Product: syz [ 248.105740][ T1718] usb 3-1: Manufacturer: syz [ 248.110735][ T1718] usb 3-1: SerialNumber: syz [ 248.149498][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 248.164283][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.177500][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.188649][ T5848] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 248.198177][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.352726][ T5848] usb 2-1: config 0 descriptor?? [ 248.437683][ T1718] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 248.449789][ T1718] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 248.460841][ T1718] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 248.647117][ T1718] usb 3-1: USB disconnect, device number 4 [ 248.681357][ T1718] garmin_gps 3-1:8.206: device disconnected [ 249.008018][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 249.015103][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 249.056328][ T5848] usb 2-1: USB disconnect, device number 5 [ 249.369032][ T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.575932][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.587721][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.598091][ T11] usb 1-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 249.613508][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.652984][ T11] usb 1-1: config 0 descriptor?? [ 249.769077][ T1605] usb 4-1: USB disconnect, device number 4 [ 250.104238][ T11] ntrig 0003:1B96:000E.0002: item fetching failed at offset 3/5 [ 250.112571][ T5849] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.147874][ T11] ntrig 0003:1B96:000E.0002: parse failed [ 250.155285][ T11] ntrig 0003:1B96:000E.0002: probe with driver ntrig failed with error -22 [ 250.296046][ T5849] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 250.304866][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.315676][ T5849] usb 3-1: config 0 has no interface number 0 [ 250.328283][ T5849] usb 3-1: config 0 interface 101 has no altsetting 0 [ 250.343716][ T5848] usb 1-1: USB disconnect, device number 7 [ 250.349872][ T1605] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 250.396627][ T5849] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 250.406297][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.414995][ T5849] usb 3-1: Product: syz [ 250.419538][ T5849] usb 3-1: Manufacturer: syz [ 250.430278][ T5849] usb 3-1: SerialNumber: syz [ 250.509562][ T1605] usb 4-1: device descriptor read/64, error -71 [ 250.519853][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 250.561865][ T5849] usb 3-1: config 0 descriptor?? [ 250.592344][ T5849] usb 3-1: bad CDC descriptors [ 250.600838][ T5849] option 3-1:0.101: GSM modem (1-port) converter detected [ 250.701483][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.712466][ T11] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.722000][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.752142][ T11] usb 2-1: config 0 descriptor?? [ 250.769428][ T1718] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 250.774680][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 250.810862][ T1605] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 250.962050][ T1718] usb 5-1: Using ep0 maxpacket: 16 [ 250.979163][ T1605] usb 4-1: device descriptor read/64, error -71 [ 251.000579][ T11] pwc: send_video_command error -71 [ 251.003076][ T1718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 251.006162][ T11] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 251.017568][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.037463][ T11] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 251.089481][ T1718] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.099109][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.100621][ T1605] usb usb4-port1: attempt power cycle [ 251.107253][ T1718] usb 5-1: Product: syz [ 251.107353][ T1718] usb 5-1: Manufacturer: syz [ 251.107447][ T1718] usb 5-1: SerialNumber: syz [ 251.134156][ T11] usb 2-1: USB disconnect, device number 6 [ 251.140152][ T6026] loop2: detected capacity change from 0 to 1024 [ 251.282390][ T1718] usb 5-1: config 0 descriptor?? [ 251.332403][ T1718] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 251.355863][ T1718] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 251.382967][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.396141][ T6026] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.491775][ T1605] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 251.509244][ T5849] usb 3-1: USB disconnect, device number 5 [ 251.517845][ T5849] option 3-1:0.101: device disconnected [ 251.577035][ T1605] usb 4-1: device descriptor read/8, error -71 [ 251.673315][ T30] audit: type=1326 audit(1751523673.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000 [ 251.695884][ T30] audit: type=1326 audit(1751523673.718:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000 [ 251.700042][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 251.829050][ T1605] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.854592][ T1605] usb 4-1: device descriptor read/8, error -71 [ 251.958312][ T1718] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 251.974378][ T1718] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 251.990781][ T1605] usb usb4-port1: unable to enumerate USB device [ 252.008904][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.019570][ T11] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.029058][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.053254][ T11] usb 2-1: config 0 descriptor?? [ 252.106280][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 252.246781][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.484354][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 252.506461][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 252.525979][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 252.548052][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 252.567482][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 252.629251][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 252.648837][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 252.664678][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 252.690234][ T11] pwc: recv_control_msg error -32 req 04 val 1500 [ 252.708203][ T11] pwc: recv_control_msg error -32 req 02 val 2500 [ 252.718771][ T11] pwc: recv_control_msg error -32 req 02 val 2400 [ 252.932767][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 252.949548][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 252.968045][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 253.001916][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 253.033077][ T1718] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 253.059859][ T11] pwc: Registered as video103. [ 253.108849][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 253.184935][ T11] usb 2-1: USB disconnect, device number 7 [ 253.235765][ T1718] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 253.452847][ T1718] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 253.479465][ T1718] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 253.547715][ T1718] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 253.559929][ T1718] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 253.601949][ T1718] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 253.679388][ T1718] usb 5-1: USB disconnect, device number 3 [ 254.386692][ T1718] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.589114][ T1718] usb 2-1: Using ep0 maxpacket: 16 [ 254.632921][ T1718] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 254.642402][ T1718] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 254.653475][ T1718] usb 2-1: config 8 has no interface number 0 [ 254.660142][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 254.672368][ T1718] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 254.684066][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.697536][ T1718] usb 2-1: config 8 interface 206 has no altsetting 0 [ 254.924640][ T1718] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 254.935751][ T1718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.944634][ T1718] usb 2-1: Product: syz [ 254.949157][ T1718] usb 2-1: Manufacturer: syz [ 254.953995][ T1718] usb 2-1: SerialNumber: syz [ 255.244071][ T1718] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 255.255352][ T1718] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 255.266582][ T1718] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 255.285944][ T5848] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 255.465868][ T1605] usb 2-1: USB disconnect, device number 8 [ 255.475627][ T1605] garmin_gps 2-1:8.206: device disconnected [ 255.500076][ T5848] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.509209][ T5848] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.519898][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.529340][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 255.540779][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.678898][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 255.713869][ T5848] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.723629][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.732087][ T5848] usb 4-1: Product: syz [ 255.736479][ T5848] usb 4-1: Manufacturer: syz [ 255.743687][ T1718] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 255.788296][ T5848] cdc_wdm 4-1:1.0: skipping garbage [ 255.793960][ T5848] cdc_wdm 4-1:1.0: skipping garbage [ 255.821251][ T5848] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 255.827430][ T5848] cdc_wdm 4-1:1.0: Unknown control protocol [ 255.862263][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 255.894404][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.906247][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.916684][ T11] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 255.926130][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.977739][ T11] usb 5-1: config 0 descriptor?? [ 255.981658][ T1718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.994242][ T1718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.004398][ T1718] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 256.013888][ T1718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.211501][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.222351][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.290077][ T1718] usb 3-1: config 0 descriptor?? [ 256.663875][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 256.679763][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.768892][ T11] usb 5-1: USB disconnect, device number 4 [ 256.812917][ T1718] ntrig 0003:1B96:000E.0003: unknown main item tag 0x2 [ 256.820688][ T1718] ntrig 0003:1B96:000E.0003: item fetching failed at offset 3/5 [ 256.889172][ T1718] ntrig 0003:1B96:000E.0003: parse failed [ 256.896107][ T1718] ntrig 0003:1B96:000E.0003: probe with driver ntrig failed with error -22 [ 257.011707][ T1718] usb 3-1: USB disconnect, device number 6 [ 257.210944][ T5848] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 257.423308][ T5848] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 257.432119][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.442795][ T5848] usb 2-1: config 0 has no interface number 0 [ 257.449563][ T5848] usb 2-1: config 0 interface 101 has no altsetting 0 [ 257.535114][ T5848] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 257.544807][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.553376][ T5848] usb 2-1: Product: syz [ 257.557953][ T5848] usb 2-1: Manufacturer: syz [ 257.563035][ T5848] usb 2-1: SerialNumber: syz [ 257.610127][ T5848] usb 2-1: config 0 descriptor?? [ 257.629082][ T5848] usb 2-1: bad CDC descriptors [ 257.639100][ T5848] option 2-1:0.101: GSM modem (1-port) converter detected [ 257.993532][ T5848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.021793][ T11] usb 4-1: USB disconnect, device number 9 [ 258.179037][ T5848] usb 5-1: device descriptor read/64, error -71 [ 258.187207][ T1605] usb 2-1: USB disconnect, device number 9 [ 258.197362][ T1605] option 2-1:0.101: device disconnected [ 258.459399][ T5848] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 258.551301][ T1718] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 258.628864][ T5848] usb 5-1: device descriptor read/64, error -71 [ 258.730640][ T1718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.741436][ T1718] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 258.751111][ T1718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.769525][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 258.778367][ T5848] usb usb5-port1: attempt power cycle [ 258.800571][ T1718] usb 3-1: config 0 descriptor?? [ 258.819249][ T30] audit: type=1326 audit(1751523680.848:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 258.842791][ T30] audit: type=1326 audit(1751523680.848:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 258.874946][ T1718] pwc: Askey VC010 type 2 USB webcam detected. [ 258.969298][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 258.994583][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 259.006822][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.101286][ T1718] pwc: send_video_command error -71 [ 259.106722][ T1718] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 259.116097][ T1718] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 259.158842][ T5848] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 259.167366][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.177289][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.185762][ T24] usb 1-1: Product: syz [ 259.190367][ T24] usb 1-1: Manufacturer: syz [ 259.195198][ T24] usb 1-1: SerialNumber: syz [ 259.233459][ T5848] usb 5-1: device descriptor read/8, error -71 [ 259.241256][ T1718] usb 3-1: USB disconnect, device number 7 [ 259.275723][ T24] usb 1-1: config 0 descriptor?? [ 259.311434][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.324510][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 259.497485][ T5848] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.561118][ T5848] usb 5-1: device descriptor read/8, error -71 [ 259.666259][ T1718] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.676388][ T5848] usb usb5-port1: unable to enumerate USB device [ 259.836548][ T1718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.849159][ T1718] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.858439][ T1718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.873793][ T1718] usb 3-1: config 0 descriptor?? [ 259.897979][ T1718] pwc: Askey VC010 type 2 USB webcam detected. [ 259.917354][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 259.928014][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 260.319899][ T1718] pwc: recv_control_msg error -32 req 02 val 2b00 [ 260.338319][ T1718] pwc: recv_control_msg error -32 req 02 val 2700 [ 260.350585][ T1718] pwc: recv_control_msg error -32 req 02 val 2c00 [ 260.376011][ T1718] pwc: recv_control_msg error -32 req 04 val 1000 [ 260.386405][ T1718] pwc: recv_control_msg error -32 req 04 val 1300 [ 260.404667][ T1718] pwc: recv_control_msg error -32 req 04 val 1400 [ 260.417184][ T1718] pwc: recv_control_msg error -32 req 02 val 2000 [ 260.439269][ T1718] pwc: recv_control_msg error -32 req 02 val 2100 [ 260.455266][ T1718] pwc: recv_control_msg error -32 req 04 val 1500 [ 260.479412][ T1718] pwc: recv_control_msg error -32 req 02 val 2500 [ 260.489527][ T1718] pwc: recv_control_msg error -32 req 02 val 2400 [ 260.705114][ T1718] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.742371][ T1718] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.754995][ T1718] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.764205][ T1718] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.784863][ T1718] pwc: Registered as video103. [ 260.793249][ T1718] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 260.831989][ T6101] loop3: detected capacity change from 0 to 256 [ 260.960753][ T1718] usb 3-1: USB disconnect, device number 8 [ 260.984222][ T24] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 261.206464][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 261.433549][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 261.472668][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 261.500954][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 261.541299][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 261.589046][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 261.630274][ T24] usb 1-1: USB disconnect, device number 8 [ 261.808863][ T1718] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.989041][ T1718] usb 5-1: Using ep0 maxpacket: 16 [ 262.026823][ T1718] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 262.035571][ T1718] usb 5-1: config 8 has no interface number 0 [ 262.043785][ T1718] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 262.055873][ T1718] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 262.067851][ T1718] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 262.078186][ T1718] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 262.091706][ T1718] usb 5-1: config 8 interface 206 has no altsetting 0 [ 262.165854][ T1718] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 262.175591][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.184047][ T1718] usb 5-1: Product: syz [ 262.188439][ T1718] usb 5-1: Manufacturer: syz [ 262.193507][ T1718] usb 5-1: SerialNumber: syz [ 262.271251][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.310473][ T1605] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.430200][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 262.466274][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.477849][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.488776][ T24] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 262.498277][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.543401][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.554953][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.565242][ T1605] usb 2-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 262.574729][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.604196][ T1718] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 262.618387][ T1718] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 262.629627][ T1718] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 262.671924][ T24] usb 3-1: config 0 descriptor?? [ 262.750762][ T1605] usb 2-1: config 0 descriptor?? [ 262.819639][ T1718] usb 5-1: USB disconnect, device number 9 [ 262.832180][ T1718] garmin_gps 5-1:8.206: device disconnected [ 263.210495][ T1605] ntrig 0003:1B96:000E.0004: unknown main item tag 0x2 [ 263.217718][ T1605] ntrig 0003:1B96:000E.0004: item fetching failed at offset 3/5 [ 263.281628][ T5844] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 263.313068][ T1605] ntrig 0003:1B96:000E.0004: parse failed [ 263.319835][ T1605] ntrig 0003:1B96:000E.0004: probe with driver ntrig failed with error -22 [ 263.413938][ T1605] usb 2-1: USB disconnect, device number 10 [ 263.436007][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 263.442768][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.506357][ T5844] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.520976][ T5844] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.533401][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.543254][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.554683][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 263.579927][ T24] usb 3-1: USB disconnect, device number 9 [ 263.672547][ T5844] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.682779][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.691674][ T5844] usb 4-1: Product: syz [ 263.696066][ T5844] usb 4-1: Manufacturer: syz [ 263.855249][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 263.860841][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 263.873503][ T5844] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 263.880900][ T5844] cdc_wdm 4-1:1.0: Unknown control protocol [ 263.899196][ T1718] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.092364][ T1718] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 264.101101][ T1718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.111743][ T1718] usb 1-1: config 0 has no interface number 0 [ 264.118272][ T1718] usb 1-1: config 0 interface 101 has no altsetting 0 [ 264.118971][ T30] audit: type=1326 audit(1751523686.148:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 264.176478][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.187543][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.197440][ T30] audit: type=1326 audit(1751523686.238:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 264.379637][ T1718] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 264.389420][ T1718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.397836][ T1718] usb 1-1: Product: syz [ 264.402799][ T1718] usb 1-1: Manufacturer: syz [ 264.407616][ T1718] usb 1-1: SerialNumber: syz [ 264.519645][ T1718] usb 1-1: config 0 descriptor?? [ 264.555480][ T1718] usb 1-1: bad CDC descriptors [ 264.567242][ T1718] option 1-1:0.101: GSM modem (1-port) converter detected [ 264.829961][ T1605] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.009085][ T1605] usb 2-1: Using ep0 maxpacket: 32 [ 265.032043][ T1605] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.043668][ T1605] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 265.053203][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.099787][ T1605] usb 2-1: config 0 descriptor?? [ 265.115917][ T1605] hub 2-1:0.0: bad descriptor, ignoring hub [ 265.122500][ T1605] hub 2-1:0.0: probe with driver hub failed with error -5 [ 265.136563][ T1605] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 265.220909][ T11] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 265.231029][ T1605] usb 1-1: USB disconnect, device number 9 [ 265.241111][ T1605] option 1-1:0.101: device disconnected [ 265.399359][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 265.428952][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.439557][ T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.458848][ T11] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 265.468331][ T11] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 265.484567][ T11] usb 5-1: Manufacturer: syz [ 265.497438][ T11] usb 5-1: config 0 descriptor?? [ 265.764542][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.775107][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.949043][ T11] usb 4-1: USB disconnect, device number 10 [ 266.619704][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 266.826096][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.837069][ T11] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.846645][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.862212][ T11] usb 1-1: config 0 descriptor?? [ 266.892168][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 267.153227][ T11] pwc: send_video_command error -71 [ 267.158859][ T11] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 267.167028][ T11] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 267.263359][ T11] usb 1-1: USB disconnect, device number 10 [ 267.720461][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 267.760061][ T1718] usb 2-1: USB disconnect, device number 11 [ 267.917530][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.928424][ T11] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.943759][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.978350][ T11] usb 1-1: config 0 descriptor?? [ 268.025577][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 268.033004][ T1605] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 268.211907][ T5849] usb 5-1: USB disconnect, device number 10 [ 268.248086][ T1605] usb 4-1: Using ep0 maxpacket: 16 [ 268.283007][ T1605] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 268.295192][ T1605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.393802][ T1605] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.403664][ T1605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.412627][ T1605] usb 4-1: Product: syz [ 268.417210][ T1605] usb 4-1: Manufacturer: syz [ 268.422331][ T1605] usb 4-1: SerialNumber: syz [ 268.434388][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 268.475423][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 268.487494][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 268.498159][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 268.510140][ T1605] usb 4-1: config 0 descriptor?? [ 268.522797][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 268.547923][ T1605] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 268.566362][ T1605] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 268.582738][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 268.594343][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 268.606864][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 268.618447][ T11] pwc: recv_control_msg error -32 req 04 val 1500 [ 268.637751][ T11] pwc: recv_control_msg error -32 req 02 val 2500 [ 268.648406][ T11] pwc: recv_control_msg error -32 req 02 val 2400 [ 268.884526][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.900680][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.926028][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.950013][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.994487][ T11] pwc: Registered as video103. [ 269.002788][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 269.115314][ T11] usb 1-1: USB disconnect, device number 11 [ 269.144615][ T1605] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 269.161921][ T1605] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 269.289361][ T5411] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.489545][ T5411] usb 2-1: Using ep0 maxpacket: 16 [ 269.541654][ T5411] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 269.550547][ T5411] usb 2-1: config 8 has no interface number 0 [ 269.557200][ T5411] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 269.569838][ T5411] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 269.587502][ T5411] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 269.600037][ T5411] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 269.613738][ T5411] usb 2-1: config 8 interface 206 has no altsetting 0 [ 269.709261][ T1718] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.850613][ T5411] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 269.860314][ T5411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.869267][ T5411] usb 2-1: Product: syz [ 269.873674][ T5411] usb 2-1: Manufacturer: syz [ 269.878738][ T5411] usb 2-1: SerialNumber: syz [ 269.914387][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.926053][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.936328][ T1718] usb 5-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 269.945763][ T1718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.072704][ T1718] usb 5-1: config 0 descriptor?? [ 270.175599][ T5411] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 270.197152][ T5411] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 270.211126][ T5411] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 270.243922][ T1605] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 270.258970][ T5844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 270.352359][ T5411] usb 2-1: USB disconnect, device number 12 [ 270.376773][ T5411] garmin_gps 2-1:8.206: device disconnected [ 270.446280][ T1605] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 270.479003][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 270.504964][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.516724][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.527390][ T5844] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 270.537059][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.599552][ T1718] ntrig 0003:1B96:000E.0005: unknown main item tag 0x2 [ 270.606997][ T1718] ntrig 0003:1B96:000E.0005: item fetching failed at offset 3/5 [ 270.643402][ T1718] ntrig 0003:1B96:000E.0005: parse failed [ 270.650081][ T1718] ntrig 0003:1B96:000E.0005: probe with driver ntrig failed with error -22 [ 270.673195][ T5844] usb 1-1: config 0 descriptor?? [ 270.677113][ T1605] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 270.736502][ T1605] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 270.765850][ T1605] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 270.792629][ T5411] usb 5-1: USB disconnect, device number 11 [ 270.829997][ T1605] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 270.869189][ T1605] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 270.927126][ T1605] usb 4-1: USB disconnect, device number 11 [ 271.209817][ T5844] glorious 0003:258A:0033.0006: unknown main item tag 0x2 [ 271.279405][ T5844] glorious 0003:258A:0033.0006: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0 [ 271.400773][ T1605] usb 1-1: USB disconnect, device number 12 [ 272.199317][ T1605] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.270801][ T6160] fido_id[6160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 272.424690][ T1605] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 272.433277][ T1605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.450192][ T1605] usb 5-1: config 0 has no interface number 0 [ 272.456554][ T1605] usb 5-1: config 0 interface 101 has no altsetting 0 [ 272.535242][ T1605] usb 5-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 272.551151][ T1605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.561489][ T1605] usb 5-1: Product: syz [ 272.565896][ T1605] usb 5-1: Manufacturer: syz [ 272.570918][ T1605] usb 5-1: SerialNumber: syz [ 272.577814][ T5411] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.626269][ T1605] usb 5-1: config 0 descriptor?? [ 272.658392][ T1605] usb 5-1: bad CDC descriptors [ 272.666843][ T1605] option 5-1:0.101: GSM modem (1-port) converter detected [ 272.764936][ T5411] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.774271][ T5411] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.784989][ T5411] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.794306][ T5411] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 272.805750][ T5411] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 272.841127][ T5411] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.856362][ T5411] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.866853][ T5411] usb 2-1: Product: syz [ 272.871365][ T5411] usb 2-1: Manufacturer: syz [ 272.933449][ T5411] cdc_wdm 2-1:1.0: skipping garbage [ 272.939039][ T5411] cdc_wdm 2-1:1.0: skipping garbage [ 273.004833][ T5411] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 273.012334][ T5411] cdc_wdm 2-1:1.0: Unknown control protocol [ 273.205682][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.216455][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.434417][ T5411] usb 5-1: USB disconnect, device number 12 [ 273.444702][ T5411] option 5-1:0.101: device disconnected [ 273.499006][ T5844] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 273.698845][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 273.721597][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.733157][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 273.742762][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.761941][ T5844] usb 4-1: config 0 descriptor?? [ 273.783104][ T5844] hub 4-1:0.0: bad descriptor, ignoring hub [ 273.789471][ T5844] hub 4-1:0.0: probe with driver hub failed with error -5 [ 273.803729][ T5844] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 274.619207][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 274.809867][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 274.832576][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.846335][ T5844] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.892510][ T5844] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.903795][ T5844] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.912893][ T5844] usb 1-1: Manufacturer: syz [ 274.962951][ T5844] usb 1-1: config 0 descriptor?? [ 275.215207][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.216791][ T5411] usb 2-1: USB disconnect, device number 13 [ 275.225363][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.499178][ T1605] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 275.686349][ T1605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.697565][ T1605] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.707120][ T1605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.736920][ T1605] usb 5-1: config 0 descriptor?? [ 275.766641][ T1605] pwc: Askey VC010 type 2 USB webcam detected. [ 275.919184][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.955637][ T1605] pwc: send_video_command error -71 [ 275.961474][ T1605] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 275.970149][ T1605] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 275.987726][ T1605] usb 5-1: USB disconnect, device number 13 [ 276.089281][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 276.105341][ T5844] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 276.114074][ T5844] usb 2-1: config 8 has no interface number 0 [ 276.118894][ T5411] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.120787][ T5844] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 276.142133][ T5844] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 276.154023][ T5844] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 276.164272][ T5844] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 276.177769][ T5844] usb 2-1: config 8 interface 206 has no altsetting 0 [ 276.195915][ T5844] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 276.205472][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.213967][ T5844] usb 2-1: Product: syz [ 276.218374][ T5844] usb 2-1: Manufacturer: syz [ 276.223805][ T5844] usb 2-1: SerialNumber: syz [ 276.311542][ T5411] usb 3-1: Using ep0 maxpacket: 16 [ 276.359556][ T5411] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.371931][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.425398][ T5411] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.441193][ T5411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.449967][ T1718] usb 4-1: USB disconnect, device number 12 [ 276.457660][ T5411] usb 3-1: Product: syz [ 276.462254][ T5411] usb 3-1: Manufacturer: syz [ 276.467090][ T5411] usb 3-1: SerialNumber: syz [ 276.479713][ T1605] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.518762][ T5411] usb 3-1: config 0 descriptor?? [ 276.533212][ T5844] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 276.547730][ T5844] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 276.558904][ T5844] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 276.562936][ T5411] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 276.577177][ T5411] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 276.669877][ T1605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.680876][ T1605] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.690449][ T1605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.772056][ T5844] usb 2-1: USB disconnect, device number 14 [ 276.803368][ T1605] usb 5-1: config 0 descriptor?? [ 276.829156][ T1605] pwc: Askey VC010 type 2 USB webcam detected. [ 276.862456][ T5844] garmin_gps 2-1:8.206: device disconnected [ 277.183152][ T5411] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 277.201697][ T5411] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 277.219101][ T1605] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.245790][ T1605] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.273602][ T1605] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.299640][ T1605] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.319922][ T1605] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.344210][ T1605] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.399650][ T1605] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.422579][ T1605] pwc: recv_control_msg error -32 req 02 val 2100 [ 277.449891][ T1605] pwc: recv_control_msg error -32 req 04 val 1500 [ 277.513884][ T1605] pwc: recv_control_msg error -32 req 02 val 2500 [ 277.546478][ T1605] pwc: recv_control_msg error -32 req 02 val 2400 [ 277.580565][ T11] usb 1-1: USB disconnect, device number 13 [ 277.803080][ T1605] pwc: recv_control_msg error -71 req 02 val 2900 [ 277.829192][ T1605] pwc: recv_control_msg error -71 req 02 val 2800 [ 277.849175][ T5411] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 277.860002][ T1605] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.922569][ T1605] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.968193][ T1605] pwc: Registered as video103. [ 278.017834][ T1605] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 278.122596][ T1605] usb 5-1: USB disconnect, device number 14 [ 278.261033][ T11] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.479280][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 278.524187][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.535713][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.546121][ T11] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 278.555811][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.707453][ T5411] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 278.720051][ T11] usb 1-1: config 0 descriptor?? [ 278.757255][ T5411] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 278.809373][ T5411] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 278.859835][ T5411] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 278.936812][ T5411] usb 3-1: USB disconnect, device number 10 [ 279.127784][ T6212] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.223276][ T11] glorious 0003:258A:0033.0007: item fetching failed at offset 2/3 [ 279.257649][ T11] glorious 0003:258A:0033.0007: probe with driver glorious failed with error -22 [ 279.402051][ T5844] usb 1-1: USB disconnect, device number 14 [ 279.748905][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.941046][ T11] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 279.949832][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.960469][ T11] usb 2-1: config 0 has no interface number 0 [ 279.966791][ T11] usb 2-1: config 0 interface 101 has no altsetting 0 [ 280.064259][ T11] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 280.073815][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.082736][ T11] usb 2-1: Product: syz [ 280.087140][ T11] usb 2-1: Manufacturer: syz [ 280.092073][ T11] usb 2-1: SerialNumber: syz [ 280.147420][ T11] usb 2-1: config 0 descriptor?? [ 280.230430][ T11] usb 2-1: bad CDC descriptors [ 280.241712][ T11] option 2-1:0.101: GSM modem (1-port) converter detected [ 280.543997][ T6215] loop1: detected capacity change from 0 to 1024 [ 280.608858][ T5844] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 280.757928][ T6215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.771229][ T6215] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.814307][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.821586][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.852332][ T5844] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.861520][ T5844] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.872414][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.881815][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 280.893235][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 280.934680][ T5844] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.945980][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.954941][ T5844] usb 4-1: Product: syz [ 280.959465][ T5844] usb 4-1: Manufacturer: syz [ 281.054028][ T6232] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.85: bg 0: block 393: padding at end of block bitmap is not set [ 281.099921][ T1718] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.101284][ T6232] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 112 with error 117 [ 281.114805][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 281.120698][ T6232] EXT4-fs (loop1): This should not happen!! Data will be lost [ 281.120698][ T6232] [ 281.125807][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 281.184133][ T5844] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 281.190516][ T5844] cdc_wdm 4-1:1.0: Unknown control protocol [ 281.251930][ T6232] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 281.265363][ T6232] EXT4-fs (loop1): This should not happen!! Data will be lost [ 281.265363][ T6232] [ 281.275751][ T6232] EXT4-fs (loop1): Total free blocks count 0 [ 281.282177][ T6232] EXT4-fs (loop1): Free/Dirty block details [ 281.288311][ T6232] EXT4-fs (loop1): free_blocks=0 [ 281.293741][ T6232] EXT4-fs (loop1): dirty_blocks=32 [ 281.299347][ T6232] EXT4-fs (loop1): Block reservation details [ 281.328799][ T1718] usb 5-1: Using ep0 maxpacket: 32 [ 281.363211][ T1718] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.374483][ T1718] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 281.384609][ T1718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.413690][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.423858][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.499812][ T11] usb 2-1: USB disconnect, device number 15 [ 281.508342][ T11] option 2-1:0.101: device disconnected [ 281.533105][ T1718] usb 5-1: config 0 descriptor?? [ 281.584032][ T1718] hub 5-1:0.0: bad descriptor, ignoring hub [ 281.590658][ T1718] hub 5-1:0.0: probe with driver hub failed with error -5 [ 281.604764][ T1718] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 281.835726][ T5411] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 281.939014][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.008868][ T5411] usb 3-1: Using ep0 maxpacket: 16 [ 282.019924][ T5411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.030558][ T5411] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.044544][ T5411] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 282.054253][ T5411] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 282.064151][ T5411] usb 3-1: Manufacturer: syz [ 282.082735][ T5411] usb 3-1: config 0 descriptor?? [ 282.099090][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 282.146761][ T24] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 282.155703][ T24] usb 1-1: config 8 has no interface number 0 [ 282.162260][ T24] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 282.175811][ T24] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 282.188201][ T24] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 282.198772][ T24] usb 1-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 282.208996][ T24] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 282.222520][ T24] usb 1-1: config 8 interface 206 has no altsetting 0 [ 282.244810][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 282.254456][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.262905][ T24] usb 1-1: Product: syz [ 282.267289][ T24] usb 1-1: Manufacturer: syz [ 282.273818][ T24] usb 1-1: SerialNumber: syz [ 282.336411][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.347602][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.520081][ T24] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 282.531879][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 282.543038][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 282.724951][ T24] usb 1-1: USB disconnect, device number 15 [ 282.751673][ T24] garmin_gps 1-1:8.206: device disconnected [ 283.387769][ T24] usb 4-1: USB disconnect, device number 13 [ 283.899138][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.969254][ T1718] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 284.084444][ T5411] usb 5-1: USB disconnect, device number 15 [ 284.098895][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.109943][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.121089][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.143637][ T1718] usb 4-1: device descriptor read/64, error -71 [ 284.192245][ T24] usb 1-1: config 0 descriptor?? [ 284.230415][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 284.299943][ T5844] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.389110][ T1718] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 284.429826][ T24] pwc: send_video_command error -71 [ 284.435364][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 284.443772][ T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 284.475778][ T24] usb 1-1: USB disconnect, device number 16 [ 284.486859][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 284.513094][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.526611][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.540619][ T1718] usb 4-1: device descriptor read/64, error -71 [ 284.556693][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.567626][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.577061][ T5844] usb 2-1: Product: syz [ 284.582248][ T5844] usb 2-1: Manufacturer: syz [ 284.587069][ T5844] usb 2-1: SerialNumber: syz [ 284.604976][ T5844] usb 2-1: config 0 descriptor?? [ 284.627566][ T5844] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.637891][ T5844] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 284.650703][ T1718] usb usb4-port1: attempt power cycle [ 284.735080][ T5848] usb 3-1: USB disconnect, device number 11 [ 284.969139][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 285.008924][ T1718] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 285.051569][ T1718] usb 4-1: device descriptor read/8, error -71 [ 285.153019][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.163938][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.173734][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.238912][ T24] usb 1-1: config 0 descriptor?? [ 285.249653][ T5411] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 285.251297][ T5844] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 285.290428][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 285.319811][ T5844] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 285.338890][ T1718] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 285.386728][ T1718] usb 4-1: device descriptor read/8, error -71 [ 285.439084][ T5411] usb 3-1: Using ep0 maxpacket: 32 [ 285.470380][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.482153][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.492466][ T5411] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 285.502064][ T5411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.522149][ T1718] usb usb4-port1: unable to enumerate USB device [ 285.566680][ T5411] usb 3-1: config 0 descriptor?? [ 285.663282][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 285.697037][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 285.721595][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 285.743303][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 285.780765][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 285.797262][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 285.810458][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 285.840098][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 285.857810][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 285.919343][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 285.939379][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 285.970443][ T5844] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 286.042213][ T5411] glorious 0003:258A:0033.0008: item fetching failed at offset 2/3 [ 286.093245][ T5411] glorious 0003:258A:0033.0008: probe with driver glorious failed with error -22 [ 286.169829][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 286.201778][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 286.212799][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 286.225964][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 286.232422][ T5411] usb 3-1: USB disconnect, device number 12 [ 286.241610][ T24] pwc: Registered as video103. [ 286.303999][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 286.395263][ T24] usb 1-1: USB disconnect, device number 17 [ 286.833257][ T5844] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 286.855119][ T5844] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 286.896166][ T5844] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 286.942690][ T5844] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 286.975785][ T5844] usb 2-1: USB disconnect, device number 16 [ 287.672342][ T5411] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 287.778936][ T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 287.787666][ T1605] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 287.889014][ T5411] usb 3-1: Using ep0 maxpacket: 16 [ 287.921424][ T5411] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.932618][ T5411] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.966687][ T5411] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.976623][ T5411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.985194][ T5411] usb 3-1: Product: syz [ 287.990458][ T5411] usb 3-1: Manufacturer: syz [ 287.995288][ T5411] usb 3-1: SerialNumber: syz [ 288.002498][ T1605] usb 1-1: Using ep0 maxpacket: 16 [ 288.033903][ T11] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.043154][ T11] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 288.053843][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.063244][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 288.074702][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 288.127674][ T1605] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 288.136561][ T1605] usb 1-1: config 8 has no interface number 0 [ 288.143721][ T1605] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 288.156068][ T1605] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 288.168029][ T1605] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 288.179141][ T1605] usb 1-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 288.189554][ T1605] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 288.203298][ T1605] usb 1-1: config 8 interface 206 has no altsetting 0 [ 288.260031][ T11] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.269762][ T11] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.278208][ T11] usb 5-1: Product: syz [ 288.282983][ T11] usb 5-1: Manufacturer: syz [ 288.327248][ T1605] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 288.337035][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.345636][ T1605] usb 1-1: Product: syz [ 288.350170][ T1605] usb 1-1: Manufacturer: syz [ 288.354995][ T1605] usb 1-1: SerialNumber: syz [ 288.380526][ T5411] usb 3-1: 0:2 : does not exist [ 288.409221][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 288.423751][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 288.455419][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 288.468940][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 288.483007][ T5411] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 288.596595][ T5411] usb 3-1: USB disconnect, device number 13 [ 288.628753][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.639769][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.765702][ T1605] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 288.778181][ T1605] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 288.789328][ T1605] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 288.973765][ T5844] usb 1-1: USB disconnect, device number 18 [ 288.984450][ T5844] garmin_gps 1-1:8.206: device disconnected [ 289.088963][ T11] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 289.117684][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.268906][ T11] usb 2-1: device descriptor read/64, error -71 [ 289.525323][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 289.626156][ T5411] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 289.688941][ T11] usb 2-1: device descriptor read/64, error -71 [ 289.801125][ T11] usb usb2-port1: attempt power cycle [ 289.853872][ T5411] usb 3-1: Using ep0 maxpacket: 16 [ 289.938856][ T5411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.949669][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.966389][ T5411] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.989889][ T5411] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 289.999457][ T5411] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.007713][ T5411] usb 3-1: Manufacturer: syz [ 290.017979][ T5411] usb 3-1: config 0 descriptor?? [ 290.265863][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.277922][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.358885][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.402077][ T11] usb 2-1: device descriptor read/8, error -71 [ 290.547360][ T5844] usb 5-1: USB disconnect, device number 16 [ 290.659115][ T11] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 290.790834][ T11] usb 2-1: device descriptor read/8, error -71 [ 290.910343][ T11] usb usb2-port1: unable to enumerate USB device [ 291.918829][ T11] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 292.088960][ T11] usb 1-1: device descriptor read/64, error -71 [ 292.238856][ T5844] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 292.379763][ T11] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 292.410574][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 292.425831][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.437312][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.447569][ T5844] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 292.457034][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.488865][ T5411] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 292.495056][ T24] usb 3-1: USB disconnect, device number 14 [ 292.542851][ T11] usb 1-1: device descriptor read/64, error -71 [ 292.564922][ T5844] usb 5-1: config 0 descriptor?? [ 292.665300][ T11] usb usb1-port1: attempt power cycle [ 292.723959][ T5411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.734624][ T5411] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.744152][ T5411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.882251][ T5411] usb 2-1: config 0 descriptor?? [ 292.917245][ T5411] pwc: Askey VC010 type 2 USB webcam detected. [ 293.056953][ T5844] glorious 0003:258A:0033.0009: item fetching failed at offset 2/3 [ 293.089053][ T11] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 293.112224][ T5844] glorious 0003:258A:0033.0009: probe with driver glorious failed with error -22 [ 293.140442][ T5411] pwc: send_video_command error -71 [ 293.146068][ T5411] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 293.154434][ T5411] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 293.167570][ T11] usb 1-1: device descriptor read/8, error -71 [ 293.202700][ T5411] usb 2-1: USB disconnect, device number 21 [ 293.291319][ T1605] usb 5-1: USB disconnect, device number 17 [ 293.409309][ T11] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 293.465323][ T11] usb 1-1: device descriptor read/8, error -71 [ 293.598850][ T11] usb usb1-port1: unable to enumerate USB device [ 293.649592][ T5411] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 293.865219][ T5411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.876017][ T5411] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.885542][ T5411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.969811][ T5411] usb 2-1: config 0 descriptor?? [ 293.990821][ T5411] pwc: Askey VC010 type 2 USB webcam detected. [ 294.394852][ T5411] pwc: recv_control_msg error -32 req 02 val 2b00 [ 294.425901][ T5411] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.450659][ T5411] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.491361][ T5411] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.511294][ T5411] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.536233][ T5411] pwc: recv_control_msg error -32 req 04 val 1400 [ 294.549866][ T5411] pwc: recv_control_msg error -32 req 02 val 2000 [ 294.580384][ T5411] pwc: recv_control_msg error -32 req 02 val 2100 [ 294.588995][ T5844] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 294.601839][ T5411] pwc: recv_control_msg error -32 req 04 val 1500 [ 294.633598][ T5411] pwc: recv_control_msg error -32 req 02 val 2500 [ 294.669539][ T5411] pwc: recv_control_msg error -32 req 02 val 2400 [ 294.893109][ T5411] pwc: recv_control_msg error -71 req 02 val 2900 [ 294.949877][ T5411] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.003050][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 295.016127][ T5411] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.031179][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 295.044515][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.059098][ T5411] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.105075][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.114804][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.123358][ T5844] usb 5-1: Product: syz [ 295.125258][ T5411] pwc: Registered as video103. [ 295.127659][ T5844] usb 5-1: Manufacturer: syz [ 295.135969][ T5411] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 295.137733][ T5844] usb 5-1: SerialNumber: syz [ 295.285729][ T5411] usb 2-1: USB disconnect, device number 22 [ 295.342650][ T5844] usb 5-1: config 0 descriptor?? [ 295.386909][ T5844] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.396700][ T5844] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 296.002578][ T5844] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 296.034056][ T5844] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 296.629686][ T1718] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 296.767176][ T5844] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 296.799736][ T1718] usb 2-1: Using ep0 maxpacket: 16 [ 296.824983][ T1718] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 296.834099][ T1718] usb 2-1: config 8 has no interface number 0 [ 296.840702][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 296.852971][ T1718] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 296.864907][ T1718] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 296.875297][ T1718] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 296.885833][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 296.899592][ T1718] usb 2-1: config 8 interface 206 has no altsetting 0 [ 296.936689][ T1718] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 296.946580][ T1718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.955187][ T1718] usb 2-1: Product: syz [ 296.959908][ T1718] usb 2-1: Manufacturer: syz [ 296.964899][ T1718] usb 2-1: SerialNumber: syz [ 297.009077][ T1605] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 297.245188][ T1605] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.254570][ T1605] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.265196][ T1605] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.274513][ T1605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 297.286241][ T1605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 297.357286][ T1718] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 297.371116][ T1718] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 297.382442][ T1718] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 297.590281][ T5411] usb 2-1: USB disconnect, device number 23 [ 297.601604][ T5411] garmin_gps 2-1:8.206: device disconnected [ 297.613670][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 297.619226][ T1605] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.622899][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 297.629609][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.629730][ T1605] usb 1-1: Product: syz [ 297.629822][ T1605] usb 1-1: Manufacturer: syz [ 297.702722][ T1605] cdc_wdm 1-1:1.0: skipping garbage [ 297.708193][ T1605] cdc_wdm 1-1:1.0: skipping garbage [ 297.719636][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 297.753864][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 297.763011][ T1605] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 297.770717][ T1605] cdc_wdm 1-1:1.0: Unknown control protocol [ 297.825233][ T5844] usb 5-1: USB disconnect, device number 18 [ 298.005836][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.038416][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.109607][ T5844] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.279421][ T5844] usb 4-1: device descriptor read/64, error -71 [ 299.538972][ T5844] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.538971][ T5411] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 299.675046][ T1605] usb 1-1: USB disconnect, device number 23 [ 299.692173][ T5844] usb 4-1: device descriptor read/64, error -71 [ 299.786948][ T5411] usb 5-1: Using ep0 maxpacket: 16 [ 299.823155][ T5411] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.833751][ T5411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.833999][ T5844] usb usb4-port1: attempt power cycle [ 299.843945][ T5411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.011537][ T5411] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 300.022402][ T5411] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 300.030883][ T5411] usb 5-1: Manufacturer: syz [ 300.109414][ T5411] usb 5-1: config 0 descriptor?? [ 300.283944][ T5844] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 300.337830][ T5844] usb 4-1: device descriptor read/8, error -71 [ 300.339933][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.354123][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.459142][ T5411] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 300.508764][ T11] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.578817][ T5844] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 300.602761][ T5844] usb 4-1: device descriptor read/8, error -71 [ 300.620302][ T5411] usb 1-1: Using ep0 maxpacket: 32 [ 300.634507][ T5411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.646264][ T5411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.656559][ T5411] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 300.666193][ T5411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.677230][ T11] usb 2-1: device descriptor read/64, error -71 [ 300.689556][ T5411] usb 1-1: config 0 descriptor?? [ 300.738427][ T5844] usb usb4-port1: unable to enumerate USB device [ 300.929041][ T11] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 301.089854][ T11] usb 2-1: device descriptor read/64, error -71 [ 301.155970][ T5411] glorious 0003:258A:0033.000A: item fetching failed at offset 0/3 [ 301.193274][ T5411] glorious 0003:258A:0033.000A: probe with driver glorious failed with error -22 [ 301.224185][ T11] usb usb2-port1: attempt power cycle [ 301.359553][ T5844] usb 1-1: USB disconnect, device number 24 [ 301.579276][ T11] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 301.633119][ T11] usb 2-1: device descriptor read/8, error -71 [ 301.878988][ T11] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 301.940799][ T11] usb 2-1: device descriptor read/8, error -71 [ 302.050373][ T11] usb usb2-port1: unable to enumerate USB device [ 302.375897][ T5844] usb 5-1: USB disconnect, device number 19 [ 302.958969][ T5844] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.118804][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 303.143978][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 303.156174][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.205328][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.214999][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.223657][ T5844] usb 5-1: Product: syz [ 303.228103][ T5844] usb 5-1: Manufacturer: syz [ 303.233975][ T5844] usb 5-1: SerialNumber: syz [ 303.241151][ T1718] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 303.274616][ T5844] usb 5-1: config 0 descriptor?? [ 303.291696][ T5844] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 303.301451][ T5844] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 303.419167][ T1718] usb 4-1: Using ep0 maxpacket: 16 [ 303.450496][ T1718] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 303.459474][ T1718] usb 4-1: config 8 has no interface number 0 [ 303.466020][ T1718] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 303.479934][ T1718] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 303.492531][ T1718] usb 4-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 303.506825][ T1718] usb 4-1: config 8 interface 206 has no altsetting 0 [ 303.710565][ T1718] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 303.720856][ T1718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.729488][ T1718] usb 4-1: Product: syz [ 303.734073][ T1718] usb 4-1: Manufacturer: syz [ 303.739330][ T1718] usb 4-1: SerialNumber: syz [ 304.044709][ T5844] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 304.054427][ T5844] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 304.125582][ T1718] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 304.169213][ T1718] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 304.295359][ T1718] usb 4-1: USB disconnect, device number 22 [ 304.327553][ T1718] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 304.341446][ T1718] garmin_gps 4-1:8.206: device disconnected [ 304.687466][ T5844] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 304.890514][ T1718] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 305.120660][ T1718] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.130500][ T1718] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.141331][ T1718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.151048][ T1718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 305.162504][ T1718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 305.298375][ T1718] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.308311][ T1718] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.319237][ T1718] usb 2-1: Product: syz [ 305.323632][ T1718] usb 2-1: Manufacturer: syz [ 305.354125][ T1718] cdc_wdm 2-1:1.0: skipping garbage [ 305.359901][ T1718] cdc_wdm 2-1:1.0: skipping garbage [ 305.387655][ T1718] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 305.394186][ T1718] cdc_wdm 2-1:1.0: Unknown control protocol [ 305.539409][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 305.549177][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 305.572568][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 305.606765][ T5844] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 305.660823][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.672072][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.696656][ T5844] usb 5-1: USB disconnect, device number 20 [ 306.918914][ T5411] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 307.079302][ T5411] usb 4-1: device descriptor read/64, error -71 [ 307.339063][ T5411] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.548884][ T5411] usb 4-1: device descriptor read/64, error -71 [ 307.632817][ T1718] usb 2-1: USB disconnect, device number 28 [ 307.663830][ T5411] usb usb4-port1: attempt power cycle [ 307.779306][ T5844] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 307.959135][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 307.996576][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.008400][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.018874][ T5844] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 308.028342][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.083626][ T5411] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 308.115138][ T5411] usb 4-1: device descriptor read/8, error -71 [ 308.141550][ T5844] usb 5-1: config 0 descriptor?? [ 308.379136][ T5411] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 308.440857][ T5411] usb 4-1: device descriptor read/8, error -71 [ 308.479010][ T11] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 308.569033][ T5411] usb usb4-port1: unable to enumerate USB device [ 308.625105][ T5844] glorious 0003:258A:0033.000B: item fetching failed at offset 0/3 [ 308.648440][ T5844] glorious 0003:258A:0033.000B: probe with driver glorious failed with error -22 [ 308.670328][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 308.682467][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.699344][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.711480][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.769077][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.778781][ T11] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.787142][ T11] usb 2-1: Manufacturer: syz [ 308.821816][ T5411] usb 5-1: USB disconnect, device number 21 [ 308.903878][ T11] usb 2-1: config 0 descriptor?? [ 309.133661][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.143728][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.499833][ T5844] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 310.654564][ T5844] usb 3-1: device descriptor read/64, error -71 [ 310.918953][ T5844] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.068868][ T5844] usb 3-1: device descriptor read/64, error -71 [ 311.108801][ T1718] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 311.182789][ T5844] usb usb3-port1: attempt power cycle [ 311.278969][ T1718] usb 5-1: Using ep0 maxpacket: 16 [ 311.302884][ T1718] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 311.311719][ T1718] usb 5-1: config 8 has no interface number 0 [ 311.318070][ T1718] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 311.330200][ T1718] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 311.342357][ T1718] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 311.357380][ T1718] usb 5-1: config 8 interface 206 has no altsetting 0 [ 311.360492][ T5411] usb 2-1: USB disconnect, device number 29 [ 311.579256][ T5844] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 311.602127][ T1718] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 311.611797][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.620305][ T1718] usb 5-1: Product: syz [ 311.624698][ T1718] usb 5-1: Manufacturer: syz [ 311.629726][ T1718] usb 5-1: SerialNumber: syz [ 311.689053][ T5844] usb 3-1: device descriptor read/8, error -71 [ 311.899024][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 311.929177][ T5844] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 311.979656][ T1718] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 311.997070][ T5844] usb 3-1: device descriptor read/8, error -71 [ 312.008216][ T1718] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 312.039750][ T1718] usb 5-1: USB disconnect, device number 22 [ 312.054669][ T1718] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 312.067400][ T1718] garmin_gps 5-1:8.206: device disconnected [ 312.109064][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 312.122575][ T5844] usb usb3-port1: unable to enumerate USB device [ 312.149007][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.161091][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.222856][ T5848] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.233304][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.242474][ T5848] usb 2-1: Product: syz [ 312.246877][ T5848] usb 2-1: Manufacturer: syz [ 312.252767][ T5848] usb 2-1: SerialNumber: syz [ 312.299689][ T5848] usb 2-1: config 0 descriptor?? [ 312.326770][ T5848] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.337114][ T5848] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 312.971891][ T5848] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 312.999633][ T5848] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 313.612910][ T5844] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 313.642955][ T5848] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 313.837592][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.847221][ T5844] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.858011][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.867631][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 313.879220][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 313.899946][ T1718] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 313.931859][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.941612][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.950064][ T5844] usb 5-1: Product: syz [ 313.954472][ T5844] usb 5-1: Manufacturer: syz [ 313.991811][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 313.997489][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 314.033017][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 314.039497][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 314.089164][ T1718] usb 3-1: Using ep0 maxpacket: 32 [ 314.104843][ T1718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.118020][ T1718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.128972][ T1718] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 314.138287][ T1718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.181096][ T1718] usb 3-1: config 0 descriptor?? [ 314.225330][ T5411] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 314.356027][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.366453][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.433057][ T5411] usb 4-1: device descriptor read/64, error -71 [ 314.514713][ T5848] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 314.524419][ T5848] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 314.559642][ T5848] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 314.619773][ T5848] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 314.648211][ T5848] usb 2-1: USB disconnect, device number 30 [ 314.700707][ T1718] glorious 0003:258A:0033.000C: item fetching failed at offset 0/3 [ 314.719404][ T5411] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 314.757435][ T1718] glorious 0003:258A:0033.000C: probe with driver glorious failed with error -22 [ 314.894004][ T11] usb 3-1: USB disconnect, device number 19 [ 314.919150][ T5411] usb 4-1: device descriptor read/64, error -71 [ 315.030353][ T5411] usb usb4-port1: attempt power cycle [ 315.401032][ T5411] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 315.460960][ T5411] usb 4-1: device descriptor read/8, error -71 [ 315.729578][ T5411] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 315.793812][ T5411] usb 4-1: device descriptor read/8, error -71 [ 315.920166][ T5411] usb usb4-port1: unable to enumerate USB device [ 316.409111][ T5411] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 316.569200][ T5848] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 316.571213][ T5411] usb 2-1: Using ep0 maxpacket: 16 [ 316.617720][ T5411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.628830][ T5411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.640227][ T5411] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 316.739036][ T5411] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.748407][ T5411] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.757034][ T5411] usb 2-1: Manufacturer: syz [ 316.769064][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 316.779736][ T5411] usb 2-1: config 0 descriptor?? [ 316.827689][ T5848] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.839525][ T5848] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 316.850143][ T5848] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 544 [ 316.971807][ T5848] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.981586][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.991650][ T5848] usb 1-1: Product: 㰚 [ 316.996053][ T5848] usb 1-1: Manufacturer:   [ 317.001668][ T5848] usb 1-1: SerialNumber: syz [ 317.030657][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.041091][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.158762][ T1718] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 317.329616][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.341022][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.370331][ T1718] usb 3-1: Using ep0 maxpacket: 16 [ 317.387670][ T1718] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 317.398087][ T1718] usb 3-1: config 8 has no interface number 0 [ 317.405237][ T1718] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 317.417772][ T1718] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 317.429677][ T1718] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 317.443835][ T1718] usb 3-1: config 8 interface 206 has no altsetting 0 [ 317.481671][ T1718] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 317.491708][ T1718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.502138][ T1718] usb 3-1: Product: syz [ 317.506552][ T1718] usb 3-1: Manufacturer: syz [ 317.512217][ T1718] usb 3-1: SerialNumber: syz [ 317.760932][ T1718] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 317.788954][ T1718] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 317.808374][ T1718] usb 3-1: USB disconnect, device number 20 [ 317.867621][ T1718] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 317.880653][ T1718] garmin_gps 3-1:8.206: device disconnected [ 318.719061][ T1718] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 318.879619][ T1718] usb 4-1: device descriptor read/64, error -71 [ 319.153147][ T1718] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 319.266675][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 319.273587][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 319.280624][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 319.287474][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 319.299672][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 319.299945][ T5411] usb 5-1: USB disconnect, device number 23 [ 319.306430][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 319.318709][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 319.398895][ T1718] usb 4-1: device descriptor read/64, error -71 [ 319.489510][ T11] usb 2-1: USB disconnect, device number 31 [ 319.533427][ T1718] usb usb4-port1: attempt power cycle [ 319.881372][ T5848] cdc_ncm 1-1:1.0: bind() failure [ 319.920430][ T5848] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 319.927685][ T5848] cdc_ncm 1-1:1.1: bind() failure [ 319.979621][ T1718] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 320.020791][ T5848] usb 1-1: USB disconnect, device number 25 [ 320.060357][ T1718] usb 4-1: device descriptor read/8, error -71 [ 320.309812][ T1718] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 320.371582][ T11] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 320.374395][ T1718] usb 4-1: device descriptor read/8, error -71 [ 320.446643][ T5844] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 320.490318][ T1718] usb usb4-port1: unable to enumerate USB device [ 320.599457][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 320.630456][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 320.642613][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.648822][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 320.697741][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.709323][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.719537][ T5844] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 320.724185][ T11] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.728897][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.747087][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.755526][ T11] usb 3-1: Product: syz [ 320.760352][ T11] usb 3-1: Manufacturer: syz [ 320.765190][ T11] usb 3-1: SerialNumber: syz [ 320.799769][ T5844] usb 5-1: config 0 descriptor?? [ 320.831033][ T11] usb 3-1: config 0 descriptor?? [ 320.972906][ T11] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.991987][ T11] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 321.279715][ T5844] glorious 0003:258A:0033.000D: unknown main item tag 0x2 [ 321.337515][ T5844] glorious 0003:258A:0033.000D: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 321.459065][ T5844] usb 5-1: USB disconnect, device number 24 [ 321.500023][ T11] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 321.510491][ T11] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 321.989435][ T6455] fido_id[6455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 322.142085][ T11] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 322.349065][ T5411] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 322.530202][ T5411] usb 4-1: device descriptor read/64, error -71 [ 322.790638][ T5411] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 322.959101][ T5411] usb 4-1: device descriptor read/64, error -71 [ 322.982559][ T11] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 323.004252][ T11] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 323.019981][ T11] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 323.059192][ T11] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 323.084757][ T5411] usb usb4-port1: attempt power cycle [ 323.100510][ T11] usb 3-1: USB disconnect, device number 21 [ 323.135577][ T1605] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.298993][ T1605] usb 1-1: Using ep0 maxpacket: 16 [ 323.325457][ T1605] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 323.340422][ T1605] usb 1-1: config 8 has no interface number 0 [ 323.346779][ T1605] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 323.360969][ T1605] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 323.372760][ T1605] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 323.386463][ T1605] usb 1-1: config 8 interface 206 has no altsetting 0 [ 323.416473][ T1605] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 323.426201][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.434701][ T1605] usb 1-1: Product: syz [ 323.444935][ T1605] usb 1-1: Manufacturer: syz [ 323.452037][ T1605] usb 1-1: SerialNumber: syz [ 323.483321][ T5411] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 323.532547][ T5411] usb 4-1: device descriptor read/8, error -71 [ 323.779204][ T5411] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 323.808216][ T1605] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 323.853625][ T5411] usb 4-1: device descriptor read/8, error -71 [ 323.912341][ T1605] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 323.973660][ T5411] usb usb4-port1: unable to enumerate USB device [ 324.007760][ T5844] usb 1-1: USB disconnect, device number 26 [ 324.060782][ T5844] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 324.074247][ T5844] garmin_gps 1-1:8.206: device disconnected [ 324.373615][ T6474] kvm: pic: single mode not supported [ 324.373717][ T6474] kvm: pic: level sensitive irq not supported [ 325.275381][ T6481] loop0: detected capacity change from 0 to 256 [ 325.371160][ T6481] exfat: Deprecated parameter 'codepage' [ 325.377107][ T6481] exfat: Bad value for 'codepage' [ 325.408860][ T5844] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 325.643526][ T5844] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.652679][ T5844] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 325.663379][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.672772][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 325.684102][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 325.869465][ T5844] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.879181][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.887454][ T5844] usb 3-1: Product: syz [ 325.893058][ T5844] usb 3-1: Manufacturer: syz [ 325.972485][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 325.977970][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 325.988952][ T5844] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 325.997714][ T5844] cdc_wdm 3-1:1.0: Unknown control protocol [ 326.014183][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 326.257222][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.267761][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.568840][ T5844] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 326.569911][ T30] audit: type=1326 audit(1751523748.608:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.684347][ T30] audit: type=1326 audit(1751523748.648:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.707145][ T30] audit: type=1326 audit(1751523748.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.735252][ T30] audit: type=1326 audit(1751523748.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.759487][ T30] audit: type=1326 audit(1751523748.668:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.762312][ T5844] usb 1-1: device descriptor read/64, error -71 [ 326.781794][ T30] audit: type=1326 audit(1751523748.668:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.782028][ T30] audit: type=1326 audit(1751523748.688:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.838041][ T30] audit: type=1326 audit(1751523748.728:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 326.862254][ T30] audit: type=1326 audit(1751523748.728:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 327.021269][ T5844] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 327.100547][ T1718] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 327.198951][ T5844] usb 1-1: device descriptor read/64, error -71 [ 327.309046][ T1718] usb 5-1: Using ep0 maxpacket: 32 [ 327.316901][ T5844] usb usb1-port1: attempt power cycle [ 327.338836][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.350389][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.360615][ T1718] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 327.370044][ T1718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.456151][ T1718] usb 5-1: config 0 descriptor?? [ 327.739317][ T5844] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 327.762393][ T5844] usb 1-1: device descriptor read/8, error -71 [ 327.835782][ T6499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.913032][ T1718] glorious 0003:258A:0033.000E: unknown main item tag 0x2 [ 327.973426][ T1718] glorious 0003:258A:0033.000E: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 328.018865][ T5844] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 328.061425][ T5844] usb 1-1: device descriptor read/8, error -71 [ 328.102207][ T1718] usb 5-1: USB disconnect, device number 25 [ 328.200672][ T5844] usb usb1-port1: unable to enumerate USB device [ 328.371141][ T5844] usb 3-1: USB disconnect, device number 22 [ 328.554708][ T6501] fido_id[6501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 329.031987][ T5844] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 329.249300][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 329.277499][ T5844] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 329.286222][ T5844] usb 3-1: config 8 has no interface number 0 [ 329.293057][ T5844] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 329.305120][ T5844] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 329.316841][ T5844] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 329.330380][ T5844] usb 3-1: config 8 interface 206 has no altsetting 0 [ 329.419768][ T1605] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 329.436750][ T5844] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 329.446388][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.455313][ T5844] usb 3-1: Product: syz [ 329.459794][ T5844] usb 3-1: Manufacturer: syz [ 329.464660][ T5844] usb 3-1: SerialNumber: syz [ 329.619336][ T1605] usb 5-1: device descriptor read/64, error -71 [ 329.816760][ T6514] process 'syz.1.192' launched '/dev/fd/3' with NULL argv: empty string added [ 329.832053][ T5844] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 329.871039][ T1605] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 329.885375][ T5844] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 329.964477][ T5844] usb 3-1: USB disconnect, device number 23 [ 329.985516][ T5844] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 330.000901][ T5844] garmin_gps 3-1:8.206: device disconnected [ 330.088996][ T1605] usb 5-1: device descriptor read/64, error -71 [ 330.219675][ T1605] usb usb5-port1: attempt power cycle [ 330.609119][ T1605] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 330.669553][ T1605] usb 5-1: device descriptor read/8, error -71 [ 330.868850][ T5844] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 330.919563][ T1605] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 330.945534][ T6525] loop2: detected capacity change from 0 to 1024 [ 330.976422][ T1605] usb 5-1: device descriptor read/8, error -71 [ 330.991706][ T6525] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.999192][ T6525] EXT4-fs: Ignoring removed bh option [ 331.079402][ T5844] usb 1-1: config index 0 descriptor too short (expected 4132, got 36) [ 331.088141][ T5844] usb 1-1: config 0 has an invalid interface number: 32 but max is 16 [ 331.094362][ T1605] usb usb5-port1: unable to enumerate USB device [ 331.096648][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 331.112458][ T5844] usb 1-1: config 0 has no interface number 0 [ 331.120429][ T5844] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.132467][ T5844] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.143509][ T5844] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 331.153107][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.203502][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.231585][ T5844] usb 1-1: config 0 descriptor?? [ 331.673828][ T5844] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 331.879599][ T1605] usb 1-1: USB disconnect, device number 31 [ 332.715893][ T1605] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 332.899095][ T1605] usb 2-1: Using ep0 maxpacket: 32 [ 332.931399][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.943455][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.953776][ T1605] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 332.969141][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.115259][ T1605] usb 2-1: config 0 descriptor?? [ 333.479003][ T5411] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 333.657525][ T1605] glorious 0003:258A:0033.0010: unknown main item tag 0x2 [ 333.666762][ T1605] glorious 0003:258A:0033.0010: item fetching failed at offset 2/3 [ 333.693747][ T1605] glorious 0003:258A:0033.0010: probe with driver glorious failed with error -22 [ 333.711778][ T5411] usb 5-1: Using ep0 maxpacket: 16 [ 333.750819][ T5411] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 333.759650][ T5411] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 333.768089][ T5411] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.784407][ T5411] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 333.795820][ T5411] usb 5-1: config 0 has no interface number 0 [ 333.800914][ T5844] usb 2-1: USB disconnect, device number 32 [ 333.802251][ T5411] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 333.819513][ T5411] usb 5-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.832926][ T5411] usb 5-1: config 0 interface 125 has no altsetting 0 [ 333.926538][ T5411] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 333.936334][ T5411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.945686][ T5411] usb 5-1: Product: syz [ 333.951151][ T5411] usb 5-1: Manufacturer: syz [ 333.955990][ T5411] usb 5-1: SerialNumber: syz [ 334.006372][ T5411] usb 5-1: config 0 descriptor?? [ 334.593330][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.611769][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.687908][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.698482][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.869571][ T30] audit: type=1326 audit(1751523756.908:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 334.942502][ T30] audit: type=1326 audit(1751523756.958:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 334.965034][ T30] audit: type=1326 audit(1751523756.958:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 334.987543][ T30] audit: type=1326 audit(1751523756.958:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.011490][ T30] audit: type=1326 audit(1751523756.968:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.034224][ T30] audit: type=1326 audit(1751523757.008:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.056448][ T30] audit: type=1326 audit(1751523757.018:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.197215][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.267930][ T30] audit: type=1326 audit(1751523757.128:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.290732][ T30] audit: type=1326 audit(1751523757.128:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.313541][ T30] audit: type=1326 audit(1751523757.128:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 335.899179][ T5411] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 336.098895][ T5411] usb 2-1: Using ep0 maxpacket: 16 [ 336.115863][ T5411] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 336.124600][ T5411] usb 2-1: config 8 has no interface number 0 [ 336.131266][ T5411] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 336.149562][ T5411] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 336.163423][ T5411] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 336.176943][ T5411] usb 2-1: config 8 interface 206 has no altsetting 0 [ 336.334096][ T1605] usb 5-1: USB disconnect, device number 30 [ 336.397862][ T5411] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 336.409614][ T5411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.417877][ T5411] usb 2-1: Product: syz [ 336.423444][ T5411] usb 2-1: Manufacturer: syz [ 336.428274][ T5411] usb 2-1: SerialNumber: syz [ 336.803105][ T5411] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 336.847602][ T5411] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 336.960938][ T5411] usb 2-1: USB disconnect, device number 33 [ 336.992985][ T5411] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 337.009197][ T5411] garmin_gps 2-1:8.206: device disconnected [ 338.128840][ T5844] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 338.343607][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 338.403527][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.414149][ T5844] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.424212][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 338.433732][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.494261][ T5844] usb 3-1: config 0 descriptor?? [ 338.729628][ T1718] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 338.942340][ T1718] usb 2-1: Using ep0 maxpacket: 32 [ 339.004009][ T5844] usb 3-1: string descriptor 0 read error: -71 [ 339.029405][ T1718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.040820][ T1718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.051275][ T1718] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 339.060682][ T1718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.076071][ T5844] usb 3-1: USB disconnect, device number 24 [ 339.180737][ T1718] usb 2-1: config 0 descriptor?? [ 339.687426][ T1718] glorious 0003:258A:0033.0011: unknown main item tag 0x2 [ 339.695153][ T1718] glorious 0003:258A:0033.0011: item fetching failed at offset 2/3 [ 339.771337][ T1718] glorious 0003:258A:0033.0011: probe with driver glorious failed with error -22 [ 339.889133][ T5411] usb 2-1: USB disconnect, device number 34 [ 341.278784][ T1718] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 341.440820][ T6594] loop0: detected capacity change from 0 to 128 [ 341.479067][ T1718] usb 2-1: Using ep0 maxpacket: 16 [ 341.525128][ T1718] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 341.533966][ T1718] usb 2-1: config 8 has no interface number 0 [ 341.540502][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 341.552562][ T1718] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 341.565826][ T1718] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 341.579895][ T1718] usb 2-1: config 8 interface 206 has no altsetting 0 [ 341.647236][ T6595] loop4: detected capacity change from 0 to 128 [ 341.686086][ T6594] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.733728][ T6601] bridge_slave_0: left allmulticast mode [ 341.741126][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.753772][ T6594] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.804110][ T6595] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.877077][ T1718] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 341.886686][ T1718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.895114][ T1718] usb 2-1: Product: syz [ 341.899972][ T1718] usb 2-1: Manufacturer: syz [ 341.904836][ T1718] usb 2-1: SerialNumber: syz [ 341.912918][ T6595] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.285691][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.293213][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.331026][ T1718] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 342.361723][ T1718] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 342.485328][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.496461][ T1718] usb 2-1: USB disconnect, device number 35 [ 342.561445][ T1718] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 342.569868][ T5799] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.573689][ T1718] garmin_gps 2-1:8.206: device disconnected [ 342.795626][ T6607] loop2: detected capacity change from 0 to 256 [ 343.141239][ T6607] FAT-fs (loop2): Directory bread(block 64) failed [ 343.148178][ T6607] FAT-fs (loop2): Directory bread(block 65) failed [ 343.155258][ T6607] FAT-fs (loop2): Directory bread(block 66) failed [ 343.162222][ T6607] FAT-fs (loop2): Directory bread(block 67) failed [ 343.169301][ T6607] FAT-fs (loop2): Directory bread(block 68) failed [ 343.176076][ T6607] FAT-fs (loop2): Directory bread(block 69) failed [ 343.183135][ T6607] FAT-fs (loop2): Directory bread(block 70) failed [ 343.190268][ T6607] FAT-fs (loop2): Directory bread(block 71) failed [ 343.197193][ T6607] FAT-fs (loop2): Directory bread(block 72) failed [ 343.205996][ T6607] FAT-fs (loop2): Directory bread(block 73) failed [ 343.348904][ T5411] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 343.577574][ T5411] usb 1-1: Using ep0 maxpacket: 32 [ 343.598466][ T5411] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.615570][ T5411] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.626924][ T5411] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 343.636449][ T5411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.744640][ T5411] usb 1-1: config 0 descriptor?? [ 344.207493][ T5411] usb 1-1: string descriptor 0 read error: -71 [ 344.250647][ T5411] usb 1-1: USB disconnect, device number 32 [ 344.301659][ T5078] Bluetooth: hci0: command 0x0406 tx timeout [ 344.308980][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 344.311770][ T5078] Bluetooth: hci1: command 0x0406 tx timeout [ 344.315129][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 344.330566][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 344.519649][ T1605] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 344.718852][ T1605] usb 2-1: Using ep0 maxpacket: 32 [ 344.752975][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.764346][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.774693][ T1605] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 344.784214][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.871973][ T1605] usb 2-1: config 0 descriptor?? [ 345.339762][ T1605] glorious 0003:258A:0033.0012: unknown main item tag 0x2 [ 345.347668][ T1605] glorious 0003:258A:0033.0012: item fetching failed at offset 2/3 [ 345.423387][ T1605] glorious 0003:258A:0033.0012: probe with driver glorious failed with error -22 [ 345.542363][ T1718] usb 2-1: USB disconnect, device number 36 [ 345.636823][ T6628] loop4: detected capacity change from 0 to 512 [ 345.678874][ T6628] EXT4-fs: Ignoring removed oldalloc option [ 345.696154][ T6628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.740226][ T6628] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 346.671407][ T6633] loop1: detected capacity change from 0 to 256 [ 346.759327][ T6634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2094590522 (33513448352 ns) > initial count (24887356480 ns). Using initial count to start timer. [ 347.527753][ T6641] loop2: detected capacity change from 0 to 512 [ 347.593349][ T6641] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.750392][ T6641] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.242: bg 0: block 248: padding at end of block bitmap is not set [ 347.820051][ T6641] __quota_error: 11 callbacks suppressed [ 347.820136][ T6641] Quota error (device loop2): write_blk: dquota write failed [ 347.834344][ T6641] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 347.845389][ T6641] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.242: Failed to acquire dquot type 1 [ 347.935632][ T6641] EXT4-fs (loop2): 1 truncate cleaned up [ 347.964330][ T6641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.634631][ T6659] loop4: detected capacity change from 0 to 1024 [ 349.942331][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.134222][ T6641] syz.2.242 (6641) used greatest stack depth: 3112 bytes left [ 350.525699][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.228912][ T1605] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 351.441281][ T1605] usb 5-1: Using ep0 maxpacket: 16 [ 351.472011][ T1605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.483688][ T1605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.499908][ T1605] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.515287][ T1605] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.524784][ T1605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.648969][ T1605] usb 5-1: config 0 descriptor?? [ 351.659368][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.134920][ T1605] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 352.143198][ T1605] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 352.226750][ T1605] ===================================================== [ 352.236869][ T1605] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x5a1/0x2630 [ 352.245033][ T1605] usb_submit_urb+0x5a1/0x2630 [ 352.250193][ T1605] usb_start_wait_urb+0xc2/0x320 [ 352.255360][ T1605] usb_control_msg+0x27c/0x5b0 [ 352.260554][ T1605] usbhid_raw_request+0x4ab/0x690 [ 352.265811][ T1605] __hid_request+0x2c0/0x500 [ 352.270745][ T1605] hidinput_connect+0x3bf5/0x5cc0 [ 352.276003][ T1605] hid_connect+0x6b4/0x3440 [ 352.280924][ T1605] hid_hw_start+0xfc/0x1e0 [ 352.285546][ T1605] ms_probe+0x2e5/0x890 [ 352.290385][ T1605] hid_device_probe+0x536/0xab0 [ 352.295451][ T1605] really_probe+0x4d1/0xd90 [ 352.301162][ T1605] __driver_probe_device+0x268/0x380 [ 352.306676][ T1605] driver_probe_device+0x70/0x8b0 [ 352.321614][ T1605] __device_attach_driver+0x4ee/0x950 [ 352.327258][ T1605] bus_for_each_drv+0x3e3/0x680 [ 352.335489][ T1605] __device_attach+0x3c8/0x5c0 [ 352.340688][ T1605] device_initial_probe+0x33/0x40 [ 352.345950][ T1605] bus_probe_device+0x3ba/0x5e0 [ 352.351216][ T1605] device_add+0x12a9/0x1c10 [ 352.355950][ T1605] hid_add_device+0x5ed/0x7b0 [ 352.361625][ T1605] usbhid_probe+0x1fec/0x2660 [ 352.366537][ T1605] usb_probe_interface+0xd04/0x1310 [ 352.372169][ T1605] really_probe+0x4d1/0xd90 [ 352.376900][ T1605] __driver_probe_device+0x268/0x380 [ 352.384187][ T1605] driver_probe_device+0x70/0x8b0 [ 352.390139][ T1605] __device_attach_driver+0x4ee/0x950 [ 352.395844][ T1605] bus_for_each_drv+0x3e3/0x680 [ 352.401043][ T1605] __device_attach+0x3c8/0x5c0 [ 352.406030][ T1605] device_initial_probe+0x33/0x40 [ 352.411458][ T1605] bus_probe_device+0x3ba/0x5e0 [ 352.426173][ T1605] device_add+0x12a9/0x1c10 [ 352.433564][ T1605] usb_set_configuration+0x3493/0x3b70 [ 352.439496][ T1605] usb_generic_driver_probe+0xfc/0x290 [ 352.445209][ T1605] usb_probe_device+0x38a/0x690 [ 352.450668][ T1605] really_probe+0x4d1/0xd90 [ 352.455400][ T1605] __driver_probe_device+0x268/0x380 [ 352.489601][ T1605] driver_probe_device+0x70/0x8b0 [ 352.494883][ T1605] __device_attach_driver+0x4ee/0x950 [ 352.506900][ T1605] bus_for_each_drv+0x3e3/0x680 [ 352.512130][ T1605] __device_attach+0x3c8/0x5c0 [ 352.526621][ T1605] device_initial_probe+0x33/0x40 [ 352.534519][ T1605] bus_probe_device+0x3ba/0x5e0 [ 352.539723][ T1605] device_add+0x12a9/0x1c10 [ 352.544444][ T1605] usb_new_device+0x104b/0x20c0 [ 352.549659][ T1605] hub_event+0x5588/0x7580 [ 352.554291][ T1605] process_scheduled_works+0xb8e/0x1d80 [ 352.560617][ T1605] worker_thread+0xedf/0x1590 [ 352.565536][ T1605] kthread+0xd5c/0xf00 [ 352.569943][ T1605] ret_from_fork+0x1e0/0x310 [ 352.574719][ T1605] ret_from_fork_asm+0x1a/0x30 [ 352.579818][ T1605] [ 352.582244][ T1605] Uninit was created at: [ 352.586735][ T1605] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 352.593750][ T1605] kvasprintf+0xbd/0x200 [ 352.598199][ T1605] kvasprintf_const+0x1df/0x370 [ 352.603384][ T1605] kobject_set_name_vargs+0x87/0x2f0 [ 352.609064][ T1605] dev_set_name+0x1cd/0x200 [ 352.613755][ T1605] wiphy_new_nm+0xd52/0x2bc0 [ 352.619682][ T1605] ieee80211_alloc_hw_nm+0x6bb/0x4e90 [ 352.625301][ T1605] mac80211_hwsim_new_radio+0x219/0x7a70 [ 352.640977][ T1605] hwsim_new_radio_nl+0x16f9/0x2fd0 [ 352.646409][ T1605] genl_family_rcv_msg_doit+0x335/0x3f0 [ 352.654780][ T1605] genl_rcv_msg+0xacf/0xc10 [ 352.659664][ T1605] netlink_rcv_skb+0x54a/0x680 [ 352.664613][ T1605] genl_rcv+0x41/0x60 [ 352.669452][ T1605] netlink_unicast+0xed5/0x1290 [ 352.674476][ T1605] netlink_sendmsg+0x10b3/0x1250 [ 352.680128][ T1605] __sock_sendmsg+0x333/0x3d0 [ 352.685012][ T1605] __sys_sendto+0x593/0x720 [ 352.689955][ T1605] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 352.696151][ T1605] ia32_sys_call+0x41be/0x42c0 [ 352.702144][ T1605] __do_fast_syscall_32+0xb0/0x150 [ 352.707461][ T1605] do_fast_syscall_32+0x38/0x80 [ 352.712817][ T1605] do_SYSENTER_32+0x1f/0x30 [ 352.717525][ T1605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.733883][ T1605] [ 352.736334][ T1605] Bytes 12-14 of 65535 are uninitialized [ 352.744872][ T1605] Memory access of size 65535 starts at ffff88804d1ba949 [ 352.752180][ T1605] [ 352.754662][ T1605] CPU: 0 UID: 0 PID: 1605 Comm: kworker/0:2 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 352.767296][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.777765][ T1605] Workqueue: usb_hub_wq hub_event [ 352.783213][ T1605] ===================================================== [ 352.790420][ T1605] Disabling lock debugging due to kernel taint [ 352.796723][ T1605] Kernel panic - not syncing: kmsan.panic set ... [ 352.803317][ T1605] CPU: 0 UID: 0 PID: 1605 Comm: kworker/0:2 Tainted: G B 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 352.817279][ T1605] Tainted: [B]=BAD_PAGE [ 352.821569][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.831811][ T1605] Workqueue: usb_hub_wq hub_event [ 352.837099][ T1605] Call Trace: [ 352.840509][ T1605] [ 352.843552][ T1605] __dump_stack+0x26/0x30 [ 352.848100][ T1605] dump_stack_lvl+0x53/0x270 [ 352.852907][ T1605] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 352.858967][ T1605] dump_stack+0x1e/0x25 [ 352.863340][ T1605] panic+0x4bd/0xd50 [ 352.867503][ T1605] kmsan_report+0x31c/0x320 [ 352.872260][ T1605] ? kmsan_internal_check_memory+0x16c/0x230 [ 352.878470][ T1605] ? kmsan_handle_urb+0x2c/0x40 [ 352.883550][ T1605] ? usb_submit_urb+0x5a1/0x2630 [ 352.888714][ T1605] ? usb_start_wait_urb+0xc2/0x320 [ 352.894052][ T1605] ? usb_control_msg+0x27c/0x5b0 [ 352.899204][ T1605] ? usbhid_raw_request+0x4ab/0x690 [ 352.904639][ T1605] ? __hid_request+0x2c0/0x500 [ 352.909604][ T1605] ? hidinput_connect+0x3bf5/0x5cc0 [ 352.915050][ T1605] ? hid_connect+0x6b4/0x3440 [ 352.919936][ T1605] ? hid_hw_start+0xfc/0x1e0 [ 352.924734][ T1605] ? ms_probe+0x2e5/0x890 [ 352.929305][ T1605] ? hid_device_probe+0x536/0xab0 [ 352.934582][ T1605] ? really_probe+0x4d1/0xd90 [ 352.939512][ T1605] ? __driver_probe_device+0x268/0x380 [ 352.945216][ T1605] ? driver_probe_device+0x70/0x8b0 [ 352.950741][ T1605] ? __device_attach_driver+0x4ee/0x950 [ 352.956542][ T1605] ? bus_for_each_drv+0x3e3/0x680 [ 352.961780][ T1605] ? __device_attach+0x3c8/0x5c0 [ 352.966947][ T1605] ? device_initial_probe+0x33/0x40 [ 352.972378][ T1605] ? bus_probe_device+0x3ba/0x5e0 [ 352.977614][ T1605] ? device_add+0x12a9/0x1c10 [ 352.982513][ T1605] ? hid_add_device+0x5ed/0x7b0 [ 352.987581][ T1605] ? usbhid_probe+0x1fec/0x2660 [ 352.992656][ T1605] ? usb_probe_interface+0xd04/0x1310 [ 352.998226][ T1605] ? really_probe+0x4d1/0xd90 [ 353.003140][ T1605] ? __driver_probe_device+0x268/0x380 [ 353.008840][ T1605] ? driver_probe_device+0x70/0x8b0 [ 353.014277][ T1605] ? __device_attach_driver+0x4ee/0x950 [ 353.020160][ T1605] ? bus_for_each_drv+0x3e3/0x680 [ 353.025390][ T1605] ? __device_attach+0x3c8/0x5c0 [ 353.030552][ T1605] ? device_initial_probe+0x33/0x40 [ 353.035974][ T1605] ? bus_probe_device+0x3ba/0x5e0 [ 353.041200][ T1605] ? device_add+0x12a9/0x1c10 [ 353.046096][ T1605] ? usb_set_configuration+0x3493/0x3b70 [ 353.051977][ T1605] ? usb_generic_driver_probe+0xfc/0x290 [ 353.057843][ T1605] ? usb_probe_device+0x38a/0x690 [ 353.063046][ T1605] ? really_probe+0x4d1/0xd90 [ 353.067949][ T1605] ? __driver_probe_device+0x268/0x380 [ 353.073632][ T1605] ? driver_probe_device+0x70/0x8b0 [ 353.079059][ T1605] ? __device_attach_driver+0x4ee/0x950 [ 353.084847][ T1605] ? bus_for_each_drv+0x3e3/0x680 [ 353.090070][ T1605] ? __device_attach+0x3c8/0x5c0 [ 353.095228][ T1605] ? device_initial_probe+0x33/0x40 [ 353.100657][ T1605] ? bus_probe_device+0x3ba/0x5e0 [ 353.105872][ T1605] ? device_add+0x12a9/0x1c10 [ 353.110753][ T1605] ? usb_new_device+0x104b/0x20c0 [ 353.115987][ T1605] ? hub_event+0x5588/0x7580 [ 353.120798][ T1605] ? process_scheduled_works+0xb8e/0x1d80 [ 353.126756][ T1605] ? worker_thread+0xedf/0x1590 [ 353.131846][ T1605] ? kthread+0xd5c/0xf00 [ 353.136272][ T1605] ? ret_from_fork+0x1e0/0x310 [ 353.141231][ T1605] ? ret_from_fork_asm+0x1a/0x30 [ 353.146404][ T1605] ? bus_for_each_drv+0x3e3/0x680 [ 353.151640][ T1605] ? __device_attach+0x3c8/0x5c0 [ 353.156811][ T1605] ? device_initial_probe+0x33/0x40 [ 353.162237][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.167595][ T1605] ? kmsan_metadata_is_contiguous+0xdf/0x1e0 [ 353.173813][ T1605] kmsan_internal_check_memory+0x16c/0x230 [ 353.179861][ T1605] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.185925][ T1605] kmsan_handle_urb+0x2c/0x40 [ 353.190833][ T1605] usb_submit_urb+0x5a1/0x2630 [ 353.195815][ T1605] ? stack_depot_save_flags+0x35/0x7b0 [ 353.201471][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.206833][ T1605] ? kmsan_get_metadata+0x30/0x160 [ 353.212204][ T1605] usb_start_wait_urb+0xc2/0x320 [ 353.217386][ T1605] usb_control_msg+0x27c/0x5b0 [ 353.222372][ T1605] usbhid_raw_request+0x4ab/0x690 [ 353.227650][ T1605] __hid_request+0x2c0/0x500 [ 353.232428][ T1605] ? __pfx_usbhid_raw_request+0x10/0x10 [ 353.238196][ T1605] hidinput_connect+0x3bf5/0x5cc0 [ 353.243427][ T1605] ? driver_probe_device+0x70/0x8b0 [ 353.248848][ T1605] ? __device_attach_driver+0x4ee/0x950 [ 353.254604][ T1605] ? bus_for_each_drv+0x3e3/0x680 [ 353.259796][ T1605] ? __device_attach+0x3c8/0x5c0 [ 353.264983][ T1605] ? bus_probe_device+0x3ba/0x5e0 [ 353.270228][ T1605] ? device_add+0x12a9/0x1c10 [ 353.275300][ T1605] ? usb_new_device+0x104b/0x20c0 [ 353.280536][ T1605] ? hub_event+0x5588/0x7580 [ 353.285330][ T1605] ? process_scheduled_works+0xb8e/0x1d80 [ 353.291272][ T1605] ? worker_thread+0xedf/0x1590 [ 353.296354][ T1605] ? kthread+0xd5c/0xf00 [ 353.300753][ T1605] ? ret_from_fork+0x1e0/0x310 [ 353.305675][ T1605] ? ret_from_fork_asm+0x1a/0x30 [ 353.310855][ T1605] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 353.316926][ T1605] hid_connect+0x6b4/0x3440 [ 353.321693][ T1605] hid_hw_start+0xfc/0x1e0 [ 353.326297][ T1605] ms_probe+0x2e5/0x890 [ 353.330663][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.336005][ T1605] ? __pfx_ms_probe+0x10/0x10 [ 353.340901][ T1605] hid_device_probe+0x536/0xab0 [ 353.345973][ T1605] ? __pfx_hid_device_probe+0x10/0x10 [ 353.351538][ T1605] really_probe+0x4d1/0xd90 [ 353.356267][ T1605] __driver_probe_device+0x268/0x380 [ 353.361781][ T1605] driver_probe_device+0x70/0x8b0 [ 353.367024][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.372360][ T1605] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.378397][ T1605] __device_attach_driver+0x4ee/0x950 [ 353.384006][ T1605] bus_for_each_drv+0x3e3/0x680 [ 353.389029][ T1605] ? __pfx___device_attach_driver+0x10/0x10 [ 353.395157][ T1605] __device_attach+0x3c8/0x5c0 [ 353.400139][ T1605] device_initial_probe+0x33/0x40 [ 353.405468][ T1605] bus_probe_device+0x3ba/0x5e0 [ 353.410516][ T1605] device_add+0x12a9/0x1c10 [ 353.415247][ T1605] hid_add_device+0x5ed/0x7b0 [ 353.420144][ T1605] usbhid_probe+0x1fec/0x2660 [ 353.425034][ T1605] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 353.431357][ T1605] ? __pfx_usbhid_probe+0x10/0x10 [ 353.436585][ T1605] usb_probe_interface+0xd04/0x1310 [ 353.441987][ T1605] ? __pfx_usb_probe_interface+0x10/0x10 [ 353.447783][ T1605] really_probe+0x4d1/0xd90 [ 353.452525][ T1605] __driver_probe_device+0x268/0x380 [ 353.458040][ T1605] driver_probe_device+0x70/0x8b0 [ 353.463295][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.468689][ T1605] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.474746][ T1605] __device_attach_driver+0x4ee/0x950 [ 353.480362][ T1605] bus_for_each_drv+0x3e3/0x680 [ 353.485393][ T1605] ? __pfx___device_attach_driver+0x10/0x10 [ 353.491536][ T1605] __device_attach+0x3c8/0x5c0 [ 353.496521][ T1605] device_initial_probe+0x33/0x40 [ 353.501758][ T1605] bus_probe_device+0x3ba/0x5e0 [ 353.506816][ T1605] device_add+0x12a9/0x1c10 [ 353.511539][ T1605] usb_set_configuration+0x3493/0x3b70 [ 353.517344][ T1605] usb_generic_driver_probe+0xfc/0x290 [ 353.523047][ T1605] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 353.529385][ T1605] usb_probe_device+0x38a/0x690 [ 353.534435][ T1605] ? __pfx_usb_probe_device+0x10/0x10 [ 353.539972][ T1605] really_probe+0x4d1/0xd90 [ 353.544708][ T1605] __driver_probe_device+0x268/0x380 [ 353.550233][ T1605] driver_probe_device+0x70/0x8b0 [ 353.555495][ T1605] ? kmsan_get_metadata+0xfb/0x160 [ 353.560837][ T1605] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.566872][ T1605] __device_attach_driver+0x4ee/0x950 [ 353.572484][ T1605] bus_for_each_drv+0x3e3/0x680 [ 353.577514][ T1605] ? __pfx___device_attach_driver+0x10/0x10 [ 353.583658][ T1605] __device_attach+0x3c8/0x5c0 [ 353.588647][ T1605] device_initial_probe+0x33/0x40 [ 353.593884][ T1605] bus_probe_device+0x3ba/0x5e0 [ 353.598932][ T1605] device_add+0x12a9/0x1c10 [ 353.603656][ T1605] usb_new_device+0x104b/0x20c0 [ 353.608732][ T1605] hub_event+0x5588/0x7580 [ 353.613440][ T1605] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 353.619242][ T1605] ? __pfx_hub_event+0x10/0x10 [ 353.624213][ T1605] process_scheduled_works+0xb8e/0x1d80 [ 353.630032][ T1605] worker_thread+0xedf/0x1590 [ 353.634959][ T1605] kthread+0xd5c/0xf00 [ 353.639187][ T1605] ? __pfx_worker_thread+0x10/0x10 [ 353.644529][ T1605] ? __pfx_kthread+0x10/0x10 [ 353.649300][ T1605] ret_from_fork+0x1e0/0x310 [ 353.654074][ T1605] ? __pfx_kthread+0x10/0x10 [ 353.658845][ T1605] ret_from_fork_asm+0x1a/0x30 [ 353.663842][ T1605] [ 353.667256][ T1605] Kernel Offset: disabled [ 353.671659][ T1605] Rebooting in 86400 seconds..