last executing test programs: 6.849664208s ago: executing program 0 (id=1996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x7f, 0x24, 0x0, 0x8, 0x6, 0x6, 0x18, 0x4, 0x3, 0xf9, 0x3, 0x3d, 0x1, 0x49, 0x6, 0xf0}}) 6.354422594s ago: executing program 0 (id=1999): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x0, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.824412843s ago: executing program 4 (id=2003): r0 = memfd_create(&(0x7f00000004c0)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83rz\xc0\x03\x00\x00\x00\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P\x02\x00\xe1-q \xb3\x80\xb9\xdfj\xed\xb9_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13rCc\x84\xa6y\xb7\xbe\xf5\xcc\a\fM\xa9\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xac*\xb4\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b\x03s\xb4q>\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1.\xfc\xd4\xcay)$\n\x05\xd1\xc5V\x91\xe3W\x10r\x9b~n`z\x8c\x16c\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xba\xad!\xfe\xdb\xe9\x8d\xffI\x8a=\x81\xc8\x9f\x17N\x80\x06\xc7\xbe\xf2\x9b\x86Z\xc8\xf8\x16)\xef\xab\xbaD8\xecd\\\x10\x10btN\xd0g!\xcc\xbe\xcd\xb7\x16\x19\x89\xceBy|\xe0\x12\x92`Y\x06\x17\xc8mt\xc4d\xd4{\xaa/+9\x87\xf5L\xa9+4\x12Z\x15\xc8\nb}\x15\xc3^r\x03{\xb2\n\x02\xc7;\xdd\xac\xec\xde\x14#`\xcc\xaa\x0f\xdc\x8b\x9a3\n9\x11\xe8Y;@7Cl\xe7\x90\x17\xbb\x9c\xfb\xcc\xb7\'\xf4\xff\xd0\xc2+\xc6)\x15\"\xff\'L\x06\xc2\x8bC\xc7\xee\xb9\xa2B\x7f\'\nU4w\x9c\x15 \"lR\xf1\xbe\xe6', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000100)='i', 0x1, 0x80ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000002, 0x0) read$FUSE(r2, &(0x7f00000041c0)={0x2020}, 0x2020) sendfile(r2, r2, &(0x7f0000000080), 0xe0000000) r3 = dup(r0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[], 0x120) sendfile(r0, r3, &(0x7f0000000080), 0x20000080000001) ftruncate(r2, 0x0) 4.9840837s ago: executing program 1 (id=2005): r0 = memfd_create(&(0x7f00000003c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbW\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xaf\x01:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\x95\xdf\xbb\xadkz\x0f\xdd\x9c\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf2\xff\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb/\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xcbZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99r\t.-\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xa4\xb0\x17\xe0\x92\xc1\x04)w\xe1\xc9\xb0\x84\x1f,\xa8T2\xf8% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*\x03\x00\x00\x00\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#\xff\xff\x00\x00\x00\x00\x00\x00mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\xc9\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<\x91\xb0\xdd\x9f\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2\x7f\x00\x00\x00\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xd1\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1T\xc0\x80Iy4\xa9\xf88C\xe3\x0e\xcd\xec,\xd4+d\x84\x96\x99\x03\x00\x00\x00g\xd5~\x1c\xaexVW\xf7\x0fo\xa5r\xca\x00d\vD\xc9<\x1c\\\xbe\x99w\xf7\xe5\xa5\xf3H\a\f\xa0\xb3\x12%\x90\xd4\xed\x98\xc7\x1a\xd747\x86\x88\xbb\xf3\r\x82\xf4K}\xb9\xbb\xb7\xcf\xd7\xf2\x1f1\x04\x12%\x01\xa9\xd9s\x9a\xf7?X\xda\xc1\xba\x1cq\x89g\xbb\v]\x0fF\xa1\x05\xab,@\x13\x19\xbe\x14\xc4\x1aO\xa6\x966\xb6)\xde,qy\xa0\xf1\xc3sx\x1a\x02i\xed:)\x9fC\xaafH\xec\xfe\x97I\xac\xdeV\xb2\xe4\"\x1f\x10u\x91\n\xb19_\xe5\x80\xd2U\xd9\x92:\xe0\t?\x81\xeb\xf9\xd7q\x8b\xd0\xc9`\xad\xd5\x83#\x1e\xb6\x01\x1fTg\b\x12*\x99[\x00<\xd8\x01\xec\xbd\x9f\xec=u\b\xb0\x1b\x9d\xcf\xe8xs\x14/\x8eA\x041EF\xc4\xd5\x12\xc6\xf7\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b46, &(0x7f0000000000)) 4.942668024s ago: executing program 3 (id=2006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000001c00)="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", 0x587, 0x50050, 0x0, 0x0) 4.866708831s ago: executing program 1 (id=2007): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xbd, &(0x7f0000000300)={@local, @broadcast, @void, {@generic={0x890d, "2b9d550d9201315475a34f53b1451bdb6edeb79ea3cdb00c9268082531b139a5456bc0aee7d14a6f2fc99e57a7bce7b0eef4cfccc0515732c518e2b91b0ef6bb9aaf9fd8ff900198b5c1bdb971766a8223180f2b0230a9e17d72dbeabeb2db9bd675819dbba1a706d418f2f8b736a5da612b27d161c4b2fe5e93756d7cb959dc8a9df2af226879dd724963e008132b0f583c60f94c908c5517d1745c0eb12cdee8ac3ee9501a2de90257191cfe27c6"}}}, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 4.783919429s ago: executing program 4 (id=2008): r0 = socket$kcm(0x11, 0x7, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) pipe(0x0) write(r2, &(0x7f0000000040), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000040)={0x14, &(0x7f0000000540)=ANY=[], 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@delchain={0x24, 0x2a, 0xf31}, 0x24}}, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000080)=[{r7, 0x100}], 0x1, 0x8571) 4.027860369s ago: executing program 3 (id=2009): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x4bbc, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@local}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@multicast1, @multicast1]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.957305735s ago: executing program 1 (id=2010): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_async', 0x749a82, 0x200) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x8000000001}) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 3.672068591s ago: executing program 1 (id=2012): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a00000009058103"], 0x0) 3.522927535s ago: executing program 3 (id=2013): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {}, {0xffff, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390426bd700000e5ffffff000000", @ANYRES32=r3, @ANYBLOB="03000000000000001800128008000100736974000c00028008000300ac1414"], 0x38}}, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09040000f6"], 0x3f00}], 0x1}, 0x0) 3.292691876s ago: executing program 3 (id=2015): userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_setup(0x7, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x4000000000, 0xa8001) syz_emit_ethernet(0x7a, &(0x7f0000002080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609a618500442f00fe80000000000004e82af34e9291d0bbfc0100000000000000000000000000000421880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) semop(0x0, &(0x7f0000000000), 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000008c0)={"8a2596dd", 0x0, 0x0, 0x2, 0x1, 0x0, "000000000000000000000000000081", "643aa6bf", "69c7c4a9", "f7bf0700", ["87b700", "275f27336422fe2a553ae850", "5d6fd1214703bf778b51fce0", "4973dce60c23eb4573635a16"]}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0xe1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e0001ffffa8d9f0c838070007"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102a052b9080a113111a98f01020301090224000183091003090441f8f8d5e9bf58c80de0d47ab6bc49090239d9470309050e0020006e73be090506020002060709"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x155c, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc04}}]}) 3.291400346s ago: executing program 0 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x20) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfefc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000300)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'macvlan0\x00', &(0x7f0000000fc0)=@ethtool_per_queue_op={0x4b, 0x2b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x5452, 0x20000000) ptrace$pokeuser(0x6, 0x0, 0x3, 0x953f) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2.018979774s ago: executing program 2 (id=2019): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'cp855'}}, {@gid}, {@gid}, {@uid}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000000680)="$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") open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.977642888s ago: executing program 0 (id=2020): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@creator={'creator', 0x3d, "ff54b274"}}]}, 0x9, 0x2d1, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e9, &(0x7f0000001340)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCRKSwsYYkyErSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWPu9N7Sae/0u72V+/slQ889Zy7nTKfPnDNnzrkTQGX1p//UIvZHxGQS0ZvMzpe1R1bYP3e/B399fDa9JVGvv/5HEkmWl98/yX72ZCd3RcRPPyaxr21pvVMz1y6OTkyMX82OB6cvTQ5OzVw7fOHS6Pnx8+OXh18YPnH82PETQ0dW8zC6F2dcL7jT6ZvvfdD76chb3379dzL03a8jSZyMV7I7Lnwcm6U/+hu/k2RpUc+Jza6sJG3Z38nCpzhpL7FBrEn+/HVExBPRG23x8MnrjU9eLbVxwJaqJxF1oKIS8Q8VlY8D8vf2i98H10oZlQDb4f6puQmApfHfPjc3GF2NuYHdD5JYOK2TRMSqZuZWsCci7t4ZuXnuzsjN2KJ5OKDY7I2IeLIo/pNG/PdFV/Q14r/WFP/puOBM9jPNf22d9S+eKhb/sH3m4r9r2fiPFvH/9oL4f2ed9fc/TL7b3RT/Sz7SAwAAAAAAAFZw+1REPF/0+X9tfv1PFKz/6YmIk5tQf/+i46Wf/9fubUI1QIH7pyJeKlz/W8tX//a1Zan/NdYDdCTnLkyMH4mI/0fEoejYlR4PLVPH4c/2fdWqrD9b/5ff0vrvZmsBs3bca9/VfM7Y6PToRh83EHH/RsRThet/k/n+Pyno/9PXg8lV1rHv2VtnWpWtHP/AVql/E3GwsP9/eNWKZPnrcww2xgOD+ahgqac/+vz7VvWvN/5dYgI2Lu3/dy8f/33Jwuv1TK29jqMz7fVWZesd/3cmbzQuOdOZ5X04Oj19dSiiMzndluY25Q+vvc3wKMrjIY+XNP4PPbP8/F/R+L87ImYX/d/Jn817inOP/9PzW6v2GP9DedL4H1tT/7/2xPCtvh9a1b+6/v9Yo68/lOWY/4M5X+Zh2tmcXxCO7UVF291eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgU1CJiTyS1gfl0rTYwENETEY/F7trElanp585def/yWFrW+P7/Wv5Nv71zx0n+/f99C46HFx0fjYi9EfFFW3fjeODslYmxsh88AAAAAAAAAAAAAAAAAAAA7BA9Lfb/p35vK7t1wJZrL7sBQGkK4v/nMtoBbD/9P1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCRsvfA7V+SiJh9sbtxS3VmZR2ltgzYarWyGwCUxiV+oLos/YHq8h4fSFYo72p50kpnLmfy7AZOBgAAAAAAAAAAAIDKObjf/n+oKvv/obrs/4fqyvf/Hyi5HcD2W+N7/PpGdvsCO9dysV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6OiKacN3dIw7YxUa/Xr6d/BTulPf/xRL4Ufqe0Z1Ei3+u3urPKe00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa/RsAAP//EH0kSg==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.722795422s ago: executing program 1 (id=2021): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xbd, &(0x7f0000000300)={@local, @broadcast, @void, {@generic={0x890d, "2b9d550d9201315475a34f53b1451bdb6edeb79ea3cdb00c9268082531b139a5456bc0aee7d14a6f2fc99e57a7bce7b0eef4cfccc0515732c518e2b91b0ef6bb9aaf9fd8ff900198b5c1bdb971766a8223180f2b0230a9e17d72dbeabeb2db9bd675819dbba1a706d418f2f8b736a5da612b27d161c4b2fe5e93756d7cb959dc8a9df2af226879dd724963e008132b0f583c60f94c908c5517d1745c0eb12cdee8ac3ee9501a2de90257191cfe27c6"}}}, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 1.555893157s ago: executing program 2 (id=2022): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_async', 0x749a82, 0x200) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x8000000001}) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 1.422129259s ago: executing program 0 (id=2023): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x4bbc, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@local}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@multicast1, @multicast1]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.316294379s ago: executing program 2 (id=2024): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x15c, 0x12) 1.274862893s ago: executing program 4 (id=2025): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r0, 0x12) r1 = gettid() tkill(r1, 0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') read$FUSE(r7, &(0x7f0000002380)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000004800010028bd7000fddbdf250a", @ANYRES32], 0xa4}}, 0xc048800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x401, 0x6, 0x7}) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) 1.148415285s ago: executing program 2 (id=2026): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {}, {0xffff, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390426bd700000e5ffffff000000", @ANYRES32=r3, @ANYBLOB="03000000000000001800128008000100736974000c00028008000300ac1414"], 0x38}}, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09040000f6"], 0x3f00}], 0x1}, 0x0) 1.015880777s ago: executing program 2 (id=2027): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@broadcast}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 757.278161ms ago: executing program 1 (id=2028): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1, 0x0) 690.220127ms ago: executing program 2 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x6) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="c370", 0x2}], 0x1}}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x1800) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="090034006f66bf4d1f360fdad6cd0cf404000000"], 0x30}}, 0x0) accept$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'team_slave_0\x00'}) 322.972751ms ago: executing program 3 (id=2030): socket$igmp6(0xa, 0x3, 0x2) io_setup(0x470, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00s\x04\x879\xa24\xa9am\xde\xb2\x02\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x06\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\x1d\xcf\xf38\xe2\x80\xf5\xd7\xcd5\xd9\x1fE\xfd\xce', 0x3) fcntl$addseals(r1, 0x409, 0xb) 303.851072ms ago: executing program 0 (id=2031): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2b, 0x801, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 171.873565ms ago: executing program 4 (id=2032): syz_open_procfs(0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time, 0x0, {}, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0xc0bc5310, &(0x7f0000000300)={{}, {0x0, 0x3}, 0x0, 0x2, 0xff}) tkill(r0, 0x7) 117.65671ms ago: executing program 3 (id=2033): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x484, &(0x7f0000000100)={[{@nostrict}, {@fileset={'fileset', 0x3d, 0x4}}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@uid_forget}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@longad}, {@noadinicb}]}, 0xfe, 0xc43, &(0x7f0000001040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 104.351361ms ago: executing program 4 (id=2034): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 0s ago: executing program 4 (id=2035): r0 = socket$kcm(0x11, 0x7, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) pipe(0x0) write(r2, &(0x7f0000000040), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000040)={0x14, &(0x7f0000000540)=ANY=[], 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@delchain={0x24, 0x2a, 0xf31}, 0x24}}, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000080)=[{r7, 0x100}], 0x1, 0x8571) kernel console output (not intermixed with test programs): r or descriptor too short [ 358.231408][ T3762] usb 3-1: config 131 has an invalid interface number: 65 but max is 0 [ 358.239714][ T3762] usb 3-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 358.251187][ T3762] usb 3-1: config 131 has no interface number 0 [ 358.257584][ T3762] usb 3-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 358.269511][ T3762] usb 3-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 358.283842][ T3762] usb 3-1: config 131 interface 65 has no altsetting 0 [ 358.330637][ T3687] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 358.330735][ T3746] usb 1-1: Using ep0 maxpacket: 8 [ 358.362907][ T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 358.370635][ T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 358.377875][ T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 358.386066][ T3685] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 358.395195][ T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 358.404308][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.412506][ T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 358.421267][ T3687] usb 4-1: device descriptor read/8, error -71 [ 358.422897][ T14] HID 045e:07da: Invalid code 65791 type 1 [ 358.439662][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input23 [ 358.462992][ T14] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 358.475927][ T3746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.489452][ T3746] usb 1-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 358.499089][ T3746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.509992][ T3746] usb 1-1: config 0 descriptor?? [ 358.540613][ T3687] usb usb4-port1: unable to enumerate USB device [ 358.568285][ T3746] r8712u: register rtl8712_netdev_ops to netdev_ops [ 358.575191][ T3746] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 358.575753][ T3687] usb 2-1: USB disconnect, device number 71 [ 358.751845][ T3685] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 358.762161][ T3685] usb 5-1: USB disconnect, device number 69 [ 359.150804][ T3746] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 359.157559][ T3746] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 359.165781][ T3746] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 359.174131][ T3762] usb 3-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 359.195361][ T3746] usb 1-1: USB disconnect, device number 81 [ 359.201420][ T3762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.400216][ T8298] __nla_validate_parse: 6 callbacks suppressed [ 359.407252][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1553'. [ 359.561592][ T3762] ti_usb_3410_5052 3-1:131.65: required endpoints missing [ 359.602854][ T3762] usb 3-1: USB disconnect, device number 87 [ 359.614025][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 359.648907][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 359.733412][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 359.756488][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 359.756505][ T26] audit: type=1326 audit(1726732115.439:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 359.801677][ T8309] dccp_close: ABORT with 2 bytes unread [ 359.867932][ T26] audit: type=1326 audit(1726732115.479:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 359.909481][ T26] audit: type=1326 audit(1726732115.479:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 359.985098][ T26] audit: type=1326 audit(1726732115.479:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.018399][ T26] audit: type=1326 audit(1726732115.479:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.049901][ T26] audit: type=1326 audit(1726732115.479:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.072848][ T26] audit: type=1326 audit(1726732115.479:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.096521][ T26] audit: type=1326 audit(1726732115.639:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.122233][ T3687] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 360.130119][ T26] audit: type=1326 audit(1726732115.639:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfcf7def9 code=0x7ffc0000 [ 360.241609][ T41] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 360.347239][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 360.367402][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 360.390458][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 360.475979][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 360.490639][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 360.510705][ T3687] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 360.530920][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.552014][ T3687] usb 1-1: config 0 descriptor?? [ 360.593549][ T3687] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 360.610447][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.621874][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.632679][ T41] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.646196][ T41] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.657432][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.673881][ T41] usb 4-1: config 0 descriptor?? [ 360.700436][ T946] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 360.794237][ T26] audit: type=1326 audit(1726732116.479:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bfcf7dafb code=0x7ffc0000 [ 360.890487][ T3689] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 360.950425][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 361.110507][ T946] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.153110][ T41] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 361.160954][ T41] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 361.168616][ T41] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 361.176514][ T3689] usb 2-1: no configurations [ 361.181390][ T3689] usb 2-1: can't read configurations, error -22 [ 361.187826][ T41] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 361.195516][ T41] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 361.203127][ T946] usb 3-1: config 131 has an invalid interface number: 65 but max is 0 [ 361.212584][ T41] HID 045e:07da: Invalid code 65791 type 1 [ 361.220379][ T946] usb 3-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 361.233410][ T41] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input24 [ 361.250531][ T946] usb 3-1: config 131 has no interface number 0 [ 361.256831][ T946] usb 3-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 361.270186][ T946] usb 3-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 361.285269][ T946] usb 3-1: config 131 interface 65 has no altsetting 0 [ 361.292907][ T41] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 361.321962][ T3687] usb 1-1: USB disconnect, device number 82 [ 361.350407][ T3689] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 361.367883][ T3688] usb 4-1: USB disconnect, device number 79 [ 361.450405][ T41] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 361.630486][ T3689] usb 2-1: no configurations [ 361.635134][ T3689] usb 2-1: can't read configurations, error -22 [ 361.642133][ T3689] usb usb2-port1: attempt power cycle [ 361.690551][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 361.810680][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.820894][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.830700][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 361.842030][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 361.852771][ T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.866081][ T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.875409][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.050437][ T3688] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 362.058137][ T3689] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 362.065947][ T946] usb 3-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 362.075211][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.160541][ T41] usb 5-1: GET_CAPABILITIES returned 0 [ 362.166103][ T41] usbtmc 5-1:16.0: can't read capabilities [ 362.210563][ T3689] usb 2-1: no configurations [ 362.215243][ T3689] usb 2-1: can't read configurations, error -22 [ 362.290527][ T7] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 362.310436][ T3688] usb 1-1: Using ep0 maxpacket: 8 [ 362.370406][ T3689] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 362.401561][ T946] ti_usb_3410_5052 3-1:131.65: required endpoints missing [ 362.410924][ T946] usb 3-1: USB disconnect, device number 88 [ 362.430495][ T3688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.441070][ T3688] usb 1-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 362.450127][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.460902][ T3688] usb 1-1: config 0 descriptor?? [ 362.468055][ T3746] usb 5-1: USB disconnect, device number 70 [ 362.501045][ T3689] usb 2-1: no configurations [ 362.505675][ T3689] usb 2-1: can't read configurations, error -22 [ 362.515361][ T3688] r8712u: register rtl8712_netdev_ops to netdev_ops [ 362.522283][ T3688] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 362.529893][ T3689] usb usb2-port1: unable to enumerate USB device [ 362.540641][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 362.670379][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.680799][ T7] usb 4-1: config 0 has no interfaces? [ 362.860788][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 362.870033][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.878170][ T7] usb 4-1: Product: syz [ 362.882435][ T7] usb 4-1: Manufacturer: syz [ 362.887037][ T7] usb 4-1: SerialNumber: syz [ 362.894564][ T7] usb 4-1: config 0 descriptor?? [ 363.063004][ T3688] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 363.076665][ T3688] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 363.099316][ T3688] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 363.127705][ T3688] usb 1-1: USB disconnect, device number 83 [ 363.277228][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1574'. [ 363.291246][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1574'. [ 363.600332][ T7] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 363.890563][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 364.070420][ T946] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 364.101311][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.160527][ T3685] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 364.180787][ T7] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 364.190578][ T7] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 364.215172][ T7] usb 5-1: config 131 has no interface number 0 [ 364.223631][ T7] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 364.241915][ T7] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 364.263492][ T7] usb 5-1: config 131 interface 65 has no altsetting 0 [ 364.310360][ T946] usb 2-1: Using ep0 maxpacket: 32 [ 364.430343][ T3685] usb 1-1: Using ep0 maxpacket: 16 [ 364.430519][ T946] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 364.450898][ T946] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 364.459906][ T946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 364.470042][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.480571][ T946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.491118][ T946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.504743][ T946] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.514153][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.533415][ T946] usb 2-1: config 0 descriptor?? [ 364.580761][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.591794][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.601982][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.614894][ T3685] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.624179][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.634905][ T3685] usb 1-1: config 0 descriptor?? [ 364.792109][ T946] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 364.820722][ T946] usb 2-1: USB disconnect, device number 76 [ 364.833588][ T946] usblp0: removed [ 364.892024][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 364.892041][ T26] audit: type=1326 audit(1726732120.579:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 364.929651][ T26] audit: type=1326 audit(1726732120.579:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 364.962567][ T26] audit: type=1326 audit(1726732120.579:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 364.986079][ T26] audit: type=1326 audit(1726732120.579:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.029313][ T26] audit: type=1326 audit(1726732120.579:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.042408][ T3746] usb 4-1: USB disconnect, device number 80 [ 365.052667][ T26] audit: type=1326 audit(1726732120.579:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.084757][ T26] audit: type=1326 audit(1726732120.579:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.120928][ T26] audit: type=1326 audit(1726732120.579:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.150560][ T26] audit: type=1326 audit(1726732120.579:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.173467][ T8387] __nla_validate_parse: 1 callbacks suppressed [ 365.173483][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 365.174397][ T26] audit: type=1326 audit(1726732120.709:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 365.191563][ T3685] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 365.226004][ T3685] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 365.233579][ T3685] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 365.241116][ T3685] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 365.248337][ T3685] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 365.255886][ T7] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 365.266824][ T3685] HID 045e:07da: Invalid code 65791 type 1 [ 365.272740][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.285662][ T3685] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input25 [ 365.297350][ T3762] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 365.329245][ T3685] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 365.344923][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 365.370597][ T946] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 365.399008][ T3688] usb 1-1: USB disconnect, device number 84 [ 365.610949][ T946] usb 2-1: Using ep0 maxpacket: 32 [ 365.641629][ T7] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 365.656698][ T7] usb 5-1: USB disconnect, device number 71 [ 365.700845][ T3762] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 365.710129][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.720537][ T3762] usb 3-1: config 0 descriptor?? [ 365.730575][ T946] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 365.739624][ T946] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 365.752339][ T946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 365.763108][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.776523][ T946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.784507][ T3762] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 365.793965][ T946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.807035][ T946] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 365.816254][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.831117][ T946] usb 2-1: config 0 descriptor?? [ 366.092066][ T946] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 366.240378][ T7] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 366.349582][ T946] usb 2-1: USB disconnect, device number 77 [ 366.355805][ C1] usblp0: nonzero read bulk status received: -71 [ 366.362567][ T8365] usblp0: error -71 reading from printer [ 366.370030][ T946] usblp0: removed [ 366.490493][ T3685] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 366.500476][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 366.506065][ T3762] usb 3-1: USB disconnect, device number 89 [ 366.620444][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.630780][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.641352][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 366.652641][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 366.663008][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.676195][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.685493][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.950682][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 366.956536][ T7] usbtmc 1-1:16.0: can't read capabilities [ 367.070523][ T3685] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 367.079760][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.087847][ T3685] usb 5-1: Product: syz [ 367.095421][ T3685] usb 5-1: Manufacturer: syz [ 367.100022][ T3685] usb 5-1: SerialNumber: syz [ 367.107555][ T3685] usb 5-1: config 0 descriptor?? [ 367.190381][ T3746] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 367.240430][ T946] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 367.243448][ T7] usb 1-1: USB disconnect, device number 85 [ 367.380455][ T3685] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 367.480603][ T3746] usb 2-1: no configurations [ 367.483483][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 367.486110][ T3746] usb 2-1: can't read configurations, error -22 [ 367.610686][ T946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.621193][ T946] usb 3-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 367.630307][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.640411][ T946] usb 3-1: config 0 descriptor?? [ 367.645334][ T3746] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 367.684423][ T946] r8712u: register rtl8712_netdev_ops to netdev_ops [ 367.691321][ T946] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 367.950492][ T3746] usb 2-1: no configurations [ 367.955498][ T3746] usb 2-1: can't read configurations, error -22 [ 367.962518][ T3746] usb usb2-port1: attempt power cycle [ 368.390322][ T3746] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 368.431376][ T946] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 368.445961][ T946] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 368.473706][ T946] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 368.565031][ T3746] usb 2-1: no configurations [ 368.569808][ T3746] usb 2-1: can't read configurations, error -22 [ 368.740820][ T3746] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 368.756093][ T946] usb 3-1: USB disconnect, device number 90 [ 368.890646][ T3746] usb 2-1: no configurations [ 368.895674][ T3746] usb 2-1: can't read configurations, error -22 [ 368.913414][ T3746] usb usb2-port1: unable to enumerate USB device [ 369.697180][ T946] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 369.885546][ T3688] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 369.930336][ T14] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 369.940533][ T946] usb 1-1: Using ep0 maxpacket: 8 [ 370.038921][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1595'. [ 370.048805][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1595'. [ 370.059041][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1595'. [ 370.060481][ T946] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 370.081809][ T946] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.092220][ T946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.102390][ T946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.112443][ T946] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.125543][ T946] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.134756][ T3688] usb 4-1: Using ep0 maxpacket: 16 [ 370.139995][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.250710][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.261956][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.271817][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.284956][ T3688] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.294107][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.307405][ T3688] usb 4-1: config 0 descriptor?? [ 370.320543][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.331316][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.350667][ T3685] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 370.360743][ T3746] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 370.368506][ T3685] usb 5-1: USB disconnect, device number 72 [ 370.410573][ T946] usb 1-1: usb_control_msg returned -32 [ 370.416245][ T946] usbtmc 1-1:16.0: can't read capabilities [ 370.434153][ T14] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.446742][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.454941][ T14] usb 3-1: SerialNumber: syz [ 370.650365][ T3746] usb 2-1: Using ep0 maxpacket: 8 [ 370.753660][ T14] usb 3-1: 0:2 : does not exist [ 370.758642][ T14] usb 3-1: unit 255 not found! [ 370.792805][ T3688] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 370.800688][ T3688] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 370.807944][ T3688] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 370.815332][ T3688] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 370.822713][ T3688] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 370.830966][ T3688] HID 045e:07da: Invalid code 65791 type 1 [ 370.840191][ T3688] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input26 [ 370.866250][ T3746] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.876337][ T3688] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 370.960834][ T3746] usb 2-1: config 131 has an invalid interface number: 65 but max is 0 [ 370.970208][ T3746] usb 2-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 370.988047][ T3746] usb 2-1: config 131 has no interface number 0 [ 371.004702][ T14] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 371.017336][ T3746] usb 2-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 371.030894][ T3746] usb 2-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 371.049148][ T14] usb 3-1: USB disconnect, device number 91 [ 371.056146][ T3746] usb 2-1: config 131 interface 65 has no altsetting 0 [ 371.067101][ T3685] usb 4-1: USB disconnect, device number 81 [ 371.102151][ T3830] udevd[3830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.201325][ T8456] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 371.270388][ T3688] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 371.373191][ T3685] usb 1-1: USB disconnect, device number 86 [ 371.510450][ T3688] usb 5-1: Using ep0 maxpacket: 32 [ 371.631392][ T3688] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 371.639771][ T3688] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 371.649600][ T3688] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 371.650434][ T14] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 371.659077][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.676435][ T3688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.687223][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.701193][ T3688] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 371.710377][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.729008][ T3688] usb 5-1: config 0 descriptor?? [ 371.742817][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 371.920615][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 371.940650][ T3746] usb 2-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 371.950619][ T3746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.993015][ T3688] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 372.017419][ T3688] usb 5-1: USB disconnect, device number 73 [ 372.027838][ T3688] usblp0: removed [ 372.060601][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.072157][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.082710][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 372.094852][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 372.106575][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.120563][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.131112][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.292766][ T3746] ti_usb_3410_5052 2-1:131.65: required endpoints missing [ 372.310823][ T3746] usb 2-1: USB disconnect, device number 82 [ 372.400464][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 372.406108][ T14] usbtmc 3-1:16.0: can't read capabilities [ 372.530610][ T3688] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 372.692245][ T3746] usb 3-1: USB disconnect, device number 92 [ 372.780520][ T3688] usb 5-1: Using ep0 maxpacket: 32 [ 372.910668][ T3688] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.930536][ T3688] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.948990][ T3688] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.965421][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.985074][ T3688] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 373.007482][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 373.023597][ T3688] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 373.033179][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.053229][ T3688] usb 5-1: config 0 descriptor?? [ 373.300443][ T3746] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 373.314920][ T3688] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 373.568178][ T3689] usb 5-1: USB disconnect, device number 74 [ 373.570293][ C0] usblp0: nonzero read bulk status received: -71 [ 373.583779][ T8455] usblp0: error -71 reading from printer [ 373.595539][ T8455] usblp0: removed [ 373.631329][ T3746] usb 1-1: no configurations [ 373.636173][ T3746] usb 1-1: can't read configurations, error -22 [ 373.760924][ T3762] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 373.800362][ T3746] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 373.990345][ T14] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 374.010498][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 374.120483][ T3746] usb 1-1: no configurations [ 374.125508][ T3746] usb 1-1: can't read configurations, error -22 [ 374.150498][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.165778][ T3746] usb usb1-port1: attempt power cycle [ 374.172475][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.185931][ T3762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.198934][ T3762] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.208343][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.219917][ T3762] usb 3-1: config 0 descriptor?? [ 374.254493][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 374.390411][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 374.398689][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.412468][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.424891][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.435168][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.448240][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 374.462401][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.600463][ T3746] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 374.656985][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1613'. [ 374.670845][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1613'. [ 374.684805][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1613'. [ 374.712994][ T3762] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 374.720508][ T3762] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 374.727729][ T3762] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 374.736648][ T3762] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 374.744049][ T3762] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 374.751567][ T14] usb 2-1: usb_control_msg returned -32 [ 374.757143][ T14] usbtmc 2-1:16.0: can't read capabilities [ 374.763144][ T3746] usb 1-1: no configurations [ 374.767753][ T3746] usb 1-1: can't read configurations, error -22 [ 374.774677][ T3762] HID 045e:07da: Invalid code 65791 type 1 [ 374.789807][ T3762] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input27 [ 374.811197][ T3762] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 374.918807][ T14] usb 3-1: USB disconnect, device number 93 [ 374.940462][ T3746] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 374.970410][ T7] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 375.100756][ T3746] usb 1-1: no configurations [ 375.105407][ T3746] usb 1-1: can't read configurations, error -22 [ 375.111955][ T3746] usb usb1-port1: unable to enumerate USB device [ 375.220456][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 375.410452][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.500523][ T7] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 375.510040][ T7] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 375.520970][ T7] usb 5-1: config 131 has no interface number 0 [ 375.527255][ T7] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 375.538836][ T7] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 375.552654][ T8502] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 375.558858][ T7] usb 5-1: config 131 interface 65 has no altsetting 0 [ 375.734416][ T3746] usb 2-1: USB disconnect, device number 83 [ 376.230598][ T3762] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 376.431616][ T7] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 376.446468][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.470469][ T3762] usb 4-1: Using ep0 maxpacket: 8 [ 376.485022][ T946] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 376.513627][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 376.563444][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.573059][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 376.588954][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.598217][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.620569][ T3762] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.631972][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.640778][ T3762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.650721][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.659614][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.668481][ T3762] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 376.679867][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.688767][ T3762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 376.699023][ T3762] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.712319][ T8518] kvm [8517]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 376.727146][ T3762] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 376.741163][ T946] usb 1-1: Using ep0 maxpacket: 8 [ 376.751112][ T3762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.791869][ T7] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 376.803197][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 376.803214][ T26] audit: type=1326 audit(1726732132.489:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 376.850609][ T7] usb 5-1: USB disconnect, device number 75 [ 376.877592][ T946] usb 1-1: config 0 has no interfaces? [ 376.879739][ T26] audit: type=1326 audit(1726732132.489:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 376.926397][ T26] audit: type=1326 audit(1726732132.519:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 376.971968][ T26] audit: type=1326 audit(1726732132.519:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.015003][ T26] audit: type=1326 audit(1726732132.519:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.040668][ T946] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 377.054888][ T3762] usb 4-1: GET_CAPABILITIES returned 0 [ 377.060925][ T946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.061770][ T3762] usbtmc 4-1:16.0: can't read capabilities [ 377.071305][ T946] usb 1-1: Product: syz [ 377.088687][ T946] usb 1-1: Manufacturer: syz [ 377.092866][ T26] audit: type=1326 audit(1726732132.519:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.101946][ T946] usb 1-1: SerialNumber: syz [ 377.152613][ T26] audit: type=1326 audit(1726732132.519:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.191282][ T26] audit: type=1326 audit(1726732132.519:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.196553][ T946] usb 1-1: config 0 descriptor?? [ 377.219872][ T26] audit: type=1326 audit(1726732132.519:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.247922][ T26] audit: type=1326 audit(1726732132.849:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51da37def9 code=0x7ffc0000 [ 377.366731][ T946] usb 4-1: USB disconnect, device number 82 [ 377.508056][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 377.535197][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.551940][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.590774][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.602475][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.619188][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.629873][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.645247][ T7] usb 1-1: USB disconnect, device number 91 [ 378.020363][ T946] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 378.390460][ T946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.425392][ T946] usb 3-1: config 0 has no interfaces? [ 378.443030][ T946] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 378.452300][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.462373][ T946] usb 3-1: config 0 descriptor?? [ 378.492892][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.500919][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.880418][ T946] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 379.230579][ T3689] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 379.291294][ T946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 379.298939][ T946] usb 1-1: can't read configurations, error -61 [ 379.450409][ T946] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 379.790586][ T3689] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.799815][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.809242][ T3689] usb 4-1: Product: syz [ 379.814227][ T3689] usb 4-1: Manufacturer: syz [ 379.818983][ T3689] usb 4-1: SerialNumber: syz [ 379.834874][ T3689] usb 4-1: config 0 descriptor?? [ 379.854616][ T946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 379.865044][ T946] usb 1-1: can't read configurations, error -61 [ 379.874264][ T946] usb usb1-port1: attempt power cycle [ 380.100436][ T3689] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.280480][ T946] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 380.530392][ T946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 380.538106][ T946] usb 1-1: can't read configurations, error -61 [ 380.690354][ T946] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 380.720411][ T14] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 380.764845][ T3688] usb 3-1: USB disconnect, device number 94 [ 380.940473][ T946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 380.948200][ T946] usb 1-1: can't read configurations, error -61 [ 380.958304][ T946] usb usb1-port1: unable to enumerate USB device [ 380.970369][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 381.100494][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.110959][ T14] usb 2-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 381.120036][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.130676][ T14] usb 2-1: config 0 descriptor?? [ 381.150480][ T3762] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 381.173002][ T14] r8712u: register rtl8712_netdev_ops to netdev_ops [ 381.179745][ T14] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 381.220399][ T3688] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 381.420505][ T3762] usb 5-1: Using ep0 maxpacket: 32 [ 381.460517][ T3688] usb 3-1: Using ep0 maxpacket: 8 [ 381.580624][ T3688] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.590725][ T3688] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.611075][ T3688] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 381.637958][ T3688] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 381.660448][ T3688] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.680364][ T3688] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.689479][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.756184][ T3762] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 381.771251][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.789499][ T3762] usb 5-1: Product: syz [ 381.793943][ T3762] usb 5-1: Manufacturer: syz [ 381.798780][ T3762] usb 5-1: SerialNumber: syz [ 381.811959][ T3762] usb 5-1: config 0 descriptor?? [ 381.863684][ T3762] pvrusb2: Hardware description: Terratec Grabster AV400 [ 381.880567][ T3762] pvrusb2: ********** [ 381.884829][ T3762] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 381.914740][ T3762] pvrusb2: Important functionality might not be entirely working. [ 381.924166][ T14] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 381.940337][ T3762] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 381.959751][ T14] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 381.967519][ T14] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 381.970501][ T3688] usb 3-1: GET_CAPABILITIES returned 0 [ 381.981100][ T3762] pvrusb2: ********** [ 381.986387][ T3688] usbtmc 3-1:16.0: can't read capabilities [ 382.069204][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 382.097572][ T2039] pvrusb2: Invalid write control endpoint [ 382.105255][ T3762] usb 5-1: USB disconnect, device number 76 [ 382.236779][ T8601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.255994][ T2039] pvrusb2: Invalid write control endpoint [ 382.267043][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 382.288022][ T946] usb 3-1: USB disconnect, device number 95 [ 382.299636][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 382.320167][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 382.343424][ T2039] pvrusb2: Device being rendered inoperable [ 382.354144][ T2039] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 382.365817][ T2039] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 382.379285][ T2039] pvrusb2: Attached sub-driver cx25840 [ 382.397773][ T2039] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 382.420325][ T2039] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 382.570531][ T14] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 382.841522][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 383.010717][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.030378][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.056080][ T3689] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 383.061345][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.083041][ T3689] usb 4-1: USB disconnect, device number 83 [ 383.152060][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 383.152077][ T26] audit: type=1326 audit(1726732138.839:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.191890][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.219273][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.256769][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.282493][ T26] audit: type=1326 audit(1726732138.879:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.341069][ T26] audit: type=1326 audit(1726732138.879:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.400594][ T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.404835][ T26] audit: type=1326 audit(1726732138.879:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.413015][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.459613][ T26] audit: type=1326 audit(1726732138.879:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.491681][ T26] audit: type=1326 audit(1726732138.879:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.509499][ T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.515449][ T26] audit: type=1326 audit(1726732138.879:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.550375][ T946] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 383.559110][ T26] audit: type=1326 audit(1726732138.879:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.582215][ T26] audit: type=1326 audit(1726732139.179:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.638923][ T26] audit: type=1326 audit(1726732139.179:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef77d7def9 code=0x7ffc0000 [ 383.693776][ T3689] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 383.830732][ T14] usb 1-1: string descriptor 0 read error: -22 [ 383.839334][ T14] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.858885][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.876559][ T3720] usb 2-1: USB disconnect, device number 84 [ 383.940711][ T946] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 383.950051][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 383.962432][ T14] adutux 1-1:168.0: interrupt endpoints not found [ 383.965879][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.009359][ T946] usb 5-1: config 0 descriptor?? [ 384.052850][ T946] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 384.070668][ T3689] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 384.106968][ T3689] usb 3-1: config 0 has no interface number 0 [ 384.123692][ T3689] usb 3-1: config 0 interface 189 has no altsetting 0 [ 384.300832][ T3689] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=2c.b5 [ 384.320581][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.328635][ T3689] usb 3-1: Product: syz [ 384.335812][ T3762] usb 1-1: USB disconnect, device number 96 [ 384.347576][ T3689] usb 3-1: Manufacturer: syz [ 384.372274][ T3689] usb 3-1: SerialNumber: syz [ 384.405076][ T3689] usb 3-1: config 0 descriptor?? [ 384.703015][ T3689] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 384.713643][ T3688] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 384.741631][ T3689] dvb-usb: bulk message failed: -22 (2/0) [ 384.756723][ T3689] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 384.786308][ T946] usb 5-1: USB disconnect, device number 77 [ 384.793199][ T3689] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 384.811858][ T3689] usb 3-1: media controller created [ 384.838381][ T3689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.869780][ T3689] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 384.882914][ T3689] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 385.090545][ T3688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.106071][ T3688] usb 2-1: config 0 has no interfaces? [ 385.112223][ T3688] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 385.121601][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.135760][ T3688] usb 2-1: config 0 descriptor?? [ 385.141152][ T3689] rc_core: IR keymap rc-dtt200u not found [ 385.147153][ T3689] Registered IR keymap rc-empty [ 385.155056][ T3689] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 385.172115][ T3689] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28 [ 385.192870][ T3689] dvb-usb: schedule remote query interval to 300 msecs. [ 385.200331][ T3689] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 385.247039][ T3689] usb 3-1: USB disconnect, device number 96 [ 385.404930][ T3689] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 385.420409][ T3688] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 385.681627][ T3688] usb 4-1: Using ep0 maxpacket: 16 [ 385.800717][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.813526][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.823655][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.836827][ T3688] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.847322][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.872966][ T3688] usb 4-1: config 0 descriptor?? [ 386.420706][ T3688] usbhid 4-1:0.0: can't add hid device: -71 [ 386.426810][ T3688] usbhid: probe of 4-1:0.0 failed with error -71 [ 386.466669][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 386.487107][ T3688] usb 4-1: USB disconnect, device number 84 [ 386.505883][ T8693] dccp_close: ABORT with 2 bytes unread [ 387.210349][ T3688] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 387.458171][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 387.512669][ T14] usb 2-1: USB disconnect, device number 85 [ 387.583599][ T3688] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.742811][ T3762] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 387.778057][ T3688] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 387.797981][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.812643][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 387.823531][ T3688] usb 4-1: Product: syz [ 387.829725][ T8732] dccp_close: ABORT with 2 bytes unread [ 387.838006][ T3688] usb 4-1: Manufacturer: syz [ 387.843787][ T3688] usb 4-1: SerialNumber: syz [ 387.865320][ T3688] usb 4-1: config 0 descriptor?? [ 388.011680][ T3762] usb 3-1: Using ep0 maxpacket: 8 [ 388.150606][ T3762] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.178246][ T3762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.188908][ T3762] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 388.202937][ T3762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 388.214729][ T3762] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.230825][ T3762] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.240922][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.430345][ T3688] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 388.520543][ T3762] usb 3-1: GET_CAPABILITIES returned 0 [ 388.526099][ T3762] usbtmc 3-1:16.0: can't read capabilities [ 388.670384][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 388.790476][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.802189][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.815841][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.841017][ T3688] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.851291][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.869058][ T3688] usb 2-1: config 0 descriptor?? [ 388.891608][ T946] usb 3-1: USB disconnect, device number 97 [ 389.420476][ T3688] usbhid 2-1:0.0: can't add hid device: -71 [ 389.436017][ T3688] usbhid: probe of 2-1:0.0 failed with error -71 [ 389.452572][ T3688] usb 2-1: USB disconnect, device number 86 [ 389.638590][ T8754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.822999][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 390.026517][ T3688] usb 4-1: USB disconnect, device number 85 [ 390.318188][ T3646] Bluetooth: hci2: unexpected event for opcode 0x201c [ 390.321992][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 390.940340][ T14] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 391.108747][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1696'. [ 391.210412][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 391.350521][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.378732][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.394750][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 391.410400][ T3688] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 391.423340][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 391.439936][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.459405][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.469365][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.660584][ T3688] usb 4-1: Using ep0 maxpacket: 16 [ 391.740476][ T14] usb 1-1: GET_CAPABILITIES returned 0 [ 391.746252][ T14] usbtmc 1-1:16.0: can't read capabilities [ 391.780803][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.792567][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.803624][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.816735][ T3688] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.825993][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.840458][ T3762] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 391.841990][ T3688] usb 4-1: config 0 descriptor?? [ 392.030425][ T3762] usb 3-1: device descriptor read/64, error -71 [ 392.057264][ T3720] usb 1-1: USB disconnect, device number 97 [ 392.201389][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 392.214671][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 392.224918][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 392.320371][ T3762] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 392.390475][ T3688] usbhid 4-1:0.0: can't add hid device: -71 [ 392.396712][ T3688] usbhid: probe of 4-1:0.0 failed with error -71 [ 392.405779][ T3688] usb 4-1: USB disconnect, device number 86 [ 392.511133][ T3762] usb 3-1: device descriptor read/64, error -71 [ 392.517562][ T14] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 392.650737][ T3762] usb usb3-port1: attempt power cycle [ 392.675072][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 392.780349][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 392.960809][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 392.968681][ T7] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 393.050594][ T14] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 393.059187][ T14] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 393.070325][ T3762] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 393.078481][ T14] usb 5-1: config 131 has no interface number 0 [ 393.087985][ T14] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 393.108451][ T14] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 393.124409][ T14] usb 5-1: config 131 interface 65 has no altsetting 0 [ 393.171616][ T3762] usb 3-1: device descriptor read/8, error -71 [ 393.332202][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 393.440643][ T3762] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 393.530646][ T3762] usb 3-1: device descriptor read/8, error -71 [ 393.560858][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 393.585372][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.595519][ T7] usb 1-1: Product: syz [ 393.609802][ T7] usb 1-1: Manufacturer: syz [ 393.620320][ T7] usb 1-1: SerialNumber: syz [ 393.638913][ T7] usb 1-1: config 0 descriptor?? [ 393.660871][ T3762] usb usb3-port1: unable to enumerate USB device [ 393.703212][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input29 [ 393.715279][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1712'. [ 393.730107][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1712'. [ 393.763939][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1712'. [ 394.040466][ T3720] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 394.050459][ T14] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 394.063411][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.290583][ T3720] usb 4-1: Using ep0 maxpacket: 8 [ 394.421793][ T14] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 394.445863][ T14] usb 5-1: USB disconnect, device number 78 [ 394.450895][ T3720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 394.540800][ T3720] usb 4-1: config 131 has an invalid interface number: 65 but max is 0 [ 394.560897][ T3720] usb 4-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 394.589567][ T3720] usb 4-1: config 131 has no interface number 0 [ 394.606523][ T3720] usb 4-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 394.621262][ T3720] usb 4-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 394.639660][ T3720] usb 4-1: config 131 interface 65 has no altsetting 0 [ 395.170411][ T3688] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 395.400525][ T3720] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 395.418341][ T3720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.426800][ T3688] usb 2-1: Using ep0 maxpacket: 8 [ 395.560444][ T3688] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.584565][ T3688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.624085][ T3688] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 395.661463][ T3688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 395.697131][ T3688] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.735737][ T3688] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.754051][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.791439][ T3720] ti_usb_3410_5052 4-1:131.65: required endpoints missing [ 395.810488][ T3076] bcm5974 1-1:0.0: could not read from device [ 395.818448][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1721'. [ 395.849432][ T3720] usb 4-1: USB disconnect, device number 87 [ 395.900428][ T7] usb 1-1: USB disconnect, device number 98 [ 395.910416][ T3076] bcm5974 1-1:0.0: could not read from device [ 395.925423][ T3076] bcm5974 1-1:0.0: could not read from device [ 396.032421][ T3688] usb 2-1: GET_CAPABILITIES returned 0 [ 396.048854][ T3688] usbtmc 2-1:16.0: can't read capabilities [ 396.342589][ T946] usb 2-1: USB disconnect, device number 87 [ 396.580910][ T3688] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 396.639184][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1728'. [ 396.780542][ T3688] usb 3-1: device descriptor read/64, error -71 [ 396.930517][ T946] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 397.050500][ T3688] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 397.170455][ T946] usb 4-1: Using ep0 maxpacket: 8 [ 397.240343][ T3688] usb 3-1: device descriptor read/64, error -71 [ 397.260306][ T3720] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 397.331494][ T946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 397.360670][ T3688] usb usb3-port1: attempt power cycle [ 397.420606][ T946] usb 4-1: config 131 has an invalid interface number: 65 but max is 0 [ 397.429550][ T946] usb 4-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 397.444622][ T946] usb 4-1: config 131 has no interface number 0 [ 397.453593][ T946] usb 4-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 397.469924][ T946] usb 4-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 397.488211][ T946] usb 4-1: config 131 interface 65 has no altsetting 0 [ 397.510685][ T3720] usb 1-1: Using ep0 maxpacket: 8 [ 397.770981][ T3688] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 397.790825][ T3720] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.814197][ T3720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.823224][ T3720] usb 1-1: Product: syz [ 397.828276][ T3720] usb 1-1: Manufacturer: syz [ 397.840558][ T3720] usb 1-1: SerialNumber: syz [ 397.853797][ T3720] usb 1-1: config 0 descriptor?? [ 397.900708][ T3688] usb 3-1: device descriptor read/8, error -71 [ 398.110554][ T3720] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.180519][ T3688] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 398.240385][ T3687] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 398.250707][ T946] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 398.265510][ T946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.274052][ T3688] usb 3-1: device descriptor read/8, error -71 [ 398.402936][ T3688] usb usb3-port1: unable to enumerate USB device [ 398.484279][ T3687] usb 2-1: Using ep0 maxpacket: 8 [ 398.601654][ T946] ti_usb_3410_5052 4-1:131.65: required endpoints missing [ 398.611260][ T946] usb 4-1: USB disconnect, device number 88 [ 398.770538][ T3687] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 398.779947][ T3687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.788131][ T3687] usb 2-1: Product: syz [ 398.792606][ T3687] usb 2-1: Manufacturer: syz [ 398.797224][ T3687] usb 2-1: SerialNumber: syz [ 398.807652][ T3687] usb 2-1: config 0 descriptor?? [ 398.853567][ T3687] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 399.290566][ T3687] gspca_sonixj: reg_r err -32 [ 399.297331][ T3687] sonixj: probe of 2-1:0.0 failed with error -32 [ 399.359840][ T8897] sp0: Synchronizing with TNC [ 399.778021][ T8904] __nla_validate_parse: 2 callbacks suppressed [ 399.778951][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1739'. [ 399.818928][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1739'. [ 399.835458][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1739'. [ 400.050778][ T3720] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 400.090688][ T3720] usb 1-1: USB disconnect, device number 99 [ 400.124160][ T7] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 400.193083][ T8907] netlink: 'syz.2.1740': attribute type 6 has an invalid length. [ 400.400370][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 400.540521][ T14] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 400.570758][ T3746] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 400.610691][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 400.690618][ T7] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 400.701903][ T7] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 400.712563][ T7] usb 5-1: config 131 has no interface number 0 [ 400.718875][ T7] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 400.730686][ T7] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 400.744882][ T7] usb 5-1: config 131 interface 65 has no altsetting 0 [ 400.790331][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 400.810611][ T3746] usb 4-1: device descriptor read/64, error -71 [ 400.930637][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.940858][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.951000][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 400.962232][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 400.972801][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.008122][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.020680][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.031169][ T3691] usb 2-1: USB disconnect, device number 88 [ 401.090852][ T3762] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 401.098815][ T3746] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 401.280580][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 401.286091][ T14] usbtmc 3-1:16.0: can't read capabilities [ 401.310525][ T3746] usb 4-1: device descriptor read/64, error -71 [ 401.350720][ T3762] usb 1-1: Using ep0 maxpacket: 32 [ 401.430779][ T3746] usb usb4-port1: attempt power cycle [ 401.500513][ T3691] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 401.584588][ T14] usb 3-1: USB disconnect, device number 106 [ 401.610857][ T7] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 401.621447][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.670798][ T3762] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 401.680755][ T3762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.688798][ T3762] usb 1-1: Product: syz [ 401.693373][ T3762] usb 1-1: Manufacturer: syz [ 401.698232][ T3762] usb 1-1: SerialNumber: syz [ 401.703131][ T3691] usb 2-1: device descriptor read/64, error -71 [ 401.714740][ T3762] usb 1-1: config 0 descriptor?? [ 401.774104][ T3762] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 401.860444][ T3746] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 401.951643][ T7] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 401.961402][ T7] usb 5-1: USB disconnect, device number 79 [ 401.980470][ T3746] usb 4-1: device descriptor read/8, error -71 [ 401.986698][ T3691] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 402.180501][ T3691] usb 2-1: device descriptor read/64, error -71 [ 402.270397][ T3746] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 402.300426][ T3691] usb usb2-port1: attempt power cycle [ 402.370592][ T3746] usb 4-1: device descriptor read/8, error -71 [ 402.410612][ T3687] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 402.491644][ T3746] usb usb4-port1: unable to enumerate USB device [ 402.533612][ T3646] Bluetooth: hci4: unexpected cc 0x100c length: 11 > 3 [ 402.543304][ T3646] Bluetooth: hci4: unexpected event for opcode 0x100c [ 402.650604][ T3687] usb 3-1: Using ep0 maxpacket: 16 [ 402.730462][ T3691] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 402.770942][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.782153][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.792559][ T3687] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.805804][ T3687] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.814944][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.830434][ T3687] usb 3-1: config 0 descriptor?? [ 402.830698][ T3691] usb 2-1: device descriptor read/8, error -71 [ 403.120442][ T3691] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 403.220559][ T3691] usb 2-1: device descriptor read/8, error -71 [ 403.320588][ T3762] gspca_ov534_9: sccb_write failed [ 403.346327][ T3691] usb usb2-port1: unable to enumerate USB device [ 403.370484][ T3687] usbhid 3-1:0.0: can't add hid device: -71 [ 403.376746][ T3687] usbhid: probe of 3-1:0.0 failed with error -71 [ 403.397825][ T3687] usb 3-1: USB disconnect, device number 107 [ 403.750660][ T3762] gspca_ov534_9: reg_w failed -71 [ 404.101320][ T3762] gspca_ov534_9: Unknown sensor 0000 [ 404.101374][ T3762] ov534_9: probe of 1-1:0.0 failed with error -22 [ 404.128841][ T3762] usb 1-1: USB disconnect, device number 100 [ 404.630484][ T3691] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 404.680674][ T3762] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 404.780467][ T3746] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 404.880661][ T3691] usb 2-1: Using ep0 maxpacket: 8 [ 404.930366][ T3762] usb 4-1: Using ep0 maxpacket: 8 [ 405.044146][ T3746] usb 1-1: Using ep0 maxpacket: 16 [ 405.060780][ T3762] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.070735][ T3762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.081446][ T3762] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 405.092686][ T3762] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 405.104117][ T3762] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.117242][ T7] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 405.125421][ T3762] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.134673][ T3762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.170702][ T3746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.190730][ T3691] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 405.205924][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.214389][ T3691] usb 2-1: Product: syz [ 405.218655][ T3691] usb 2-1: Manufacturer: syz [ 405.223478][ T3691] usb 2-1: SerialNumber: syz [ 405.232703][ T3691] usb 2-1: config 0 descriptor?? [ 405.272237][ T3691] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 405.380583][ T3746] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 405.389986][ T3746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.398300][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 405.404190][ T3762] usb 4-1: GET_CAPABILITIES returned 0 [ 405.409719][ T3762] usbtmc 4-1:16.0: can't read capabilities [ 405.415947][ T3746] usb 1-1: Product: syz [ 405.420151][ T3746] usb 1-1: Manufacturer: syz [ 405.425673][ T3746] usb 1-1: SerialNumber: syz [ 405.439420][ T3746] usb 1-1: config 0 descriptor?? [ 405.487648][ T3746] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 405.560542][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.570819][ T7] usb 3-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 405.579873][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.589704][ T7] usb 3-1: config 0 descriptor?? [ 405.633329][ T7] r8712u: register rtl8712_netdev_ops to netdev_ops [ 405.640079][ T7] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 405.690648][ T3691] gspca_sonixj: reg_r err -32 [ 405.698990][ T3691] sonixj: probe of 2-1:0.0 failed with error -32 [ 405.716308][ T946] usb 1-1: USB disconnect, device number 101 [ 405.723092][ T3726] usb 1-1: Failed to submit usb control message: -71 [ 405.725502][ T3691] usb 4-1: USB disconnect, device number 93 [ 405.749576][ T3726] usb 1-1: unable to send the bmi data to the device: -71 [ 405.764682][ T3726] usb 1-1: unable to get target info from device [ 405.774425][ T3726] usb 1-1: could not get target info (-71) [ 405.784256][ T3726] usb 1-1: could not probe fw (-71) [ 406.100973][ T7] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 406.107747][ T7] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 406.119690][ T7] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 406.135643][ T7] usb 3-1: USB disconnect, device number 108 [ 406.141847][ T3746] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 406.573860][ T3646] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 406.582838][ T3646] Bluetooth: hci4: Injecting HCI hardware error event [ 406.592323][ T3654] Bluetooth: hci4: hardware error 0x00 [ 406.646945][ T946] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 406.700561][ T3746] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.720513][ T3746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.728845][ T3746] usb 5-1: Product: syz [ 406.737820][ T3746] usb 5-1: Manufacturer: syz [ 406.742631][ T3746] usb 5-1: SerialNumber: syz [ 406.761882][ T3746] usb 5-1: config 0 descriptor?? [ 406.920431][ T946] usb 4-1: Using ep0 maxpacket: 16 [ 407.020660][ T3746] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.029148][ T3762] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 407.041128][ T946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.052869][ T946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.062986][ T946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.075899][ T946] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.085228][ T946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.101140][ T946] usb 4-1: config 0 descriptor?? [ 407.150462][ T7] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 407.220456][ T3762] usb 3-1: device descriptor read/64, error -71 [ 407.252544][ T3720] usb 2-1: USB disconnect, device number 93 [ 407.400423][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 407.500695][ T3762] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 407.520997][ T7] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 407.529217][ T7] usb 1-1: config 0 has no interface number 0 [ 407.550892][ T7] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 407.566930][ T7] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 407.578291][ T7] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.640486][ T946] usbhid 4-1:0.0: can't add hid device: -71 [ 407.646716][ T946] usbhid: probe of 4-1:0.0 failed with error -71 [ 407.668434][ T946] usb 4-1: USB disconnect, device number 94 [ 407.700629][ T3762] usb 3-1: device descriptor read/64, error -71 [ 407.771171][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 407.780409][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.788462][ T7] usb 1-1: Product: syz [ 407.793754][ T7] usb 1-1: Manufacturer: syz [ 407.798396][ T7] usb 1-1: SerialNumber: syz [ 407.811274][ T7] usb 1-1: config 0 descriptor?? [ 407.821157][ T3762] usb usb3-port1: attempt power cycle [ 407.872160][ T7] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 408.192515][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 408.250356][ T3762] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 408.370694][ T3762] usb 3-1: device descriptor read/8, error -71 [ 408.640527][ T3762] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 408.660536][ T3654] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 408.770570][ T3762] usb 3-1: device descriptor read/8, error -71 [ 408.891834][ T3762] usb usb3-port1: unable to enumerate USB device [ 408.970616][ T7] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 409.230350][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 409.350626][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.367546][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.378353][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7456, setting to 1024 [ 409.393724][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.406198][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.424316][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.433795][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.720433][ T7] usb 2-1: GET_CAPABILITIES returned 0 [ 409.725994][ T7] usbtmc 2-1:16.0: can't read capabilities [ 409.957175][ T7] usb 1-1: USB disconnect, device number 102 [ 410.021599][ T3746] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 410.035791][ T946] usb 2-1: USB disconnect, device number 94 [ 410.038706][ T3746] usb 5-1: USB disconnect, device number 80 [ 410.460377][ T7] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 410.651179][ T3746] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 410.711295][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 410.910329][ T3746] usb 3-1: Using ep0 maxpacket: 16 [ 411.030480][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 411.040093][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.060455][ T3746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.071575][ T7] usb 1-1: Product: syz [ 411.075777][ T7] usb 1-1: Manufacturer: syz [ 411.090350][ T3746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.100143][ T3746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 411.113141][ T7] usb 1-1: SerialNumber: syz [ 411.141208][ T7] usb 1-1: config 0 descriptor?? [ 411.146460][ T3746] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 411.155663][ T3746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.175702][ T3746] usb 3-1: config 0 descriptor?? [ 411.183261][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 411.610599][ T7] gspca_sonixj: reg_r err -32 [ 411.617871][ T7] sonixj: probe of 1-1:0.0 failed with error -32 [ 411.720552][ T3746] usbhid 3-1:0.0: can't add hid device: -71 [ 411.732466][ T3746] usbhid: probe of 3-1:0.0 failed with error -71 [ 411.784006][ T3746] usb 3-1: USB disconnect, device number 113 [ 411.860408][ T946] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 412.110445][ T946] usb 5-1: Using ep0 maxpacket: 8 [ 412.230689][ T946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.241185][ T946] usb 5-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 412.251300][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.260370][ T3720] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 412.281153][ T3654] Bluetooth: hci0: unexpected cc 0x100c length: 11 > 3 [ 412.282344][ T946] usb 5-1: config 0 descriptor?? [ 412.289205][ T3654] Bluetooth: hci0: unexpected event for opcode 0x100c [ 412.333220][ T946] r8712u: register rtl8712_netdev_ops to netdev_ops [ 412.383363][ T946] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 412.660403][ T3720] usb 2-1: config 125 has too many interfaces: 144, using maximum allowed: 32 [ 412.669498][ T3720] usb 2-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 412.682564][ T3720] usb 2-1: config 125 has 1 interface, different from the descriptor's value: 144 [ 412.691916][ T3720] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 412.700403][ T7] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 412.701114][ T3720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.752775][ T3720] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 412.950440][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 412.960522][ T3720] pwc: send_video_command error -71 [ 412.965772][ T3720] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 412.980552][ T3720] Philips webcam: probe of 2-1:125.0 failed with error -71 [ 413.006172][ T3720] usb 2-1: USB disconnect, device number 95 [ 413.060390][ T946] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 413.067402][ T946] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 413.080570][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.090320][ T946] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 413.130312][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.153602][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.171705][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.199635][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.215768][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.256518][ T14] usb 1-1: USB disconnect, device number 103 [ 413.500450][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 413.506132][ T7] usbtmc 3-1:16.0: can't read capabilities [ 413.541514][ T7] usb 5-1: USB disconnect, device number 81 [ 413.795345][ T3746] usb 3-1: USB disconnect, device number 114 [ 414.250530][ T946] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 414.500551][ T946] usb 1-1: Using ep0 maxpacket: 32 [ 414.620511][ T946] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 414.632763][ T946] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 414.687865][ T946] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 414.725859][ T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.754900][ T946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 414.783573][ T946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 414.808032][ T946] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 414.830732][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.871368][ T946] usb 1-1: config 0 descriptor?? [ 415.142820][ T946] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 415.182743][ T946] usb 1-1: USB disconnect, device number 104 [ 415.228716][ T946] usblp0: removed [ 415.370542][ T3720] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 415.444505][ T9146] sp0: Synchronizing with TNC [ 415.760821][ T3720] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.777401][ T3720] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 415.789174][ T3720] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.802516][ T3720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.851739][ T9134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 416.010503][ T3746] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 416.270364][ T3746] usb 5-1: Using ep0 maxpacket: 32 [ 416.330441][ T3654] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 416.339302][ T3654] Bluetooth: hci0: Injecting HCI hardware error event [ 416.351816][ T3646] Bluetooth: hci0: hardware error 0x00 [ 416.410415][ T3746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 416.610604][ T3746] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 416.619819][ T3746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.656186][ T3746] usb 5-1: Product: syz [ 416.663963][ T3746] usb 5-1: Manufacturer: syz [ 416.680958][ T3746] usb 5-1: SerialNumber: syz [ 416.728030][ T3746] usb 5-1: config 0 descriptor?? [ 416.850193][ T3746] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 417.565734][ T3720] usb 3-1: USB disconnect, device number 115 [ 417.870481][ T3688] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 417.940570][ T11] usb 5-1: Failed to submit usb control message: -110 [ 417.963924][ T11] usb 5-1: unable to send the bmi data to the device: -110 [ 417.981170][ T11] usb 5-1: unable to get target info from device [ 417.992840][ T11] usb 5-1: could not get target info (-110) [ 418.002495][ T11] usb 5-1: could not probe fw (-110) [ 418.197784][ T9201] sp0: Synchronizing with TNC [ 418.233868][ T3688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.253441][ T3688] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.276285][ T3688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 418.351732][ T3688] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 418.361848][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.400767][ T9187] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 418.425665][ T3688] hub 1-1:1.0: bad descriptor, ignoring hub [ 418.448798][ T3688] hub: probe of 1-1:1.0 failed with error -5 [ 418.467101][ T3688] cdc_wdm 1-1:1.0: skipping garbage [ 418.475356][ T3688] cdc_wdm 1-1:1.0: skipping garbage [ 418.500422][ T3646] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 418.513252][ T3688] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 418.533648][ T3688] cdc_wdm 1-1:1.0: Unknown control protocol [ 418.635918][ T14] usb 5-1: USB disconnect, device number 82 [ 418.808858][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 418.870481][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 418.877275][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 418.922519][ T3691] usb 1-1: USB disconnect, device number 105 [ 418.923318][ T3688] usb 1-1: Failed to suspend device, error -71 [ 423.260334][ T3688] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 423.510388][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 423.790750][ T3688] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 423.817720][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.827288][ T3688] usb 4-1: Product: syz [ 423.832182][ T3688] usb 4-1: Manufacturer: syz [ 423.837481][ T3688] usb 4-1: SerialNumber: syz [ 423.875275][ T3688] usb 4-1: config 0 descriptor?? [ 423.953919][ T3688] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 424.323340][ T3646] Bluetooth: hci3: unexpected event for opcode 0x201c [ 424.400458][ T3688] gspca_sonixj: reg_r err -32 [ 424.407351][ T3688] sonixj: probe of 4-1:0.0 failed with error -32 [ 424.850481][ T3691] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 425.020538][ T3688] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 425.200481][ T946] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 425.260408][ T3688] usb 1-1: Using ep0 maxpacket: 32 [ 425.281259][ T3691] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 425.390389][ T946] usb 3-1: device descriptor read/64, error -71 [ 425.443301][ T3691] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 425.464305][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.483382][ T3691] usb 5-1: Product: syz [ 425.487795][ T3691] usb 5-1: Manufacturer: syz [ 425.498108][ T3691] usb 5-1: SerialNumber: syz [ 425.511173][ T3691] usb 5-1: config 0 descriptor?? [ 425.540591][ T3688] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 425.549913][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.564039][ T3688] usb 1-1: Product: syz [ 425.568818][ T3688] usb 1-1: Manufacturer: syz [ 425.581454][ T3688] usb 1-1: SerialNumber: syz [ 425.601138][ T3688] usb 1-1: config 0 descriptor?? [ 425.642483][ T3688] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 425.660371][ T946] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 425.850518][ T946] usb 3-1: device descriptor read/64, error -71 [ 425.971721][ T946] usb usb3-port1: attempt power cycle [ 425.986018][ T3720] usb 4-1: USB disconnect, device number 95 [ 426.201308][ T3691] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 426.320495][ T3688] gspca_ov534_9: reg_w failed -71 [ 426.380456][ T946] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 426.416656][ T3691] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 426.437636][ T3691] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 426.449156][ T3691] asix: probe of 5-1:0.0 failed with error -71 [ 426.472248][ T3691] usb 5-1: USB disconnect, device number 83 [ 426.480556][ T946] usb 3-1: device descriptor read/8, error -71 [ 426.670361][ T14] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 426.770338][ T946] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 426.840572][ T3688] gspca_ov534_9: Unknown sensor 0000 [ 426.840634][ T3688] ov534_9: probe of 1-1:0.0 failed with error -22 [ 426.861955][ T946] usb 3-1: device descriptor read/8, error -71 [ 426.881976][ T3688] usb 1-1: USB disconnect, device number 106 [ 426.890405][ T14] usb 4-1: device descriptor read/64, error -71 [ 426.970636][ T3746] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 426.980769][ T946] usb usb3-port1: unable to enumerate USB device [ 427.095584][ T9310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 427.190517][ T14] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 427.300486][ T946] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 427.370611][ T3746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.379869][ T3746] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 427.390359][ T3746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.400461][ T14] usb 4-1: device descriptor read/64, error -71 [ 427.407720][ T3746] usb 2-1: config 0 descriptor?? [ 427.420439][ T3688] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 427.540480][ T946] usb 5-1: Using ep0 maxpacket: 32 [ 427.540703][ T14] usb usb4-port1: attempt power cycle [ 427.660664][ T3688] usb 1-1: Using ep0 maxpacket: 8 [ 427.820537][ T946] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 427.830943][ T946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.839525][ T946] usb 5-1: Product: syz [ 427.843831][ T946] usb 5-1: Manufacturer: syz [ 427.848549][ T946] usb 5-1: SerialNumber: syz [ 427.857638][ T946] usb 5-1: config 0 descriptor?? [ 427.905409][ T946] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 427.950608][ T3688] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 427.965849][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.974973][ T3688] usb 1-1: Product: syz [ 427.979414][ T3688] usb 1-1: Manufacturer: syz [ 427.990119][ T3688] usb 1-1: SerialNumber: syz [ 428.000551][ T14] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 428.006740][ T3688] usb 1-1: config 0 descriptor?? [ 428.056594][ T3688] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 428.120488][ T14] usb 4-1: device descriptor read/8, error -71 [ 428.390346][ T14] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 428.480540][ T3688] gspca_sonixj: reg_r err -32 [ 428.485904][ T3688] sonixj: probe of 1-1:0.0 failed with error -32 [ 428.500773][ T14] usb 4-1: device descriptor read/8, error -71 [ 428.621015][ T14] usb usb4-port1: unable to enumerate USB device [ 429.431880][ T946] gspca_ov534_9: reg_r err -71 [ 429.736629][ T153] usb 2-1: USB disconnect, device number 96 [ 429.780339][ T946] gspca_ov534_9: Unknown sensor 0000 [ 429.780425][ T946] ov534_9: probe of 5-1:0.0 failed with error -22 [ 429.826939][ T946] usb 5-1: USB disconnect, device number 84 [ 429.837792][ T9339] ipt_ECN: cannot use operation on non-tcp rule [ 430.236633][ T3687] usb 1-1: USB disconnect, device number 107 [ 430.444997][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1885'. [ 431.140308][ T153] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 431.364125][ T153] usb 5-1: device descriptor read/64, error -71 [ 431.640338][ T153] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 431.653991][ T946] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 431.870427][ T153] usb 5-1: device descriptor read/64, error -71 [ 431.900406][ T946] usb 1-1: Using ep0 maxpacket: 16 [ 432.000623][ T153] usb usb5-port1: attempt power cycle [ 432.020546][ T946] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 432.190595][ T946] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.206186][ T946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.215271][ T946] usb 1-1: Product: syz [ 432.220147][ T946] usb 1-1: Manufacturer: syz [ 432.226077][ T946] usb 1-1: SerialNumber: syz [ 432.251713][ T946] usb 1-1: config 0 descriptor?? [ 432.324183][ T9385] sp0: Synchronizing with TNC [ 432.410317][ T153] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 432.510575][ T153] usb 5-1: device descriptor read/8, error -71 [ 432.780296][ T153] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 432.911672][ T153] usb 5-1: device descriptor read/8, error -71 [ 432.950538][ T946] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 433.051560][ T153] usb usb5-port1: unable to enumerate USB device [ 433.119350][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 433.208286][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 433.370519][ T946] usb 3-1: unable to get BOS descriptor or descriptor too short [ 433.460383][ T946] usb 3-1: config 8 has an invalid interface number: 165 but max is 0 [ 433.470645][ T946] usb 3-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 433.481403][ T946] usb 3-1: config 8 has no interface number 0 [ 433.490386][ T946] usb 3-1: config 8 interface 165 altsetting 1 has an invalid endpoint with address 0xCC, skipping [ 433.501283][ T946] usb 3-1: config 8 interface 165 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.515074][ T946] usb 3-1: config 8 interface 165 has no altsetting 0 [ 433.680532][ T946] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 433.695691][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.711995][ T946] usb 3-1: Product: ѕ [ 433.716526][ T946] usb 3-1: Manufacturer: Б [ 433.724762][ T946] usb 3-1: SerialNumber: syz [ 433.760677][ T9388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 434.062202][ T946] ir_toy 3-1:8.165: required endpoints not found [ 434.109741][ T946] usb 3-1: USB disconnect, device number 120 [ 434.428499][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1913'. [ 434.455956][ T153] usb 1-1: USB disconnect, device number 108 [ 435.046148][ T153] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 435.178551][ T14] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 435.430450][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 435.451001][ T153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.470286][ T153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.570614][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.581609][ T153] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.597177][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.609075][ T14] usb 1-1: config 0 has no interfaces? [ 435.623439][ T153] usb 3-1: SerialNumber: syz [ 435.660477][ T7] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 435.810476][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 435.822032][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.839342][ T14] usb 1-1: Product: syz [ 435.844212][ T14] usb 1-1: Manufacturer: syz [ 435.849338][ T14] usb 1-1: SerialNumber: syz [ 435.864350][ T14] usb 1-1: config 0 descriptor?? [ 435.914000][ T153] usb 3-1: 0:2 : does not exist [ 435.920020][ T153] usb 3-1: unit 255 not found! [ 435.927353][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 435.940502][ T153] usb 3-1: unit 19 not found! [ 435.954592][ T153] usb 3-1: USB disconnect, device number 121 [ 435.995387][ T3830] udevd[3830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.140525][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.194503][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1927'. [ 436.208366][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1927'. [ 436.227268][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1927'. [ 436.241863][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.252917][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 436.269714][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.450445][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.470445][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.486344][ T7] usb 2-1: Product: syz [ 436.493848][ T7] usb 2-1: Manufacturer: syz [ 436.499216][ T7] usb 2-1: SerialNumber: syz [ 436.533856][ T3687] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 436.790500][ T3687] usb 4-1: Using ep0 maxpacket: 8 [ 436.797760][ T7] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 436.806853][ T7] cdc_ncm 2-1:1.0: bind() failure [ 436.829445][ T7] usb 2-1: USB disconnect, device number 97 [ 436.954453][ T3687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.980837][ T946] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 437.040837][ T3687] usb 4-1: config 131 has an invalid interface number: 65 but max is 0 [ 437.054495][ T3687] usb 4-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 437.067176][ T3687] usb 4-1: config 131 has no interface number 0 [ 437.078490][ T3687] usb 4-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 437.090826][ T3687] usb 4-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 437.106671][ T3687] usb 4-1: config 131 interface 65 has no altsetting 0 [ 437.250767][ T946] usb 5-1: Using ep0 maxpacket: 8 [ 437.531121][ T946] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 437.555810][ T946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.590696][ T946] usb 5-1: Product: syz [ 437.595580][ T946] usb 5-1: Manufacturer: syz [ 437.609456][ T946] usb 5-1: SerialNumber: syz [ 437.626104][ T946] usb 5-1: config 0 descriptor?? [ 437.870807][ T3687] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 437.881410][ T3687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.900475][ T946] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 438.232005][ T3687] ti_usb_3410_5052 4-1:131.65: required endpoints missing [ 438.252679][ T3687] usb 4-1: USB disconnect, device number 100 [ 438.759331][ T3688] usb 1-1: USB disconnect, device number 109 [ 438.893525][ T3689] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 439.270512][ T3689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.288105][ T3689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.318568][ T9533] sp0: Synchronizing with TNC [ 439.370765][ T3689] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.383953][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.392864][ T3689] usb 3-1: SerialNumber: syz [ 439.683688][ T3689] usb 3-1: 0:2 : does not exist [ 439.704828][ T3689] usb 3-1: unit 255 not found! [ 439.729494][ T3689] usb 3-1: unit 19 not found! [ 439.769733][ T3689] usb 3-1: USB disconnect, device number 122 [ 439.829073][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.870647][ T946] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 439.891465][ T946] usb 5-1: USB disconnect, device number 89 [ 439.932638][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.939247][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.357226][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.398873][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.451272][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.733222][ T946] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 441.000305][ T946] usb 2-1: Using ep0 maxpacket: 8 [ 441.070323][ T3688] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 441.160549][ T946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.250741][ T946] usb 2-1: config 131 has an invalid interface number: 65 but max is 0 [ 441.259085][ T946] usb 2-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 441.276856][ T946] usb 2-1: config 131 has no interface number 0 [ 441.284362][ T946] usb 2-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 441.300576][ T946] usb 2-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 441.319502][ T946] usb 2-1: config 131 interface 65 has no altsetting 0 [ 441.359168][ T9579] sp0: Synchronizing with TNC [ 441.590778][ T3688] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.607867][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.640957][ T3688] usb 1-1: Product: syz [ 441.645187][ T3688] usb 1-1: Manufacturer: syz [ 441.659348][ T3688] usb 1-1: SerialNumber: syz [ 441.681996][ T3688] usb 1-1: config 0 descriptor?? [ 441.880385][ T3691] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 441.944460][ T3688] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 441.958210][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 441.971753][ T9599] dccp_close: ABORT with 2 bytes unread [ 442.080410][ T946] usb 2-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 442.091195][ T946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.130400][ T3691] usb 5-1: Using ep0 maxpacket: 32 [ 442.421609][ T946] ti_usb_3410_5052 2-1:131.65: required endpoints missing [ 442.441565][ T946] usb 2-1: USB disconnect, device number 98 [ 442.473900][ T3691] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 442.485810][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.494511][ T3691] usb 5-1: Product: syz [ 442.498698][ T3691] usb 5-1: Manufacturer: syz [ 442.503748][ T3691] usb 5-1: SerialNumber: syz [ 442.509955][ T3691] usb 5-1: config 0 descriptor?? [ 442.552467][ T3691] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 442.690327][ T7] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 442.950433][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 443.080648][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 443.280573][ T7] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 443.303648][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.315684][ T7] usb 4-1: Product: syz [ 443.319916][ T7] usb 4-1: Manufacturer: syz [ 443.327007][ T7] usb 4-1: SerialNumber: syz [ 443.343640][ T7] usb 4-1: config 0 descriptor?? [ 443.393582][ T7] usb 4-1: no audio or video endpoints found [ 443.594123][ T7] usb 4-1: USB disconnect, device number 101 [ 443.662748][ T9628] kvm_set_msr_common: 248 callbacks suppressed [ 443.662768][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x220000000000 [ 443.693496][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x83ff00000000 [ 443.704519][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x840000000000 [ 443.723614][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xcd0000000000 [ 443.738016][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xefff00000000 [ 443.749640][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4ff00000000 [ 443.760888][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0xefe00000000 [ 443.787232][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x42ff00000000 [ 443.797353][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x430000000000 [ 443.812409][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x5bfe00000000 [ 443.824927][ T9628] kvm [9627]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x70fe00000000 [ 444.066043][ T3691] gspca_ov534_9: reg_r err -71 [ 444.092461][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 444.107105][ T9636] dccp_close: ABORT with 2 bytes unread [ 444.430481][ T3691] gspca_ov534_9: Unknown sensor 0000 [ 444.430558][ T3691] ov534_9: probe of 5-1:0.0 failed with error -22 [ 444.453916][ T3691] usb 5-1: USB disconnect, device number 90 [ 444.637269][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1986'. [ 444.659782][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1986'. [ 444.677199][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1986'. [ 444.870649][ T3688] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 444.902562][ T3688] usb 1-1: USB disconnect, device number 110 [ 444.971646][ T946] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 445.181195][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 445.220326][ T946] usb 2-1: Using ep0 maxpacket: 8 [ 445.386179][ T946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.470488][ T946] usb 2-1: config 131 has an invalid interface number: 65 but max is 0 [ 445.485699][ T946] usb 2-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 445.512951][ T946] usb 2-1: config 131 has no interface number 0 [ 445.524879][ T946] usb 2-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 445.536911][ T946] usb 2-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 445.557168][ T946] usb 2-1: config 131 interface 65 has no altsetting 0 [ 446.270527][ T3720] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 446.350533][ T946] usb 2-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 446.360014][ T946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.520387][ T3720] usb 1-1: Using ep0 maxpacket: 32 [ 446.715987][ T946] ti_usb_3410_5052 2-1:131.65: required endpoints missing [ 446.735163][ T946] usb 2-1: USB disconnect, device number 99 [ 446.800406][ T3720] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 446.811921][ T3720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.824705][ T3720] usb 1-1: Product: syz [ 446.831771][ T3720] usb 1-1: Manufacturer: syz [ 446.838210][ T3720] usb 1-1: SerialNumber: syz [ 446.843245][ T3689] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 446.861864][ T3720] usb 1-1: config 0 descriptor?? [ 446.902566][ T3720] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 447.090386][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 447.210469][ T3689] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.230270][ T3689] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.240549][ T3689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.250818][ T3689] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 447.277109][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.301982][ T3689] usb 3-1: config 0 descriptor?? [ 447.850613][ T3689] usbhid 3-1:0.0: can't add hid device: -71 [ 447.857524][ T3689] usbhid: probe of 3-1:0.0 failed with error -71 [ 447.878998][ T3689] usb 3-1: USB disconnect, device number 123 [ 448.040391][ T946] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 448.290588][ T946] usb 5-1: Using ep0 maxpacket: 8 [ 448.410645][ T946] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 448.436897][ T946] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.447378][ T3720] gspca_ov534_9: reg_r err -71 [ 448.465843][ T946] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.486207][ T946] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.501032][ T946] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.521083][ T946] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.534266][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.800523][ T3720] gspca_ov534_9: Unknown sensor 0000 [ 448.800602][ T3720] ov534_9: probe of 1-1:0.0 failed with error -22 [ 448.836702][ T3720] usb 1-1: USB disconnect, device number 111 [ 448.843232][ T946] usb 5-1: usb_control_msg returned -32 [ 448.849231][ T946] usbtmc 5-1:16.0: can't read capabilities [ 448.920382][ T3691] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 449.160902][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2015'. [ 449.185533][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2015'. [ 449.203519][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2015'. [ 449.303356][ T3691] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 449.322760][ T3691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.365008][ T3691] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 449.520349][ T3720] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 449.600754][ T3691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.625425][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.643837][ T3691] usb 2-1: Product: syz [ 449.653084][ T9752] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 449.659741][ T3691] usb 2-1: Manufacturer: syz [ 449.667060][ T3691] usb 2-1: SerialNumber: syz [ 449.770608][ T3720] usb 4-1: Using ep0 maxpacket: 8 [ 449.930545][ T3720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.952310][ T14] usb 2-1: USB disconnect, device number 100 [ 450.040749][ T3720] usb 4-1: config 131 has an invalid interface number: 65 but max is 0 [ 450.061015][ T3720] usb 4-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 450.114765][ T3720] usb 4-1: config 131 has no interface number 0 [ 450.138012][ T3720] usb 4-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 450.171078][ T3720] usb 4-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 450.205256][ T3720] usb 4-1: config 131 interface 65 has no altsetting 0 [ 450.382469][ T9759] loop2: detected capacity change from 0 to 1024 [ 450.412388][ T9761] loop0: detected capacity change from 0 to 64 [ 450.983849][ T3691] usb 5-1: USB disconnect, device number 91 [ 450.990629][ T3720] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 450.999986][ T3720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.383938][ T3720] ti_usb_3410_5052 4-1:131.65: required endpoints missing [ 451.423678][ T3720] usb 4-1: USB disconnect, device number 102 [ 451.603720][ T9783] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2025'. [ 451.713092][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 451.754907][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 451.920438][ T3689] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 452.236522][ T9800] loop3: detected capacity change from 0 to 2048 [ 452.237667][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'. [ 452.268386][ T9800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.300562][ T3689] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 452.311588][ T9800] ================================================================== [ 452.319691][ T9800] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x5e9/0x7a0 [ 452.325949][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.327259][ T9800] Write of size 4 at addr ffff888075fcfbf0 by task syz.3.2033/9800 [ 452.327280][ T9800] [ 452.327299][ T9800] CPU: 0 PID: 9800 Comm: syz.3.2033 Not tainted 6.1.111-syzkaller #0 [ 452.353584][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 452.363938][ T9800] Call Trace: [ 452.367245][ T9800] [ 452.370290][ T9800] dump_stack_lvl+0x1e3/0x2cb [ 452.375095][ T9800] ? nf_tcp_handle_invalid+0x642/0x642 [ 452.380596][ T9800] ? panic+0x764/0x764 [ 452.384708][ T9800] ? _printk+0xd1/0x111 [ 452.388874][ T9800] ? __virt_addr_valid+0x17f/0x530 [ 452.394006][ T9800] ? __virt_addr_valid+0x17f/0x530 [ 452.399129][ T9800] print_report+0x15f/0x4f0 [ 452.403729][ T9800] ? __virt_addr_valid+0x17f/0x530 [ 452.409668][ T9800] ? __virt_addr_valid+0x17f/0x530 [ 452.414844][ T9800] ? __virt_addr_valid+0x45b/0x530 [ 452.420170][ T9800] ? __phys_addr+0xb6/0x170 [ 452.424725][ T9800] ? udf_write_aext+0x5e9/0x7a0 [ 452.429696][ T9800] kasan_report+0x136/0x160 [ 452.434230][ T9800] ? udf_write_aext+0x5e9/0x7a0 [ 452.439118][ T9800] udf_write_aext+0x5e9/0x7a0 [ 452.443824][ T9800] udf_add_entry+0x17b7/0x3350 [ 452.448889][ T9800] ? rcu_is_watching+0x11/0xb0 [ 452.453672][ T9800] ? udf_add_nondir+0x5d0/0x5d0 [ 452.458537][ T9800] ? udf_new_inode+0xaf9/0xf10 [ 452.463328][ T9800] ? lockdep_softirqs_off+0x420/0x420 [ 452.468713][ T9800] udf_mkdir+0x1a8/0xaa0 [ 452.472972][ T9800] ? udf_symlink+0x1690/0x1690 [ 452.477746][ T9800] ? from_kgid+0x1a3/0x730 [ 452.482169][ T9800] ? make_kgid+0x6f0/0x6f0 [ 452.486605][ T9800] ? inode_permission+0xf7/0x450 [ 452.491547][ T9800] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 452.496572][ T9800] ? security_inode_mkdir+0xb4/0x100 [ 452.501861][ T9800] vfs_mkdir+0x3b6/0x590 [ 452.506121][ T9800] do_mkdirat+0x225/0x360 [ 452.510476][ T9800] ? vfs_mkdir+0x590/0x590 [ 452.514897][ T9800] ? getname_flags+0x1f9/0x4f0 [ 452.519666][ T9800] __x64_sys_mkdirat+0x85/0x90 [ 452.524438][ T9800] do_syscall_64+0x3b/0xb0 [ 452.528872][ T9800] ? clear_bhb_loop+0x45/0xa0 [ 452.533647][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.539559][ T9800] RIP: 0033:0x7fb3d597c797 [ 452.543981][ T9800] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.563688][ T9800] RSP: 002b:00007fb3d6697e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 452.572123][ T9800] RAX: ffffffffffffffda RBX: 00007fb3d6697ef0 RCX: 00007fb3d597c797 [ 452.580102][ T9800] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 452.588075][ T9800] RBP: 0000000000000000 R08: 0000000020000000 R09: 0000000000000000 [ 452.596047][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 452.604036][ T9800] R13: 00007fb3d6697eb0 R14: 0000000000000000 R15: 0000000000000000 [ 452.612104][ T9800] [ 452.615120][ T9800] [ 452.617438][ T9800] Allocated by task 3091: [ 452.621758][ T9800] kasan_set_track+0x4b/0x70 [ 452.626360][ T9800] __kasan_kmalloc+0x97/0xb0 [ 452.630951][ T9800] kernfs_fop_open+0x3e3/0xcc0 [ 452.635734][ T9800] do_dentry_open+0x7f9/0x10f0 [ 452.640506][ T9800] path_openat+0x2644/0x2e60 [ 452.645098][ T9800] do_filp_open+0x230/0x480 [ 452.649606][ T9800] do_sys_openat2+0x13b/0x4f0 [ 452.654292][ T9800] __x64_sys_openat+0x243/0x290 [ 452.659152][ T9800] do_syscall_64+0x3b/0xb0 [ 452.663578][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.669478][ T9800] [ 452.671812][ T9800] The buggy address belongs to the object at ffff888075fcf800 [ 452.671812][ T9800] which belongs to the cache kmalloc-512 of size 512 [ 452.685955][ T9800] The buggy address is located 496 bytes to the right of [ 452.685955][ T9800] 512-byte region [ffff888075fcf800, ffff888075fcfa00) [ 452.699752][ T9800] [ 452.702077][ T9800] The buggy address belongs to the physical page: [ 452.708489][ T9800] page:ffffea0001d7f300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75fcc [ 452.718644][ T9800] head:ffffea0001d7f300 order:2 compound_mapcount:0 compound_pincount:0 [ 452.727014][ T9800] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 452.735025][ T9800] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41c80 [ 452.743628][ T9800] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 452.752214][ T9800] page dumped because: kasan: bad access detected [ 452.758740][ T9800] page_owner tracks the page as allocated [ 452.764476][ T9800] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3719, tgid 3719 (udevd), ts 80906796925, free_ts 75396249778 [ 452.786639][ T9800] post_alloc_hook+0x18d/0x1b0 [ 452.791428][ T9800] get_page_from_freelist+0x322e/0x33b0 [ 452.797182][ T9800] __alloc_pages+0x28d/0x770 [ 452.801902][ T9800] alloc_slab_page+0x6a/0x150 [ 452.806692][ T9800] new_slab+0x84/0x2d0 [ 452.810799][ T9800] ___slab_alloc+0xc20/0x1270 [ 452.815521][ T9800] __kmem_cache_alloc_node+0x19f/0x260 [ 452.821022][ T9800] kmalloc_trace+0x26/0xe0 [ 452.825445][ T9800] kernfs_fop_open+0x3e3/0xcc0 [ 452.830233][ T9800] do_dentry_open+0x7f9/0x10f0 [ 452.835053][ T9800] path_openat+0x2644/0x2e60 [ 452.839683][ T9800] do_filp_open+0x230/0x480 [ 452.844222][ T9800] do_sys_openat2+0x13b/0x4f0 [ 452.848924][ T9800] __x64_sys_openat+0x243/0x290 [ 452.853796][ T9800] do_syscall_64+0x3b/0xb0 [ 452.858336][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.864255][ T9800] page last free stack trace: [ 452.868944][ T9800] free_unref_page_prepare+0xf63/0x1120 [ 452.874523][ T9800] free_unref_page+0x33/0x3e0 [ 452.879219][ T9800] qlist_free_all+0x76/0xe0 [ 452.883766][ T9800] kasan_quarantine_reduce+0x156/0x170 [ 452.889327][ T9800] __kasan_slab_alloc+0x1f/0x70 [ 452.894226][ T9800] slab_post_alloc_hook+0x52/0x3a0 [ 452.899357][ T9800] kmem_cache_alloc_node+0x136/0x310 [ 452.904653][ T9800] __alloc_skb+0xde/0x670 [ 452.909022][ T9800] alloc_skb_with_frags+0xa4/0x740 [ 452.914151][ T9800] sock_alloc_send_pskb+0x915/0xa50 [ 452.919364][ T9800] unix_dgram_sendmsg+0x5b1/0x2050 [ 452.924620][ T9800] __sys_sendto+0x480/0x600 [ 452.929234][ T9800] __x64_sys_sendto+0xda/0xf0 [ 452.933941][ T9800] do_syscall_64+0x3b/0xb0 [ 452.938385][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.944481][ T9800] [ 452.946823][ T9800] Memory state around the buggy address: [ 452.952484][ T9800] ffff888075fcfa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 452.960641][ T9800] ffff888075fcfb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 452.968710][ T9800] >ffff888075fcfb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 452.977015][ T9800] ^ [ 452.984828][ T9800] ffff888075fcfc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.992915][ T9800] ffff888075fcfc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.001188][ T9800] ================================================================== [ 453.020266][ T3691] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 453.024404][ T9800] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.024422][ T9800] CPU: 1 PID: 9800 Comm: syz.3.2033 Not tainted 6.1.111-syzkaller #0 [ 453.024449][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 453.024462][ T9800] Call Trace: [ 453.024471][ T9800] [ 453.024480][ T9800] dump_stack_lvl+0x1e3/0x2cb [ 453.024523][ T9800] ? nf_tcp_handle_invalid+0x642/0x642 [ 453.024560][ T9800] ? panic+0x764/0x764 [ 453.024585][ T9800] ? preempt_schedule_common+0xa6/0xd0 [ 453.024625][ T9800] ? vscnprintf+0x59/0x80 [ 453.024654][ T9800] panic+0x318/0x764 [ 453.024680][ T9800] ? check_panic_on_warn+0x1d/0xa0 [ 453.024707][ T9800] ? memcpy_page_flushcache+0xfc/0xfc [ 453.024735][ T9800] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 453.024766][ T9800] ? _raw_spin_unlock+0x40/0x40 [ 453.024792][ T9800] ? print_report+0x4a3/0x4f0 [ 453.024819][ T9800] check_panic_on_warn+0x7e/0xa0 [ 453.024845][ T9800] ? udf_write_aext+0x5e9/0x7a0 [ 453.024878][ T9800] end_report+0x66/0x110 [ 453.024898][ T9800] kasan_report+0x143/0x160 [ 453.024922][ T9800] ? udf_write_aext+0x5e9/0x7a0 [ 453.024957][ T9800] udf_write_aext+0x5e9/0x7a0 [ 453.025001][ T9800] udf_add_entry+0x17b7/0x3350 [ 453.025042][ T9800] ? rcu_is_watching+0x11/0xb0 [ 453.025069][ T9800] ? udf_add_nondir+0x5d0/0x5d0 [ 453.025102][ T9800] ? udf_new_inode+0xaf9/0xf10 [ 453.025140][ T9800] ? lockdep_softirqs_off+0x420/0x420 [ 453.025177][ T9800] udf_mkdir+0x1a8/0xaa0 [ 453.025218][ T9800] ? udf_symlink+0x1690/0x1690 [ 453.025249][ T9800] ? from_kgid+0x1a3/0x730 [ 453.025279][ T9800] ? make_kgid+0x6f0/0x6f0 [ 453.025312][ T9800] ? inode_permission+0xf7/0x450 [ 453.025338][ T9800] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 453.025363][ T9800] ? security_inode_mkdir+0xb4/0x100 [ 453.025388][ T9800] vfs_mkdir+0x3b6/0x590 [ 453.025422][ T9800] do_mkdirat+0x225/0x360 [ 453.025453][ T9800] ? vfs_mkdir+0x590/0x590 [ 453.025482][ T9800] ? getname_flags+0x1f9/0x4f0 [ 453.025510][ T9800] __x64_sys_mkdirat+0x85/0x90 [ 453.025540][ T9800] do_syscall_64+0x3b/0xb0 [ 453.025572][ T9800] ? clear_bhb_loop+0x45/0xa0 [ 453.025606][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.025639][ T9800] RIP: 0033:0x7fb3d597c797 [ 453.025659][ T9800] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.025680][ T9800] RSP: 002b:00007fb3d6697e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 453.025707][ T9800] RAX: ffffffffffffffda RBX: 00007fb3d6697ef0 RCX: 00007fb3d597c797 [ 453.025725][ T9800] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 453.025742][ T9800] RBP: 0000000000000000 R08: 0000000020000000 R09: 0000000000000000 [ 453.025757][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 453.025773][ T9800] R13: 00007fb3d6697eb0 R14: 0000000000000000 R15: 0000000000000000 [ 453.025797][ T9800] [ 453.028277][ T9800] Kernel Offset: disabled [ 453.320216][ T9800] Rebooting in 86400 seconds..