last executing test programs: 8.564333589s ago: executing program 3 (id=1222): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002b8fffd1086124620888a0102030109022400010c0910000904470202ff04015e09050c"], 0x0) 7.320174737s ago: executing program 1 (id=1229): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x57}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4c000) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040), 0x10) readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34cb1335", @ANYRES16=r0, @ANYBLOB="040027bd7000fedbdf251700000008000300", @ANYRES64=r4, @ANYBLOB="0c00990004000000330000000a001a000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0x84) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000200)) 7.006125896s ago: executing program 3 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x17, 0x6, "e54f7e37e414780837279da5870ea1ba337c6d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 6.824784801s ago: executing program 3 (id=1231): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f00000000c0)=0x2, 0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="4deb069565107d3e6b085c2df945e1", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) 6.591900434s ago: executing program 0 (id=1232): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/123) r1 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 6.409687072s ago: executing program 0 (id=1233): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x108, 0x1, 0xffc, 0x84, 0x7, 0xfe, 0x93, "e758cae9ffed00000000b24000", "39e80000000000000000e303000000000800"}) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 6.355218659s ago: executing program 0 (id=1234): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x30, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xae22a) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffffda}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3ff, r2}, 0x10) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) write$vga_arbiter(r3, &(0x7f0000000140)=@unlock_all, 0xb) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0x5, 0x40, 0x7fff, 0x0, 0x1, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)) (async) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000280)={0x8}) (async) preadv(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/121, 0x79}], 0x8, 0x401, 0x80000000) (async, rerun: 64) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff}, 0x4000) (async, rerun: 64) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x19d900, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000840)={r2, 0x8}, 0x8) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000880)={[0x7, 0x6, 0x3, 0x8, 0x9, 0x7, 0x2, 0x13, 0x7, 0x6, 0x7, 0x0, 0x5, 0x3, 0x8, 0xb7], 0x0, 0x80}) (async) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000940)={0x1, 0xce, "d82de1ae6d70c565441a104b4a1a5314b54c9cc51e82906f4342c9007900b952d7dee5064aea2a52b668a8916cec99a23bab2fb311a94472d6ef3ed8c58e6e215bda37c548ee8cea861f4001fee48b95aa822fce37dd22f37bc208f08e6523517afe2c50a7a913259da73e42e9a10ac18826be3538ce879db5d067d478cdd3d61281898975e95029265f8068a4e8ed0dbabbc192da4309fec61e4e77d42bb7b71af69f146443be75b641eb2b6c25a5b89876489b217e6035ae72d62eb2c8fd5223bd5affc1a3bb93f6ab52d77ee5"}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000ac0)={0x5, 0x40, '\x00', 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000b00)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x88) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000bc0)) (async) ioctl$I2C_SLAVE(r3, 0x703, 0x178) sendfile(r1, r5, 0x0, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000002f40)={&(0x7f0000000c00)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x444}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="985987c02a432434eb5d5b8ecacbbc18dc28177ba6a4de36f0c1ace0fdbc0a129a449f1989d026d2b1e12a530e6701cf92f5403b71ab55f9", 0x38}, {&(0x7f0000001c80)="b1b951387c61b4692dfae234f18d43adabf975", 0x13}, {&(0x7f0000001cc0)="afc3f7d93a3677a42d3fb4a0480cf3c5378f34d9a35eded783e7009ca94e8ffaebf6dc4c2f27c00a5551b08fedf79b99bf62c44c9fba194afb596a27a1fb5023a0c24f73bb8a1f16194fd3ca03950ba3c7394c9b0ed560f8374036", 0x5b}, {&(0x7f0000001d40)="a8e6c5e0d11f2485cebc7b38eaadef0a6092175f0f8c426b6dc133e705ba10f9532b3e4ee54aaddfb1af2aa9166383bf6e87ff0a3ee2c0717764cfb945d07acf260200db37e44015a2a67be8b7118310c2e92fb6fb6826924651b255372db2e4eba6e7cabaa3439ae6d832e4b9eff3f55beb159094583b40b7475e1d7ecb2ee26046ef9ca03b7a83a9618e66c325aefffb041b5c8ea392ee31bb2cfa4b5308530ae191aa5e7e5f45ae0b5a3fe67027c248", 0xb1}, {&(0x7f0000001e00)="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", 0x1000}], 0x6, &(0x7f0000002e80)=[@sndinfo={0x20, 0x84, 0x2, {0xa8d8, 0x8003, 0x40, 0x2a30, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2, 0x790468f8, 0x3, 0x81, 0x2, 0x4, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @init={0x18, 0x84, 0x0, {0x7, 0x5, 0x3, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}], 0xb8, 0x4081}, 0x10) r9 = getpgrp(r4) timer_create(0x7, &(0x7f0000002f80)={0x0, 0x39, 0x0, @tid=r9}, &(0x7f0000002fc0)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000003000)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x5d31, 0x7}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000003080)={r2, 0x1}, &(0x7f00000030c0)=0x8) (async, rerun: 64) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000003100)={@dev, @dev, @broadcast}, &(0x7f0000003140)=0xc) (rerun: 64) 6.216098239s ago: executing program 0 (id=1235): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="400a07000000eb33bc7eb587013241794ed35c85699520e95d9aaff262d301973265b361cb1c08680dec05e02ce8c24c07e90eec84bbb5ed3587dc908bca9058cb7474f79d895f4f6dd73af4676428a4a0529315da22a1d6a8da4b7f3f6c4ec7fa7e841b281293c2aade8e2cc3448f5840b05ea016efbe1f8d7222653661605ed66d9f5fba1195370a6bc493e45b50fa7fe5d6515b1d6617c64dc8290eb02597a68d5f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000002180)={0x11ec, 0x44, 0x2, 0x70bd26, 0x25dfdbff, {}, [@generic="e27d1b01ca12c471960a0b1738b9a39eb51272e4bd2466a56cd2bab6e3af7690522a046490eee4ea57cf5eef46861faaf86c5020e5e53fb974e251c5fd3dd36be7bff55df991ad29fb332d2fdd98ca5b530cd1fadb27c810364641026d813ffee6029197bc8510eb9282f1977c13b5fa0b11701e8aa6c7a79b62a3a1e946c1259fa3db3580de948e15e7cdac035815e0add3290e1f1e907f2fce85ed2d6dcd3fc37db272e7c48021a2908e7201d809915890b07f247fbbbe6049a486f533210f431c8f2f6972427c2149c05610dfd8438fe5ce43cfdc8e67b11da6b10107281bde31fb3ebb8118354681800cb2e9cdf89228d293ba80f807cfe426e61f1bea3d3665d7e2cf739872eba936cb2d4f7f2faa90fc4caae94a084d9957a63c308e96071b33f9236fc7f6eb22b941ed57cd03a84145f430109870c1f8a1a8a5655f5e90f60384e9dfba689f408e576840e9215f5ca7f57848256848a37df130c79c82795b436765117c96f217becbd57c29b581e4dc47dc9e6d4e9bb6baec8c77f90b887ec6f6ce4af5d29c7596564d7592271be3a7ec96438b903cde63bde20e95b3f8ed9aab12b0126d497a4c71ff83feadd58daddbe18743abe2870d02935b62ba964e2aeb17a7658b4fd03e3937fb708554359bda5d5f9d947823c8512cac05bea7ee1019f0947c1e62902f1692f5062487aedc2e6425d0cce9a7e193f2287627d85e7f9ce64ce025b90498c5f67491f92bff46cb10884c5a6b772842629df3d6bd6f6b87aa15aadc9699c26f5e9cbf949420e65ba3fbbf484814eda3e5d0c94f545d08320d905f9f6da50c91411e3bfa11fa8f69de649850e9a0517833eafecc9e7a5e71083cbabb7354bbb5abd3665294ec40018ccbb6e968accda17a4b0d7be085496c35c088c41efaa50172ab22f278d99eabdc0d046ab5ed3b939320e079e71141a17e446d87c3690d4056ac6ae8bfcae875d2dac048b38a7dbaf23f81e5b066246a60f273d62ed41e8a1648566ecb066db592df4f00eef272277ff9211028306a1bb8f1edb37b46cfcca9428db292d1fc2f378014abece87d5c845f35caa13a21c3f3e546735d781ae36bfbbacfb789dda31ba10b406f5e8a8ef91884d416ba2fb03e53056da42cce38213ae083bb8cb23b64387d5bfa3d4ac37686b79ec5905fa2dcbb3006cac921a08db3c85b7827f1c3b206972e84938b2bac2c5b7160e8dc5fdc76d683fa206c7ec8b31aa95c9ac7095b52440855cafaf7e5396a6e6dc8e5637153c2a20b22edbbf8484fb5bc2579797dce314abcbfa24b67d10ab2e87b5d888b9675a4aa4345a4d47d4240d58e07b9eaa3acb52a415b3e07f22fe44403324d874f71b260725653361cf503ca8cae0009cd400f8de9c1aa010f54deec92fd3bff87b1eb768549c09c12203cf4d01d005f43822a91df03b1da3ff585a02d7c0fdf4aed5d26395a7ddf820d0a574f15024b369129fa6a7bad3fceb5501ee274f54a812d5a11ad97c18a6a9dd909b2958c0fdbe77e906c7dfae526f98871cca6a2cfe057dfec2953dcb87caa3f4ca2bec4c7ad881aadac5c14c903daa1b9f7c3d710932b50321d5982a03e268671a7b4ece828d142fb2262ce1cbc8ad718c822711e052fdba1173a5893a5cdff8e5423885f309c0bb7f9c6d28cc198a413c558870adc6d9eefc950e469a2cc1bad78e43cec24e75f45fcbc788ed34ae1bb34000ff5a45e2009e5f606116d44c3d08504be193d38da5e2e13d19e4497d58813f9e4c191925e0933ea33562301ccb88a3dd94804f266d8b218dce17d8b084d35719b44cccb46949e1f595e4428b54f88a34feaa093a1e8a4f34cbd6168bd717cb976f5be0dbffe19f491f6953c81578b9706d499821c4d83d417baab7ac50a73ce4d7efd8f63c45f38273d72d98c596efbdd23e38c44c86a86d73ced464c796e65b2a90e20e593c88fc80f83d3922a979adf791bd49aafbcab529a25123d41a057f240ed96756ec95a8409fc3f4564cb0486aa9b612a18ecdbb0de4b43938feef60043903666d4d8995386551d11cb04890a8da10af2327bf4fd10c5142d0389d8c1b2c3a8e180b17a842ca97ca67c823d5b6239adb4eb04dcdc3f7cdbb28cb5e87512dbe044fc4be90c19eef954fb028d77b2f2dc4f1dac7e510561d6ea481512c970bda89caa1e56ed5a23bd619754ee5b3ef182f587efdc274c8d286cb881d62a9e5b52f4133ff72a69b264324a1f7dc24435cd9aa8bfc4f6a04a74281354c6978e8585f8a196447129dbe76f9527742d9100272042c711126633f779b9d57edb281141b37d22e7665a49f89e9b8f71b1e83b381a4f0e76ce96c5d4f1759f8ce560a776e547467e36bc38ff1cefd72d66ce276c26e2ecc43fab0385b1110a6ed467017b4d536cc9942c898a90354eb2beadcbabe41330ec625660f6d7088fdc999eb9f23d0f8bfd953b364c86d4b776c0ea8405a403e2809640b681956f9ef35b6092144fcb255c70810d7b6a06af3e48a6aee6973dc21e76ceb1920d1a538997531f91cc186e90e8f4d27c83632d52ffee571dee996697e4c1a40478959764e4009d118cda7df6ee949151f8f1bd40ef67d735b0222710966e0088ed4643033e54d694d7cd93f31a1aa2172cb3512e0e9c80ec5eaaba7325eeb5e435a407c3b8fa5d46bcbe61216f578ee847025c24687bbcb22957716fa5c8c207691a5405666ff5fa3634449f6c64d3472c7c0da6617fe2c3c3691c5e39e137fd098fbd25ab635d8a30861a1301b18490de200de891b7f44643b7da43068273d504fe9b005ccdcdb13eaca2f9fce62af3216ea36f55b57254a1fabbdd98bb4e738e262baab6ae80fa746d5e668a9380fce56073249ef6c2bc2d3ba6d53abbc5a00b58fdaf82d8dc15bb70d615a4cbebc25e12a35e17385e11c3470d6ca1ad08ff800d3bee05c296399da013eac38e3d4b80fbd3f3c61dae51fd90b759356a7043ddaeda3352cb471b32fc0c342a84685584f0d3bab5303026b2834be4f87bf08c5f42c61a9ecc451d967c00a7cd48ac177b8a936202aa7d52ceab9b886dfc7ffba1c9d887c3c3ceb1c6684f9cd8572df5518997174a9b3d90a3f5f83b40b7d8fc5a8142a535e604db6459ad8d8715c9a6933103ebb7ab8b7dccf7972d7934a9fd4ab39ee911a2f9a7c4669f419e507a1170936f4ce99705e8004d227190c2bb1b69c1fa89cffc2b589ce878f19ad0ba6a6365549278dd1aa7dc60329e128e18310defce478ba0720f1099053a02c44656d6590bbb5c4e83c128ec5c396c05c2c3cbeeee3dfdd12b9b214e45a2a8d8fa8ed33883fcd989c73a3d8020aa2b790fd3ba1fee2e545832fd1d22ed28db43e6db4a8ded23d901b2df59f41a8302db16766fd7796a0ed5c1fc3e211433d8caf874ef8d94c508f6ea33b6fd13e568724d25ad13ee77639fbc092d4ba1891dfe4e78ed5f09c8ee9bf97ed3ed79e50bd9e01a3b958cd56b2030155d36e91355e2ce05afabaf5141b6d363851eccd27c3df9fe4b9af5bce514f2473c2e180784081df000a7d80765cd5523ff35d544096157e42cc599d5bcdf923c1c45ed8fd56309e79876675b09b2bfeec1b846b2d3d1cec4fa208afff6d6684a2ef774344f961ef7511bd760ff7fe6b6c7eadd0bbc76994a55715a67892affc26ecbe5592097f9e4316f5d43f26f25cc95dd2cdd5ef74b88b5ffe23aaa5a843ca89be7ab3eab75f4342d438d2516156039c3f828e3a1e3f134473c6ffbb6166d4f2f0abf4eee9e7488133691a36ce785444b8eb5e1e1ca79812a7b9a879f2f88d3cae8d773a6bdce208006b59511f1b99ae5a5d7f38e422b27c8925c9336b72b7be021a369742f640b0e4f42069c47e299a81be18f466f2e4876c64e1d86d36adf86c69a1b29547588defcf7676266c0f3d7b786040404bebad82e9bca337e1b8c4ed2ae9c3656a86dc3dce471fa6f353215812d46ae5f6369db1b9d420d8d23486f46cec79c7861f6fe0b41ab82543442c525ee69f99468abf005e903f827aa1c672b7c5b37880adec5be43ff8e12000f903c751bdbb262a52cf92d3f1ec8c1b50ecec7ae1961afed09925b18c501609ddb39f93957dd83e40275cf2d972625fa3efefaec2af8ba4a3f0399bd7f773f59ac6977c511b16a6276503362ce0808d489ee368ddb709db1052755234fda6c08f4751351837a77ed0fae5a0ec80f0edb870d811bd9698db814eb6c5d451510209564247f80ea9f3b85795e17c8998503addcf4ac87bb5ebbdd3bcf4407b98a68f36c2f0c694e018977566097236c940c9560d485527df11ec4a01d37c4b252090534dd877c51913df9994705a10fcc6c1b28d61014b40f0f192c5c53167113421542c20bc19ac3fbebbbf1559eca90635bcda9f786ea940f83f76ab6581c27e0f2ab34ddb31bb4cf789b7a2291cb2f45fc1f11d824c34bd90d8802dfff0c8979fcc0a2987cdd5bcf7709893280102f58120f8990574e2f9fbc63744f134eed0fd74abb7185754d2ca4a78cc3bc41e50a3e05890fbef5e3dac0ba43a3879b9ee601674c2dd963259d943fd1afa88c8208f09fb3bfc777aea5319cd471232848d2d4b0f122feca9ed4f584e62274b265402b55b2131ef473b272161ccbfe4eddd19163bed576013c893777c36e748f8d5550cae0d5ca386e818f2ceb7288dd0779b16d5463c77da5b9b0203453eeef2d332ba99e51b7e05ca08d3ba0e44c84a87587fcb71d7f42fc85d5674ae32781509a08b05deb5f3723a2f8e32253bc5fbd671ae1d1aefb45a46d3d1fc29e3574a876b2a1486b335b8878ab5c0c7492c6fd44c62a65c038882c26f4aacb106d2355f9bfca883e11ded459dbb9b50b86b552f57d00788324c0f91fa4a5666d76be6b543b53a5f2f98f5412eae8a61bd6bd517646b42165c1219b0fd3edfa616b4951adb5c815658f89512f30f05897b108295d41ead80a9c4a5cb11a01c96c97482287d1ce9c1b1ab915ded88e42669ab40c11a9a31ac4c48857e903a679ebd3072266bfc8f1994514b242b08c9b1348e09881ca641c634f42267e30ea3bb38197b98f8632882ecd5436baa41d7e7969fe0fc3974f291e3c561ce119eb53697dd18856527ba93fd8defed9c0a5ac519cb1e9440637bdc73961c09af8587a46c0506b53c8ef66232cec63680e5a568650887eaeaa9029c4bdc5998112f361ae845f33186c9d3b7a744797455251fee18180656a3b82d649d8d4d9c014cc0e53d51618adc327f7ff6db9d07d170f5cbf899d9e5e007031580dae5eccad650b38e705024d96588c46290dfaa898d5ccf96ef5c24d6e57619243ea59c839b922d8a7e0613c6dcb7a3059ccea18148f50ddba8458fad18c40219168e5ba856552ffa780be4a1733b2d9b9a86218a44749018772ed23cd0cf6cbfd6bb14782823b439fcbe988207d23e3dbfee8571a045b5edcca6a8d3f785587f96b292b3e8b3ff32ccf3e3a184a624713af088ff836b751b75aa219b910511f4115683550841320e12907390fe60d87ffa8e250c7e3cb0323c7c91cc01c522ea1d2a5148942ae44767ebba95748e1e0a5196627bdb2d8ad332dd4ba1524bbbbbd70cc6dad9d352562d11a6e1b996e3680fc76d2a33720cab2937e338f94d6f24411260e9cdaad9133311351ff49db65b496260a29bada9dffe449c978fc19c5ce5633ef5363e53a1dc3ee8217f695727118443481eec5a88efad6de3ce54e9ff052ec8ebe7afcc69b25d9934e777f39b1e57acfa22c8128bcf8f705fe389874fa54b736", @typed={0x8, 0xca, 0x0, 0x0, @fd}, @nested={0x1d0, 0xd, 0x0, 0x1, [@typed={0x8, 0x117, 0x0, 0x0, @pid=r5}, @generic="513b5cdb9470400e4a02ba81f1daa738e0e7dd330e27d06a980c3571228a59dac162e2abaa9733f35819c2ec975c017aabd19d2b495dc92526123a02974c9add56504f494b2083d78c4a3107bb1842854253f980661d36c2fb8013101c557fbb832636be649499bb4a8d125aefd1d74b1621a6d860a89741966e2b1d7de01b1ee64722f5b702dfa87a3468f361fe19b2dfbee1280e982b4e1738fe8b695efc32fdb567b3768d0c669b8640514566ba822e2a05ee406e474ad8590190429abfa7a79a0634e4bc58c1d0039d1a3985643983da037fd08de810b22834ad65682dbf468d5e8b7ec181f4fd500bd29717a90d258dfa4d76b670ad17d49b5ab2c1", @generic="96f6ed29e1", @generic="c392a8c12a77fff922c89cfd25d825c8d0680c80995b6682f71b900cc8d032823c537e72a9fd47fe8f6ed876a803e53bda9cfe2f3728ea03cb4fc10e245bb17c411696617317ec6a96c8a5d0448bac02", @generic="fae8e781c05b9d5cc879cc3f51f3b7ca62d3af22d53d3788dea5aa02f19b11267ad0fbde852507b35f605079915e52f620a1a8e53ba764752358d485bc03771738d77cd55b3706c309b3b29175d5ebd6399c8bd1ed13da236e34fed8d349237677a838d5f14ac47324c16abe1c7b91225b"]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x4004}, 0x40054) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x18) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 5.57052756s ago: executing program 2 (id=1239): write(0xffffffffffffffff, &(0x7f0000000580)="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", 0x3f8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9d60000000109022b00010000000009049c0002010351000905031300"], 0x0) 4.255084744s ago: executing program 1 (id=1240): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x2c}], 0x1}, 0xcc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f000083e000/0x2000)=nil, 0x2000, &(0x7f00000012c0)=""/4096) r3 = socket$xdp(0x2c, 0x3, 0x0) kcmp(r1, r1, 0x1, r3, r0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xa, 0x2) 4.124198865s ago: executing program 1 (id=1241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xec00000000000000, 0x200100) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xec00000000000000, 0x200100) (async) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) (async) close(r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async) 4.078765735s ago: executing program 2 (id=1242): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0xffc99a3b00000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x8, "2142bc36"}, @local=@item_012={0x1, 0x2, 0xa, "b0"}]}}, 0x0}, 0x0) 3.700718706s ago: executing program 3 (id=1243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) sendto$inet6(r0, &(0x7f0000000340)='g', 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x2, 0xa2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000140)={0x3}, 0x4) r6 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000380)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcc}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203017987d4bfec90a6f4c9010fe3b9c8170902220001000000000904000001437b6a0009207e504cc7687042d8a59c818a2cbf6a9804a9256d8b23e2257a621ea2b5f100c9805d96755d18c509a37a95cbd9e172d66cd14881769046fd0026b5ebf712d579f03832994aee7a99a35cdaa3a985c26a460b81142980195427250408fc832c96d8a45009022fb546d14eac486b3c2618aaec8e52ba0a288359455bbcc459f0a6201cb3bcc028b803cc26"], 0x0) 3.419069968s ago: executing program 1 (id=1244): sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x35}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x200081d0}, 0x51) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffd, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xad13}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x50}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe6}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf91d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x53}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4d}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40080}, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x639}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xb000, 0x5000, 0x10, 0x7, 0x6, 0xa8, 0xf8, 0x60, 0xa, 0x4, 0x8, 0x4}, {0x2, 0x100000, 0x0, 0x8, 0x1, 0x7, 0x8, 0x9, 0x2, 0xe, 0x4, 0x93}, {0xdddd1000, 0x2, 0xa, 0x0, 0x0, 0x3, 0x0, 0x2, 0x46, 0x8, 0x0, 0x9}, {0x3000, 0x8001000, 0xe, 0x0, 0x61, 0x3, 0x3d, 0x0, 0x9, 0x2, 0xe0, 0x8}, {0xf000, 0x1, 0xb, 0x8, 0x3, 0x4, 0xc3, 0x9, 0x70, 0x5, 0x3, 0xa3}, {0xdddd1000, 0xeeee0000, 0x10, 0xf8, 0x5, 0x0, 0x40, 0x5, 0x5, 0x7c, 0x9, 0x4}, {0x2, 0xe000, 0xb, 0x9, 0xfe, 0x2, 0x1, 0x2, 0xd, 0xfb, 0x36, 0xad}, {0x6000, 0x80a0000, 0xe, 0xa, 0x5, 0x85, 0x1, 0x7, 0xf8, 0x0, 0x2, 0x40}, {0x8000000, 0x4}, {0x6000, 0x10}, 0x37f3212d0140e116, 0x0, 0x8000000, 0x1012a, 0x1, 0x100, 0x4000, [0x9, 0x9, 0x47802526, 0xc4]}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000500)=0x401, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8051) (async) fchmod(r1, 0x8) (async) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x10) inotify_rm_watch(0xffffffffffffffff, r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8d4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/hardlockup_count', 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x1410, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000009c0)=0x0) (async) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffc000/0x2000)=nil) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000a00)={{0x2, 0xffffffff, 0x7, 0xb, 0x0, 0x7}, 0x138, [0x7fffffff, 0x7ff, 0x4211, 0xa, 0xd6, 0x3, 0x7, 0x400, 0x4, 0x4, 0xc, 0xd42, 0x65, 0x2, 0x3, 0x1, 0x1, 0x195d, 0x1, 0x2, 0x9, 0x1, 0x7, 0xc3, 0x854, 0x99, 0x2, 0x6, 0x4f, 0x7, 0x2, 0x0, 0x0, 0x100, 0x363, 0x3, 0x0, 0xd, 0x2be, 0x40, 0x4, 0x10001, 0xafa, 0x1, 0x3, 0x3, 0x326, 0x6, 0x400, 0x8, 0x7, 0x8, 0x1, 0x3, 0xfffff801, 0x5, 0x5, 0x10001, 0xffff, 0x6, 0xfffffff9, 0xfffffff9, 0xf4, 0x3, 0x8, 0xf4f, 0x85da, 0xd369, 0x9, 0x4, 0x3, 0x5, 0x10, 0x4, 0xfff, 0x7, 0x5, 0xfff, 0x22, 0x4b6, 0x0, 0xfffffff9, 0x8, 0x6, 0xce5, 0x5, 0xd257, 0x5, 0x1, 0x80, 0x1f22, 0x8, 0x401, 0x0, 0x0, 0x1ff, 0x5, 0x10, 0x5, 0x3, 0x401, 0x2, 0xf, 0x7fff, 0x2, 0x400, 0x3, 0x5, 0x9, 0x2, 0x6, 0x7fff, 0x7, 0x3, 0x0, 0x7d, 0xffffff80, 0x80000001, 0x1, 0x4, 0x7fff, 0x6, 0x4, 0xaa5e, 0x2, 0x9, 0xffff, 0x3729, 0x1, 0x2, 0x10, 0x2, 0x6, 0xfffffffd, 0x3, 0x8, 0x9, 0x1, 0x3, 0x7, 0x5, 0x3c00000, 0x6, 0x2, 0x9, 0x3, 0x6, 0x7f, 0x2, 0x8001, 0x5, 0x7, 0x8d7c, 0x0, 0x5f20, 0x4, 0x1, 0xe, 0x2, 0x9, 0x2, 0x5, 0x8, 0x1, 0x3, 0x3, 0x5, 0x1, 0x6, 0x5, 0x5, 0x5, 0x3, 0x0, 0x3, 0x1000, 0xfc, 0xc, 0x8, 0x2, 0x8, 0x80, 0xd, 0x1, 0x4, 0xffffffff, 0x1, 0x5, 0x8, 0x9, 0x8, 0xd, 0x10, 0x10000, 0x4, 0x200, 0x1, 0x800, 0x401, 0x9, 0xd555, 0xcb60, 0x1, 0x9, 0x8, 0x8, 0xc, 0x730a, 0x6, 0x0, 0x0, 0x7, 0x0, 0x6, 0xba, 0x8, 0xc, 0x3ff, 0x100, 0x2, 0x1, 0x0, 0x7, 0x3, 0x7f, 0x8, 0x10000, 0xbe6, 0x3, 0xe0ab, 0x9, 0xc, 0x7ff, 0x9, 0x0, 0x8, 0x10, 0x1, 0xff, 0x2, 0x3, 0x5, 0x7, 0x4, 0xe5c0, 0x7, 0x4, 0x8, 0x3, 0x1, 0x7, 0x1, 0xe, 0x2, 0x1000, 0x400, 0x2db1, 0x3, 0x35804483, 0x7f, 0x10, 0x10000, 0x2718, 0xd, 0x4, 0x5, 0x1a, 0x8001, 0x5, 0xac, 0xfffffff9, 0x1, 0x21, 0x91e, 0xffff, 0x8b2, 0x0, 0x6d3, 0x5, 0x8, 0xffffff36, 0x47d722c5, 0x7, 0xe0000000, 0x0, 0x4, 0x9, 0x10000, 0xc, 0x7f, 0x4, 0x7, 0x5, 0x3266, 0x0, 0x80000001, 0x6, 0x1000, 0x9, 0x4, 0x3, 0x6, 0x7ff, 0xf63e, 0x3, 0x6, 0xc6, 0x8, 0x7, 0x80000000, 0x5, 0x4, 0xfffffff8, 0x4, 0x6, 0x0, 0x2, 0x9, 0x3, 0xc, 0x80000001, 0x3ff, 0x4, 0x6, 0x200, 0x7, 0x0, 0x1, 0x9, 0x1, 0x4, 0x5, 0x5, 0x96, 0x9, 0x6, 0xe6, 0xc, 0x0, 0x3, 0x4, 0x8, 0x9, 0x7, 0x7, 0x5, 0x5, 0xa1, 0x3, 0x5, 0xdee, 0x7ba51d2f, 0x8, 0x3, 0xab0, 0x4, 0xfffffff8, 0x4, 0x0, 0x2, 0x9fa, 0xb, 0x260, 0xf3, 0x6, 0x6, 0x1000, 0x3, 0x3, 0x4eb, 0xf329, 0x2, 0x2, 0x9, 0x8, 0x7, 0x0, 0x2eb, 0x5, 0x8, 0x80, 0x3, 0xf, 0xe, 0xe9, 0x400, 0x2, 0x6, 0x8, 0x1ff, 0x1, 0xbf50, 0x3, 0x8, 0x20004000, 0xc, 0x9, 0x7f, 0xfffffffd, 0x8, 0x64, 0x7d38, 0x1, 0xa6, 0xffff, 0x5, 0x6, 0x7, 0x9d, 0x400, 0x9, 0x7fff, 0x10001, 0xd09, 0xe, 0xfffffffc, 0xfffffffa, 0x100, 0x4, 0x9, 0x400, 0x1, 0x9, 0x7, 0x10001, 0x9c, 0x113, 0x0, 0x7, 0x8, 0xd0, 0x9, 0x7ff, 0x8, 0x10000, 0x742cacce, 0x7, 0xe, 0x30095800, 0x2, 0x50000000, 0x25ec6e0a, 0x9, 0x3, 0x10001, 0x9, 0x7, 0xe2d8, 0xaa6, 0x0, 0x1, 0x0, 0x3, 0x68, 0x5, 0x48f, 0xfffffffc, 0x5, 0xf, 0x1, 0x5, 0x3, 0x8, 0x0, 0xd, 0xfffff000, 0x4, 0x1, 0x3, 0x800, 0x17, 0xffffffff, 0x8, 0x8000, 0x0, 0x9, 0x9, 0x6, 0x800, 0xf65, 0x8, 0x9, 0x6, 0x7, 0x287, 0x5, 0x0, 0x7, 0x8, 0x678f, 0x9, 0xf, 0x344, 0x80000001, 0x1, 0x3, 0x95f5, 0x1, 0x7, 0x2, 0x2, 0x8, 0x8, 0xe, 0x23, 0x492, 0x0, 0x1, 0xc, 0x1, 0x9, 0x6, 0x7, 0x7fa, 0x9, 0xc61, 0x6, 0x9, 0x8000, 0x3, 0x2, 0x6, 0x6, 0x80000000, 0x40, 0x3, 0x2, 0x8000, 0x7, 0x0, 0x10, 0x3, 0xe, 0x8, 0x0, 0x0, 0xffffffff, 0xfff, 0x2, 0x6, 0xffffff00, 0x4, 0x39b5, 0x7, 0x1, 0x80, 0x3, 0x3, 0x80000000, 0x4, 0x200, 0x7, 0x1ff, 0x0, 0x9, 0xf7aa, 0x0, 0x9, 0x6, 0x5, 0x1ff, 0xfffffffe, 0x40, 0x0, 0x1, 0x0, 0xffffffff, 0x8, 0x1ff, 0x7ff, 0x8, 0x101, 0x1, 0x3, 0x9, 0x8, 0xf, 0x7fff, 0x0, 0xa, 0x18fd, 0x7, 0xc1, 0x0, 0x0, 0x8, 0x2, 0x6, 0x52, 0x7, 0xeb80, 0xfffffff9, 0x60, 0x4, 0x42, 0xfffffff9, 0x10001, 0x6, 0x80000, 0x491, 0xb, 0xa, 0x8, 0x3, 0x3, 0xe3eb, 0x8001, 0x9, 0x5942, 0x1000, 0x1ff, 0x7, 0x4, 0x9, 0x7f, 0x7cda, 0x3000000, 0x6, 0x5, 0x9, 0x4, 0xfffff03b, 0x3, 0x1aa8bbe4, 0x4, 0x401, 0xfffff5be, 0x954, 0x3d24, 0x10, 0x5, 0x40, 0x2, 0x7, 0x9, 0x7, 0x80, 0x1ff, 0xb0, 0x1, 0x8, 0x0, 0x5, 0x6f4434e2, 0x3, 0x10, 0x7, 0x7f, 0x0, 0xb7cf, 0x4, 0x200, 0x5, 0x1, 0x2, 0x180000, 0x0, 0x5, 0xfffffff7, 0xfffffffe, 0x1ff, 0x6, 0x0, 0x0, 0x8, 0x3072201e, 0x0, 0xfffffff7, 0x7, 0x81, 0x1, 0x8, 0x9, 0x9, 0x80, 0x0, 0x5af3, 0x401, 0xf816d6ae, 0x52d8, 0xe, 0x200, 0x10000, 0xfff, 0x5f, 0x6, 0x5841, 0x0, 0x0, 0x8, 0x9, 0x9, 0x7, 0x3, 0x7, 0x1, 0x6, 0xfff, 0x61, 0xd6, 0x3, 0x100, 0x1, 0x6, 0x2, 0x9, 0x8, 0x1, 0x123, 0x7, 0x5, 0x9cd4, 0x4, 0xb, 0x8, 0xfffffff8, 0x6, 0x8, 0x8000, 0x51, 0x4, 0x7, 0x7fffffff, 0x0, 0x7, 0x2, 0x81, 0x10001, 0x4, 0x9, 0x8, 0x7, 0x9, 0x0, 0x12d, 0x10, 0xb, 0xfff, 0x3, 0x7d302af9, 0x2, 0x1ff, 0x1, 0xd, 0x4, 0x0, 0xffffffff, 0x87, 0x0, 0x7, 0x10, 0x6ab3, 0x5, 0x9, 0x0, 0xe9, 0xbce3, 0x6e, 0x0, 0x0, 0x8, 0x1ff, 0x6, 0x4, 0x6, 0x6, 0x2, 0x5, 0x80000001, 0x1ff, 0x400, 0x9, 0x1, 0x9, 0x1, 0x5, 0x0, 0x1, 0xc, 0x80, 0x0, 0x8, 0x6, 0x80, 0x2, 0x5, 0x0, 0x1, 0x3, 0x1, 0x1, 0x3, 0x7, 0x5, 0x4, 0x5, 0x7fffffff, 0x0, 0x100, 0x6, 0x7, 0xfffffffa, 0x9, 0x3, 0x6e2e06e7, 0x7, 0x81, 0x2, 0x2, 0x7f, 0x2, 0x791a, 0xfffffff4, 0x0, 0x3ff, 0x6, 0x2, 0x7fff, 0xa, 0x1, 0x0, 0x7, 0x8, 0x10000, 0x9, 0x1, 0x9, 0x1, 0xffff3dbd, 0x3, 0xafb, 0x3, 0x10f2, 0xfff, 0x4eba, 0x0, 0x1, 0x5d8, 0x1, 0x1, 0x10000, 0xffffffff, 0x4, 0x0, 0x7, 0x402, 0x8, 0x7, 0xf, 0x0, 0x7, 0xfffffdfa, 0x5, 0xe, 0x8000, 0xfffffe01, 0x80, 0x3, 0xff, 0x3fe00000, 0x10, 0x4c, 0x3, 0x6d3ca962, 0xffffff00, 0x2, 0x47ec, 0x74f5, 0x7, 0x8, 0x5, 0x800, 0x6, 0x4, 0x7, 0x8fc, 0x401, 0x7fffffff, 0x3, 0x3, 0x4, 0xeb5, 0x1, 0x0, 0xffffffff, 0x5467, 0x4, 0x400, 0x1, 0x8, 0xc, 0x2, 0x1, 0xb, 0x24af, 0x65, 0xaa, 0x0, 0x1, 0x0, 0x4, 0x4, 0x7, 0x6, 0x5, 0x6, 0x9, 0x9, 0x67, 0x1c, 0x2, 0x84, 0x278, 0x401, 0x2, 0x81, 0x2, 0x2, 0x6, 0xec, 0x3, 0x6cf, 0x3, 0x7, 0x7e, 0xfffffffa, 0xf6ed, 0x9aa0, 0x4, 0x100, 0x6, 0x0, 0xa90c, 0x1000, 0x5549536e, 0x2, 0x0, 0x8, 0x8, 0x0, 0x1, 0xfffffc01, 0x250, 0xfffffeff, 0x2, 0x959c, 0xed5a, 0x400, 0xa35d, 0x6, 0xe3, 0x3, 0x40, 0x8, 0x2, 0x3, 0x5, 0x3, 0x1, 0x5, 0xff, 0x0, 0x5, 0xb, 0xfffffff9, 0xe7de, 0x1000, 0x4, 0xffffffff, 0x400, 0x9, 0x9, 0x8, 0xa9, 0x2, 0x5, 0x7ff, 0xdb, 0x61d, 0x4, 0x99, 0x29, 0x2, 0x1f3, 0x400, 0xf8000000, 0x7, 0x4, 0x3, 0xfffffff6, 0x401, 0x12e7d1e1, 0x7, 0x4180000, 0xd0, 0x9, 0x2, 0x0, 0x100, 0x7, 0x6, 0x80000001, 0x7ff, 0x80000001, 0x7fffffff, 0x5, 0x5, 0x0, 0x4, 0x401, 0xff, 0x4, 0x10000, 0xefa, 0x8, 0x3, 0xff, 0x3, 0xea5c, 0x100, 0xffff, 0x4, 0x5, 0x1]}) (async) r9 = openat$cgroup_ro(r7, &(0x7f0000001a40)='cgroup.controllers\x00', 0x0, 0x0) close_range(r4, r3, 0x2) (async) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40a00000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a01a1a7d65"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x44800) (async) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000001b80)=0xe4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001bc0)={"fdc729d97a1a4c7b253580db8c3a3cc6", r8, r8, {0x7, 0xfff}, {0x6, 0xffff}, 0x7fffffff, [0x1, 0xfffffffffffffff8, 0x3, 0x4, 0x0, 0x24000, 0x5, 0x2, 0xa22e, 0xb1, 0x6, 0x6d01, 0x2, 0x63b285bb, 0x5, 0x439]}) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000001cc0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r10 = inotify_init1(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r10, 0x942e, 0x0) 3.408598506s ago: executing program 1 (id=1245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) userfaultfd(0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.193426293s ago: executing program 0 (id=1246): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = socket(0x1f, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x12, 0x200, 0x70bd2a, 0x25dfdbfd, {0x18}, [@typed={0x6, 0xd0, 0x0, 0x0, @str='[\x00'}, @typed={0x8, 0x90, 0x0, 0x0, @fd=r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) syz_usb_control_io(r4, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r6}}, 0x20) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f0000000040)=0xd07b626b, 0x4) syz_usb_control_io(r0, 0x0, 0x0) r8 = socket$caif_seqpacket(0x25, 0x5, 0x5000400) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000280)={@remote}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) recvmsg(r8, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 2.320268233s ago: executing program 2 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 2.268545164s ago: executing program 2 (id=1248): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0xa0502) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f0000000002", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 2.056690437s ago: executing program 2 (id=1249): syz_clone(0xc0000000, &(0x7f0000000340)="ee6005401ab1443ee6a54546e3001e2557b37256cd4fef267848aa2495a2d2932069", 0x22, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000ffffff8d000000000189"], 0x340a) 1.936085925s ago: executing program 1 (id=1250): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000280)={0x0, 0x6, 0xa0, "ba4c2abd8a93461e7f46fb121b7c5a0e4b70aba48d17cf3b1c46c218a947ee9cb198cca9a9e52e0b1fd0f6806e388f2a7b69f0f40000abe8227bd0a015ee72ea79f2690335f4bf3dc768a409aef3fb8a1517ff702dadafe612acf2005837840764af2e7592512d4abfce1b4c0cd77c98f5eca80cdd2216ff3077b52640f7260c6d67cc6f644091b64a2318eb10ee377d090a2713384b65d8e6939b42de0aff08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x18c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.172896641s ago: executing program 2 (id=1251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = gettid() timer_delete(r2) tkill(r3, 0x12) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0xc, "cf4022"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x0, 0x3, "064b765bc5404c731a96cbd8e0ae7ef1716fb019a8243f97526290b788e24695b4b343e7526ac555a1694789a0dcff10bdce1c07375fcd903b0c9efea3ff90339007bdceaa0277470c5c677b089f901a67b0ddf347cd1fdd902243f4ef3bea42e031000000000000"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x12, @string={0x12, 0x3, "6f009fab889462ffd6f3e8266ed92a64"}}, 0x0, 0x0}, 0x0) 402.112388ms ago: executing program 3 (id=1252): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xa, @pix_mp={0x1, 0x6e, 0x33565348, 0x3, 0x2, [{0x0, 0x2000000}, {0x9f6, 0x8}, {0x2, 0x8}, {0x27, 0x6}, {0x88b5, 0xffffffff}, {0x2b, 0x10}, {0x9a1d, 0x172d}, {0x9, 0x209}], 0x8, 0x4, 0x6}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000090ffffffffffffff000001"], 0xfdef) 19.818059ms ago: executing program 0 (id=1253): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, @hci={0x1f, 0x0, 0x2}, @generic={0x21, "7830bf04060e40979ff61142211b"}, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='vlan0\x00', 0x9, 0x4343e580, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x2010, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) (rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x5) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x15200000, @remote, 0x0, 0x4}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async, rerun: 32) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) 0s ago: executing program 3 (id=1254): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000061"], 0xec}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000600)="6c3b01c0352785418c0b21740f1c1f085a0ce2dc54621a42a6b6c27cc459acc168582a", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) kernel console output (not intermixed with test programs): 5+ [ 283.463837][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 283.482476][ T8867] block device autoloading is deprecated and will be removed. [ 283.594120][ T5953] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 283.605081][ T5953] usb 3-1: found format II with max.bitrate = 6, frame size=8 [ 283.619088][ T5953] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 283.627847][ T5953] usb 3-1: found format II with max.bitrate = 6, frame size=8 [ 283.704874][ T5953] usb 3-1: USB disconnect, device number 100 [ 283.852912][ T8876] fuse: Bad value for 'fd' [ 284.015512][ T980] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 284.222419][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.241870][ T980] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.261064][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.284646][ T980] usb 1-1: config 0 descriptor?? [ 284.315138][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 284.327932][ T5868] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 284.515982][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 284.548819][ T5868] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 284.573284][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.605166][ T5868] usb 4-1: config 0 descriptor?? [ 284.723113][ T8889] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 284.736957][ T8889] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 284.746267][ T8889] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 284.754265][ T8889] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 284.761494][ T8889] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 284.768075][ T8889] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 284.774873][ T8889] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 284.797707][ T8889] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 284.805576][ T8889] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 284.827426][ T8889] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 284.835983][ T8889] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 284.849685][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.867506][ T8889] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 284.880764][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.897316][ T8889] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 284.907934][ T8889] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 284.915760][ T8889] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 284.925639][ T8889] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 284.961389][ T8889] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 284.982061][ T8889] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 285.072685][ T980] pwc: recv_control_msg error -71 req 02 val 2b00 [ 285.085637][ T980] pwc: recv_control_msg error -71 req 02 val 2700 [ 285.102242][ T980] pwc: recv_control_msg error -71 req 02 val 2c00 [ 285.129769][ T980] pwc: recv_control_msg error -71 req 04 val 1000 [ 285.138739][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 285.149554][ T980] pwc: recv_control_msg error -71 req 04 val 1300 [ 285.155059][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.183395][ T980] pwc: recv_control_msg error -71 req 04 val 1400 [ 285.195992][ T5868] usb 4-1: USB disconnect, device number 56 [ 285.203206][ T980] pwc: recv_control_msg error -71 req 02 val 2000 [ 285.223434][ T980] pwc: recv_control_msg error -71 req 02 val 2100 [ 285.244036][ T980] pwc: recv_control_msg error -71 req 04 val 1500 [ 285.256942][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 285.267831][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 285.275240][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 285.285703][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 285.294648][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 285.305155][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 285.323846][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 285.343246][ T980] pwc: Registered as video103. [ 285.391853][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input54 [ 285.453130][ T8901] loop6: detected capacity change from 0 to 1 [ 285.479226][ T980] usb 1-1: USB disconnect, device number 94 [ 285.488488][ T8901] Dev loop6: unable to read RDB block 1 [ 285.495829][ T8901] loop6: unable to read partition table [ 285.498414][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 285.512601][ T8901] loop6: partition table beyond EOD, truncated [ 285.533334][ T8901] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.969801][ T5868] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 286.077534][ T980] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 286.140286][ T5868] usb 3-1: config 9 has an invalid interface number: 88 but max is 1 [ 286.157820][ T5868] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 286.179938][ T5868] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 286.217153][ T5868] usb 3-1: config 9 has no interface number 1 [ 286.226929][ T5868] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 286.249891][ T5868] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 286.261865][ T8920] netlink: 'syz.3.937': attribute type 16 has an invalid length. [ 286.265009][ T5868] usb 3-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 286.271127][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 286.285186][ T5868] usb 3-1: config 9 interface 88 has no altsetting 0 [ 286.287913][ T8920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.937'. [ 286.304629][ T980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.306535][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.313850][ T980] usb 1-1: config 0 has no interface number 0 [ 286.326368][ T5868] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 286.326593][ T980] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.342697][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.351224][ T980] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.365751][ T980] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 286.375050][ T5868] usb 3-1: Product: syz [ 286.375075][ T5868] usb 3-1: Manufacturer: syz [ 286.375093][ T5868] usb 3-1: SerialNumber: syz [ 286.392204][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.406250][ T980] usb 1-1: config 0 descriptor?? [ 286.604522][ T8905] afs: Unknown parameter 'obj_type' [ 286.616050][ T5868] qmi_wwan 3-1:9.88: skipping garbage [ 286.623634][ T5868] qmi_wwan 3-1:9.88: probe with driver qmi_wwan failed with error -22 [ 286.637658][ T5909] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 286.645953][ T5868] usb 3-1: USB disconnect, device number 101 [ 286.807398][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 286.815278][ T5909] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 286.828686][ T5909] usb 4-1: config 0 has no interface number 0 [ 286.835054][ T5909] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 286.856589][ T5909] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 286.870776][ T5909] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 286.881016][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 286.889622][ T5909] usb 4-1: Product: syz [ 286.894541][ T5909] usb 4-1: SerialNumber: syz [ 286.903634][ T5909] usb 4-1: config 0 descriptor?? [ 286.914295][ T5909] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 286.924292][ T5909] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input55 [ 287.033380][ T980] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.002A/input/input56 [ 287.058323][ T980] uclogic 0003:28BD:0094.002A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 287.117608][ T5868] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 287.147952][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.174497][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.249529][ T8926] loop6: detected capacity change from 0 to 1 [ 287.256801][ T8926] Dev loop6: unable to read RDB block 1 [ 287.266140][ T8926] loop6: unable to read partition table [ 287.272272][ T8926] loop6: partition table beyond EOD, truncated [ 287.278778][ T8926] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.327426][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 287.340445][ T5868] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.353961][ T5868] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.369691][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.376388][ T5868] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 287.391972][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.395189][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 287.406041][ T5868] usb 2-1: config 0 descriptor?? [ 287.408172][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.419922][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.427101][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.434397][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.441510][ T980] usb 4-1: USB disconnect, device number 57 [ 287.441622][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.454503][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 287.480201][ T980] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 287.499475][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 287.837421][ T1209] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 287.852429][ T5868] a4tech 0003:09DA:000A.002B: unbalanced collection at end of report description [ 287.862733][ T5868] a4tech 0003:09DA:000A.002B: parse failed [ 287.868762][ T5868] a4tech 0003:09DA:000A.002B: probe with driver a4tech failed with error -22 [ 287.987364][ T1209] usb 3-1: Using ep0 maxpacket: 8 [ 287.994974][ T1209] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 288.003405][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.014445][ T1209] usb 3-1: config 0 has no interface number 0 [ 288.021553][ T1209] usb 3-1: config 0 interface 36 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.035001][ T1209] usb 3-1: config 0 interface 36 has no altsetting 0 [ 288.059274][ T980] usb 2-1: USB disconnect, device number 98 [ 288.076657][ T1209] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 288.091985][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.113375][ T1209] usb 3-1: config 0 descriptor?? [ 288.133334][ T1209] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 288.766599][ T980] usb 1-1: USB disconnect, device number 95 [ 288.899163][ T5916] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 289.072249][ T5916] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 289.100293][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.111207][ T5916] usb 2-1: Product: syz [ 289.115446][ T5916] usb 2-1: Manufacturer: syz [ 289.128601][ T5916] usb 2-1: SerialNumber: syz [ 289.148622][ T5916] usb 2-1: config 0 descriptor?? [ 289.248389][ T1209] gspca_vc032x: reg_w err -110 [ 289.254681][ T1209] vc032x 3-1:0.36: probe with driver vc032x failed with error -110 [ 289.326202][ T8952] loop6: detected capacity change from 0 to 1 [ 289.334865][ T8952] Dev loop6: unable to read RDB block 1 [ 289.341303][ T8952] loop6: unable to read partition table [ 289.348974][ T8952] loop6: partition table beyond EOD, truncated [ 289.357610][ T8952] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.377462][ T5916] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 289.406451][ T5916] asix 2-1:0.0: probe with driver asix failed with error -71 [ 289.431070][ T5916] usb 2-1: USB disconnect, device number 99 [ 289.562283][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 290.228571][ T1209] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 290.407728][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 290.421880][ T1209] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.438104][ T1209] usb 2-1: config 0 has no interface number 0 [ 290.450663][ T1209] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.472921][ T1209] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.492854][ T1209] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 290.510590][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.523312][ T1209] usb 2-1: config 0 descriptor?? [ 290.634906][ T5953] usb 3-1: USB disconnect, device number 102 [ 290.638415][ T5916] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 290.811740][ T8983] loop6: detected capacity change from 0 to 1 [ 290.829918][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.862251][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.881043][ T8983] Dev loop6: unable to read RDB block 1 [ 290.883543][ T5916] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 290.896757][ T8983] loop6: unable to read partition table [ 290.906004][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.927110][ T8983] loop6: partition table beyond EOD, truncated [ 290.935207][ T5916] usb 4-1: config 0 descriptor?? [ 290.954888][ T8983] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.169068][ T1209] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.002C/input/input57 [ 291.190426][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 291.281142][ T1209] uclogic 0003:28BD:0094.002C: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 291.532562][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 291.554139][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 291.585646][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 291.626220][ T5916] usb 4-1: USB disconnect, device number 58 [ 291.790637][ T8994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.844018][ T8997] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 291.853310][ T8996] netlink: 'syz.2.964': attribute type 4 has an invalid length. [ 291.883658][ T8996] netlink: 152 bytes leftover after parsing attributes in process `syz.2.964'. [ 292.003010][ T8996] : renamed from bond0 (while UP) [ 292.417487][ T5916] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 292.589387][ T5916] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 292.621766][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 292.666486][ T9010] netlink: 'syz.0.968': attribute type 21 has an invalid length. [ 292.680681][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.691874][ T9010] netlink: 128 bytes leftover after parsing attributes in process `syz.0.968'. [ 292.700915][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.700946][ T5916] usb 4-1: Product: syz [ 292.700964][ T5916] usb 4-1: Manufacturer: syz [ 292.700980][ T5916] usb 4-1: SerialNumber: syz [ 292.959343][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.977583][ T980] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 292.986755][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.015366][ T5916] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 293.050001][ T5916] usb 4-1: USB disconnect, device number 59 [ 293.072999][ T5930] usb 2-1: USB disconnect, device number 100 [ 293.127501][ T980] usb 1-1: device descriptor read/64, error -71 [ 293.377545][ T980] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 293.517352][ T5916] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 293.527748][ T980] usb 1-1: device descriptor read/64, error -71 [ 293.651005][ T980] usb usb1-port1: attempt power cycle [ 293.657138][ T9025] syz.1.972 (9025) used obsolete PPPIOCDETACH ioctl [ 293.667438][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 293.679039][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 293.697267][ T5916] usb 4-1: config 16 has an invalid descriptor of length 121, skipping remainder of the config [ 293.717281][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.737335][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.757322][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 293.777330][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 293.803913][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 293.832243][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.849321][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.907286][ T5909] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 294.027285][ T980] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 294.075931][ T980] usb 1-1: device descriptor read/8, error -71 [ 294.099973][ T9001] usb usb8: usbfs: process 9001 (syz.3.965) did not claim interface 0 before use [ 294.138662][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.138727][ T9029] binder: 9028:9029 ioctl c018620c 200000000640 returned -22 [ 294.153318][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.177985][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 294.191666][ T5909] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.215984][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 294.232010][ T5916] usb 4-1: usb_control_msg returned -71 [ 294.235191][ T5909] usb 2-1: SerialNumber: syz [ 294.247285][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 294.275687][ T9029] binder: 9028:9029 ioctl c0306201 2000000003c0 returned -14 [ 294.375740][ T5916] usb 4-1: USB disconnect, device number 60 [ 294.408855][ T980] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 294.464698][ T980] usb 1-1: device descriptor read/8, error -71 [ 294.587305][ T1209] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 294.596317][ T5909] usb 2-1: 0:2 : does not exist [ 294.602125][ T980] usb usb1-port1: unable to enumerate USB device [ 294.691241][ T5909] usb 2-1: USB disconnect, device number 101 [ 294.739821][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.804277][ T1209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.824365][ T1209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.861544][ T1209] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.888204][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.906889][ T1209] usb 3-1: SerialNumber: syz [ 295.157491][ T5953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 295.170594][ T1209] usb 3-1: 0:2 : does not exist [ 295.175656][ T1209] usb 3-1: unit 5 not found! [ 295.257724][ T1209] usb 3-1: USB disconnect, device number 103 [ 295.364054][ T5953] usb 4-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 295.385224][ T5953] usb 4-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.398720][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 295.405427][ T5953] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 295.415010][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.435202][ T5953] usb 4-1: config 0 descriptor?? [ 295.447843][ T5953] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 295.777388][ T5916] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 295.957386][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 295.972504][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.002647][ T5916] usb 2-1: config 0 has no interface number 0 [ 296.019465][ T9046] Set syz0 is full, maxelem 0 reached [ 296.051067][ T5916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.078060][ T5916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.088500][ T5916] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 296.097928][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.113565][ T5916] usb 2-1: config 0 descriptor?? [ 296.686014][ T9051] netlink: 'syz.0.982': attribute type 16 has an invalid length. [ 296.697889][ T9051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.982'. [ 296.707564][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.772116][ T5916] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.002D/input/input58 [ 296.861081][ T5916] uclogic 0003:28BD:0094.002D: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 297.287390][ T5868] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 297.451811][ T5868] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.463490][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.499331][ T5868] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.513543][ T5868] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.522577][ T5868] usb 1-1: Manufacturer: syz [ 297.534811][ T5868] usb 1-1: config 0 descriptor?? [ 297.617411][ T5868] rc_core: IR keymap rc-hauppauge not found [ 297.623513][ T5868] Registered IR keymap rc-empty [ 297.636129][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 297.656513][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input59 [ 297.749468][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.768507][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.949657][ T1209] usb 4-1: USB disconnect, device number 61 [ 298.090049][ T9070] netlink: 165 bytes leftover after parsing attributes in process `syz.2.985'. [ 298.243820][ T30] audit: type=1326 audit(1757571677.507:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.3.987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd8f8eba9 code=0x0 [ 298.347387][ T5868] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 298.366160][ T5930] usb 1-1: USB disconnect, device number 100 [ 298.507821][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 298.515224][ T5868] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 298.531216][ T5868] usb 3-1: config 0 has no interface number 0 [ 298.538066][ T5868] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 298.551463][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.566621][ T5868] usb 3-1: config 0 descriptor?? [ 298.586093][ T5868] speedtch 3-1:0.168: speedtch_bind: wrong device class 176 [ 298.603529][ T5868] speedtch 3-1:0.168: usbatm_usb_probe: bind failed: -19! [ 298.606513][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.988'. [ 298.631484][ T1209] usb 2-1: USB disconnect, device number 102 [ 298.786175][ T5868] usb 3-1: USB disconnect, device number 104 [ 299.065393][ T1209] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 299.253687][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 299.285030][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.305557][ T1209] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.347096][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.364769][ T1209] usb 2-1: config 0 descriptor?? [ 299.381875][ T1209] pwc: Askey VC010 type 2 USB webcam detected. [ 299.669429][ T9099] loop6: detected capacity change from 0 to 1 [ 299.681344][ T9099] Dev loop6: unable to read RDB block 1 [ 299.687790][ T9099] loop6: unable to read partition table [ 299.693758][ T9099] loop6: partition table beyond EOD, truncated [ 299.714994][ T9099] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.784300][ T1209] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.793128][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.797523][ T5930] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 299.857784][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.889161][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.906831][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.916739][ T1209] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.979456][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.991924][ T9104] netlink: 348 bytes leftover after parsing attributes in process `syz.0.997'. [ 299.993043][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 300.010874][ T5930] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 300.015933][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 300.020580][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.048937][ T5930] usb 4-1: config 0 descriptor?? [ 300.128273][ T1209] pwc: recv_control_msg error -71 req 04 val 1000 [ 300.135222][ T1209] pwc: recv_control_msg error -71 req 04 val 1300 [ 300.145035][ T1209] pwc: recv_control_msg error -71 req 04 val 1400 [ 300.152285][ T1209] pwc: recv_control_msg error -71 req 02 val 2000 [ 300.163226][ T1209] pwc: recv_control_msg error -71 req 02 val 2100 [ 300.170267][ T1209] pwc: recv_control_msg error -71 req 04 val 1500 [ 300.177116][ T1209] pwc: recv_control_msg error -71 req 02 val 2500 [ 300.184888][ T1209] pwc: recv_control_msg error -71 req 02 val 2400 [ 300.191959][ T1209] pwc: recv_control_msg error -71 req 02 val 2600 [ 300.202807][ T1209] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.210030][ T1209] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.220023][ T1209] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.226940][ T1209] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.236714][ T1209] pwc: Registered as video103. [ 300.247070][ T1209] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 300.275521][ T1209] usb 2-1: USB disconnect, device number 103 [ 300.718615][ T1209] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 300.741790][ T5930] Bluetooth: Can't get version to change to load ram patch err [ 300.752125][ T5930] Bluetooth: Loading sysconfig file failed [ 300.759055][ T5930] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 300.770680][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 300.774144][ T5930] usb 4-1: USB disconnect, device number 62 [ 300.887706][ T1209] usb 3-1: Using ep0 maxpacket: 8 [ 300.911219][ T1209] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.929577][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.950077][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.970139][ T1209] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.985816][ T1209] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.994995][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.003277][ T9123] loop6: detected capacity change from 0 to 1 [ 301.013149][ T7046] Dev loop6: unable to read RDB block 1 [ 301.019599][ T7046] loop6: unable to read partition table [ 301.025729][ T7046] loop6: partition table beyond EOD, truncated [ 301.034732][ T9123] Dev loop6: unable to read RDB block 1 [ 301.049740][ T9123] loop6: unable to read partition table [ 301.056256][ T9123] loop6: partition table beyond EOD, truncated [ 301.064939][ T9123] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.245304][ T1209] usb 3-1: GET_CAPABILITIES returned 0 [ 301.262972][ T1209] usbtmc 3-1:16.0: can't read capabilities [ 301.458012][ T5953] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 301.587340][ T5930] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 301.607543][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 301.616885][ T5953] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 301.626312][ T5953] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 301.640059][ T5953] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.652950][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 301.665793][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.667340][ T5923] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 301.674357][ T5953] usb 2-1: Product: syz [ 301.689603][ T5953] usb 2-1: Manufacturer: syz [ 301.694388][ T5953] usb 2-1: SerialNumber: syz [ 301.705718][ T5953] usb 2-1: config 0 descriptor?? [ 301.737329][ T5930] usb 4-1: device descriptor read/64, error -71 [ 301.763395][ T5868] usb 3-1: USB disconnect, device number 105 [ 301.849995][ T5923] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 301.861825][ T5923] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.873679][ T5923] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 301.883013][ T5923] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 301.891359][ T5923] usb 1-1: Manufacturer: syz [ 301.895998][ T5923] usb 1-1: SerialNumber: syz [ 301.935997][ T5953] usb 2-1: USB disconnect, device number 104 [ 301.977667][ T5930] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 302.107335][ T5930] usb 4-1: device descriptor read/64, error -71 [ 302.115625][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.124816][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.135191][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.145468][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.163738][ T5923] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 302.178718][ T5923] usb 1-1: USB disconnect, device number 101 [ 302.219366][ T5930] usb usb4-port1: attempt power cycle [ 302.447607][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 302.557297][ T5930] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 302.594991][ T5930] usb 4-1: device descriptor read/8, error -71 [ 302.696428][ T9147] loop3: detected capacity change from 0 to 7 [ 302.712296][ T9147] Dev loop3: unable to read RDB block 7 [ 302.727533][ T9147] loop3: unable to read partition table [ 302.733432][ T9147] loop3: partition table beyond EOD, truncated [ 302.758412][ T9147] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.772337][ T9153] loop6: detected capacity change from 0 to 1 [ 302.780911][ T5864] Dev loop6: unable to read RDB block 1 [ 302.786558][ T5864] loop6: unable to read partition table [ 302.793662][ T5864] loop6: partition table beyond EOD, truncated [ 302.802138][ T9153] Dev loop6: unable to read RDB block 1 [ 302.818584][ T9153] loop6: unable to read partition table [ 302.826970][ T9153] loop6: partition table beyond EOD, truncated [ 302.834578][ T1209] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 302.841043][ T9153] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.855919][ T5930] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 302.878909][ T5930] usb 4-1: device descriptor read/8, error -71 [ 302.998105][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 302.998425][ T5930] usb usb4-port1: unable to enumerate USB device [ 303.009742][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.009793][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.072141][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.085937][ T1209] usb 2-1: config 0 descriptor?? [ 303.099715][ T1209] hub 2-1:0.0: bad descriptor, ignoring hub [ 303.113996][ T1209] hub 2-1:0.0: probe with driver hub failed with error -5 [ 303.139517][ T1209] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 303.143087][ T9164] netlink: 'syz.2.1018': attribute type 21 has an invalid length. [ 303.155862][ T9164] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1018'. [ 303.185278][ T9165] PM: Enabling pm_trace changes system date and time during resume. [ 303.185278][ T9165] PM: Correct system time has to be restored manually after resume. [ 303.191013][ T9164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1018'. [ 303.276476][ T9168] dvmrp0: entered allmulticast mode [ 303.302759][ T9170] tipc: Started in network mode [ 303.307833][ T9170] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 303.317667][ T9170] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 303.327020][ T9170] tipc: Enabled bearer , priority 10 [ 303.348161][ T9170] Bluetooth: MGMT ver 1.23 [ 303.687372][ T1209] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 303.841090][ T1209] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 303.851599][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.862896][ T1209] usb 1-1: config 0 descriptor?? [ 304.248471][ T5930] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 304.408345][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 304.416593][ T5930] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 304.428394][ T5930] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.440182][ T5923] tipc: Node number set to 1 [ 304.450051][ T5930] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.466462][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.476494][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.486215][ T5930] usb 3-1: Product: syz [ 304.490522][ T5930] usb 3-1: Manufacturer: syz [ 304.495170][ T5930] usb 3-1: SerialNumber: syz [ 304.747401][ T5868] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 304.909199][ T5868] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 304.919142][ T5930] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 304.926580][ T5868] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 304.937026][ T5868] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 304.947605][ T5868] usb 4-1: config 220 has no interface number 2 [ 304.953957][ T5868] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 304.967342][ T5868] usb 4-1: config 220 interface 0 has no altsetting 0 [ 304.975388][ T5868] usb 4-1: config 220 interface 76 has no altsetting 0 [ 304.983863][ T5868] usb 4-1: config 220 interface 1 has no altsetting 0 [ 304.993841][ T5868] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 305.004265][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.012371][ T5868] usb 4-1: Product: syz [ 305.016584][ T5868] usb 4-1: Manufacturer: syz [ 305.021421][ T5868] usb 4-1: SerialNumber: syz [ 305.083149][ T1209] usb 1-1: Cannot set autoneg [ 305.090885][ T1209] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 305.110337][ T1209] usb 1-1: USB disconnect, device number 102 [ 305.236223][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.245635][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.265139][ T5868] usb 4-1: selecting invalid altsetting 0 [ 305.271760][ T5868] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 305.278536][ T5868] usb 4-1: No valid video chain found. [ 305.293431][ T5868] usb 4-1: selecting invalid altsetting 0 [ 305.299799][ T5868] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 305.312143][ T5868] usb 4-1: USB disconnect, device number 67 [ 305.648976][ T9184] netlink: 'syz.1.1023': attribute type 10 has an invalid length. [ 305.658606][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.666387][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.705293][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.712614][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.721417][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.728780][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.747662][ T2152] usb 2-1: USB disconnect, device number 105 [ 305.770534][ T9184] : (slave bridge0): Enslaving as an active interface with an up link [ 305.779246][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 305.824196][ T9187] bridge_slave_1: left allmulticast mode [ 305.856189][ T9187] bridge_slave_1: left promiscuous mode [ 305.864992][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.893200][ T9187] bridge_slave_0: left allmulticast mode [ 305.904472][ T9187] bridge_slave_0: left promiscuous mode [ 305.915278][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.946563][ T9192] fuse: Unknown parameter 'smackfsfloor' [ 306.009796][ T9187] : (slave bridge0): Releasing backup interface [ 306.308009][ T2152] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 306.359981][ T9204] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1030'. [ 306.415427][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 306.448902][ T2152] usb 2-1: device descriptor read/64, error -71 [ 306.707373][ T2152] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 306.847413][ T2152] usb 2-1: device descriptor read/64, error -71 [ 306.858076][ T5909] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 306.917663][ T1209] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 306.936748][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.946008][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.957897][ T2152] usb usb2-port1: attempt power cycle [ 307.023699][ T5909] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 307.042422][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.062065][ T5909] usb 4-1: config 0 descriptor?? [ 307.079218][ T1209] usb 1-1: Using ep0 maxpacket: 8 [ 307.100896][ T1209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 307.118648][ T1209] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 307.133465][ T1209] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 307.145278][ T1209] usb 1-1: config 17 has no interface number 0 [ 307.156725][ T1209] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7 [ 307.172213][ T1209] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024 [ 307.183887][ T1209] usb 1-1: config 17 interface 8 has no altsetting 0 [ 307.199474][ T1209] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 307.215228][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.223547][ T1209] usb 1-1: Product: syz [ 307.232339][ T1209] usb 1-1: Manufacturer: syz [ 307.237147][ T1209] usb 1-1: SerialNumber: syz [ 307.307373][ T2152] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 307.331549][ T2152] usb 2-1: device descriptor read/8, error -71 [ 307.494287][ T5909] hid_parser_main: 28 callbacks suppressed [ 307.494319][ T5909] nti 0003:0757:0A00.002E: unknown main item tag 0x0 [ 307.508563][ T5909] nti 0003:0757:0A00.002E: unknown main item tag 0x0 [ 307.515324][ T5909] nti 0003:0757:0A00.002E: unknown main item tag 0x0 [ 307.522518][ T5909] nti 0003:0757:0A00.002E: unknown main item tag 0x0 [ 307.529942][ T5909] nti 0003:0757:0A00.002E: unknown main item tag 0x0 [ 307.543410][ T5909] nti 0003:0757:0A00.002E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 307.577630][ T2152] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 307.622385][ T2152] usb 2-1: device descriptor read/8, error -71 [ 307.752283][ T2152] usb usb2-port1: unable to enumerate USB device [ 307.905500][ T5909] usb 4-1: USB disconnect, device number 68 [ 307.994498][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.060757][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.125276][ T5930] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 308.183936][ T1209] usb 1-1: selecting invalid altsetting 0 [ 308.195887][ T5930] usb 3-1: USB disconnect, device number 106 [ 308.199413][ T1209] usb 1-1: 8:6 : no UAC_FORMAT_TYPE desc [ 308.224622][ T1209] usb 1-1: selecting invalid altsetting 0 [ 308.285813][ T1209] usb 1-1: USB disconnect, device number 103 [ 308.396680][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.417310][ T5909] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 308.421020][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.857274][ T1209] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 309.037445][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 309.062348][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.080681][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.092917][ T1209] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 309.106078][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.159104][ T1209] usb 1-1: config 0 descriptor?? [ 309.160269][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 309.779163][ T1209] usb 1-1: language id specifier not provided by device, defaulting to English [ 309.980647][ T1209] letsketch 0003:6161:4D15.002F: Device info: ã [ 310.181173][ T1209] letsketch 0003:6161:4D15.002F: Device info: à° [ 310.307452][ T5909] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 310.350065][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 310.410663][ T1209] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 310.420065][ T1209] letsketch 0003:6161:4D15.002F: probe with driver letsketch failed with error -71 [ 310.434143][ T1209] usb 1-1: USB disconnect, device number 104 [ 310.507458][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 310.515859][ T5909] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 310.524880][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.535501][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.547921][ T5909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.557214][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.565281][ T5909] usb 3-1: Product: syz [ 310.570263][ T5909] usb 3-1: Manufacturer: syz [ 310.574902][ T5909] usb 3-1: SerialNumber: syz [ 310.597742][ T5930] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 310.697296][ T980] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 310.760962][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.772161][ T5930] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 310.781340][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.794314][ T5930] usb 4-1: config 0 descriptor?? [ 310.861905][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.873430][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.883325][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.892519][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.904142][ T980] usb 2-1: config 0 descriptor?? [ 310.925670][ T980] hub 2-1:0.0: USB hub found [ 311.020797][ T5930] acrux 0003:1A34:F705.0030: unexpected long global item [ 311.028171][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.037060][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.040064][ T5909] usb 3-1: 0:2 : does not exist [ 311.053538][ T5930] acrux 0003:1A34:F705.0030: parse failed [ 311.060415][ T5930] acrux 0003:1A34:F705.0030: probe with driver acrux failed with error -22 [ 311.115974][ T5953] usb 4-1: USB disconnect, device number 70 [ 311.125282][ T980] hub 2-1:0.0: 2 ports detected [ 311.238878][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.251112][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.327704][ T980] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 311.335070][ T980] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 311.346370][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 311.352838][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 311.388304][ T980] usb 2-1: USB disconnect, device number 110 [ 311.407310][ T5868] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 311.465452][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.474635][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.492854][ T5909] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 311.513934][ T5909] usb 3-1: USB disconnect, device number 107 [ 311.544740][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.561215][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 311.571351][ T5868] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 124, changing to 10 [ 311.585617][ T5868] usb 1-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.40 [ 311.601308][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.610421][ T5868] usb 1-1: Product: syz [ 311.614777][ T5868] usb 1-1: Manufacturer: syz [ 311.621709][ T5868] usb 1-1: SerialNumber: syz [ 311.848717][ T5868] usbhid 1-1:1.0: can't add hid device: -71 [ 311.854933][ T5868] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 311.866925][ T5868] usb 1-1: USB disconnect, device number 105 [ 312.049889][ T9313] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 312.062110][ T9313] bond0: (slave sit0): Error -95 calling set_mac_address [ 312.207807][ T5909] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 312.380335][ T5909] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 312.397234][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.410389][ T5909] usb 2-1: config 0 descriptor?? [ 312.473337][ T9328] loop6: detected capacity change from 0 to 1 [ 312.486592][ T9328] Dev loop6: unable to read RDB block 1 [ 312.494966][ T9328] loop6: unable to read partition table [ 312.517771][ T9328] loop6: partition table beyond EOD, truncated [ 312.529243][ T9328] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.619707][ T5909] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 312.667597][ T5909] asix 2-1:0.0: probe with driver asix failed with error -71 [ 312.711243][ T5909] usb 2-1: USB disconnect, device number 111 [ 312.944012][ T9344] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 312.967673][ T9344] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 312.986856][ T9344] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 313.002388][ T9344] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 313.016173][ T9344] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 313.025692][ T9344] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 313.034402][ T9344] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 313.042091][ T9344] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 313.048925][ T9344] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 313.056111][ T9344] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 313.064846][ T9344] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 313.071537][ T9344] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 313.078648][ T9344] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 313.085452][ T9344] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 313.222591][ T9352] IPVS: set_ctl: invalid protocol: 9632 0.0.0.0:0 [ 313.235370][ T9352] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 313.257473][ T5930] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 313.394966][ T9356] loop6: detected capacity change from 0 to 1 [ 313.412666][ T9356] Dev loop6: unable to read RDB block 1 [ 313.431676][ T9356] loop6: unable to read partition table [ 313.437914][ T9356] loop6: partition table beyond EOD, truncated [ 313.441981][ T5930] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 313.447593][ T9356] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.461599][ T5930] usb 4-1: config 0 has no interface number 0 [ 313.468297][ T5930] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 313.478902][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.520986][ T5930] usb 4-1: config 0 descriptor?? [ 313.539613][ T5930] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 313.546044][ T5930] gspca_mr97310a: reg write [21] error -22 [ 313.557020][ T5930] mr97310a 4-1:0.57: probe with driver mr97310a failed with error -22 [ 313.736887][ T980] usb 4-1: USB disconnect, device number 71 [ 313.928009][ T5909] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 314.095121][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 314.106263][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 314.116475][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 314.140019][ T1209] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 314.150525][ T5909] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 314.163988][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.173073][ T5909] usb 2-1: Product: syz [ 314.180646][ T5909] usb 2-1: Manufacturer: syz [ 314.185534][ T5909] usb 2-1: SerialNumber: syz [ 314.195972][ T5909] usb 2-1: config 0 descriptor?? [ 314.277604][ T1209] usb 1-1: device descriptor read/64, error -71 [ 314.407700][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 314.419754][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.429571][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.450109][ T5909] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.468570][ T5916] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 314.539046][ T1209] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 314.556233][ T5909] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 314.578372][ T5909] usb 2-1: USB disconnect, device number 112 [ 314.626175][ T7047] udevd[7047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.648882][ T5916] usb 3-1: device descriptor read/64, error -71 [ 314.677828][ T1209] usb 1-1: device descriptor read/64, error -71 [ 314.697275][ T9383] Dead loop on virtual device ip6_vti0, fix it urgently! [ 314.791059][ T1209] usb usb1-port1: attempt power cycle [ 314.827525][ T9385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1090'. [ 314.908618][ T5916] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 315.057325][ T5916] usb 3-1: device descriptor read/64, error -71 [ 315.147437][ T1209] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 315.174730][ T1209] usb 1-1: device descriptor read/8, error -71 [ 315.181356][ T5916] usb usb3-port1: attempt power cycle [ 315.237500][ T5909] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 315.397476][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 315.404460][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.414839][ T5909] usb 2-1: config 0 has no interfaces? [ 315.421318][ T1209] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 315.429115][ T5909] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 315.438358][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.450723][ T5909] usb 2-1: config 0 descriptor?? [ 315.458692][ T1209] usb 1-1: device descriptor read/8, error -71 [ 315.507487][ T5953] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 315.537405][ T5916] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 315.567609][ T1209] usb usb1-port1: unable to enumerate USB device [ 315.575879][ T5916] usb 3-1: device descriptor read/8, error -71 [ 315.661098][ T5953] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 315.670129][ T9392] netlink: 'syz.1.1092': attribute type 3 has an invalid length. [ 315.670738][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.692486][ T5953] usb 4-1: config 0 descriptor?? [ 315.698720][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 315.730102][ T5930] usb 2-1: USB disconnect, device number 113 [ 315.741642][ T5868] IPVS: starting estimator thread 0... [ 315.828505][ T5916] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 315.837356][ T9405] IPVS: using max 31 ests per chain, 74400 per kthread [ 315.858000][ T5916] usb 3-1: device descriptor read/8, error -71 [ 315.967983][ T5916] usb usb3-port1: unable to enumerate USB device [ 316.318907][ T5953] usb 4-1: string descriptor 0 read error: -71 [ 316.334048][ T5953] uclogic 0003:5543:3031.0031: failed retrieving string descriptor #200: -71 [ 316.350487][ T5953] uclogic 0003:5543:3031.0031: failed retrieving pen parameters: -71 [ 316.359980][ T5953] uclogic 0003:5543:3031.0031: failed probing pen v2 parameters: -71 [ 316.369053][ T5953] uclogic 0003:5543:3031.0031: failed probing parameters: -71 [ 316.376831][ T5953] uclogic 0003:5543:3031.0031: probe with driver uclogic failed with error -71 [ 316.392585][ T5953] usb 4-1: USB disconnect, device number 72 [ 316.589869][ T5916] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 316.747397][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 316.756978][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.765937][ T5916] usb 2-1: config 255 has an invalid interface number: 48 but max is 0 [ 316.774305][ T5916] usb 2-1: config 255 has no interface number 0 [ 316.780775][ T5916] usb 2-1: config 255 interface 48 has no altsetting 0 [ 316.789977][ T5916] usb 2-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 316.799293][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.807391][ T5916] usb 2-1: Product: syz [ 316.811630][ T5916] usb 2-1: Manufacturer: syz [ 316.816682][ T5916] usb 2-1: SerialNumber: syz [ 317.093408][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.120468][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.136686][ T9421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1101'. [ 317.149394][ T5953] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 317.253391][ T9425] tc_dump_action: action bad kind [ 317.333350][ T5953] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 317.353551][ T5953] usb 4-1: config 0 has no interface number 0 [ 317.376919][ T5953] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 317.397424][ T5953] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 317.436128][ T5953] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 317.446852][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.475773][ T5953] usb 4-1: Product: syz [ 317.486296][ T9433] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 317.487219][ T5953] usb 4-1: Manufacturer: syz [ 317.495004][ T9433] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1104'. [ 317.504029][ T5953] usb 4-1: SerialNumber: syz [ 317.516595][ T5953] usb 4-1: config 0 descriptor?? [ 317.524287][ T5916] em28xx 2-1:255.48: audio device (2013:024f): interface 48, class 1 [ 317.536291][ T5953] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 317.543258][ T5916] usb 2-1: USB disconnect, device number 114 [ 317.687886][ T5930] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 317.736726][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.752570][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.766550][ T5953] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 317.791985][ T5953] usb 4-1: USB disconnect, device number 73 [ 317.816901][ T5953] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 317.840424][ T5953] cypress_m8 4-1:0.35: device disconnected [ 317.859611][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.887894][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 317.905240][ T5930] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 317.920275][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= d.40 [ 317.930117][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.939054][ T5930] usb 3-1: Product: syz [ 317.943265][ T5930] usb 3-1: Manufacturer: syz [ 317.948062][ T5930] usb 3-1: SerialNumber: syz [ 318.098431][ T9443] netlink: 'syz.1.1106': attribute type 27 has an invalid length. [ 318.466302][ T5930] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 318.583188][ T5930] usb 3-1: USB disconnect, device number 112 [ 318.622709][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.638142][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.645442][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.727519][ T9450] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 318.811628][ T9443] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 318.837238][ T9443] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 318.927686][ T9450] usb 1-1: Using ep0 maxpacket: 32 [ 318.952796][ T9450] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.984328][ T9450] usb 1-1: config 0 has no interface number 0 [ 319.020257][ T9450] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.060750][ T9450] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.103165][ T9450] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 319.153828][ T9450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.166738][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 319.193633][ T9450] usb 1-1: config 0 descriptor?? [ 319.390658][ T9479] Bluetooth: MGMT ver 1.23 [ 319.587974][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.630211][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.696712][ T9484] overlay: ./bus is not a directory [ 319.699314][ T9478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.771407][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.807304][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.865726][ T9487] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1112'. [ 319.892493][ T9450] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0032/input/input61 [ 320.060708][ T9450] uclogic 0003:28BD:0094.0032: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 320.399028][ T9456] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 320.849756][ T9456] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.863471][ T9456] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.882762][ T9456] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.906923][ T9456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.927772][ T9456] usb 2-1: SerialNumber: syz [ 321.172934][ T9456] usb 2-1: 0:2 : does not exist [ 321.294885][ T9456] usb 2-1: USB disconnect, device number 115 [ 321.504943][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.586702][ T9468] usb 1-1: USB disconnect, device number 110 [ 322.348919][ T9449] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 322.444972][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.452170][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.527425][ T9449] usb 2-1: Using ep0 maxpacket: 32 [ 322.535067][ T9449] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.555375][ T30] audit: type=1326 audit(1757571701.817:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3858eba9 code=0x7fc00000 [ 322.599892][ T9449] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.624785][ T9449] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.645308][ T9449] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 322.663991][ T9449] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.681127][ T9449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.690566][ T9449] usb 2-1: Product: syz [ 322.694899][ T9449] usb 2-1: Manufacturer: syz [ 322.705014][ T9449] usb 2-1: SerialNumber: syz [ 323.057475][ T9455] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 323.219408][ T9455] usb 1-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 323.233147][ T9455] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.264649][ T9455] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.282565][ T9455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.304721][ T9455] usb 1-1: Product: syz [ 323.324008][ T9455] usb 1-1: Manufacturer: syz [ 323.335805][ T9455] usb 1-1: SerialNumber: syz [ 323.561558][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.579266][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.625579][ T9455] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 323.654761][ T9455] usb 1-1: USB disconnect, device number 111 [ 323.744446][ T9526] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 323.753929][ T9526] overlayfs: missing 'lowerdir' [ 323.765178][ T9449] cdc_ncm 2-1:1.0: bind() failure [ 323.782525][ T9449] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 323.801246][ T9449] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 323.820910][ T9449] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 323.850852][ T9449] usb 2-1: USB disconnect, device number 116 [ 323.927686][ T9450] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 324.089225][ T9450] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 324.107289][ T9450] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 324.127262][ T9450] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 324.128862][ T9455] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 324.149303][ T9450] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 324.167505][ T9450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.175752][ T9450] usb 3-1: Product: syz [ 324.192397][ T9450] usb 3-1: Manufacturer: syz [ 324.207280][ T9450] usb 3-1: SerialNumber: syz [ 324.215114][ T9450] usb 3-1: config 0 descriptor?? [ 324.222956][ T9554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 324.237412][ T9554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 324.270842][ T9450] usb 3-1: ucan: probing device on interface #0 [ 324.287401][ T9455] usb 1-1: device descriptor read/64, error -71 [ 324.537401][ T9455] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 324.549038][ T9468] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 324.558490][ T9559] batadv_slave_0: entered promiscuous mode [ 324.598720][ T9559] batadv_slave_0: left promiscuous mode [ 324.697654][ T9455] usb 1-1: device descriptor read/64, error -71 [ 324.717614][ T9468] usb 4-1: Using ep0 maxpacket: 32 [ 324.727620][ T9468] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 324.771200][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.787239][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.814332][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.831291][ T9455] usb usb1-port1: attempt power cycle [ 324.837432][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.851200][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.868906][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.886521][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.897459][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.917752][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.925792][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.933466][ T9450] ucan 3-1:0.0 can0: registered device [ 324.939323][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.939349][ T9468] usb 4-1: config 0 has no interface number 0 [ 324.940523][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.991207][ T9468] usb 4-1: config 0 has no interface number 0 [ 325.008913][ T9468] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.027486][ T9468] usb 4-1: config 0 has no interface number 0 [ 325.037031][ T9468] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 325.057715][ T9468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.065768][ T9468] usb 4-1: Product: syz [ 325.077273][ T9468] usb 4-1: Manufacturer: syz [ 325.087961][ T9468] usb 4-1: SerialNumber: syz [ 325.103236][ T9468] usb 4-1: config 0 descriptor?? [ 325.120553][ T9468] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 325.172313][ T9562] syzkaller1: entered promiscuous mode [ 325.178162][ T9455] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 325.197434][ T9562] syzkaller1: entered allmulticast mode [ 325.203757][ T9455] usb 1-1: device descriptor read/8, error -71 [ 325.342945][ T9468] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 325.458314][ T9455] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 325.479179][ T9450] ucan 3-1:0.0 can0: firmware string: unknown [ 325.498227][ T9455] usb 1-1: device descriptor read/8, error -71 [ 325.533824][ T9450] usb 3-1: USB disconnect, device number 113 [ 325.608464][ T9455] usb usb1-port1: unable to enumerate USB device [ 326.000262][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 326.168118][ T9449] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 326.337237][ T9449] usb 2-1: Using ep0 maxpacket: 16 [ 326.351604][ T9449] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 326.363852][ T9449] usb 2-1: config 0 has no interface number 0 [ 326.385875][ T9449] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 326.419910][ T9449] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 326.443232][ T9449] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 326.457636][ T9449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.474931][ T9449] usb 2-1: Product: syz [ 326.485275][ T9449] usb 2-1: Manufacturer: syz [ 326.495785][ T9449] usb 2-1: SerialNumber: syz [ 326.512340][ T9449] usb 2-1: config 0 descriptor?? [ 326.542007][ T9577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.583132][ T9577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.587268][ T30] audit: type=1326 audit(1757571705.827:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd8f8eba9 code=0x7fc00000 [ 326.647902][ T9450] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 326.733344][ T9468] usb 4-1: USB disconnect, device number 74 [ 326.765486][ T9468] etas_es58x 4-1:0.2: Disconnecting syz syz [ 326.819557][ T9450] usb 1-1: Using ep0 maxpacket: 8 [ 326.842648][ T9577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.861384][ T9450] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.883673][ T9577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.904544][ T9450] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.936400][ T9450] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 48160, setting to 1024 [ 326.948744][ T9450] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 326.959187][ T9450] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.972829][ T9450] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.987256][ T9450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.219691][ T9591] could not allocate digest TFM handle hmac(sha1-avx2) [ 327.255056][ T9450] usb 1-1: GET_CAPABILITIES returned 0 [ 327.273381][ T9450] usbtmc 1-1:16.0: can't read capabilities [ 327.464872][ T9450] usb 1-1: USB disconnect, device number 116 [ 327.543875][ T9449] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 327.565431][ T9449] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 327.600489][ T9449] asix 2-1:0.251: probe with driver asix failed with error -71 [ 327.638904][ T9449] usb 2-1: USB disconnect, device number 117 [ 327.917648][ T9468] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 328.096442][ T9468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.127805][ T9468] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 328.145396][ T9468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.198468][ T9468] usb 4-1: config 0 descriptor?? [ 328.287968][ T9449] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 328.416428][ T9468] usbhid 4-1:0.0: can't add hid device: -71 [ 328.452511][ T9468] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.479633][ T9449] usb 1-1: not running at top speed; connect to a high speed hub [ 328.490715][ T9468] usb 4-1: USB disconnect, device number 75 [ 328.504493][ T9449] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.530656][ T9449] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 328.542920][ T9449] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.572897][ T9449] usb 1-1: config 1 interface 0 has no altsetting 0 [ 328.605677][ T9449] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.40 [ 328.646847][ T9449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.667460][ T9449] usb 1-1: Product: 擓⇃焈î½ê£µï¿›î¹îž›äª¢ãƒ™ç‹”診⿧襱绀䂼䴟弡æ âƒ’햴馶è›ã†¦ëœ•æ–Šâ¶²èšî®ºëŽŽéº¢ä¨®ìš´ê›¥ë­Ÿè¼²ë·¦ê¨¥è§²ç‹¯á²Šà¸µâ©¢áŽ¾ì®ºå­Žá½ºå’ºèž‘á±¾æ„•î…‰îŠ¶è’­èŸ€ã¹—ï䟊정௶è•㞗똪áŠå¥¥È¤ì”·ã¤µã½¿ê¹°é¶æ…« [ 328.700516][ T9449] usb 1-1: Manufacturer: ㊠[ 328.708301][ T9449] usb 1-1: SerialNumber: ≠[ 328.731214][ T9620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.757516][ T9620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.849152][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 328.929614][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 328.957419][ T9468] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 329.117412][ T9447] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 329.123756][ T9468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.140801][ T9468] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.150084][ T9468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.161142][ T9468] usb 4-1: config 0 descriptor?? [ 329.172727][ T9620] fuse: Bad value for 'group_id' [ 329.178100][ T9620] fuse: Bad value for 'group_id' [ 329.228707][ T9449] usbhid 1-1:1.0: can't add hid device: -71 [ 329.234858][ T9449] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 329.254409][ T9449] usb 1-1: USB disconnect, device number 117 [ 329.257585][ T5930] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 329.282318][ T9447] usb 2-1: config 4 has an invalid interface number: 53 but max is 1 [ 329.292982][ T9447] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 329.303176][ T9447] usb 2-1: config 4 has no interface number 1 [ 329.314228][ T9447] usb 2-1: config 4 interface 0 altsetting 3 endpoint 0x8 is Bulk; changing to Interrupt [ 329.329623][ T9447] usb 2-1: config 4 interface 0 altsetting 3 has an endpoint descriptor with address 0x91, changing to 0x81 [ 329.343133][ T9447] usb 2-1: config 4 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 30544, setting to 8 [ 329.364045][ T9447] usb 2-1: config 4 interface 0 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 329.380489][ T9447] usb 2-1: config 4 interface 0 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 329.392442][ T9447] usb 2-1: config 4 interface 0 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 329.405319][ T9447] usb 2-1: config 4 interface 0 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 329.421744][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 329.432801][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 329.447313][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 329.450140][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 329.465029][ T5930] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.465140][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 329.477324][ T5930] usb 3-1: config 0 has no interface number 0 [ 329.493306][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 329.503415][ T5930] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.516068][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 329.529479][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 329.537271][ T5930] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.541569][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0x9 has invalid maxpacket 4924, setting to 8 [ 329.561711][ T5930] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 329.561745][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.585693][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 329.587384][ T5930] usb 3-1: config 0 descriptor?? [ 329.600579][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 329.615687][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 329.627064][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 329.657825][ T9447] usb 2-1: config 4 interface 53 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 329.671279][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 329.682334][ T9447] usb 2-1: config 4 interface 53 altsetting 3 endpoint 0xD has invalid wMaxPacketSize 0 [ 329.693161][ T9447] usb 2-1: config 4 interface 0 has no altsetting 0 [ 329.702022][ T9447] usb 2-1: config 4 interface 53 has no altsetting 0 [ 329.796727][ T9653] : renamed from bond_slave_0 (while UP) [ 329.848490][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.869729][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.090378][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.102682][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.327432][ T5930] uclogic 0003:28BD:0094.0033: pen parameters not found [ 330.334504][ T5930] uclogic 0003:28BD:0094.0033: interface is invalid, ignoring [ 330.440409][ T9450] usb 3-1: USB disconnect, device number 114 [ 330.487586][ T9449] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 330.691093][ T9449] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.700570][ T9449] usb 1-1: config 114 has an invalid interface number: 227 but max is 0 [ 330.709842][ T9449] usb 1-1: config 114 has no interface number 0 [ 330.716354][ T9449] usb 1-1: config 114 interface 227 altsetting 4 endpoint 0x1 has an invalid bInterval 126, changing to 10 [ 330.728553][ T9449] usb 1-1: config 114 interface 227 has no altsetting 0 [ 330.740800][ T9449] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=69.2d [ 330.750578][ T9449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.759925][ T9449] usb 1-1: Product: syz [ 330.764234][ T9449] usb 1-1: Manufacturer: syz [ 330.769716][ T9449] usb 1-1: SerialNumber: syz [ 330.875756][ T9468] usbhid 4-1:0.0: can't add hid device: -71 [ 330.894913][ T9468] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 330.923977][ T9468] usb 4-1: USB disconnect, device number 76 [ 331.011385][ T9661] x_tables: ip_tables: udp match: only valid for protocol 17 [ 331.031706][ T9661] mkiss: ax0: crc mode is auto. [ 331.064191][ T9662] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿ [ 331.536813][ T9449] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.546821][ T9449] usb 1-1: invalid MIDI in EP 0 [ 331.617319][ T9450] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 331.626245][ T9449] snd-usb-audio 1-1:114.227: probe with driver snd-usb-audio failed with error -22 [ 331.647298][ T9468] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 331.661451][ T9449] usb 1-1: USB disconnect, device number 118 [ 331.698184][ T7047] udevd[7047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:114.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.787013][ T9447] usb 2-1: New USB device found, idVendor=16d8, idProduct=6007, bcdDevice=1a.55 [ 331.797642][ T9468] usb 4-1: Using ep0 maxpacket: 16 [ 331.798065][ T9447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.828848][ T9468] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.838940][ T9450] usb 3-1: config 0 has an invalid interface number: 120 but max is 2 [ 331.838983][ T9450] usb 3-1: config 0 has an invalid interface number: 127 but max is 2 [ 331.839006][ T9450] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 331.839027][ T9450] usb 3-1: config 0 has an invalid interface number: 196 but max is 2 [ 331.839049][ T9450] usb 3-1: config 0 has no interface number 0 [ 331.839068][ T9450] usb 3-1: config 0 has no interface number 1 [ 331.839086][ T9450] usb 3-1: config 0 has no interface number 2 [ 331.839186][ T9450] usb 3-1: config 0 interface 127 altsetting 252 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 331.884941][ T9468] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.892275][ T9447] usb 2-1: can't set config #4, error -71 [ 331.922059][ T9468] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.932330][ T9447] usb 2-1: USB disconnect, device number 118 [ 331.934532][ T9468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.953526][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 331.962279][ T9468] usb 4-1: Product: syz [ 331.977112][ T9468] usb 4-1: Manufacturer: syz [ 331.983043][ T9468] usb 4-1: SerialNumber: syz [ 331.986773][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 332.011373][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has an endpoint descriptor with address 0x58, changing to 0x8 [ 332.035634][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 332.066981][ T9450] usb 3-1: config 0 interface 127 altsetting 252 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 332.088648][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 332.107857][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 332.134043][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 332.155155][ T9450] usb 3-1: config 0 interface 127 altsetting 252 bulk endpoint 0xD has invalid maxpacket 64 [ 332.178836][ T9450] usb 3-1: config 0 interface 127 altsetting 252 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 332.200575][ T9450] usb 3-1: config 0 interface 127 altsetting 252 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 332.235540][ T9468] usb 4-1: 0:2 : does not exist [ 332.254904][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has a duplicate endpoint with address 0xB, skipping [ 332.273192][ T9468] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 332.283473][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 332.342582][ T9450] usb 3-1: config 0 interface 127 altsetting 252 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 332.356996][ T9468] usb 4-1: USB disconnect, device number 77 [ 332.399868][ T9450] usb 3-1: config 0 interface 196 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 332.421640][ T9450] usb 3-1: config 0 interface 120 has no altsetting 0 [ 332.441559][ T9450] usb 3-1: config 0 interface 127 has no altsetting 0 [ 332.459499][ T9450] usb 3-1: config 0 interface 196 has no altsetting 0 [ 332.488078][ T9450] usb 3-1: New USB device found, idVendor=19d2, idProduct=1115, bcdDevice=ef.dc [ 332.500931][ T9450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.511323][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.532862][ T9450] usb 3-1: Product: syz [ 332.537086][ T9450] usb 3-1: Manufacturer: syz [ 332.550276][ T9450] usb 3-1: SerialNumber: syz [ 332.592822][ T9450] usb 3-1: config 0 descriptor?? [ 332.757579][ T9447] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 332.827676][ T5930] kernel read not supported for file /video7 (pid: 5930 comm: kworker/1:6) [ 332.862477][ T9450] option 3-1:0.120: GSM modem (1-port) converter detected [ 332.924409][ T9450] option 3-1:0.196: GSM modem (1-port) converter detected [ 332.945696][ T9447] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.956009][ T9447] usb 2-1: not running at top speed; connect to a high speed hub [ 332.981343][ T9447] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 332.990038][ T9450] usb 3-1: USB disconnect, device number 115 [ 332.997221][ T9447] usb 2-1: config 3 has no interface number 0 [ 333.004067][ T9450] option 3-1:0.120: device disconnected [ 333.017501][ T9447] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 333.066080][ T9447] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 333.078990][ T9450] option 3-1:0.196: device disconnected [ 333.081593][ T9681] loop6: detected capacity change from 0 to 1 [ 333.100460][ T9447] usb 2-1: config 3 interface 106 has no altsetting 0 [ 333.121789][ T9447] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 333.122688][ T9681] Dev loop6: unable to read RDB block 1 [ 333.134233][ T9447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.150773][ T9447] usb 2-1: Product: syz [ 333.154996][ T9447] usb 2-1: Manufacturer: syz [ 333.177968][ T9447] usb 2-1: SerialNumber: syz [ 333.178147][ T9681] loop6: unable to read partition table [ 333.199001][ T9676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.218225][ T9676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.225782][ T9681] loop6: partition table beyond EOD, truncated [ 333.263996][ T9681] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.695079][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.711752][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.760103][ T9447] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 333.787352][ T9468] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 333.795914][ T9447] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 333.823690][ T9447] usb 2-1: USB disconnect, device number 119 [ 333.839410][ T9447] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 333.841260][ T9447] kobil_sct 2-1:3.106: device disconnected [ 333.957577][ T9468] usb 3-1: Using ep0 maxpacket: 32 [ 333.960864][ T9468] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.960895][ T9468] usb 3-1: config 0 has no interface number 0 [ 333.960945][ T9468] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.960975][ T9468] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.961017][ T9468] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 333.961043][ T9468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.964235][ T9468] usb 3-1: config 0 descriptor?? [ 334.010786][ T9710] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1169'. [ 334.167365][ T9450] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 334.337260][ T9450] usb 4-1: Using ep0 maxpacket: 16 [ 334.344652][ T9450] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.355451][ T9450] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.369292][ T9450] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.378989][ T9450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.387020][ T9450] usb 4-1: Product: syz [ 334.391944][ T9450] usb 4-1: Manufacturer: syz [ 334.396575][ T9450] usb 4-1: SerialNumber: syz [ 334.427374][ T5930] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 334.607912][ T5930] usb 1-1: config 2 has an invalid interface number: 35 but max is 0 [ 334.616121][ T5930] usb 1-1: config 2 has no interface number 0 [ 334.623794][ T5930] usb 1-1: config 2 interface 35 has no altsetting 0 [ 334.632252][ T9450] usb 4-1: 0:2 : does not exist [ 334.641119][ T5930] usb 1-1: string descriptor 0 read error: -22 [ 334.646290][ T9450] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 334.648023][ T5930] usb 1-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 334.664509][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.701837][ T9726] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1175'. [ 334.723585][ T9450] usb 4-1: USB disconnect, device number 78 [ 334.774351][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.800520][ T9468] uclogic 0003:28BD:0094.0034: pen parameters not found [ 334.816782][ T9468] uclogic 0003:28BD:0094.0034: interface is invalid, ignoring [ 334.826482][ T9728] loop6: detected capacity change from 0 to 1 [ 334.835705][ T9728] Dev loop6: unable to read RDB block 1 [ 334.842297][ T9728] loop6: unable to read partition table [ 334.846585][ T9468] usb 3-1: USB disconnect, device number 116 [ 334.850444][ T9728] loop6: partition table beyond EOD, truncated [ 334.865933][ T9728] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 334.903689][ T5930] usb 1-1: USB disconnect, device number 119 [ 335.275296][ T9734] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1178'. [ 335.287257][ T9456] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 335.371508][ T9734] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.420546][ T9456] usb 2-1: device descriptor read/64, error -71 [ 335.678061][ T9456] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 335.691187][ T9752] netlink: 'syz.0.1183': attribute type 21 has an invalid length. [ 335.700446][ T9752] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1183'. [ 335.713419][ T9752] tmpfs: Bad value for 'mpol' [ 335.817345][ T9456] usb 2-1: device descriptor read/64, error -71 [ 335.857330][ T9468] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 335.937853][ T9456] usb usb2-port1: attempt power cycle [ 335.987808][ T9468] usb 3-1: device descriptor read/64, error -71 [ 336.210313][ T9759] syzkaller1: entered promiscuous mode [ 336.215809][ T9759] syzkaller1: entered allmulticast mode [ 336.237374][ T9468] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 336.287382][ T9456] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 336.312603][ T9456] usb 2-1: device descriptor read/8, error -71 [ 336.369537][ T9468] usb 3-1: device descriptor read/64, error -71 [ 336.487983][ T9468] usb usb3-port1: attempt power cycle [ 336.505162][ T9763] input: syz1 as /devices/virtual/input/input62 [ 336.523449][ T9764] qnx6: unable to read the first superblock [ 336.558520][ T9456] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 336.589188][ T9456] usb 2-1: device descriptor read/8, error -71 [ 336.678303][ T9450] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 336.707610][ T9456] usb usb2-port1: unable to enumerate USB device [ 336.827251][ T9468] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 336.837388][ T9450] usb 4-1: Using ep0 maxpacket: 32 [ 336.844315][ T9450] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.847927][ T9468] usb 3-1: device descriptor read/8, error -71 [ 336.852595][ T9450] usb 4-1: config 0 has no interface number 0 [ 336.864778][ T9450] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.875717][ T9450] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.885528][ T9450] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 336.894651][ T9450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.904996][ T9450] usb 4-1: config 0 descriptor?? [ 337.097332][ T9468] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 337.115985][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.120086][ T9468] usb 3-1: device descriptor read/8, error -71 [ 337.128229][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.238200][ T9468] usb usb3-port1: unable to enumerate USB device [ 337.618832][ T9450] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0035/input/input63 [ 337.699824][ T9450] uclogic 0003:28BD:0094.0035: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 337.849973][ T9447] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 337.951128][ T9450] usb 4-1: USB disconnect, device number 79 [ 338.030429][ T9447] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 338.052235][ T9447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.081775][ T9447] pwc: Logitech/Cisco VT Camera webcam detected. [ 338.286781][ T9447] pwc: Failed to set LED on/off time (-71) [ 338.293894][ T9447] pwc: send_video_command error -71 [ 338.302719][ T9447] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 338.310790][ T9447] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 338.327286][ T9447] usb 1-1: USB disconnect, device number 120 [ 338.704725][ T9791] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 338.789486][ T9796] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 338.797528][ T9796] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1195'. [ 338.975904][ T9799] sctp: [Deprecated]: syz.0.1197 (pid 9799) Use of int in max_burst socket option deprecated. [ 338.975904][ T9799] Use struct sctp_assoc_value instead [ 338.992605][ T9468] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 339.209433][ T9468] usb 2-1: Using ep0 maxpacket: 32 [ 339.268062][ T9468] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 339.287341][ T9468] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 339.305722][ T9468] usb 2-1: Product: syz [ 339.315580][ T9468] usb 2-1: config 0 descriptor?? [ 339.565963][ T9795] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 339.575167][ T9795] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1196'. [ 339.591121][ T9795] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 339.612582][ T9468] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 339.618034][ T9447] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 339.640058][ T9468] usb 2-1: USB disconnect, device number 124 [ 339.708545][ T9456] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 339.747583][ T9448] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 339.767417][ T9447] usb 4-1: device descriptor read/64, error -71 [ 339.897378][ T9448] usb 3-1: Using ep0 maxpacket: 32 [ 339.904225][ T9448] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 339.909302][ T9456] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 339.918253][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.920563][ T9456] usb 1-1: config 0 has no interface number 0 [ 339.934496][ T9456] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=9e.2b [ 339.940098][ T9448] usb 3-1: config 0 has no interface number 0 [ 339.944962][ T9456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.963003][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.968601][ T9456] usb 1-1: config 0 descriptor?? [ 339.971848][ T9448] usb 3-1: config 0 has no interface number 0 [ 339.991350][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.010094][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.017321][ T9447] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 340.030534][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.040305][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.049595][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.059664][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.069302][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.079315][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.087047][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.105217][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.113792][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 340.125617][ T9448] usb 3-1: config 0 has no interface number 0 [ 340.136625][ T9448] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 340.149963][ T9448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.158770][ T9448] usb 3-1: Product: syz [ 340.162972][ T9448] usb 3-1: Manufacturer: syz [ 340.167883][ T9447] usb 4-1: device descriptor read/64, error -71 [ 340.177450][ T9448] usb 3-1: SerialNumber: syz [ 340.194303][ T9456] usb 1-1: USB disconnect, device number 121 [ 340.223089][ T9448] usb 3-1: config 0 descriptor?? [ 340.249417][ T9448] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 340.287637][ T9447] usb usb4-port1: attempt power cycle [ 340.445808][ T9448] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 340.627375][ T9447] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 340.656615][ T9447] usb 4-1: device descriptor read/8, error -71 [ 340.917353][ T9447] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 340.959941][ T9447] usb 4-1: device descriptor read/8, error -71 [ 341.073112][ T9447] usb usb4-port1: unable to enumerate USB device [ 341.307480][ T5930] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 341.504153][ T5930] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 341.521035][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.543095][ T5930] usb 1-1: Product: syz [ 341.551506][ T5930] usb 1-1: Manufacturer: syz [ 341.556182][ T5930] usb 1-1: SerialNumber: syz [ 341.590992][ T5930] usb 1-1: config 0 descriptor?? [ 341.634934][ T5930] usb 1-1: interface 1 not found [ 341.676903][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0061. [ 341.688116][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 341.696126][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 341.704659][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xC7D8. [ 341.705382][ T5529] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 341.715670][ C0] etas_es58x 3-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 341.715690][ C0] etas_es58x 3-1:0.2: es58x_split_urb() returned error -EBADMSG [ 341.902714][ T9456] usb 1-1: USB disconnect, device number 122 [ 341.919193][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 341.928447][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 341.937654][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 341.946877][ C0] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 341.955850][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 341.956087][ T5529] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 341.965101][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 341.985452][ T9447] usb 3-1: USB disconnect, device number 121 [ 341.994117][ T9447] etas_es58x 3-1:0.2: Disconnecting syz syz [ 342.631755][ T9859] block nbd3: not configured, cannot reconfigure [ 343.230912][ T30] audit: type=1326 audit(1757571722.497:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd311b8eba9 code=0x7fc00000 [ 343.323695][ T30] audit: type=1326 audit(1757571722.517:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd311b8eba9 code=0x7fc00000 [ 343.527866][ T9456] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 343.542229][ T9468] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 343.607695][ T9448] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 343.687652][ T9468] usb 4-1: device descriptor read/64, error -71 [ 343.725109][ T9456] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 343.733561][ T9456] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 343.746082][ T9456] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 343.747840][ T9448] usb 3-1: device descriptor read/64, error -71 [ 343.756654][ T9456] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 343.775575][ T9456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 343.786864][ T9456] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 343.808280][ T9456] usb 2-1: string descriptor 0 read error: -22 [ 343.814827][ T9456] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 343.828048][ T9456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.846405][ T9456] usb 2-1: config 0 descriptor?? [ 343.857988][ T9856] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 343.867017][ T9456] hub 2-1:0.0: bad descriptor, ignoring hub [ 343.874062][ T9456] hub 2-1:0.0: probe with driver hub failed with error -5 [ 343.899737][ T9456] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 343.957494][ T9468] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 344.017671][ T9448] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 344.082843][ T9447] usb 2-1: USB disconnect, device number 125 [ 344.111432][ T9468] usb 4-1: device descriptor read/64, error -71 [ 344.162672][ T9448] usb 3-1: device descriptor read/64, error -71 [ 344.237676][ T9468] usb usb4-port1: attempt power cycle [ 344.277760][ T9448] usb usb3-port1: attempt power cycle [ 344.597408][ T9468] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 344.632544][ T9468] usb 4-1: device descriptor read/8, error -71 [ 344.647381][ T9448] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 344.711800][ T9448] usb 3-1: device descriptor read/8, error -71 [ 344.887261][ T9468] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 344.907970][ T9468] usb 4-1: device descriptor read/8, error -71 [ 344.958096][ T9448] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 345.002680][ T9448] usb 3-1: device descriptor read/8, error -71 [ 345.031181][ T9468] usb usb4-port1: unable to enumerate USB device [ 345.127700][ T9448] usb usb3-port1: unable to enumerate USB device [ 345.157529][ T9447] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 345.307269][ T9447] usb 1-1: Using ep0 maxpacket: 32 [ 345.314593][ T9447] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.325579][ T9447] usb 1-1: config 0 has no interface number 0 [ 345.332167][ T9447] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.343714][ T9447] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.354130][ T9447] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 345.365284][ T9447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.380976][ T9447] usb 1-1: config 0 descriptor?? [ 345.477791][ T9468] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 345.647441][ T9468] usb 2-1: Using ep0 maxpacket: 32 [ 345.661987][ T9468] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 345.670384][ T9468] usb 2-1: config 0 has no interface number 0 [ 345.676532][ T9468] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.687514][ T9468] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 345.699271][ T9468] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 345.710831][ T9468] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 345.721114][ T9468] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 345.733581][ T9468] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.743599][ T9468] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 345.753697][ T9468] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 345.765127][ T9468] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 345.775343][ T9468] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.791171][ T9468] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 345.803863][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.812836][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.822367][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.832230][ T9468] usb 2-1: Product: syz [ 345.849728][ T9468] usb 2-1: Manufacturer: syz [ 345.863414][ T9468] usb 2-1: SerialNumber: syz [ 345.893319][ T9468] usb 2-1: config 0 descriptor?? [ 345.912332][ T9932] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 345.929634][ T9932] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 345.972935][ T9468] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 345.998393][ T9468] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 346.018246][ T9935] loop6: detected capacity change from 0 to 1 [ 346.030474][ T5864] Dev loop6: unable to read RDB block 1 [ 346.039928][ T9468] scsi host1: microtekX6 [ 346.058518][ T5864] loop6: unable to read partition table [ 346.064564][ T5864] loop6: partition table beyond EOD, truncated [ 346.134607][ T9935] Dev loop6: unable to read RDB block 1 [ 346.175378][ T9935] loop6: unable to read partition table [ 346.182148][ T9935] loop6: partition table beyond EOD, truncated [ 346.185489][ T9448] usb 2-1: USB disconnect, device number 126 [ 346.201659][ T9935] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.481831][ T9942] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 346.535168][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.538012][ T9447] uclogic 0003:28BD:0094.0036: pen parameters not found [ 346.552279][ T9943] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 346.571939][ T9942] : (slave batadv0): Enslaving as an active interface with an up link [ 346.583217][ T9447] uclogic 0003:28BD:0094.0036: interface is invalid, ignoring [ 346.590871][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1223'. [ 346.606957][ T9943] batadv0: entered promiscuous mode [ 346.614544][ T9943] batadv0: entered allmulticast mode [ 346.637957][ T9943] : (slave batadv0): Releasing backup interface [ 346.665665][ T9468] usb 1-1: USB disconnect, device number 123 [ 346.689617][ T9943] bridge0: port 3(batadv0) entered blocking state [ 346.696655][ T9943] bridge0: port 3(batadv0) entered disabled state [ 346.717783][ T9449] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 346.897285][ T9449] usb 4-1: Using ep0 maxpacket: 16 [ 346.933846][ T9449] usb 4-1: config 12 has an invalid interface number: 71 but max is 0 [ 346.946761][ T9449] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 346.987024][ T9449] usb 4-1: config 12 has no interface number 0 [ 347.007446][ T9449] usb 4-1: config 12 interface 71 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 347.044463][ T9449] usb 4-1: config 12 interface 71 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.062780][ T9449] usb 4-1: config 12 interface 71 has no altsetting 0 [ 347.083605][ T9449] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=8a.88 [ 347.107718][ T9449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.137915][ T9449] usb 4-1: Product: syz [ 347.142181][ T9449] usb 4-1: Manufacturer: syz [ 347.155055][ T9449] usb 4-1: SerialNumber: syz [ 347.168018][ T9456] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 347.188789][ T3503] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 347.198715][ T3503] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 347.218621][ T9949] netlink: 'syz.1.1226': attribute type 29 has an invalid length. [ 347.227119][ T9949] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1226'. [ 347.318927][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1226'. [ 347.328316][ T9949] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1226'. [ 347.330666][ T9456] usb 3-1: Using ep0 maxpacket: 32 [ 347.345788][ T9456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.363576][ T9456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.375751][ T9456] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.393936][ T9456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.401671][ T9449] usb 4-1: NFC: intf ffff88805daa1000 id ffffffff8ef6d1e0 [ 347.429625][ T9456] usb 3-1: config 0 descriptor?? [ 347.442925][ T9456] hub 3-1:0.0: USB hub found [ 347.451198][ T9449] usb 4-1: USB disconnect, device number 88 [ 347.861841][ T9456] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 347.977316][ T9449] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 348.090247][ T9456] hid-generic 0003:046D:C31C.0037: item fetching failed at offset 0/1 [ 348.126242][ T9456] hid-generic 0003:046D:C31C.0037: probe with driver hid-generic failed with error -22 [ 348.157865][ T9449] usb 2-1: Using ep0 maxpacket: 16 [ 348.182793][ T9449] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.199968][ T9449] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 348.212376][ T9449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.220491][ T9449] usb 2-1: Product: syz [ 348.224811][ T9449] usb 2-1: Manufacturer: syz [ 348.242584][ T9449] usb 2-1: SerialNumber: syz [ 348.260210][ T9449] usb 2-1: config 0 descriptor?? [ 348.279830][ T9449] hub 2-1:0.0: bad descriptor, ignoring hub [ 348.286394][ T9449] hub 2-1:0.0: probe with driver hub failed with error -5 [ 348.311375][ T9449] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.341251][ T9449] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 348.388338][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.397808][ T9468] usb 3-1: USB disconnect, device number 126 [ 348.469425][ T9456] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 348.607463][ T9456] usb 4-1: device descriptor read/64, error -71 [ 348.857391][ T9456] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 348.890529][ T5873] Bluetooth: hci3: unexpected event for opcode 0xc2bf [ 348.951814][ T9449] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 348.997503][ T9456] usb 4-1: device descriptor read/64, error -71 [ 349.108485][ T9456] usb usb4-port1: attempt power cycle [ 349.117531][ T9449] usb 1-1: Using ep0 maxpacket: 32 [ 349.133134][ T9449] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.157273][ T9449] usb 1-1: config 0 has no interface number 0 [ 349.163460][ T9449] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.202812][ T9449] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.253809][ T9449] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 349.284524][ T9449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.310553][ T9449] usb 1-1: config 0 descriptor?? [ 349.457268][ T9456] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 349.478500][ T9456] usb 4-1: device descriptor read/8, error -71 [ 349.657533][ T9448] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 349.717525][ T9456] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 349.770331][ T9456] usb 4-1: device descriptor read/8, error -71 [ 349.847225][ T9448] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 349.866209][ T9448] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 349.877776][ T9456] usb usb4-port1: unable to enumerate USB device [ 349.897339][ T9448] usb 3-1: config 0 has no interface number 0 [ 349.903667][ T9448] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 93, changing to 10 [ 349.947215][ T9448] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 25088, setting to 1024 [ 349.996697][ T9448] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.010686][ T9449] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0038/input/input66 [ 350.053955][ T9448] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 350.077504][ T9448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.099144][ T9448] usb 3-1: config 0 descriptor?? [ 350.150513][ T9449] uclogic 0003:28BD:0094.0038: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 350.163845][ T9448] gspca_main: spca561-2.14.0 probing abcd:cdee [ 350.312975][ T9448] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 350.323787][ T9448] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.331922][ T9448] usb 3-1: MIDIStreaming interface descriptor not found [ 350.418264][ T9448] usb 3-1: USB disconnect, device number 127 [ 350.787580][ T9448] usb 2-1: USB disconnect, device number 127 [ 351.157392][ T9448] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 351.317259][ T9448] usb 3-1: Using ep0 maxpacket: 8 [ 351.334433][ T9448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.349199][ T9448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.359134][ T9448] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.373529][ T9448] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 351.382838][ T9448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.398306][ T9448] usb 3-1: config 0 descriptor?? [ 351.627413][ T9456] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 351.737810][ T9468] usb 1-1: USB disconnect, device number 124 [ 351.786970][ T9456] usb 4-1: Using ep0 maxpacket: 8 [ 351.803679][ T9456] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.811662][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 351.821361][ T9448] hid (null): report_id 918307361 is invalid [ 351.827251][ T9456] usb 4-1: can't read configurations, error -61 [ 351.846822][ T9448] nzxt-kraken2 0003:1E71:170E.0039: report_id 918307361 is invalid [ 351.855076][ T9448] nzxt-kraken2 0003:1E71:170E.0039: item 0 4 1 8 parsing failed [ 351.863564][ T9448] nzxt-kraken2 0003:1E71:170E.0039: hid parse failed with -22 [ 351.874330][ T9448] nzxt-kraken2 0003:1E71:170E.0039: probe with driver nzxt-kraken2 failed with error -22 [ 351.967448][ T9456] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 351.989221][ T5930] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 351.998531][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.009338][ T5930] usb 2-1: config 0 descriptor?? [ 352.018733][ T5930] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 352.024520][ T9448] usb 3-1: USB disconnect, device number 2 [ 352.087587][ T9468] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 352.117435][ T9456] usb 4-1: Using ep0 maxpacket: 8 [ 352.125059][ T9456] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.132810][ T9456] usb 4-1: can't read configurations, error -61 [ 352.139728][ T9456] usb usb4-port1: attempt power cycle [ 352.247305][ T9468] usb 1-1: Using ep0 maxpacket: 16 [ 352.254096][ T9468] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 352.265730][ T9468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.279816][ T9468] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.289666][ T9468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.298106][ T9468] usb 1-1: Product: syz [ 352.302331][ T9468] usb 1-1: Manufacturer: syz [ 352.307624][ T9468] usb 1-1: SerialNumber: syz [ 352.314927][ T9468] usb 1-1: config 0 descriptor?? [ 352.326338][ T9468] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.335796][ T9468] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 352.423069][ T5930] gspca_sunplus: reg_w_riv err -71 [ 352.428594][ T5930] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 352.441674][ T5930] usb 2-1: USB disconnect, device number 2 [ 352.477568][ T9456] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 352.498052][ T9456] usb 4-1: Using ep0 maxpacket: 8 [ 352.505514][ T9456] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.513320][ T9456] usb 4-1: can't read configurations, error -61 [ 352.528535][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.537973][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.551221][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.560475][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.647510][ T9456] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 352.688261][ T9456] usb 4-1: Using ep0 maxpacket: 8 [ 352.710436][ T9456] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.727600][ T9456] usb 4-1: can't read configurations, error -61 [ 352.738386][ T9456] usb usb4-port1: unable to enumerate USB device [ 353.237449][ T9448] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.407264][ T9448] usb 2-1: Using ep0 maxpacket: 32 [ 353.428679][ T9448] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 353.437065][ T9448] usb 2-1: config 0 has no interface number 0 [ 353.460196][ T9448] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 353.487194][ T9448] usb 2-1: config 0 interface 196 has no altsetting 0 [ 353.499291][ T9448] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 353.527226][ T9448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.535711][ T9448] usb 2-1: Product: syz [ 353.540064][ T9448] usb 2-1: Manufacturer: syz [ 353.544696][ T9448] usb 2-1: SerialNumber: syz [ 353.560499][ T9448] usb 2-1: config 0 descriptor?? [ 353.566900][T10016] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 354.137464][ T5930] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 354.310854][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.342495][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.386576][ T5930] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.416385][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.458608][ T5930] usb 3-1: config 0 descriptor?? [ 354.497466][ T9448] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 354.506076][ T9468] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 354.530476][ T9468] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 354.544482][ T9468] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 354.565150][ T9468] em28xx 1-1:0.0: No AC97 audio processor [ 354.571571][ T9448] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 354.807451][ T30] audit: type=1326 audit(1757571734.057:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd311b2ada9 code=0x7fc00000 [ 354.865488][ T9448] usb 1-1: USB disconnect, device number 125 [ 354.898058][ T9448] em28xx 1-1:0.0: Disconnecting em28xx [ 354.976677][ T9448] ================================================================== [ 354.984834][ T9448] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 354.993223][ T9448] Read of size 4 at addr ffff8880289d34f0 by task kworker/0:9/9448 [ 355.001164][ T9448] [ 355.003527][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 355.003559][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.003583][ T9448] Workqueue: usb_hub_wq hub_event [ 355.003624][ T9448] Call Trace: [ 355.003635][ T9448] [ 355.003645][ T9448] dump_stack_lvl+0x189/0x250 [ 355.003670][ T9448] ? rcu_is_watching+0x15/0xb0 [ 355.003698][ T9448] ? __kasan_check_byte+0x12/0x40 [ 355.003725][ T9448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.003746][ T9448] ? rcu_is_watching+0x15/0xb0 [ 355.003774][ T9448] ? lock_release+0x4b/0x3e0 [ 355.003800][ T9448] ? __virt_addr_valid+0x1c8/0x5c0 [ 355.003835][ T9448] ? __virt_addr_valid+0x4a5/0x5c0 [ 355.003871][ T9448] print_report+0xca/0x240 [ 355.003894][ T9448] ? media_devnode_unregister+0xe2/0xf0 [ 355.003926][ T9448] kasan_report+0x118/0x150 [ 355.003953][ T9448] ? media_devnode_unregister+0xe2/0xf0 [ 355.003988][ T9448] media_devnode_unregister+0xe2/0xf0 [ 355.004019][ T9448] media_device_unregister+0x37c/0x400 [ 355.004050][ T9448] ? em28xx_audio_fini+0x59/0x1b0 [ 355.004080][ T9448] em28xx_release_resources+0xac/0x240 [ 355.004116][ T9448] em28xx_usb_disconnect+0x19f/0x2f0 [ 355.004173][ T9448] usb_unbind_interface+0x26e/0x910 [ 355.004207][ T9448] ? __pfx_usb_unbind_interface+0x10/0x10 [ 355.004234][ T9448] device_release_driver_internal+0x4d9/0x800 [ 355.004268][ T9448] bus_remove_device+0x34d/0x410 [ 355.004293][ T9448] device_del+0x511/0x8e0 [ 355.004323][ T9448] ? __pfx_device_del+0x10/0x10 [ 355.004349][ T9448] ? kobject_put+0x446/0x480 [ 355.004376][ T9448] usb_disable_device+0x3e9/0x8a0 [ 355.004403][ T9448] usb_disconnect+0x330/0x950 [ 355.004442][ T9448] hub_event+0x1cf5/0x4a20 [ 355.004480][ T9448] ? do_raw_spin_lock+0x121/0x290 [ 355.004515][ T9448] ? register_lock_class+0x51/0x320 [ 355.004546][ T9448] ? __pfx_hub_event+0x10/0x10 [ 355.004570][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 355.004610][ T9448] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.004642][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 355.004668][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 355.004696][ T9448] process_scheduled_works+0xae1/0x17b0 [ 355.004739][ T9448] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.004777][ T9448] worker_thread+0x8a0/0xda0 [ 355.004819][ T9448] kthread+0x711/0x8a0 [ 355.004854][ T9448] ? __pfx_worker_thread+0x10/0x10 [ 355.004882][ T9448] ? __pfx_kthread+0x10/0x10 [ 355.004916][ T9448] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.004947][ T9448] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.004978][ T9448] ? __pfx_kthread+0x10/0x10 [ 355.005012][ T9448] ret_from_fork+0x47c/0x820 [ 355.005041][ T9448] ? __pfx_ret_from_fork+0x10/0x10 [ 355.005072][ T9448] ? __switch_to_asm+0x39/0x70 [ 355.005095][ T9448] ? __switch_to_asm+0x33/0x70 [ 355.005119][ T9448] ? __pfx_kthread+0x10/0x10 [ 355.005153][ T9448] ret_from_fork_asm+0x1a/0x30 [ 355.005189][ T9448] [ 355.005198][ T9448] [ 355.288720][ T9448] Allocated by task 9468: [ 355.293055][ T9448] kasan_save_track+0x3e/0x80 [ 355.297746][ T9448] __kasan_kmalloc+0x93/0xb0 [ 355.302364][ T9448] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 355.307847][ T9448] __media_device_register+0x58/0x280 [ 355.313233][ T9448] em28xx_usb_probe+0x1764/0x2a20 [ 355.318289][ T9448] usb_probe_interface+0x665/0xc30 [ 355.323416][ T9448] really_probe+0x26d/0x9e0 [ 355.327937][ T9448] __driver_probe_device+0x18c/0x2f0 [ 355.333234][ T9448] driver_probe_device+0x4f/0x430 [ 355.338289][ T9448] __device_attach_driver+0x2ce/0x530 [ 355.343676][ T9448] bus_for_each_drv+0x24e/0x2e0 [ 355.348552][ T9448] __device_attach+0x2b8/0x400 [ 355.353335][ T9448] bus_probe_device+0x185/0x260 [ 355.358197][ T9448] device_add+0x7b6/0xb50 [ 355.362540][ T9448] usb_set_configuration+0x1a87/0x20e0 [ 355.368007][ T9448] usb_generic_driver_probe+0x8d/0x150 [ 355.373475][ T9448] usb_probe_device+0x1c1/0x390 [ 355.378337][ T9448] really_probe+0x26d/0x9e0 [ 355.382948][ T9448] __driver_probe_device+0x18c/0x2f0 [ 355.388254][ T9448] driver_probe_device+0x4f/0x430 [ 355.393307][ T9448] __device_attach_driver+0x2ce/0x530 [ 355.398694][ T9448] bus_for_each_drv+0x24e/0x2e0 [ 355.403562][ T9448] __device_attach+0x2b8/0x400 [ 355.408336][ T9448] bus_probe_device+0x185/0x260 [ 355.413195][ T9448] device_add+0x7b6/0xb50 [ 355.417533][ T9448] usb_new_device+0xa39/0x16f0 [ 355.422329][ T9448] hub_event+0x2958/0x4a20 [ 355.426769][ T9448] process_scheduled_works+0xae1/0x17b0 [ 355.432334][ T9448] worker_thread+0x8a0/0xda0 [ 355.436936][ T9448] kthread+0x711/0x8a0 [ 355.441030][ T9448] ret_from_fork+0x47c/0x820 [ 355.445639][ T9448] ret_from_fork_asm+0x1a/0x30 [ 355.450422][ T9448] [ 355.452749][ T9448] Freed by task 9448: [ 355.456741][ T9448] kasan_save_track+0x3e/0x80 [ 355.461432][ T9448] __kasan_save_free_info+0x46/0x50 [ 355.466654][ T9448] __kasan_slab_free+0x5b/0x80 [ 355.471428][ T9448] kfree+0x199/0x6d0 [ 355.475357][ T9448] media_devnode_release+0x61/0xa0 [ 355.480502][ T9448] device_release+0x99/0x1c0 [ 355.485119][ T9448] kobject_put+0x228/0x480 [ 355.489543][ T9448] media_devnode_unregister+0x6d/0xf0 [ 355.494923][ T9448] media_device_unregister+0x37c/0x400 [ 355.500474][ T9448] em28xx_release_resources+0xac/0x240 [ 355.505956][ T9448] em28xx_usb_disconnect+0x19f/0x2f0 [ 355.511262][ T9448] usb_unbind_interface+0x26e/0x910 [ 355.516500][ T9448] device_release_driver_internal+0x4d9/0x800 [ 355.522594][ T9448] bus_remove_device+0x34d/0x410 [ 355.527560][ T9448] device_del+0x511/0x8e0 [ 355.531904][ T9448] usb_disable_device+0x3e9/0x8a0 [ 355.536944][ T9448] usb_disconnect+0x330/0x950 [ 355.541647][ T9448] hub_event+0x1cf5/0x4a20 [ 355.546076][ T9448] process_scheduled_works+0xae1/0x17b0 [ 355.551643][ T9448] worker_thread+0x8a0/0xda0 [ 355.556244][ T9448] kthread+0x711/0x8a0 [ 355.560341][ T9448] ret_from_fork+0x47c/0x820 [ 355.564943][ T9448] ret_from_fork_asm+0x1a/0x30 [ 355.569716][ T9448] [ 355.572085][ T9448] The buggy address belongs to the object at ffff8880289d3000 [ 355.572085][ T9448] which belongs to the cache kmalloc-2k of size 2048 [ 355.586150][ T9448] The buggy address is located 1264 bytes inside of [ 355.586150][ T9448] freed 2048-byte region [ffff8880289d3000, ffff8880289d3800) [ 355.600156][ T9448] [ 355.602672][ T9448] The buggy address belongs to the physical page: [ 355.609105][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880289d6000 pfn:0x289d0 [ 355.619310][ T9448] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.627848][ T9448] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 355.636361][ T9448] page_type: f5(slab) [ 355.640374][ T9448] raw: 00fff00000000240 ffff88801a842000 ffffea00016dcc10 ffffea000173ae10 [ 355.648972][ T9448] raw: ffff8880289d6000 0000000000080006 00000000f5000000 0000000000000000 [ 355.657567][ T9448] head: 00fff00000000240 ffff88801a842000 ffffea00016dcc10 ffffea000173ae10 [ 355.666269][ T9448] head: ffff8880289d6000 0000000000080006 00000000f5000000 0000000000000000 [ 355.674967][ T9448] head: 00fff00000000003 ffffea0000a27401 00000000ffffffff 00000000ffffffff [ 355.683661][ T9448] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 355.692358][ T9448] page dumped because: kasan: bad access detected [ 355.698808][ T9448] page_owner tracks the page as allocated [ 355.704544][ T9448] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5863, tgid 5863 (syz-executor), ts 86915989131, free_ts 62879602901 [ 355.726017][ T9448] post_alloc_hook+0x240/0x2a0 [ 355.730808][ T9448] get_page_from_freelist+0x21e4/0x22c0 [ 355.736373][ T9448] __alloc_frozen_pages_noprof+0x181/0x370 [ 355.742206][ T9448] alloc_pages_mpol+0x232/0x4a0 [ 355.747085][ T9448] allocate_slab+0x8a/0x330 [ 355.751612][ T9448] ___slab_alloc+0xbd1/0x13f0 [ 355.756304][ T9448] __slab_alloc+0x55/0xa0 [ 355.760648][ T9448] __kmalloc_cache_noprof+0x411/0x6f0 [ 355.766033][ T9448] rtnl_newlink+0xed/0x1c70 [ 355.770561][ T9448] rtnetlink_rcv_msg+0x7cc/0xb70 [ 355.775523][ T9448] netlink_rcv_skb+0x205/0x470 [ 355.780304][ T9448] netlink_unicast+0x82f/0x9e0 [ 355.785088][ T9448] netlink_sendmsg+0x805/0xb30 [ 355.789858][ T9448] __sock_sendmsg+0x219/0x270 [ 355.794548][ T9448] __sys_sendto+0x3bd/0x520 [ 355.799068][ T9448] __x64_sys_sendto+0xde/0x100 [ 355.803842][ T9448] page last free pid 5528 tgid 5528 stack trace: [ 355.810179][ T9448] __free_frozen_pages+0xbc4/0xd30 [ 355.815305][ T9448] __put_partials+0x146/0x170 [ 355.819991][ T9448] put_cpu_partial+0x17c/0x250 [ 355.824845][ T9448] __slab_free+0x2b9/0x390 [ 355.829295][ T9448] qlist_free_all+0x97/0x140 [ 355.833906][ T9448] kasan_quarantine_reduce+0x148/0x160 [ 355.839380][ T9448] __kasan_slab_alloc+0x22/0x80 [ 355.844250][ T9448] kmem_cache_alloc_node_noprof+0x433/0x710 [ 355.850150][ T9448] __alloc_skb+0x112/0x2d0 [ 355.854587][ T9448] alloc_skb_with_frags+0xca/0x890 [ 355.859708][ T9448] sock_alloc_send_pskb+0x857/0x990 [ 355.864918][ T9448] unix_dgram_sendmsg+0x461/0x1850 [ 355.870050][ T9448] __sock_sendmsg+0x219/0x270 [ 355.874757][ T9448] sock_write_iter+0x279/0x360 [ 355.879532][ T9448] vfs_write+0x5c6/0xb30 [ 355.883792][ T9448] ksys_write+0x145/0x250 [ 355.888143][ T9448] [ 355.890479][ T9448] Memory state around the buggy address: [ 355.896110][ T9448] ffff8880289d3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.904183][ T9448] ffff8880289d3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.912255][ T9448] >ffff8880289d3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.920322][ T9448] ^ [ 355.928041][ T9448] ffff8880289d3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.936111][ T9448] ffff8880289d3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.944187][ T9448] ================================================================== [ 355.999033][ T5930] usb 3-1: string descriptor 0 read error: -22 [ 356.008479][ T9448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 356.015856][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 356.025254][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.035343][ T9448] Workqueue: usb_hub_wq hub_event [ 356.040406][ T9448] Call Trace: [ 356.043709][ T9448] [ 356.046655][ T9448] dump_stack_lvl+0x99/0x250 [ 356.051263][ T9448] ? __asan_memcpy+0x40/0x70 [ 356.055876][ T9448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.061085][ T9448] ? __pfx__printk+0x10/0x10 [ 356.065720][ T9448] vpanic+0x237/0x6d0 [ 356.069751][ T9448] ? __pfx_vpanic+0x10/0x10 [ 356.074365][ T9448] ? preempt_schedule+0xae/0xc0 [ 356.079241][ T9448] ? __pfx_preempt_schedule+0x10/0x10 [ 356.084758][ T9448] panic+0xb9/0xc0 [ 356.088506][ T9448] ? __pfx_panic+0x10/0x10 [ 356.092946][ T9448] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 356.098872][ T9448] ? media_devnode_unregister+0xe2/0xf0 [ 356.104458][ T9448] check_panic_on_warn+0x89/0xb0 [ 356.109434][ T9448] ? media_devnode_unregister+0xe2/0xf0 [ 356.115037][ T9448] end_report+0x78/0x160 [ 356.119297][ T9448] kasan_report+0x129/0x150 [ 356.123825][ T9448] ? media_devnode_unregister+0xe2/0xf0 [ 356.129404][ T9448] media_devnode_unregister+0xe2/0xf0 [ 356.134800][ T9448] media_device_unregister+0x37c/0x400 [ 356.140281][ T9448] ? em28xx_audio_fini+0x59/0x1b0 [ 356.145330][ T9448] em28xx_release_resources+0xac/0x240 [ 356.150925][ T9448] em28xx_usb_disconnect+0x19f/0x2f0 [ 356.156230][ T9448] usb_unbind_interface+0x26e/0x910 [ 356.161477][ T9448] ? __pfx_usb_unbind_interface+0x10/0x10 [ 356.167231][ T9448] device_release_driver_internal+0x4d9/0x800 [ 356.173502][ T9448] bus_remove_device+0x34d/0x410 [ 356.178469][ T9448] device_del+0x511/0x8e0 [ 356.182820][ T9448] ? __pfx_device_del+0x10/0x10 [ 356.187690][ T9448] ? kobject_put+0x446/0x480 [ 356.192303][ T9448] usb_disable_device+0x3e9/0x8a0 [ 356.197807][ T9448] usb_disconnect+0x330/0x950 [ 356.202514][ T9448] hub_event+0x1cf5/0x4a20 [ 356.206966][ T9448] ? do_raw_spin_lock+0x121/0x290 [ 356.212018][ T9448] ? register_lock_class+0x51/0x320 [ 356.217237][ T9448] ? __pfx_hub_event+0x10/0x10 [ 356.222015][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 356.227845][ T9448] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.233065][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 356.238805][ T9448] ? process_scheduled_works+0x9ef/0x17b0 [ 356.244542][ T9448] process_scheduled_works+0xae1/0x17b0 [ 356.250122][ T9448] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.256217][ T9448] worker_thread+0x8a0/0xda0 [ 356.260830][ T9448] kthread+0x711/0x8a0 [ 356.264927][ T9448] ? __pfx_worker_thread+0x10/0x10 [ 356.270057][ T9448] ? __pfx_kthread+0x10/0x10 [ 356.274667][ T9448] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.279889][ T9448] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.285137][ T9448] ? __pfx_kthread+0x10/0x10 [ 356.289762][ T9448] ret_from_fork+0x47c/0x820 [ 356.294378][ T9448] ? __pfx_ret_from_fork+0x10/0x10 [ 356.299509][ T9448] ? __switch_to_asm+0x39/0x70 [ 356.304286][ T9448] ? __switch_to_asm+0x33/0x70 [ 356.309081][ T9448] ? __pfx_kthread+0x10/0x10 [ 356.313687][ T9448] ret_from_fork_asm+0x1a/0x30 [ 356.318493][ T9448] [ 356.321683][ T9448] Kernel Offset: disabled [ 356.326040][ T9448] Rebooting in 86400 seconds..