last executing test programs: 12.809082176s ago: executing program 1 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(0x0, 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f029ea69801d76ab059d261de06fe3114ed3a886ea2", 0x1c}], 0x1}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) 12.515556559s ago: executing program 3 (id=523): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="180900000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000440), 0x0}, 0x20) 11.600877519s ago: executing program 1 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000, 0x0, 0x0, 0x80020000, 0x0, 0x6000, 0x10000000, 0xffffffffffffffff, r2, 0x0, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000780)='./file0/../file0\x00') 11.44492082s ago: executing program 3 (id=525): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000100)={0x1, 0x100, 0x2, 0x2, 0x7, 0xf}) 10.928946296s ago: executing program 1 (id=530): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x19) 10.45602763s ago: executing program 1 (id=532): socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x5b, 0xc1, 0x28, 0x10, 0xa257, 0x2013, 0xab34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x40, 0x7, [{{0x9, 0x4, 0x69, 0x4, 0x0, 0x6e, 0xf6, 0x1}}]}}]}}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.129244224s ago: executing program 2 (id=533): syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e23662030164200135b0102030109023100010000000009040000000202ff00080600000000000005240600000524"], 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 8.216801254s ago: executing program 3 (id=537): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) syz_open_dev$evdev(0x0, 0x6b007d05, 0x400000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000020000000200"/21], 0x50) 7.173007395s ago: executing program 1 (id=541): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x3d, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 7.154118995s ago: executing program 2 (id=542): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 7.137238775s ago: executing program 0 (id=543): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x19) 7.136828826s ago: executing program 3 (id=544): r0 = socket(0xf, 0x3, 0x100000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r4 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) dup(r0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e3004000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@unspec=@statistic={{0x38}, {0x600}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) 6.809179429s ago: executing program 2 (id=545): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc3802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x42, 0xcb, 0x60, 0x8, 0x5c6, 0x9070, 0xc81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0xd0, 0x6f, [{{0x9, 0x4, 0x5b, 0x9, 0x0, 0xff, 0x5, 0x6e, 0x9}}]}}]}}, 0x0) socket(0x10, 0x80002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.633085811s ago: executing program 0 (id=547): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000", @ANYBLOB="eeccf8f6d36773134e699d6103481385087268e81850a20ba44f17dbaee88b9da4b72626423b144ef1c8a341fadac302237c8dd8a4e7461399eef91dea7a568282e68e36dd9b7ae8d9abfe8a41db5778c284ea820b7e49d8d1dc0fb0eda6c1f50aa9fe5ebfb5cb023d61fa890d54f4704767d1b18ea41a09dc8acc2a1fbf0c7b31318307e19fdc7e87fa78e88c7c8bee5e710e2d19bbf3a3652aef5aefab0602d49f076c9b69258c586bc58fa6be6b0d6d43535ab0626d6c4d9070fa6aa60a9d25ba0f833f4545b7ed45c3b8fa", @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0xb20, 0xffffffff, 0x0, 0x9e0, 0x0, 0xffffffff, 0xffffffff, 0xa88, 0xa88, 0xa88, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x878, 0x8d8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0xfffffffc}, {0xfffffff7, 0x2}, {0x8, 0x2}, {0xfffffff0, 0x3}, {0xfffffffd}, {0x8000, 0x2}, {}, {0x8, 0x2}], [{0x43ee, 0x1ff}, {0x4, 0x6}, {0x3, 0x9}, {0x8, 0x2}, {0x4}, {0x4, 0x90}, {0xf7d, 0x2}, {0x7, 0x341}, {0x2780, 0x7fffffff}, {0xfffffc00, 0x3}, {0x401, 0x3b1}], 0x0, 0xb}, {[{0x0, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x7fff, 0x1}, {0x7, 0x2}, {0x80000000, 0x1}, {0x9, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x4e, 0x3}, {0x80000000}], [{0x3, 0x5}, {0x5, 0xfffffffa}, {0x1000, 0x400}, {0x71a, 0x1}, {0x0, 0xfffffff9}, {0x3, 0x6}, {0xfb99}, {0x7fff, 0x3f8000}, {0x26, 0x80000000}, {0xd, 0x1da}, {0x8, 0x6}], 0xa, 0xa}, {[{0x7, 0x1}, {0x7, 0x1}, {0xfffffff8, 0x1}, {0x546, 0x3}, {0x8, 0x1}, {0x0, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x7f, 0x2}, {0x0, 0x2}, {0xf6, 0x2}], [{0xc0000000, 0xffffffff}, {0x0, 0x3}, {0x9, 0x309b68d6}, {0x2, 0xb0}, {0x0, 0x5ac}, {0x5, 0x8000}, {0x7ff, 0x7ff}, {0x2, 0x7}, {0x9, 0x81}, {0x41, 0x1}, {0xfffffffb, 0x7ff}], 0x0, 0x4}, {[{0x2, 0x1}, {0x6, 0x2}, {0x15}, {0x40}, {0x5, 0x1}, {0xf, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xffff8000, 0x1}, {0x0, 0x2}, {0x81, 0x2}], [{0xfffff000, 0x1c1}, {0x7f1, 0xdfd9}, {0x8001, 0x9}, {0x4, 0xcde6}, {0x8f77, 0x1ff}, {0xffffff80, 0x1}, {0x9, 0x6}, {0x7fffffff, 0xe000000}, {0x3, 0x7}, {0xd9, 0x9}, {0x1, 0x400}], 0x4, 0x6}, {[{0x1, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x2fd, 0x1}, {0x8a5, 0x1}, {0x9}, {0xd}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x2}], [{0x2, 0x4}, {0xc, 0x2}, {0x6, 0x1000}, {0xda0a, 0xf855}, {0x0, 0xfff}, {0x2, 0x9}, {0x68, 0x100}, {0x3, 0x2}, {0x4, 0x3ff}, {0xee2}, {0x9, 0x9}], 0x5, 0x9}, {[{0x2, 0x3}, {0x8, 0x1}, {0x95872047, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x40}, {0x6, 0x3}, {0x7}, {0x3, 0x1}, {0x17, 0x1}], [{0x32a6, 0x6}, {0x7}, {0x7, 0x56bde36a}, {0x15, 0x401}, {0x9, 0x200}, {0x9, 0x1000}, {0x1, 0x401}, {0x7}, {0x7, 0x2}, {0xb, 0x7d}, {0x41, 0x6}], 0x5, 0x2}, {[{0xfffff45f}, {0x2}, {0x800, 0x1}, {0x7fff}, {0x7fffffff}, {0x81, 0x2}, {0x5, 0x3}, {0xff}, {0x7}, {0x3ff, 0x3}, {0x100}], [{0x8a50, 0x3}, {0x1, 0x6d}, {0x6, 0x7fff}, {0x1, 0x3}, {0x6, 0xfff}, {0x4000000, 0x7}, {0x400}, {0x1}, {0xb65, 0x9}, {0x5f8, 0x5}, {0x1, 0xd4}], 0x2, 0x6}, {[{0x101, 0x2}, {0x9}, {0x4, 0x2}, {0x8, 0x2}, {0x80000000}, {0x4}, {0x6, 0x2}, {0x6}, {0x6, 0x3}, {0x767, 0x3}, {0x3, 0x3}], [{0xffff7ba7, 0x2}, {0x9, 0x8}, {0x4, 0x9}, {0x9, 0x101}, {0x69, 0x1}, {0x1, 0x5}, {0x9, 0x3}, {0x5, 0x8}, {0x3, 0xb29d}, {0x40, 0x2}, {0x4, 0x1}], 0x5, 0xa}, {[{0x8, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0x2, 0x3}, {0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x9, 0x3}], [{0x8001, 0x1}, {0xfffffff8, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0xeb}, {0x3, 0x6}, {}, {0x200, 0x7ff}, {0x112, 0xd}, {0x81, 0x3}, {0x8, 0x53c}, {0x8, 0x7}], 0x9, 0xa}, {[{0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x200}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x9}, {0x3c8, 0x3}, {0x2a, 0x1}], [{0x7}, {0x0, 0x1ff}, {0x8000, 0xec1}, {0x9, 0x5d5}, {0x1}, {0x9183, 0x2}, {0x8, 0x9bc}, {0x12d, 0x7}, {0x97, 0x7}, {0xffffffff, 0x7}, {0x1, 0xc934}], 0x8, 0x7}, {[{0xa22, 0x1}, {0x6da, 0x1}, {0xb2fe}, {0x9, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x400}, {}, {0xff0, 0x3}, {0x80000001, 0x1}, {0xffffffff, 0x2}], [{0x20, 0x101}, {0x4, 0xf}, {0x81, 0x9}, {0x10000, 0x5}, {0x9, 0x2}, {0x9, 0x122}, {0x9, 0x1}, {0xb0ab, 0x8}, {0x438, 0x1f6}, {0x5, 0x1e2}, {0x2, 0xffffffff}], 0x0, 0x5}], 0x4, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x6, 0x0, 0x6, 0x4], 0x6, 0x1}, {0x0, [0x8, 0xa, 0x0, 0x6, 0x7, 0x5], 0x1}}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x6, 0x1}, 0x3, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb80) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) 5.589109802s ago: executing program 4 (id=548): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="180900000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000440), 0x0}, 0x20) 4.899662979s ago: executing program 2 (id=549): syz_usb_connect$uac1(0x2, 0x91, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0xa, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) 3.963004729s ago: executing program 0 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(0x0, 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f029ea69801d76ab059d261de06fe3114ed3a886ea2", 0x1c}], 0x1}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) 3.936999799s ago: executing program 4 (id=551): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000080)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x1, 0x0, 0x5c}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d2, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0x0, 0x10000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.80461427s ago: executing program 1 (id=552): socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x5b, 0xc1, 0x28, 0x10, 0xa257, 0x2013, 0xab34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x40, 0x7, [{{0x9, 0x4, 0x69, 0x4, 0x0, 0x6e, 0xf6, 0x1}}]}}]}}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.287612306s ago: executing program 3 (id=553): sendto$unix(0xffffffffffffffff, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000149"], 0x0, 0x0, 0x0, 0x0}) 2.950111859s ago: executing program 0 (id=554): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x40, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x19c, 0xfff7, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x2837}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0xbc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x80, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf6, 0xc}}}}}}}]}}, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000200)='net/sockstat\x00') 2.681194502s ago: executing program 4 (id=555): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) syz_open_dev$evdev(0x0, 0x6b007d05, 0x400000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000020000000200"/21], 0x50) 2.603443053s ago: executing program 2 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x8, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 1.764669932s ago: executing program 4 (id=557): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.473113925s ago: executing program 4 (id=558): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6213, &(0x7f0000000240)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x19) 1.461047135s ago: executing program 2 (id=559): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc3802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x42, 0xcb, 0x60, 0x8, 0x5c6, 0x9070, 0xc81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0xd0, 0x6f, [{{0x9, 0x4, 0x5b, 0x9, 0x0, 0xff, 0x5, 0x6e, 0x9}}]}}]}}, 0x0) socket(0x10, 0x80002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.447154195s ago: executing program 0 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="943ec8", 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 701.167223ms ago: executing program 3 (id=561): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="18090000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000440), 0x0}, 0x20) 100.83597ms ago: executing program 0 (id=562): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000", @ANYBLOB="eeccf8f6d36773134e699d6103481385087268e81850a20ba44f17dbaee88b9da4b72626423b144ef1c8a341fadac302237c8dd8a4e7461399eef91dea7a568282e68e36dd9b7ae8d9abfe8a41db5778c284ea820b7e49d8d1dc0fb0eda6c1f50aa9fe5ebfb5cb023d61fa890d54f4704767d1b18ea41a09dc8acc2a1fbf0c7b31318307e19fdc7e87fa78e88c7c8bee5e710e2d19bbf3a3652aef5aefab0602d49f076c9b69258c586bc58fa6be6b0d6d43535ab0626d6c4d9070fa6aa60a9d25ba0f833f4545b7ed45c3b8fa", @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0xb20, 0xffffffff, 0x0, 0x9e0, 0x0, 0xffffffff, 0xffffffff, 0xa88, 0xa88, 0xa88, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x878, 0x8d8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0xfffffffc}, {0xfffffff7, 0x2}, {0x8, 0x2}, {0xfffffff0, 0x3}, {0xfffffffd}, {0x8000, 0x2}, {}, {0x8, 0x2}], [{0x43ee, 0x1ff}, {0x4, 0x6}, {0x3, 0x9}, {0x8, 0x2}, {0x4}, {0x4, 0x90}, {0xf7d, 0x2}, {0x7, 0x341}, {0x2780, 0x7fffffff}, {0xfffffc00, 0x3}, {0x401, 0x3b1}], 0x0, 0xb}, {[{0x0, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x7fff, 0x1}, {0x7, 0x2}, {0x80000000, 0x1}, {0x9, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x4e, 0x3}, {0x80000000}], [{0x3, 0x5}, {0x5, 0xfffffffa}, {0x1000, 0x400}, {0x71a, 0x1}, {0x0, 0xfffffff9}, {0x3, 0x6}, {0xfb99}, {0x7fff, 0x3f8000}, {0x26, 0x80000000}, {0xd, 0x1da}, {0x8, 0x6}], 0xa, 0xa}, {[{0x7, 0x1}, {0x7, 0x1}, {0xfffffff8, 0x1}, {0x546, 0x3}, {0x8, 0x1}, {0x0, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x7f, 0x2}, {0x0, 0x2}, {0xf6, 0x2}], [{0xc0000000, 0xffffffff}, {0x0, 0x3}, {0x9, 0x309b68d6}, {0x2, 0xb0}, {0x0, 0x5ac}, {0x5, 0x8000}, {0x7ff, 0x7ff}, {0x2, 0x7}, {0x9, 0x81}, {0x41, 0x1}, {0xfffffffb, 0x7ff}], 0x0, 0x4}, {[{0x2, 0x1}, {0x6, 0x2}, {0x15}, {0x40}, {0x5, 0x1}, {0xf, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xffff8000, 0x1}, {0x0, 0x2}, {0x81, 0x2}], [{0xfffff000, 0x1c1}, {0x7f1, 0xdfd9}, {0x8001, 0x9}, {0x4, 0xcde6}, {0x8f77, 0x1ff}, {0xffffff80, 0x1}, {0x9, 0x6}, {0x7fffffff, 0xe000000}, {0x3, 0x7}, {0xd9, 0x9}, {0x1, 0x400}], 0x4, 0x6}, {[{0x1, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x2fd, 0x1}, {0x8a5, 0x1}, {0x9}, {0xd}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x2}], [{0x2, 0x4}, {0xc, 0x2}, {0x6, 0x1000}, {0xda0a, 0xf855}, {0x0, 0xfff}, {0x2, 0x9}, {0x68, 0x100}, {0x3, 0x2}, {0x4, 0x3ff}, {0xee2}, {0x9, 0x9}], 0x5, 0x9}, {[{0x2, 0x3}, {0x8, 0x1}, {0x95872047, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x40}, {0x6, 0x3}, {0x7}, {0x3, 0x1}, {0x17, 0x1}], [{0x32a6, 0x6}, {0x7}, {0x7, 0x56bde36a}, {0x15, 0x401}, {0x9, 0x200}, {0x9, 0x1000}, {0x1, 0x401}, {0x7}, {0x7, 0x2}, {0xb, 0x7d}, {0x41, 0x6}], 0x5, 0x2}, {[{0xfffff45f}, {0x2}, {0x800, 0x1}, {0x7fff}, {0x7fffffff}, {0x81, 0x2}, {0x5, 0x3}, {0xff}, {0x7}, {0x3ff, 0x3}, {0x100}], [{0x8a50, 0x3}, {0x1, 0x6d}, {0x6, 0x7fff}, {0x1, 0x3}, {0x6, 0xfff}, {0x4000000, 0x7}, {0x400}, {0x1}, {0xb65, 0x9}, {0x5f8, 0x5}, {0x1, 0xd4}], 0x2, 0x6}, {[{0x101, 0x2}, {0x9}, {0x4, 0x2}, {0x8, 0x2}, {0x80000000}, {0x4}, {0x6, 0x2}, {0x6}, {0x6, 0x3}, {0x767, 0x3}, {0x3, 0x3}], [{0xffff7ba7, 0x2}, {0x9, 0x8}, {0x4, 0x9}, {0x9, 0x101}, {0x69, 0x1}, {0x1, 0x5}, {0x9, 0x3}, {0x5, 0x8}, {0x3, 0xb29d}, {0x40, 0x2}, {0x4, 0x1}], 0x5, 0xa}, {[{0x8, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0x2, 0x3}, {0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x9, 0x3}], [{0x8001, 0x1}, {0xfffffff8, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0xeb}, {0x3, 0x6}, {}, {0x200, 0x7ff}, {0x112, 0xd}, {0x81, 0x3}, {0x8, 0x53c}, {0x8, 0x7}], 0x9, 0xa}, {[{0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x200}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x9}, {0x3c8, 0x3}, {0x2a, 0x1}], [{0x7}, {0x0, 0x1ff}, {0x8000, 0xec1}, {0x9, 0x5d5}, {0x1}, {0x9183, 0x2}, {0x8, 0x9bc}, {0x12d, 0x7}, {0x97, 0x7}, {0xffffffff, 0x7}, {0x1, 0xc934}], 0x8, 0x7}, {[{0xa22, 0x1}, {0x6da, 0x1}, {0xb2fe}, {0x9, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x400}, {}, {0xff0, 0x3}, {0x80000001, 0x1}, {0xffffffff, 0x2}], [{0x20, 0x101}, {0x4, 0xf}, {0x81, 0x9}, {0x10000, 0x5}, {0x9, 0x2}, {0x9, 0x122}, {0x9, 0x1}, {0xb0ab, 0x8}, {0x438, 0x1f6}, {0x5, 0x1e2}, {0x2, 0xffffffff}], 0x0, 0x5}], 0x4, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x6, 0x0, 0x6, 0x4], 0x6, 0x1}, {0x0, [0x8, 0xa, 0x0, 0x6, 0x7, 0x5], 0x1}}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x6, 0x1}, 0x3, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb80) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) 0s ago: executing program 4 (id=563): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 77.020566][ T4346] comedi: valid board names for amplc_pc263 driver are: [ 77.038013][ T4346] pc263 [ 77.063227][ T4346] comedi: valid board names for amplc_pc236 driver are: [ 77.070416][ T4346] pc36at [ 77.073485][ T4346] comedi: valid board names for amplc_dio200 driver are: [ 77.085459][ T4346] pc212e [ 77.088458][ T4346] pc214e [ 77.091608][ T4346] pc215e [ 77.095265][ T4346] pc218e [ 77.112470][ T4346] pc272e [ 77.115595][ T4346] comedi: valid board names for comedi_parport driver are: [ 77.125126][ T4346] comedi_parport [ 77.133807][ T4346] comedi: valid board names for comedi_test driver are: [ 77.161899][ T4346] comedi_test [ 77.186894][ T4346] comedi: valid board names for comedi_bond driver are: [ 77.194380][ T4346] comedi_bond [ 77.381576][ T4372] kvm [4370]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x200000003 [ 77.425477][ T4372] kvm [4370]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x200000003 [ 77.435747][ T4372] kvm [4370]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x200000003 [ 77.456228][ T4372] kvm [4370]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x200000003, nop [ 77.511728][ T1324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.622119][ T4297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.631910][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.761816][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 77.863025][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 77.982949][ T4297] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 77.997401][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 78.019353][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.028049][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.041936][ T1324] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 78.057101][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.069191][ T4297] usb 5-1: config 0 descriptor?? [ 78.076835][ T7] usb 3-1: config 0 descriptor?? [ 78.087152][ T1324] usb 2-1: Product: syz [ 78.091482][ T1324] usb 2-1: Manufacturer: syz [ 78.097014][ T1324] usb 2-1: SerialNumber: syz [ 78.135563][ T7] cp210x 3-1:0.0: cp210x converter detected [ 78.147066][ T1324] usb 2-1: config 0 descriptor?? [ 78.194025][ T1324] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 78.218143][ T1324] usb 2-1: setting power ON [ 78.225989][ T1324] dvb-usb: bulk message failed: -22 (2/0) [ 78.267774][ T1324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.302508][ T1324] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 78.317605][ T1324] usb 2-1: media controller created [ 78.348333][ T1324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.361849][ T4297] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 78.378201][ T4297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.396744][ T4366] dvb-usb: bulk message failed: -22 (3/0) [ 78.411875][ T4366] dvb-usb: bulk message failed: -22 (4/0) [ 78.418327][ T4366] cxusb: i2c read failed [ 78.432431][ T4297] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 78.446154][ T1324] usb 2-1: selecting invalid altsetting 6 [ 78.453584][ T4297] usb 5-1: media controller created [ 78.466837][ T1324] usb 2-1: digital interface selection failed (-22) [ 78.482930][ T1324] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 78.495367][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.542675][ T1324] usb 2-1: setting power OFF [ 78.548313][ T1324] dvb-usb: bulk message failed: -22 (2/0) [ 78.555293][ T1324] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 78.571195][ T4384] udc-core: couldn't find an available UDC or it's busy [ 78.584681][ T4384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.593348][ T1324] (NULL device *): no alternate interface [ 78.620648][ T1324] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 78.637290][ T7] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 78.648263][ T1324] usb 2-1: USB disconnect, device number 3 [ 78.688148][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 78.707316][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.894148][ T1324] usb 3-1: USB disconnect, device number 3 [ 78.910020][ T1324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 78.939680][ T1324] cp210x 3-1:0.0: device disconnected [ 78.952458][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 79.037024][ T4297] az6027: usb out operation failed. (-71) [ 79.045227][ T4297] stb0899_attach: Driver disabled by Kconfig [ 79.047205][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 79.051371][ T4297] az6027: no front-end attached [ 79.051371][ T4297] [ 79.085356][ T4297] az6027: usb out operation failed. (-71) [ 79.091220][ T4297] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 79.107038][ T4297] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 79.183568][ T4297] dvb-usb: schedule remote query interval to 400 msecs. [ 79.186866][ T4413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.190676][ T4297] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 79.228652][ T4297] usb 5-1: USB disconnect, device number 2 [ 79.261966][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 79.278647][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.287305][ T21] usb 4-1: Product: syz [ 79.293047][ T21] usb 4-1: Manufacturer: syz [ 79.298715][ T21] usb 4-1: SerialNumber: syz [ 79.337820][ T21] usb 4-1: config 0 descriptor?? [ 79.358844][ T4297] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 79.391387][ T4415] kvm [4414]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x200000003 [ 79.407121][ T4415] kvm [4414]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x200000003 [ 79.419293][ T4415] kvm [4414]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x200000003 [ 79.432220][ T4415] kvm [4414]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x200000003, nop [ 79.611985][ T21] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 79.635624][ T21] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 79.688181][ T21] usb 4-1: USB disconnect, device number 3 [ 80.011976][ T4238] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.041966][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.082591][ T1324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.251817][ T4238] usb 5-1: Using ep0 maxpacket: 16 [ 80.411826][ T4238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.451875][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.463018][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.473732][ T1324] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 80.483205][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.492024][ T4238] usb 5-1: config 1 has an invalid interface number: 198 but max is 0 [ 80.493687][ T1324] usb 2-1: config 0 descriptor?? [ 80.510999][ T4238] usb 5-1: config 1 has no interface number 0 [ 80.517223][ T4238] usb 5-1: config 1 interface 198 has no altsetting 0 [ 80.671944][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.681513][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.689580][ T7] usb 3-1: Product: syz [ 80.691950][ T4238] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=be.01 [ 80.693809][ T7] usb 3-1: Manufacturer: syz [ 80.707437][ T7] usb 3-1: SerialNumber: syz [ 80.709571][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.720611][ T4238] usb 5-1: Product: syz [ 80.728746][ T4238] usb 5-1: Manufacturer: syz [ 80.733555][ T4238] usb 5-1: SerialNumber: syz [ 80.771943][ T1324] ath6kl: Failed to submit usb control message: -71 [ 80.780190][ T7] cdc_mbim 3-1:1.0: skipping garbage [ 80.786272][ T1324] ath6kl: unable to send the bmi data to the device: -71 [ 80.794630][ T1324] ath6kl: Unable to send get target info: -71 [ 80.978926][ T4424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.054268][ T4238] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 81.062099][ T4238] dvb-usb: bulk message failed: -22 (2/0) [ 81.070314][ T4238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.091927][ T4238] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 81.099896][ T4238] usb 5-1: media controller created [ 81.114973][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.129296][ T4238] cxusb: set interface failed [ 81.134112][ T4238] dvb-usb: bulk message failed: -22 (1/0) [ 81.157141][ T4238] DVB: Unable to find symbol mt352_attach() [ 81.163446][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 81.169442][ T4238] zl10353_read_register: readreg error (reg=127, ret==-121) [ 81.176983][ T4238] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 81.271807][ T4238] rc_core: IR keymap rc-dvico-mce not found [ 81.277847][ T4238] Registered IR keymap rc-empty [ 81.286725][ T4238] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 81.340820][ T4238] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 81.357919][ T4238] dvb-usb: schedule remote query interval to 100 msecs. [ 81.377629][ T4238] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 81.428980][ T4238] usb 5-1: USB disconnect, device number 3 [ 81.526849][ T4238] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 81.544495][ T1106] cfg80211: failed to load regulatory.db [ 81.563100][ T1324] ath6kl: Failed to init ath6kl core: -71 [ 81.625195][ T4297] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.642559][ T4424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.673560][ T1324] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 81.686034][ T1324] usb 2-1: USB disconnect, device number 4 [ 81.692749][ T7] cdc_mbim 3-1:1.0: setting tx_max = 52 [ 81.725517][ T7] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 81.808485][ T7] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 0a:3c:95:53:cf:92 [ 81.931865][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 81.984690][ T7] usb 3-1: USB disconnect, device number 4 [ 81.993395][ T7] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 82.091739][ T4238] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.278153][ T4297] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 82.298522][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.325263][ T4297] usb 4-1: Product: syz [ 82.332243][ T4297] usb 4-1: Manufacturer: syz [ 82.336879][ T4297] usb 4-1: SerialNumber: syz [ 82.341971][ T4238] usb 5-1: Using ep0 maxpacket: 32 [ 82.352151][ T4297] usb 4-1: config 0 descriptor?? [ 82.403849][ T4297] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 82.413927][ T4297] usb 4-1: setting power ON [ 82.418719][ T4297] dvb-usb: bulk message failed: -22 (2/0) [ 82.430043][ T4297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.462041][ T4297] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 82.465833][ T4238] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.480799][ T4297] usb 4-1: media controller created [ 82.499019][ T4238] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.520642][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.524177][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.568435][ T4238] usb 5-1: config 0 descriptor?? [ 82.573991][ T4476] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.612054][ T4454] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.618140][ T4297] usb 4-1: selecting invalid altsetting 6 [ 82.635601][ T4238] hub 5-1:0.0: bad descriptor, ignoring hub [ 82.641557][ T4238] hub: probe of 5-1:0.0 failed with error -5 [ 82.658965][ T4297] usb 4-1: digital interface selection failed (-22) [ 82.671873][ T4297] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 82.675824][ T4433] dvb-usb: bulk message failed: -22 (3/0) [ 82.691774][ T4433] dvb-usb: bulk message failed: -22 (4/0) [ 82.702867][ T4433] cxusb: i2c read failed [ 82.707889][ T4238] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 82.721771][ T4297] usb 4-1: setting power OFF [ 82.727760][ T4297] dvb-usb: bulk message failed: -22 (2/0) [ 82.734483][ T4297] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 82.767452][ T4297] (NULL device *): no alternate interface [ 82.874830][ T4297] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 82.899968][ T4297] usb 4-1: USB disconnect, device number 4 [ 83.207207][ T4259] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.471815][ T4259] usb 3-1: Using ep0 maxpacket: 8 [ 83.578456][ T4492] kvm: pic: single mode not supported [ 83.578654][ T4492] kvm: pic: level sensitive irq not supported [ 83.585166][ T4492] kvm: pic: single mode not supported [ 83.591565][ T4492] kvm: pic: single mode not supported [ 83.597180][ T4492] kvm: pic: level sensitive irq not supported [ 83.750370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.801965][ T4259] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.852769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.882343][ T4259] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 83.923390][ T4259] usb 3-1: can't read configurations, error -71 [ 83.955016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.062428][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!! [ 84.159826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.372104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!! [ 84.381718][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.390919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.401788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 84.411834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 85.115715][ T4259] usb 5-1: USB disconnect, device number 4 [ 85.881868][ T4259] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.131920][ T4259] usb 2-1: Using ep0 maxpacket: 8 [ 86.252010][ T4259] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 86.280663][ T4259] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.382529][ T4259] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.482274][ T4259] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.611507][ T4259] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.783582][ T4259] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.870635][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.149786][ T4562] loop4: detected capacity change from 0 to 32768 [ 87.248445][ T4562] [ 87.248445][ T4562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.248445][ T4562] [ 87.307809][ T4561] [ 87.307809][ T4561] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.307809][ T4561] [ 87.318926][ T4561] [ 87.318926][ T4561] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.318926][ T4561] [ 87.329555][ T4561] [ 87.329555][ T4561] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.329555][ T4561] [ 87.340513][ T4561] [ 87.340513][ T4561] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.340513][ T4561] [ 87.351271][ T4561] [ 87.351271][ T4561] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.351271][ T4561] [ 87.778839][ T276] [ 87.778839][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.778839][ T276] [ 87.877143][ T4528] [ 87.877143][ T4528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.877143][ T4528] [ 87.893480][ T4528] [ 87.893480][ T4528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.893480][ T4528] [ 87.906876][ T275] [ 87.906876][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.906876][ T275] [ 87.951153][ T4183] [ 87.951153][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.951153][ T4183] [ 87.991157][ T4183] [ 87.991157][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.991157][ T4183] [ 88.062024][ T4259] usb 2-1: GET_CAPABILITIES returned 0 [ 88.067735][ T4259] usbtmc 2-1:16.0: can't read capabilities [ 88.321895][ T4557] usbtmc 2-1:16.0: INITIATE_CLEAR returned 37 [ 88.588994][ T4297] usb 2-1: USB disconnect, device number 5 [ 89.371942][ T1324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.642162][ T1324] usb 5-1: Using ep0 maxpacket: 16 [ 89.762285][ T1324] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 89.785830][ T1324] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.859571][ T1324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.072252][ T1324] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.122630][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.190154][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.192000][ T1324] usb 5-1: Product: syz [ 90.199118][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.213966][ T4609] netlink: 33 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.222829][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.231867][ T4609] netlink: 33 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.243132][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.252783][ T4609] netlink: 33 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.350502][ T1324] usb 5-1: Manufacturer: syz [ 90.355260][ T1324] usb 5-1: SerialNumber: syz [ 90.402989][ T4611] xt_hashlimit: max too large, truncated to 1048576 [ 90.600246][ T4617] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.101' sets config #32768 [ 90.874241][ T1324] usb 5-1: 0:2 : does not exist [ 91.673158][ T1324] usb 5-1: USB disconnect, device number 5 [ 92.482244][ T4606] loop3: detected capacity change from 0 to 32768 [ 92.517325][ T4606] [ 92.517325][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.517325][ T4606] [ 92.547758][ T4606] [ 92.547758][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.547758][ T4606] [ 92.582080][ T1324] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 92.592951][ T4606] [ 92.592951][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.592951][ T4606] [ 92.606401][ T4606] [ 92.606401][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.606401][ T4606] [ 92.618456][ T4606] [ 92.618456][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.618456][ T4606] [ 92.632113][ T4606] [ 92.632113][ T4606] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.632113][ T4606] [ 92.656668][ T276] [ 92.656668][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.656668][ T276] [ 92.709787][ T4632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.751891][ T4238] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.800344][ T4564] [ 92.800344][ T4564] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.800344][ T4564] [ 92.812555][ T4564] [ 92.812555][ T4564] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.812555][ T4564] [ 92.837139][ T4192] [ 92.837139][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.837139][ T4192] [ 92.869789][ T276] [ 92.869789][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.869789][ T276] [ 92.890738][ T4192] [ 92.890738][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.890738][ T4192] [ 92.981916][ T1324] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 93.000408][ T1324] usb 5-1: config 0 has no interface number 0 [ 93.152485][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 93.226058][ T4636] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 93.402253][ T4238] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.532110][ T4238] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 93.601231][ T4238] usb 1-1: can't read configurations, error -71 [ 93.962032][ T1324] usb 5-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=30.d9 [ 93.971110][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.991152][ T1324] usb 5-1: Product: syz [ 93.996079][ T1324] usb 5-1: Manufacturer: syz [ 94.000706][ T1324] usb 5-1: SerialNumber: syz [ 94.014052][ T1324] usb 5-1: config 0 descriptor?? [ 94.417003][ T1324] mos7840 5-1:0.169: required endpoints missing [ 94.532987][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.566823][ T1324] usb 5-1: USB disconnect, device number 6 [ 96.125572][ T4667] device syzkaller1 entered promiscuous mode [ 96.303563][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.092335][ T4677] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.105066][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.319106][ T21] usb 5-1: config 1 has no interface number 0 [ 97.611551][ T21] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.687487][ T21] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 97.959840][ T21] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.162337][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.841279][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.865656][ T21] usb 5-1: Product: syz [ 98.881984][ T21] usb 5-1: Manufacturer: syz [ 98.894340][ T21] usb 5-1: SerialNumber: syz [ 99.002033][ T21] cdc_ncm 5-1:1.1: bind() failure [ 99.035678][ T21] usb 5-1: USB disconnect, device number 7 [ 99.052042][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.223524][ T4694] tmpfs: Unknown parameter 'quota' [ 99.302009][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 99.351742][ T1106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.463346][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.582330][ T23] usb 3-1: config 1 has an invalid interface number: 198 but max is 0 [ 99.617851][ T23] usb 3-1: config 1 has no interface number 0 [ 99.626166][ T1106] usb 1-1: Using ep0 maxpacket: 32 [ 99.698224][ T23] usb 3-1: config 1 interface 198 has no altsetting 0 [ 99.752084][ T1106] usb 1-1: config 12 has an invalid interface number: 160 but max is 0 [ 99.788382][ T1106] usb 1-1: config 12 has no interface number 0 [ 99.873785][ T1106] usb 1-1: config 12 interface 160 has no altsetting 0 [ 99.942874][ T23] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=be.01 [ 99.987954][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.074920][ T23] usb 3-1: Product: syz [ 100.132245][ T1106] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=81.dc [ 100.143449][ T23] usb 3-1: Manufacturer: syz [ 100.148086][ T23] usb 3-1: SerialNumber: syz [ 100.181848][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.237452][ T1106] usb 1-1: Product: syz [ 100.254922][ T1106] usb 1-1: Manufacturer: syz [ 100.271966][ T1106] usb 1-1: SerialNumber: syz [ 100.987416][ T23] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 101.125025][ T1106] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.160/input/input7 [ 101.134477][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 101.206979][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.232005][ T3547] bcm5974 1-1:12.160: could not read from device [ 101.238783][ T23] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 101.257297][ T23] usb 3-1: media controller created [ 101.294312][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.306427][ T4713] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 102.098210][ T23] cxusb: set interface failed [ 102.111694][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 102.142243][ T1106] usb 1-1: USB disconnect, device number 5 [ 102.162175][ T3547] bcm5974 1-1:12.160: could not read from device [ 102.340648][ T4238] Bluetooth: hci1: command 0x040c tx timeout [ 102.952966][ T23] DVB: Unable to find symbol mt352_attach() [ 102.959035][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 102.965344][ T23] zl10353_read_register: readreg error (reg=127, ret==-121) [ 102.973074][ T23] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 103.091743][ T23] rc_core: IR keymap rc-dvico-mce not found [ 103.097810][ T23] Registered IR keymap rc-empty [ 103.106803][ T23] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 103.123875][ T23] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 103.148020][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 103.267403][ T23] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 103.446829][ T23] usb 3-1: USB disconnect, device number 7 [ 103.617338][ T23] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 104.095063][ T4731] loop0: detected capacity change from 0 to 32768 [ 104.132624][ T1324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.157754][ T4731] [ 104.157754][ T4731] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.157754][ T4731] [ 104.381897][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 104.759486][ T4729] [ 104.759486][ T4729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.759486][ T4729] [ 104.788150][ T4729] [ 104.788150][ T4729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.788150][ T4729] [ 104.812167][ T4729] [ 104.812167][ T4729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.812167][ T4729] [ 104.901889][ T1324] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.910379][ T4729] [ 104.910379][ T4729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.910379][ T4729] [ 104.922086][ T4729] [ 104.922086][ T4729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.922086][ T4729] [ 104.944044][ T1324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.963437][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.974215][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.986744][ T276] [ 104.986744][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.986744][ T276] [ 105.001576][ T4762] Cannot find del_set index 0 as target [ 105.008163][ T1324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.022710][ T1324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.058420][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.162044][ T154] [ 105.162044][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.162044][ T154] [ 105.441770][ T1324] usb 5-1: usb_control_msg returned -32 [ 105.943743][ T154] [ 105.943743][ T154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.943743][ T154] [ 105.986777][ T1324] usbtmc 5-1:16.0: can't read capabilities [ 106.004925][ T4185] [ 106.004925][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.004925][ T4185] [ 106.019327][ T4747] udc-core: couldn't find an available UDC or it's busy [ 106.026802][ T4747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.069099][ T276] [ 106.069099][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.069099][ T276] [ 106.299614][ T1324] usb 5-1: USB disconnect, device number 8 [ 106.320258][ T4185] [ 106.320258][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.320258][ T4185] [ 106.661796][ T1335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.022039][ T1335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.078428][ T1335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.305710][ T1335] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 107.354349][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.471775][ T1335] usb 4-1: Product: syz [ 107.475996][ T1335] usb 4-1: Manufacturer: syz [ 107.497321][ T1335] usb 4-1: SerialNumber: syz [ 107.518636][ T1335] usb 4-1: config 0 descriptor?? [ 107.556200][ T4238] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.632121][ T4296] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.842110][ T4238] usb 2-1: Using ep0 maxpacket: 8 [ 107.912144][ T4296] usb 1-1: Using ep0 maxpacket: 32 [ 108.118626][ T1335] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 108.169938][ T4777] kvm: pic: single mode not supported [ 108.169959][ T4777] kvm: pic: level sensitive irq not supported [ 108.182143][ T1335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.204113][ T4777] kvm: pic: single mode not supported [ 108.204370][ T4777] kvm: pic: single mode not supported [ 108.209856][ T4777] kvm: pic: level sensitive irq not supported [ 108.215664][ T4296] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.232120][ T1335] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 108.241729][ T1335] usb 4-1: media controller created [ 108.257857][ T4296] usb 1-1: config 0 has no interface number 0 [ 108.265705][ T1335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.271723][ T4296] usb 1-1: config 0 interface 184 has no altsetting 0 [ 108.350150][ T1335] DVB: Unable to find symbol tda10046_attach() [ 108.362800][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.372759][ T1335] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 108.381504][ T1335] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 108.436113][ T4238] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 108.447918][ T4238] usb 2-1: can't read configurations, error -71 [ 108.502197][ T4296] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.521693][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.529829][ T4296] usb 1-1: Product: syz [ 108.541675][ T4296] usb 1-1: Manufacturer: syz [ 108.552075][ T4296] usb 1-1: SerialNumber: syz [ 108.571806][ T4296] usb 1-1: config 0 descriptor?? [ 108.622763][ T4296] smsc75xx v1.0.0 [ 108.626632][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.651856][ T1335] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 108.667761][ T1335] usb 4-1: USB disconnect, device number 5 [ 108.891745][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 109.021868][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 109.939355][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 110.005389][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.034327][ T23] usb 5-1: config 0 descriptor?? [ 110.072116][ T4799] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 110.112903][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 110.191859][ T4296] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 110.901734][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 110.909568][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 110.917511][ T4296] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 110.927484][ T4296] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 110.951362][ T4296] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 111.000343][ T4296] usb 1-1: USB disconnect, device number 6 [ 111.321976][ T1106] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.322411][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.692773][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 111.706491][ T1106] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 111.720084][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.747284][ T1106] usb 3-1: config 0 descriptor?? [ 112.041758][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 112.053316][ T4296] usb 5-1: USB disconnect, device number 9 [ 112.151852][ T4238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.244009][ T1106] saitek 0003:06A3:0CD7.0001: item fetching failed at offset 0/3 [ 112.319463][ T1106] saitek 0003:06A3:0CD7.0001: parse failed [ 112.384094][ T1106] saitek: probe of 0003:06A3:0CD7.0001 failed with error -22 [ 112.431907][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 112.552225][ T4238] usb 2-1: config 12 has an invalid interface number: 160 but max is 0 [ 112.566422][ T1106] usb 3-1: USB disconnect, device number 8 [ 112.598827][ T4238] usb 2-1: config 12 has no interface number 0 [ 112.723557][ T4238] usb 2-1: config 12 interface 160 has no altsetting 0 [ 113.012384][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 113.030608][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.138384][ T7] usb 4-1: config 0 descriptor?? [ 113.262809][ T7] gspca_main: sunplus-2.14.0 probing 041e:400b [ 113.445764][ T4238] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=81.dc [ 113.653341][ T4296] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.814712][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.822844][ T4238] usb 2-1: Product: syz [ 113.827587][ T4238] usb 2-1: Manufacturer: syz [ 113.832368][ T4238] usb 2-1: SerialNumber: syz [ 114.081791][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 114.208151][ T4238] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.160/input/input9 [ 114.222009][ T4296] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 114.236507][ T4296] usb 5-1: config 0 has no interface number 0 [ 114.246014][ T4296] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 114.256237][ T4296] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 114.267667][ T3547] bcm5974 2-1:12.160: could not read from device [ 114.281396][ T4238] usb 2-1: USB disconnect, device number 8 [ 114.291839][ T3547] bcm5974 2-1:12.160: could not read from device [ 114.409612][ T4854] loop2: detected capacity change from 0 to 32768 [ 114.451842][ T4296] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 114.464678][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.475842][ T4296] usb 5-1: Product: syz [ 114.480479][ T4296] usb 5-1: Manufacturer: syz [ 114.487223][ T4296] usb 5-1: SerialNumber: syz [ 114.502075][ T4854] [ 114.502075][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.502075][ T4854] [ 114.525349][ T4296] usb 5-1: config 0 descriptor?? [ 114.540797][ T4854] [ 114.540797][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.540797][ T4854] [ 114.551827][ T4847] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.559017][ T4847] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.567711][ T4854] [ 114.567711][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.567711][ T4854] [ 114.592047][ T4854] [ 114.592047][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.592047][ T4854] [ 114.606084][ T4854] [ 114.606084][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.606084][ T4854] [ 114.606597][ T4296] option 5-1:0.13: GSM modem (1-port) converter detected [ 114.631885][ T4854] [ 114.631885][ T4854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.631885][ T4854] [ 114.664142][ T276] [ 114.664142][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.664142][ T276] [ 114.790452][ T4527] [ 114.790452][ T4527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.790452][ T4527] [ 114.807078][ T4527] [ 114.807078][ T4527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.807078][ T4527] [ 114.819464][ T275] [ 114.819464][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.819464][ T275] [ 114.838996][ T4847] udc-core: couldn't find an available UDC or it's busy [ 114.847502][ T4195] [ 114.847502][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.847502][ T4195] [ 114.847640][ T4847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.860893][ T4195] [ 114.860893][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.860893][ T4195] [ 114.873760][ T4245] usb 5-1: USB disconnect, device number 10 [ 114.937213][ T4245] option 5-1:0.13: device disconnected [ 115.012287][ T4296] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.031899][ T7] gspca_sunplus: reg_w_riv err -71 [ 115.071799][ T7] sunplus: probe of 4-1:0.0 failed with error -71 [ 115.301914][ T4296] usb 2-1: Using ep0 maxpacket: 32 [ 115.311677][ T7] usb 4-1: USB disconnect, device number 6 [ 115.481855][ T4296] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.495460][ T4296] usb 2-1: config 0 has no interface number 0 [ 115.511905][ T4296] usb 2-1: config 0 interface 184 has no altsetting 0 [ 115.608064][ T4865] device syzkaller0 entered promiscuous mode [ 115.683033][ T4296] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.714029][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.722566][ T4296] usb 2-1: Product: syz [ 115.726950][ T4296] usb 2-1: Manufacturer: syz [ 115.732896][ T4296] usb 2-1: SerialNumber: syz [ 115.750198][ T4296] usb 2-1: config 0 descriptor?? [ 115.768339][ T4245] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 115.792752][ T4296] smsc75xx v1.0.0 [ 116.661853][ T4245] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 116.723493][ T4245] usb 5-1: can't read configurations, error -71 [ 116.860175][ T4890] tmpfs: Unknown parameter 'quota' [ 116.869386][ T4891] block nbd0: Unsupported socket: shutdown callout must be supported. [ 116.922002][ T4296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.945592][ T4296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 116.967451][ T4296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 116.978767][ T4296] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 117.919139][ T4296] usb 2-1: USB disconnect, device number 9 [ 119.619399][ T4912] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.461794][ T4901] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.541784][ T4245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.721861][ T4901] usb 4-1: Using ep0 maxpacket: 16 [ 120.809941][ T4920] loop1: detected capacity change from 0 to 32768 [ 120.931980][ T4245] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.690398][ T4934] xt_hashlimit: max too large, truncated to 1048576 [ 121.702290][ T4245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.746060][ T4920] [ 121.746060][ T4920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.746060][ T4920] [ 121.821426][ T4915] [ 121.821426][ T4915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.821426][ T4915] [ 121.841782][ T4901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.870535][ T4915] [ 121.870535][ T4915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.870535][ T4915] [ 121.881864][ T4915] [ 121.881864][ T4915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.881864][ T4915] [ 121.893777][ T4245] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 121.901909][ T4901] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 121.910432][ T4901] usb 4-1: can't read configurations, error -71 [ 121.914303][ T4245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.927785][ T4915] [ 121.927785][ T4915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.927785][ T4915] [ 121.939162][ T4915] [ 121.939162][ T4915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.939162][ T4915] [ 121.975195][ T275] [ 121.975195][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.975195][ T275] [ 121.997865][ T4245] usb 3-1: Product: syz [ 122.011670][ T4245] usb 3-1: Manufacturer: syz [ 122.016559][ T4245] usb 3-1: SerialNumber: syz [ 122.049983][ T4245] usb 3-1: config 0 descriptor?? [ 122.118849][ T4539] [ 122.118849][ T4539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.118849][ T4539] [ 122.137463][ T4245] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 122.154475][ T4539] [ 122.154475][ T4539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.154475][ T4539] [ 122.176548][ T4245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.189401][ T4184] [ 122.189401][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.189401][ T4184] [ 122.201578][ T276] [ 122.201578][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.201578][ T276] [ 122.213067][ T4184] [ 122.213067][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.213067][ T4184] [ 122.222548][ T4245] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 122.241908][ T4245] usb 3-1: media controller created [ 122.264662][ T4245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.352078][ T1335] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.397750][ T4245] DVB: Unable to find symbol tda10046_attach() [ 122.413203][ T4245] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 122.426776][ T4245] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 122.742617][ T4245] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 122.762406][ T1335] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 122.833472][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.873495][ T4245] usb 3-1: USB disconnect, device number 9 [ 123.084188][ T1335] usb 1-1: config 0 descriptor?? [ 123.269430][ T1335] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 123.611110][ T4949] kvm [4947]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x5bcd65e0306f9c17 [ 124.122274][ T1335] gspca_sunplus: reg_w_riv err -71 [ 124.139290][ T1335] sunplus: probe of 1-1:0.0 failed with error -71 [ 124.297701][ T1335] usb 1-1: USB disconnect, device number 7 [ 125.607802][ T4970] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 127.198183][ T4975] loop0: detected capacity change from 0 to 32768 [ 127.205587][ T4245] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.239669][ T4975] [ 127.239669][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.239669][ T4975] [ 127.263920][ T4975] [ 127.263920][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.263920][ T4975] [ 127.274862][ T4975] [ 127.274862][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.274862][ T4975] [ 127.285393][ T4975] [ 127.285393][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.285393][ T4975] [ 127.295843][ T4975] [ 127.295843][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.295843][ T4975] [ 127.306513][ T4975] [ 127.306513][ T4975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.306513][ T4975] [ 127.322033][ T276] [ 127.322033][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.322033][ T276] [ 127.451855][ T4245] usb 5-1: Using ep0 maxpacket: 16 [ 127.479881][ T4566] [ 127.479881][ T4566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.479881][ T4566] [ 127.519868][ T4566] [ 127.519868][ T4566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.519868][ T4566] [ 127.550133][ T276] [ 127.550133][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.550133][ T276] [ 127.571008][ T4185] [ 127.571008][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.571008][ T4185] [ 127.592591][ T4185] [ 127.592591][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.592591][ T4185] [ 128.561897][ T4245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.591982][ T1324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.631871][ T4245] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 128.640337][ T4245] usb 5-1: can't read configurations, error -71 [ 128.951818][ T1324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.577365][ T1324] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.601579][ T5011] xt_hashlimit: max too large, truncated to 1048576 [ 129.616968][ T5006] overlayfs: failed to resolve './file0': -2 [ 129.704076][ T5013] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 130.161966][ T1324] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.171067][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.187804][ T1324] usb 3-1: SerialNumber: syz [ 130.456872][ T1324] usb 3-1: 0:2 : does not exist [ 130.471840][ T1324] usb 3-1: unit 255 not found! [ 130.483127][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 130.534531][ T1335] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.656822][ T5029] Cannot find del_set index 0 as target [ 130.672840][ T1324] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 130.741952][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 130.872422][ T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 130.889540][ T1324] usb 3-1: USB disconnect, device number 10 [ 130.910343][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.921461][ T1335] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 130.950331][ T1335] usb 1-1: config 0 has no interface number 0 [ 131.038287][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.169671][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.192410][ T1335] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 131.237093][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.301591][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.333016][ T1335] usb 1-1: Product: syz [ 131.420161][ T1335] usb 1-1: Manufacturer: syz [ 131.452374][ T1335] usb 1-1: SerialNumber: syz [ 131.462916][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.491482][ T1335] usb 1-1: config 0 descriptor?? [ 131.512077][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.554148][ T1335] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 131.582270][ T1324] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 131.677471][ T5035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.861781][ T7] usb 5-1: usb_control_msg returned -32 [ 131.871867][ T7] usbtmc 5-1:16.0: can't read capabilities [ 132.012432][ T1324] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.030038][ T1324] usb 3-1: config 0 has no interface number 0 [ 132.115622][ T1324] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 132.270546][ T1324] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 132.338627][ T1324] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 132.404496][ T1324] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.482856][ T1324] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.540429][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.642444][ T1324] usb 3-1: config 0 descriptor?? [ 132.662550][ T5026] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.669746][ T5026] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.683249][ T1324] ldusb 3-1:0.55: Interrupt in endpoint not found [ 132.696790][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.744014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750372][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.801814][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.897468][ T1324] usb 3-1: USB disconnect, device number 11 [ 133.061808][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 133.283819][ T1324] usb 5-1: USB disconnect, device number 15 [ 133.312263][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 133.342768][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.353269][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 133.362900][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.370937][ T7] usb 4-1: Product: syz [ 133.375535][ T7] usb 4-1: Manufacturer: syz [ 133.380137][ T7] usb 4-1: SerialNumber: syz [ 133.391776][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 133.404452][ T7] usb 4-1: config 0 descriptor?? [ 133.415297][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 133.452403][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 133.482079][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 133.511816][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 133.542345][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 133.571856][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 133.601888][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 133.643182][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 133.671810][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 133.688349][ T1335] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 133.697612][ T7] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.711913][ T1324] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.722029][ T1106] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.738062][ T1335] usb 1-1: USB disconnect, device number 8 [ 133.981893][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 134.001770][ T1106] usb 3-1: Using ep0 maxpacket: 32 [ 134.152368][ T1324] usb 5-1: config 12 has an invalid interface number: 160 but max is 0 [ 134.179155][ T1324] usb 5-1: config 12 has no interface number 0 [ 134.224828][ T1324] usb 5-1: config 12 interface 160 has no altsetting 0 [ 134.422699][ T1324] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=81.dc [ 134.448059][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.480099][ T1324] usb 5-1: Product: syz [ 134.497758][ T1324] usb 5-1: Manufacturer: syz [ 134.517039][ T1324] usb 5-1: SerialNumber: syz [ 134.822445][ T1106] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 134.886644][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.992998][ T1106] usb 3-1: config 0 descriptor?? [ 135.252607][ T1106] gspca_main: sunplus-2.14.0 probing 041e:400b [ 135.254223][ T1324] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.160/input/input11 [ 135.601956][ T3547] bcm5974 5-1:12.160: could not read from device [ 135.617511][ T1324] usb 5-1: USB disconnect, device number 16 [ 135.624200][ T3547] bcm5974 5-1:12.160: could not read from device [ 135.767037][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 136.253428][ T7] usb 4-1: USB disconnect, device number 9 [ 137.337774][ T1106] gspca_sunplus: reg_w_riv err -110 [ 137.343379][ T1106] sunplus: probe of 3-1:0.0 failed with error -110 [ 137.432783][ T5063] Cannot find del_set index 0 as target [ 138.803702][ T5083] loop1: detected capacity change from 0 to 32768 [ 138.820361][ T1335] usb 3-1: USB disconnect, device number 12 [ 138.910302][ T5084] xt_hashlimit: max too large, truncated to 1048576 [ 138.938985][ T5083] [ 138.938985][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.938985][ T5083] [ 139.747132][ T5083] [ 139.747132][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.747132][ T5083] [ 139.757668][ T5083] [ 139.757668][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.757668][ T5083] [ 139.768660][ T5083] [ 139.768660][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.768660][ T5083] [ 139.779094][ T5083] [ 139.779094][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.779094][ T5083] [ 139.790325][ T5083] [ 139.790325][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.790325][ T5083] [ 139.824924][ T276] [ 139.824924][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.824924][ T276] [ 139.961786][ T1106] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.000001][ T1494] [ 140.000001][ T1494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.000001][ T1494] [ 140.020982][ T1494] [ 140.020982][ T1494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.020982][ T1494] [ 140.058659][ T276] [ 140.058659][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.058659][ T276] [ 140.098714][ T4184] [ 140.098714][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.098714][ T4184] [ 140.131829][ T4184] [ 140.131829][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.131829][ T4184] [ 140.221913][ T1106] usb 4-1: Using ep0 maxpacket: 16 [ 141.591871][ T1106] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.672096][ T1106] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 141.704363][ T1106] usb 4-1: can't read configurations, error -71 [ 143.259076][ T5120] Cannot find del_set index 0 as target [ 144.199727][ T5122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.530560][ T5127] loop3: detected capacity change from 0 to 32768 [ 145.603506][ T5127] [ 145.603506][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.603506][ T5127] [ 145.621440][ T5127] [ 145.621440][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.621440][ T5127] [ 145.632122][ T5127] [ 145.632122][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.632122][ T5127] [ 145.642622][ T5127] [ 145.642622][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.642622][ T5127] [ 145.653051][ T5127] [ 145.653051][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.653051][ T5127] [ 145.663479][ T5127] [ 145.663479][ T5127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.663479][ T5127] [ 145.694760][ T276] [ 145.694760][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.694760][ T276] [ 145.752002][ T4901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.831933][ T23] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 145.884270][ T4541] [ 145.884270][ T4541] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.884270][ T4541] [ 145.929180][ T4541] [ 145.929180][ T4541] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.929180][ T4541] [ 145.950352][ T4192] [ 145.950352][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.950352][ T4192] [ 145.998723][ T276] [ 145.998723][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.998723][ T276] [ 146.001798][ T4901] usb 2-1: Using ep0 maxpacket: 8 [ 146.052034][ T4192] [ 146.052034][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.052034][ T4192] [ 146.201875][ T23] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 146.209561][ T23] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 146.944787][ T23] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 147.641793][ T23] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 147.641834][ T23] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 147.641864][ T23] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 147.722045][ T23] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 147.722092][ T23] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 147.722119][ T23] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 147.901774][ T4901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.142173][ T1324] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 148.412041][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 148.708298][ T4901] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 148.708335][ T4901] usb 2-1: can't read configurations, error -71 [ 148.721782][ T23] usb 3-1: string descriptor 0 read error: -71 [ 148.721877][ T23] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.721902][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.743255][ T23] usb 3-1: can't set config #168, error -71 [ 148.758196][ T1324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.759689][ T23] usb 3-1: USB disconnect, device number 13 [ 148.841950][ T1324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 148.842062][ T1324] usb 4-1: can't read configurations, error -71 [ 148.879239][ T5162] Cannot find del_set index 0 as target [ 149.963716][ T5164] device syzkaller1 entered promiscuous mode [ 151.767472][ T5179] loop4: detected capacity change from 0 to 32768 [ 151.784623][ T5180] xt_hashlimit: max too large, truncated to 1048576 [ 151.830388][ T5179] [ 151.830388][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.830388][ T5179] [ 151.849673][ T5179] [ 151.849673][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.849673][ T5179] [ 151.860139][ T5179] [ 151.860139][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.860139][ T5179] [ 151.870611][ T5179] [ 151.870611][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.870611][ T5179] [ 151.881133][ T5179] [ 151.881133][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.881133][ T5179] [ 151.891564][ T5179] [ 151.891564][ T5179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.891564][ T5179] [ 151.912036][ T275] [ 151.912036][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.912036][ T275] [ 152.172143][ T4527] [ 152.172143][ T4527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.172143][ T4527] [ 152.203222][ T4527] [ 152.203222][ T4527] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.203222][ T4527] [ 152.536865][ T275] [ 152.536865][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.536865][ T275] [ 152.652970][ T4183] [ 152.652970][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.652970][ T4183] [ 152.784510][ T4183] [ 152.784510][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.784510][ T4183] [ 153.311878][ T4238] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.581753][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 154.091843][ T4238] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.161823][ T4238] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 154.178504][ T4238] usb 1-1: can't read configurations, error -71 [ 155.088828][ T5210] Cannot find del_set index 0 as target [ 155.930581][ T5212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.361910][ T4296] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.648151][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 158.073380][ T5225] loop0: detected capacity change from 0 to 32768 [ 158.811999][ T4296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.882299][ T4296] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 158.905114][ T5225] [ 158.905114][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.905114][ T5225] [ 158.963729][ T4296] usb 3-1: can't read configurations, error -71 [ 158.972586][ T5225] [ 158.972586][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.972586][ T5225] [ 158.983158][ T5225] [ 158.983158][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.983158][ T5225] [ 158.993626][ T5225] [ 158.993626][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.993626][ T5225] [ 159.004386][ T5225] [ 159.004386][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.004386][ T5225] [ 159.015395][ T5225] [ 159.015395][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.015395][ T5225] [ 159.029388][ T275] [ 159.029388][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.029388][ T275] [ 159.207453][ T9] [ 159.207453][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.207453][ T9] [ 159.229990][ T9] [ 159.229990][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.229990][ T9] [ 159.266101][ T4185] [ 159.266101][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.266101][ T4185] [ 159.292664][ T275] [ 159.292664][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.292664][ T275] [ 159.365640][ T4185] [ 159.365640][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.365640][ T4185] [ 159.380702][ T5244] Cannot find del_set index 0 as target [ 159.631924][ T4296] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 159.892003][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 160.189705][ T5248] device syzkaller1 entered promiscuous mode [ 160.296823][ T5239] mmap: syz.4.302 (5239) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 160.351926][ T4296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.452362][ T4296] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.491558][ T4296] usb 3-1: can't read configurations, error -71 [ 160.567114][ T4296] usb usb3-port1: attempt power cycle [ 163.314237][ T5278] loop4: detected capacity change from 0 to 32768 [ 163.369575][ T5279] xt_hashlimit: max too large, truncated to 1048576 [ 164.093625][ T5278] [ 164.093625][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.093625][ T5278] [ 164.104383][ T1324] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.122646][ T5278] [ 164.122646][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.122646][ T5278] [ 164.133151][ T5278] [ 164.133151][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.133151][ T5278] [ 164.144140][ T5278] [ 164.144140][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.144140][ T5278] [ 164.154630][ T5278] [ 164.154630][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.154630][ T5278] [ 164.165073][ T5278] [ 164.165073][ T5278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.165073][ T5278] [ 164.895475][ T276] [ 164.895475][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.895475][ T276] [ 165.000519][ T1136] [ 165.000519][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.000519][ T1136] [ 165.019126][ T1136] [ 165.019126][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.019126][ T1136] [ 165.039553][ T4183] [ 165.039553][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.039553][ T4183] [ 165.083371][ T276] [ 165.083371][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.083371][ T276] [ 165.115601][ T4183] [ 165.115601][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.115601][ T4183] [ 165.181773][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 165.241953][ T4901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 165.327028][ T5296] Cannot find del_set index 0 as target [ 165.652312][ T4901] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 165.707259][ T4901] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.854285][ T4901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.015746][ T4901] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.081331][ T4901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.147588][ T4901] usb 4-1: config 0 descriptor?? [ 166.192101][ T5289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.302087][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.422130][ T1324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 166.470794][ T1324] usb 3-1: can't read configurations, error -71 [ 166.982110][ T4901] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 167.507973][ T1324] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.011939][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 168.701744][ T1335] usb 4-1: USB disconnect, device number 14 [ 168.771789][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.921804][ T1324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 169.646244][ T1324] usb 3-1: can't read configurations, error -71 [ 169.661922][ T1324] usb usb3-port1: attempt power cycle [ 169.903590][ T5335] loop4: detected capacity change from 0 to 32768 [ 170.008318][ T5335] [ 170.008318][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.008318][ T5335] [ 170.042706][ T5335] [ 170.042706][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.042706][ T5335] [ 170.053251][ T5335] [ 170.053251][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.053251][ T5335] [ 170.063723][ T5335] [ 170.063723][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.063723][ T5335] [ 170.074559][ T5335] [ 170.074559][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.074559][ T5335] [ 170.085131][ T5335] [ 170.085131][ T5335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.085131][ T5335] [ 170.161948][ T1335] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.745165][ T276] [ 170.745165][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.745165][ T276] [ 170.836808][ T4659] [ 170.836808][ T4659] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.836808][ T4659] [ 170.872857][ T4659] [ 170.872857][ T4659] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.872857][ T4659] [ 171.017119][ T5344] Cannot find del_set index 0 as target [ 171.651816][ T1335] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 171.740719][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.751144][ T1335] usb 4-1: Product: syz [ 171.755664][ T1335] usb 4-1: Manufacturer: syz [ 171.760485][ T1335] usb 4-1: SerialNumber: syz [ 171.770867][ T1335] usb 4-1: config 0 descriptor?? [ 171.778197][ T275] [ 171.778197][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.778197][ T275] [ 171.802601][ T4183] [ 171.802601][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.802601][ T4183] [ 171.833960][ T1335] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 171.847049][ T4183] [ 171.847049][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.847049][ T4183] [ 171.952132][ T1335] gspca_sunplus: reg_r err -71 [ 171.957020][ T1335] sunplus: probe of 4-1:0.0 failed with error -71 [ 171.999966][ T1335] usb 4-1: USB disconnect, device number 15 [ 172.461850][ T1324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.681825][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 174.292091][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.373032][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 174.421096][ T1324] usb 2-1: can't read configurations, error -71 [ 175.621924][ T4238] Bluetooth: hci0: command 0x2016 tx timeout [ 175.888418][ T5381] loop0: detected capacity change from 0 to 32768 [ 175.895216][ T1335] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 175.971414][ T5381] [ 175.971414][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.971414][ T5381] [ 175.984395][ T5381] [ 175.984395][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.984395][ T5381] [ 175.995736][ T5381] [ 175.995736][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.995736][ T5381] [ 176.006259][ T5381] [ 176.006259][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.006259][ T5381] [ 176.017353][ T5381] [ 176.017353][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.017353][ T5381] [ 176.027853][ T5381] [ 176.027853][ T5381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.027853][ T5381] [ 176.549614][ T275] [ 176.549614][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.549614][ T275] [ 176.708645][ T5388] Cannot find del_set index 0 as target [ 176.801683][ T1335] usb 5-1: Using ep0 maxpacket: 8 [ 177.556914][ T1136] [ 177.556914][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.556914][ T1136] [ 177.604567][ T1136] [ 177.604567][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.604567][ T1136] [ 177.796781][ T275] [ 177.796781][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.796781][ T275] [ 177.878974][ T4185] [ 177.878974][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.878974][ T4185] [ 177.955480][ T4185] [ 177.955480][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.955480][ T4185] [ 178.211756][ T1335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.481804][ T1335] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 178.489431][ T1335] usb 5-1: can't read configurations, error -71 [ 180.001898][ T4238] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.271698][ T4238] usb 2-1: Using ep0 maxpacket: 16 [ 181.351862][ T5433] netlink: 'syz.4.356': attribute type 4 has an invalid length. [ 181.364952][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 181.502903][ T5436] Cannot find del_set index 0 as target [ 182.311967][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.472925][ T5438] loop4: detected capacity change from 0 to 32768 [ 182.521952][ T5438] [ 182.521952][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.521952][ T5438] [ 182.534600][ T5438] [ 182.534600][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.534600][ T5438] [ 182.545112][ T5438] [ 182.545112][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.545112][ T5438] [ 182.555575][ T5438] [ 182.555575][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.555575][ T5438] [ 182.566740][ T5438] [ 182.566740][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.566740][ T5438] [ 182.577396][ T5438] [ 182.577396][ T5438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.577396][ T5438] [ 182.597391][ T276] [ 182.597391][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.597391][ T276] [ 182.601826][ T4238] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 182.621691][ T4238] usb 2-1: can't read configurations, error -71 [ 182.820019][ T5442] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.592101][ T144] [ 183.592101][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.592101][ T144] [ 183.679437][ T144] [ 183.679437][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.679437][ T144] [ 183.802293][ T276] [ 183.802293][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.802293][ T276] [ 183.857529][ T5446] xt_hashlimit: max too large, truncated to 1048576 [ 183.864399][ T4183] [ 183.864399][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.864399][ T4183] [ 184.047981][ T4183] [ 184.047981][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.047981][ T4183] [ 184.397771][ T5452] loop3: detected capacity change from 0 to 7 [ 184.428327][ T4398] Dev loop3: unable to read RDB block 7 [ 184.435134][ T4398] loop3: unable to read partition table [ 184.451885][ T4398] loop3: partition table beyond EOD, truncated [ 184.461011][ T5452] Dev loop3: unable to read RDB block 7 [ 184.491741][ T5452] loop3: unable to read partition table [ 184.518756][ T5452] loop3: partition table beyond EOD, truncated [ 184.531731][ T5452] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.677222][ T4186] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 184.961704][ T4186] usb 5-1: Using ep0 maxpacket: 8 [ 185.821925][ T4186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.901761][ T4186] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 185.927076][ T4296] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 185.944898][ T4186] usb 5-1: can't read configurations, error -71 [ 186.882220][ T4296] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 186.922861][ T4296] usb 3-1: config 0 has no interface number 0 [ 186.979908][ T4296] usb 3-1: config 0 interface 255 has no altsetting 0 [ 187.027003][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 187.040928][ T4296] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.068682][ T5475] Cannot find del_set index 0 as target [ 187.162907][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.346579][ T4296] usb 3-1: config 0 descriptor?? [ 187.471576][ T4296] cp210x 3-1:0.255: cp210x converter detected [ 187.892017][ T4296] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 188.497314][ T4296] cp210x 3-1:0.255: failed to get vendor val 0x3711 size 2: -71 [ 188.734557][ T5478] loop1: detected capacity change from 0 to 32768 [ 188.790797][ T4296] cp210x 3-1:0.255: GPIO initialisation failed: -71 [ 188.815665][ T4296] usb 3-1: cp210x converter now attached to ttyUSB0 [ 188.847132][ T5478] [ 188.847132][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.847132][ T5478] [ 188.863808][ T5478] [ 188.863808][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.863808][ T5478] [ 188.874402][ T5478] [ 188.874402][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.874402][ T5478] [ 188.884975][ T5478] [ 188.884975][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.884975][ T5478] [ 188.895512][ T5478] [ 188.895512][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.895512][ T5478] [ 188.906084][ T5478] [ 188.906084][ T5478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.906084][ T5478] [ 188.920443][ T276] [ 188.920443][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.920443][ T276] [ 188.933493][ T4296] usb 3-1: USB disconnect, device number 20 [ 189.000008][ T4296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.123920][ T4296] cp210x 3-1:0.255: device disconnected [ 189.481903][ T4259] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.482118][ T4901] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.605008][ T144] [ 189.605008][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.605008][ T144] [ 189.652581][ T144] [ 189.652581][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.652581][ T144] [ 189.685305][ T4184] [ 189.685305][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.685305][ T4184] [ 189.714767][ T275] [ 189.714767][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.714767][ T275] [ 189.740232][ T4184] [ 189.740232][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.740232][ T4184] [ 189.752093][ T4901] usb 1-1: Using ep0 maxpacket: 16 [ 189.971843][ T4259] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 189.980173][ T4259] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 191.195004][ T4259] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.208479][ T4259] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.217853][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.226980][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.228258][ T4259] usb 5-1: config 0 descriptor?? [ 191.251419][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 191.257655][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 191.257809][ T5491] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.263778][ T4296] Bluetooth: hci3: command 0x0406 tx timeout [ 191.304379][ T4259] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.308094][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.411776][ T4901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.491922][ T4901] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 191.513639][ T4901] usb 1-1: can't read configurations, error -71 [ 191.671737][ T1324] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 192.480993][ T5520] Cannot find del_set index 0 as target [ 192.561975][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 193.340915][ T7] usb 5-1: USB disconnect, device number 21 [ 193.512076][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.613716][ T1324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 193.664206][ T1324] usb 3-1: can't read configurations, error -71 [ 194.188904][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.197754][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.013885][ T5535] loop3: detected capacity change from 0 to 32768 [ 195.121086][ T5535] [ 195.121086][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.121086][ T5535] [ 195.133618][ T5535] [ 195.133618][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.133618][ T5535] [ 195.144179][ T5535] [ 195.144179][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.144179][ T5535] [ 195.154642][ T5535] [ 195.154642][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.154642][ T5535] [ 195.165646][ T5535] [ 195.165646][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.165646][ T5535] [ 195.176157][ T5535] [ 195.176157][ T5535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.176157][ T5535] [ 195.737238][ T275] [ 195.737238][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.737238][ T275] [ 196.933593][ T4278] [ 196.933593][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.933593][ T4278] [ 196.979606][ T4278] [ 196.979606][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.979606][ T4278] [ 197.059972][ T4192] [ 197.059972][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.059972][ T4192] [ 197.092294][ T275] [ 197.092294][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.092294][ T275] [ 197.162283][ T4192] [ 197.162283][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.162283][ T4192] [ 198.125512][ T5562] Cannot find del_set index 0 as target [ 198.271721][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.541845][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 198.971771][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.041847][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 199.055582][ T23] usb 4-1: can't read configurations, error -71 [ 199.255021][ T4259] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 199.632578][ T4259] usb 3-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 199.699450][ T4259] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 200.663028][ T4259] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 200.673002][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.692812][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.713430][ T4259] usb 3-1: Product: syz [ 200.733553][ T4259] usb 3-1: Manufacturer: syz [ 200.741800][ T4259] usb 3-1: SerialNumber: syz [ 200.795278][ T4259] usb 3-1: config 0 descriptor?? [ 200.897420][ T4259] usb-storage 3-1:0.0: USB Mass Storage device detected [ 200.931904][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 201.566140][ T4259] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 201.635830][ T4259] usb 3-1: USB disconnect, device number 23 [ 201.684953][ T5590] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 201.693344][ T5590] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 201.771867][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.831734][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.845088][ T23] usb 1-1: can't read configurations, error -71 [ 202.039375][ T5596] loop3: detected capacity change from 0 to 32768 [ 202.089660][ T5596] [ 202.089660][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.089660][ T5596] [ 202.107731][ T5596] [ 202.107731][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.107731][ T5596] [ 202.118295][ T5596] [ 202.118295][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.118295][ T5596] [ 202.129198][ T5596] [ 202.129198][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.129198][ T5596] [ 202.139654][ T5596] [ 202.139654][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.139654][ T5596] [ 202.150215][ T5596] [ 202.150215][ T5596] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.150215][ T5596] [ 202.160936][ T4186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.186442][ T275] [ 202.186442][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.186442][ T275] [ 202.344149][ T9] [ 202.344149][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.344149][ T9] [ 202.521716][ T4186] usb 2-1: Using ep0 maxpacket: 8 [ 203.129644][ T9] [ 203.129644][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.129644][ T9] [ 203.142358][ T275] [ 203.142358][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.142358][ T275] [ 203.192186][ T4192] [ 203.192186][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.192186][ T4192] [ 203.241868][ T4186] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 203.258414][ T4192] [ 203.258414][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.258414][ T4192] [ 203.411806][ T4186] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 203.431405][ T4186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.441449][ T4186] usb 2-1: Product: syz [ 203.445857][ T4186] usb 2-1: Manufacturer: syz [ 203.461870][ T4186] usb 2-1: SerialNumber: syz [ 203.535381][ T4186] usb 2-1: config 0 descriptor?? [ 203.564918][ T4297] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 203.576369][ T4186] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 203.714828][ T5615] Cannot find del_set index 0 as target [ 203.852087][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 204.232115][ T4297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.302253][ T4297] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 204.318659][ T4297] usb 3-1: can't read configurations, error -71 [ 204.762901][ T5622] xt_hashlimit: max too large, truncated to 1048576 [ 207.121789][ T4186] gspca_zc3xx: reg_r err -110 [ 207.248457][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.292973][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.352186][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.359797][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.420161][ T5639] 9pnet: Insufficient options for proto=fd [ 207.591676][ T5638] loop2: detected capacity change from 0 to 32768 [ 207.668223][ T5638] [ 207.668223][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.668223][ T5638] [ 207.741724][ T4186] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 207.748207][ T4186] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 208.501152][ T5638] [ 208.501152][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.501152][ T5638] [ 208.511779][ T5638] [ 208.511779][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.511779][ T5638] [ 208.522236][ T5638] [ 208.522236][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.522236][ T5638] [ 208.532789][ T5638] [ 208.532789][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.532789][ T5638] [ 208.543241][ T5638] [ 208.543241][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.543241][ T5638] [ 208.556163][ T275] [ 208.556163][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.556163][ T275] [ 208.585186][ T4186] usb 2-1: USB disconnect, device number 16 [ 208.709969][ T4659] [ 208.709969][ T4659] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.709969][ T4659] [ 208.765950][ T4659] [ 208.765950][ T4659] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.765950][ T4659] [ 208.806640][ T275] [ 208.806640][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.806640][ T275] [ 208.821735][ T4195] [ 208.821735][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.821735][ T4195] [ 208.844516][ T4195] [ 208.844516][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.844516][ T4195] [ 209.167005][ T5652] Cannot find del_set index 0 as target [ 209.681765][ T4312] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 210.151990][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 210.498364][ T1335] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 210.691888][ T4312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.761806][ T4312] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.831758][ T1335] usb 2-1: Using ep0 maxpacket: 16 [ 210.992284][ T1335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.082011][ T1335] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 211.122022][ T1335] usb 2-1: can't read configurations, error -71 [ 211.550169][ T4312] usb 3-1: can't read configurations, error -71 [ 211.782908][ T5675] loop3: detected capacity change from 0 to 32768 [ 211.822573][ T5675] [ 211.822573][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.822573][ T5675] [ 211.839321][ T5675] [ 211.839321][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.839321][ T5675] [ 211.849832][ T5675] [ 211.849832][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.849832][ T5675] [ 211.860831][ T5675] [ 211.860831][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.860831][ T5675] [ 211.871306][ T5675] [ 211.871306][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.871306][ T5675] [ 211.881778][ T5675] [ 211.881778][ T5675] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.881778][ T5675] [ 211.903552][ T275] [ 211.903552][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.903552][ T275] [ 212.214380][ T5339] [ 212.214380][ T5339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.214380][ T5339] [ 212.230569][ T5339] [ 212.230569][ T5339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.230569][ T5339] [ 212.251158][ T4192] [ 212.251158][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.251158][ T4192] [ 212.272411][ T4192] [ 212.272411][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.272411][ T4192] [ 212.335459][ T5695] Cannot find del_set index 0 as target [ 212.475575][ T276] [ 212.475575][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.475575][ T276] [ 213.342149][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.621761][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 214.601962][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.668601][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 214.686793][ T23] usb 1-1: can't read configurations, error -71 [ 214.804884][ T5701] xt_hashlimit: max too large, truncated to 1048576 [ 214.881697][ T1324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.014953][ T4296] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 215.161845][ T1324] usb 3-1: Using ep0 maxpacket: 32 [ 215.342326][ T5724] loop0: detected capacity change from 0 to 32768 [ 215.391679][ T4296] usb 4-1: Using ep0 maxpacket: 16 [ 215.400027][ T5724] [ 215.400027][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.400027][ T5724] [ 215.414836][ T5724] [ 215.414836][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.414836][ T5724] [ 215.425360][ T5724] [ 215.425360][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.425360][ T5724] [ 215.435825][ T5724] [ 215.435825][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.435825][ T5724] [ 215.446293][ T5724] [ 215.446293][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.446293][ T5724] [ 215.456810][ T5724] [ 215.456810][ T5724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.456810][ T5724] [ 215.476732][ T276] [ 215.476732][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.476732][ T276] [ 215.533723][ T1324] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 215.552275][ T5732] Cannot find del_set index 0 as target [ 215.574935][ T1324] usb 3-1: config 0 has no interface number 0 [ 215.581885][ T4296] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.599463][ T1324] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.617042][ T1324] usb 3-1: config 0 interface 85 has no altsetting 0 [ 215.628864][ T9] [ 215.628864][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.628864][ T9] [ 215.643064][ T9] [ 215.643064][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.643064][ T9] [ 215.661755][ T4296] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.665345][ T275] [ 215.665345][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.665345][ T275] [ 215.690229][ T4296] usb 4-1: can't read configurations, error -71 [ 215.716851][ T4185] [ 215.716851][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.716851][ T4185] [ 215.738399][ T4185] [ 215.738399][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.738399][ T4185] [ 215.781965][ T4312] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 215.801835][ T1324] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 215.853942][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.929688][ T1324] usb 3-1: Product: syz [ 215.967173][ T1324] usb 3-1: Manufacturer: syz [ 216.022836][ T1324] usb 3-1: SerialNumber: syz [ 216.169458][ T1324] usb 3-1: config 0 descriptor?? [ 216.791838][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 217.022096][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.022196][ T1324] appletouch 3-1:0.85: Geyser mode initialized. [ 217.185914][ T4238] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 217.196100][ T4312] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 217.209586][ T1324] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12 [ 217.216827][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.230425][ T4312] usb 5-1: Product: syz [ 217.234953][ T4312] usb 5-1: Manufacturer: syz [ 217.240446][ T4312] usb 5-1: SerialNumber: syz [ 217.264879][ T4312] usb 5-1: config 0 descriptor?? [ 217.291200][ T1324] usb 3-1: USB disconnect, device number 28 [ 217.325609][ T1324] appletouch 3-1:0.85: input: appletouch disconnected [ 217.326031][ T4312] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 217.451719][ T4238] usb 2-1: Using ep0 maxpacket: 8 [ 217.521236][ T5749] xt_hashlimit: max too large, truncated to 1048576 [ 217.571781][ T4238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.582958][ T4238] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.593588][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.612662][ T4238] usb 2-1: config 0 descriptor?? [ 217.681899][ T4186] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.864833][ T5758] kvm [5757]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x20200000003 [ 217.878629][ T4238] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 217.986125][ T4312] gspca_sunplus: reg_r err -32 [ 218.041116][ T146] Bluetooth: Frame is too long (len 12, expected len 4) [ 218.091745][ T4186] usb 1-1: Using ep0 maxpacket: 8 [ 218.318966][ T5767] loop2: detected capacity change from 0 to 32768 [ 218.379204][ T5767] [ 218.379204][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.379204][ T5767] [ 218.437699][ T5767] [ 218.437699][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.437699][ T5767] [ 218.448297][ T5767] [ 218.448297][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.448297][ T5767] [ 218.458784][ T5767] [ 218.458784][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.458784][ T5767] [ 218.469280][ T5767] [ 218.469280][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.469280][ T5767] [ 218.479839][ T5767] [ 218.479839][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.479839][ T5767] [ 218.492385][ T276] [ 218.492385][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.492385][ T276] [ 218.495410][ T1324] usb 2-1: USB disconnect, device number 19 [ 218.581933][ T4186] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.641882][ T4186] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 218.649501][ T4186] usb 1-1: can't read configurations, error -71 [ 218.668119][ T144] [ 218.668119][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.668119][ T144] [ 218.680485][ T144] [ 218.680485][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.680485][ T144] [ 218.702054][ T4195] [ 218.702054][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.702054][ T4195] [ 218.723939][ T276] [ 218.723939][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.723939][ T276] [ 218.743998][ T4195] [ 218.743998][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.743998][ T4195] [ 219.069169][ T5774] Cannot find del_set index 0 as target [ 219.661729][ T4312] sunplus: probe of 5-1:0.0 failed with error -32 [ 219.767639][ T4312] usb 5-1: USB disconnect, device number 22 [ 220.331778][ T4312] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 220.771843][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 221.091911][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.172931][ T4312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 221.190836][ T4312] usb 5-1: can't read configurations, error -71 [ 221.412405][ T5791] xt_hashlimit: max too large, truncated to 1048576 [ 221.571758][ T4238] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 221.880152][ T5806] loop4: detected capacity change from 0 to 32768 [ 221.931690][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 221.960643][ T5806] [ 221.960643][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.960643][ T5806] [ 221.974753][ T5806] [ 221.974753][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.974753][ T5806] [ 221.985384][ T5806] [ 221.985384][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.985384][ T5806] [ 221.996431][ T5806] [ 221.996431][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.996431][ T5806] [ 222.006927][ T5806] [ 222.006927][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.006927][ T5806] [ 222.017501][ T5806] [ 222.017501][ T5806] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.017501][ T5806] [ 222.039434][ T276] [ 222.039434][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.039434][ T276] [ 222.071905][ T4238] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.107234][ T4238] usb 4-1: config 0 has no interface number 0 [ 222.146531][ T4238] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.161331][ T4564] [ 222.161331][ T4564] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.161331][ T4564] [ 222.177382][ T4238] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.201541][ T4238] usb 4-1: config 0 interface 12 has no altsetting 0 [ 222.203951][ T4564] [ 222.203951][ T4564] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.203951][ T4564] [ 222.239839][ T4183] [ 222.239839][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.239839][ T4183] [ 222.254076][ T276] [ 222.254076][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.254076][ T276] [ 222.275274][ T4183] [ 222.275274][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.275274][ T4183] [ 222.361978][ T4238] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 222.371062][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.392931][ T4238] usb 4-1: Product: syz [ 222.397464][ T4238] usb 4-1: Manufacturer: syz [ 222.404377][ T4238] usb 4-1: SerialNumber: syz [ 222.483127][ T5816] Cannot find del_set index 0 as target [ 222.511729][ T2303] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.652231][ T1335] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 222.681917][ T4297] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 222.931828][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 223.021972][ T1335] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 223.041494][ T1335] usb 5-1: config 0 has no interface number 0 [ 223.052386][ T4297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.195181][ T4238] usb 4-1: config 0 descriptor?? [ 223.221969][ T4297] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 223.242307][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.243338][ T4238] f81534 4-1:0.12: unsupported endpoint max packet size [ 223.259062][ T1335] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 223.278008][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.287259][ T4297] usb 2-1: Product: syz [ 223.297446][ T4297] usb 2-1: Manufacturer: syz [ 223.302385][ T1335] usb 5-1: Product: syz [ 223.306581][ T1335] usb 5-1: Manufacturer: syz [ 223.316140][ T4297] usb 2-1: SerialNumber: syz [ 223.346545][ T1335] usb 5-1: SerialNumber: syz [ 223.357149][ T4297] usb 2-1: config 0 descriptor?? [ 223.440853][ T1335] usb 5-1: config 0 descriptor?? [ 223.554408][ T4297] usb 4-1: USB disconnect, device number 20 [ 223.603353][ T1335] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 223.829994][ T2303] usb 3-1: Using ep0 maxpacket: 8 [ 224.238907][ T5809] kvm: pic: single mode not supported [ 224.239685][ T5809] kvm: pic: level sensitive irq not supported [ 224.411781][ T2303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.562127][ T2303] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 224.571817][ T2303] usb 3-1: can't read configurations, error -71 [ 224.913808][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 225.111778][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 225.142843][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 225.183514][ T4296] usb 2-1: USB disconnect, device number 20 [ 225.192540][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 225.230994][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 225.259037][ T5839] device syzkaller1 entered promiscuous mode [ 225.279558][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 225.316258][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 225.341829][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 225.371781][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 225.412392][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 225.449970][ T5843] xt_hashlimit: max too large, truncated to 1048576 [ 225.464323][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 225.489328][ T2303] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 225.504185][ T4297] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 225.681351][ T5842] loop1: detected capacity change from 0 to 32768 [ 225.711808][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 225.747071][ T5842] [ 225.747071][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.747071][ T5842] [ 225.757925][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 225.769207][ T5842] [ 225.769207][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.769207][ T5842] [ 225.780238][ T5842] [ 225.780238][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.780238][ T5842] [ 225.790782][ T5842] [ 225.790782][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.790782][ T5842] [ 225.801272][ T5842] [ 225.801272][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.801272][ T5842] [ 225.811735][ T5842] [ 225.811735][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.811735][ T5842] [ 225.825715][ T275] [ 225.825715][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.825715][ T275] [ 225.884747][ T2303] usb 3-1: Using ep0 maxpacket: 16 [ 225.892642][ T1335] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 225.914114][ T1335] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 225.958748][ T1335] usb 5-1: USB disconnect, device number 25 [ 226.001798][ T2303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.020830][ T4530] [ 226.020830][ T4530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.020830][ T4530] [ 226.049237][ T4530] [ 226.049237][ T4530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.049237][ T4530] [ 226.071782][ T2303] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 226.079400][ T2303] usb 3-1: can't read configurations, error -71 [ 226.098623][ T275] [ 226.098623][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.098623][ T275] [ 226.112467][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.122517][ T2303] usb usb3-port1: attempt power cycle [ 226.122584][ T4184] [ 226.122584][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.122584][ T4184] [ 226.154009][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.175201][ T4184] [ 226.175201][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.175201][ T4184] [ 226.201951][ T4297] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 226.220109][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.238724][ T4297] usb 1-1: config 0 descriptor?? [ 226.526527][ T5853] Cannot find del_set index 0 as target [ 227.317387][ T4297] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 227.802043][ T4297] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 227.886999][ T4297] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 227.957900][ T4297] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71 [ 227.980837][ T4297] usb 1-1: USB disconnect, device number 19 [ 228.321755][ T1324] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 228.384815][ T5863] fido_id[5863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 228.671880][ T4238] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 228.921810][ T4238] usb 3-1: Using ep0 maxpacket: 8 [ 228.992763][ T1324] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.025185][ T1324] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.042109][ T1324] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.051314][ T1324] usb 2-1: config 1 has no interface number 0 [ 229.059298][ T1324] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 229.081448][ T1324] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 229.111651][ T1324] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.137229][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.141865][ T4238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.206964][ T1324] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 229.221832][ T4238] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 229.229847][ T4238] usb 3-1: can't read configurations, error -71 [ 229.424651][ T5886] loop4: detected capacity change from 0 to 32768 [ 229.471035][ T5886] [ 229.471035][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.471035][ T5886] [ 229.487854][ T5886] [ 229.487854][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.487854][ T5886] [ 229.498441][ T5886] [ 229.498441][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.498441][ T5886] [ 229.509166][ T5886] [ 229.509166][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.509166][ T5886] [ 229.519727][ T5886] [ 229.519727][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.519727][ T5886] [ 229.530190][ T5886] [ 229.530190][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.530190][ T5886] [ 229.563395][ T275] [ 229.563395][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.563395][ T275] [ 229.611775][ T2303] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.663928][ T9] [ 229.663928][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.663928][ T9] [ 229.676530][ T9] [ 229.676530][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.676530][ T9] [ 229.688309][ T4183] [ 229.688309][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.688309][ T4183] [ 229.699209][ T276] [ 229.699209][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.699209][ T276] [ 229.709848][ T4183] [ 229.709848][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.709848][ T4183] [ 229.802569][ T1324] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 229.891837][ T2303] usb 4-1: Using ep0 maxpacket: 8 [ 230.021998][ T2303] usb 4-1: config 5 has an invalid interface number: 153 but max is 0 [ 230.030334][ T2303] usb 4-1: config 5 has no interface number 0 [ 230.036538][ T2303] usb 4-1: config 5 interface 153 has no altsetting 0 [ 230.212865][ T4312] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.242190][ T2303] usb 4-1: New USB device found, idVendor=12d1, idProduct=763a, bcdDevice=4a.a8 [ 230.251292][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.259393][ T2303] usb 4-1: Product: syz [ 230.264166][ T2303] usb 4-1: Manufacturer: syz [ 230.268820][ T2303] usb 4-1: SerialNumber: syz [ 230.491774][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 230.612319][ T2303] huawei_cdc_ncm 4-1:5.153: CDC Union missing and no IAD found [ 230.620099][ T2303] huawei_cdc_ncm 4-1:5.153: bind() failure [ 230.631731][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.640811][ T2303] usb 4-1: USB disconnect, device number 21 [ 230.691772][ T4312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 230.700121][ T4312] usb 5-1: can't read configurations, error -71 [ 230.823487][ T7] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 231.050291][ T2303] usb 2-1: USB disconnect, device number 21 [ 231.077163][ T2303] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 231.165385][ T5903] Cannot find del_set index 0 as target [ 232.241786][ T1324] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 233.091980][ T1324] usb 5-1: config 0 has no interfaces? [ 233.097524][ T1324] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 233.146010][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.185135][ T1324] usb 5-1: config 0 descriptor?? [ 233.445116][ T5925] loop2: detected capacity change from 0 to 32768 [ 233.490301][ T5907] udc-core: couldn't find an available UDC or it's busy [ 233.500073][ T5907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.528004][ T5925] [ 233.528004][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.528004][ T5925] [ 233.540482][ T5925] [ 233.540482][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.540482][ T5925] [ 233.551051][ T5925] [ 233.551051][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.551051][ T5925] [ 233.562048][ T5925] [ 233.562048][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.562048][ T5925] [ 233.572665][ T5925] [ 233.572665][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.572665][ T5925] [ 233.583188][ T5925] [ 233.583188][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.583188][ T5925] [ 233.596300][ T276] [ 233.596300][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.596300][ T276] [ 233.653503][ T5907] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.739647][ T5907] kvm: pic: non byte read [ 233.746557][ T5907] kvm: pic: non byte read [ 233.751472][ T5907] kvm: pic: non byte read [ 233.757567][ T5907] kvm: pic: level sensitive irq not supported [ 233.759345][ T5907] kvm: pic: non byte read [ 233.787791][ T5907] kvm: pic: level sensitive irq not supported [ 233.787973][ T5907] kvm: pic: non byte read [ 233.807106][ T5907] kvm: pic: non byte read [ 233.816092][ T5907] kvm: pic: non byte read [ 233.821738][ T1324] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 233.827670][ T5907] kvm: pic: non byte read [ 233.861237][ T9] [ 233.861237][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.861237][ T9] [ 233.859791][ T5911] xt_hashlimit: max too large, truncated to 1048576 [ 233.908926][ T9] [ 233.908926][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.908926][ T9] [ 233.956677][ T4195] [ 233.956677][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.956677][ T4195] [ 233.967911][ T276] [ 233.967911][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.967911][ T276] [ 233.981754][ T2303] usb 5-1: USB disconnect, device number 28 [ 233.999955][ T4195] [ 233.999955][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.999955][ T4195] [ 234.086216][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 234.142030][ T4312] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.291868][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.371795][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.379421][ T1324] usb 2-1: can't read configurations, error -71 [ 234.391737][ T4312] usb 1-1: Using ep0 maxpacket: 16 [ 234.481837][ T2303] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 234.511954][ T4312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.535721][ T5945] Cannot find del_set index 0 as target [ 234.601925][ T4312] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 234.626246][ T4312] usb 1-1: can't read configurations, error -71 [ 234.893987][ T2303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.952662][ T2303] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 235.081202][ T2303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.291991][ T2303] usb 3-1: config 0 descriptor?? [ 236.492014][ T2303] usbhid 3-1:0.0: can't add hid device: -71 [ 236.503508][ T2303] usbhid: probe of 3-1:0.0 failed with error -71 [ 236.670413][ T2303] usb 3-1: USB disconnect, device number 34 [ 236.881679][ T4259] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.122163][ T5981] loop1: detected capacity change from 0 to 32768 [ 237.191811][ T2303] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 237.198123][ T5981] [ 237.198123][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.198123][ T5981] [ 237.213686][ T5981] [ 237.213686][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.213686][ T5981] [ 237.224239][ T5981] [ 237.224239][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.224239][ T5981] [ 237.234785][ T5981] [ 237.234785][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.234785][ T5981] [ 237.245367][ T5981] [ 237.245367][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.245367][ T5981] [ 237.256279][ T5981] [ 237.256279][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.256279][ T5981] [ 237.276285][ T276] [ 237.276285][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.276285][ T276] [ 237.388896][ T4539] [ 237.388896][ T4539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.388896][ T4539] [ 237.399785][ T4259] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 237.408239][ T4259] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 237.415344][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 237.419735][ T4539] [ 237.419735][ T4539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.419735][ T4539] [ 237.447198][ T4259] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.448642][ T275] [ 237.448642][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.448642][ T275] [ 237.472559][ T4184] [ 237.472559][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.472559][ T4184] [ 237.483324][ T4259] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.487061][ T4184] [ 237.487061][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.487061][ T4184] [ 237.493745][ T2303] usb 3-1: Using ep0 maxpacket: 32 [ 237.516699][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.530330][ T4259] usb 4-1: config 0 descriptor?? [ 237.552158][ T5967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.584413][ T4259] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 237.646944][ T5985] xt_hashlimit: max too large, truncated to 1048576 [ 237.691671][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 237.741853][ T2303] usb 3-1: unable to read config index 0 descriptor/all [ 237.757563][ T2303] usb 3-1: can't read configurations, error -71 [ 237.871818][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.931756][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 237.939391][ T7] usb 1-1: can't read configurations, error -71 [ 238.051669][ T4297] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.162010][ T2303] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 238.196748][ T5996] Cannot find del_set index 0 as target [ 238.291677][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 238.441724][ T2303] usb 3-1: Using ep0 maxpacket: 32 [ 238.562587][ T2303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.762475][ T2303] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 238.791189][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.977241][ T2303] usb 3-1: Product: syz [ 239.151866][ T2303] usb 3-1: Manufacturer: syz [ 239.164540][ T2303] usb 3-1: SerialNumber: syz [ 239.252774][ T2303] usb 3-1: config 0 descriptor?? [ 239.556099][ T2303] rndis_wlan 3-1:0.0: skipping garbage [ 239.573491][ T4312] usb 4-1: USB disconnect, device number 22 [ 239.588881][ T2303] rndis_wlan: probe of 3-1:0.0 failed with error -22 [ 239.622223][ T2303] rndis_host 3-1:0.0: skipping garbage [ 239.652210][ T2303] rndis_host: probe of 3-1:0.0 failed with error -22 [ 239.691821][ T4297] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.824946][ T2303] usb 3-1: USB disconnect, device number 36 [ 240.641887][ T4297] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 240.649527][ T4297] usb 2-1: can't read configurations, error -71 [ 241.171695][ T4297] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 241.751766][ T2303] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 241.851007][ T6030] loop0: detected capacity change from 0 to 32768 [ 241.967842][ T6030] [ 241.967842][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.967842][ T6030] [ 241.992916][ T6030] [ 241.992916][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.992916][ T6030] [ 242.003621][ T6030] [ 242.003621][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.003621][ T6030] [ 242.014297][ T6030] [ 242.014297][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.014297][ T6030] [ 242.024890][ T6030] [ 242.024890][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.024890][ T6030] [ 242.035624][ T6030] [ 242.035624][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.035624][ T6030] [ 242.046273][ T2303] usb 3-1: Using ep0 maxpacket: 8 [ 242.072552][ T275] [ 242.072552][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.072552][ T275] [ 242.225049][ T1136] [ 242.225049][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.225049][ T1136] [ 242.247777][ T1136] [ 242.247777][ T1136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.247777][ T1136] [ 242.261774][ T4185] [ 242.261774][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.261774][ T4185] [ 242.274169][ T4185] [ 242.274169][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.274169][ T4185] [ 242.284982][ T275] [ 242.284982][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.284982][ T275] [ 242.361915][ T2303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.442068][ T2303] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 242.455553][ T2303] usb 3-1: can't read configurations, error -71 [ 242.542975][ T4297] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.731326][ T4297] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.964075][ T4297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.012405][ T4297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 243.029333][ T6041] xt_hashlimit: max too large, truncated to 1048576 [ 243.099647][ T4297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 243.112163][ T6045] Cannot find del_set index 0 as target [ 243.302145][ T4297] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.381733][ T2303] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 243.862522][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.955618][ T4297] usb 2-1: Product: syz [ 243.985090][ T4297] usb 2-1: Manufacturer: syz [ 244.091810][ T4297] usb 2-1: can't set config #1, error -71 [ 244.124152][ T4297] usb 2-1: USB disconnect, device number 25 [ 244.592252][ T4297] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.702143][ T2303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.871964][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 244.876903][ T4312] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 244.891872][ T2303] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 244.899493][ T2303] usb 3-1: can't read configurations, error -71 [ 244.927193][ T2303] usb usb3-port1: attempt power cycle [ 245.272671][ T4312] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.285135][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.352069][ T4259] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 245.381837][ T4312] usb 4-1: config 0 descriptor?? [ 245.515733][ T4312] cp210x 4-1:0.0: cp210x converter detected [ 245.595014][ T6116] device syzkaller1 entered promiscuous mode [ 245.632313][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 245.852100][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.932181][ T4312] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 245.940714][ T4259] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 245.970915][ T4259] usb 1-1: can't read configurations, error -71 [ 246.115476][ T4312] usb 4-1: cp210x converter now attached to ttyUSB0 [ 246.237186][ T1106] usb 4-1: USB disconnect, device number 23 [ 246.273581][ T1106] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.298460][ T1106] cp210x 4-1:0.0: device disconnected [ 246.981940][ T1324] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 247.251965][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 247.532475][ T6122] loop4: detected capacity change from 0 to 32768 [ 247.600629][ T6122] [ 247.600629][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.600629][ T6122] [ 247.627987][ T6122] [ 247.627987][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.627987][ T6122] [ 247.638605][ T6122] [ 247.638605][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.638605][ T6122] [ 247.649170][ T6122] [ 247.649170][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.649170][ T6122] [ 247.659895][ T6122] [ 247.659895][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.659895][ T6122] [ 247.670469][ T6122] [ 247.670469][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.670469][ T6122] [ 247.692149][ T275] [ 247.692149][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.692149][ T275] [ 247.862169][ T4528] [ 247.862169][ T4528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.862169][ T4528] [ 247.932068][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.959086][ T6135] Cannot find del_set index 0 as target [ 247.975534][ T4528] [ 247.975534][ T4528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.975534][ T4528] [ 248.503434][ T1324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 248.745312][ T4183] [ 248.745312][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.745312][ T4183] [ 248.756406][ T4183] [ 248.756406][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.756406][ T4183] [ 248.777861][ T275] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 248.789621][ T275] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 248.798046][ T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.187-syzkaller #0 [ 248.806019][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.816076][ T275] RIP: 0010:lmLogSync+0x121/0x9c0 [ 248.821110][ T275] Code: 31 d0 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ad f0 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 91 f0 ef fe 49 8b 3f e8 a9 31 d0 fe [ 248.840719][ T275] RSP: 0018:ffffc90002bafc60 EFLAGS: 00010206 [ 248.846793][ T275] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: b217d95037a8ae00 [ 248.854765][ T275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.862737][ T275] RBP: ffffc90002bafd68 R08: dffffc0000000000 R09: ffffc90002bafba4 [ 248.870714][ T275] R10: fffff52000575f7c R11: 1ffff92000575f74 R12: 1ffff9200049e227 [ 248.878680][ T275] R13: ffff888077085800 R14: ffff88807da3aa38 R15: 0000000000000030 [ 248.886646][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 248.895572][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.902156][ T275] CR2: 00007f70cd8e9000 CR3: 000000005c5ec000 CR4: 00000000003506f0 [ 248.910144][ T275] DR0: 0000000000000000 DR1: 0000000000000b5f DR2: 0000000000003706 [ 248.918117][ T275] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 248.926088][ T275] Call Trace: [ 248.929369][ T275] [ 248.932306][ T275] ? mutex_lock_io_nested+0x60/0x60 [ 248.937525][ T275] ? lmWriteRecord+0x1aa0/0x1aa0 [ 248.942473][ T275] ? __lock_acquire+0x7c60/0x7c60 [ 248.947516][ T275] ? do_raw_spin_lock+0x11d/0x280 [ 248.952564][ T275] ? __rwlock_init+0x140/0x140 [ 248.957330][ T275] jfs_syncpt+0x77/0x90 [ 248.961483][ T275] txEnd+0x2e1/0x520 [ 248.965402][ T275] jfs_lazycommit+0x5ba/0xb20 [ 248.970095][ T275] ? txFreelock+0x5a0/0x5a0 [ 248.974599][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 248.980491][ T275] ? sched_dynamic_update+0x210/0x210 [ 248.985867][ T275] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 248.991786][ T275] ? __kthread_parkme+0x157/0x1b0 [ 248.996821][ T275] kthread+0x436/0x520 [ 249.000890][ T275] ? txFreelock+0x5a0/0x5a0 [ 249.005387][ T275] ? kthread_blkcg+0xd0/0xd0 [ 249.009972][ T275] ret_from_fork+0x1f/0x30 [ 249.014393][ T275] [ 249.017414][ T275] Modules linked in: [ 249.345179][ T275] ---[ end trace 95fed493e92b16a3 ]--- [ 249.350831][ T275] RIP: 0010:lmLogSync+0x121/0x9c0 [ 249.356677][ T1324] usb 3-1: can't read configurations, error -71 [ 249.376947][ T275] Code: 31 d0 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ad f0 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 91 f0 ef fe 49 8b 3f e8 a9 31 d0 fe [ 249.411140][ T275] RSP: 0018:ffffc90002bafc60 EFLAGS: 00010206 [ 249.417466][ T275] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: b217d95037a8ae00 [ 249.431741][ T4297] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.453709][ T275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.463706][ T275] RBP: ffffc90002bafd68 R08: dffffc0000000000 R09: ffffc90002bafba4 [ 249.472338][ T275] R10: fffff52000575f7c R11: 1ffff92000575f74 R12: 1ffff9200049e227 [ 249.480466][ T275] R13: ffff888077085800 R14: ffff88807da3aa38 R15: 0000000000000030 [ 249.489697][ T275] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 249.498930][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.505684][ T275] CR2: 00007f314fac0ab8 CR3: 000000007ebcd000 CR4: 00000000003506e0 [ 249.514091][ T275] DR0: 0000000000000000 DR1: 0000000000000b5f DR2: 0000000000003706 [ 249.522361][ T4297] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 249.522799][ T275] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.529939][ T4297] usb 2-1: can't read configurations, error -71 [ 249.539038][ T275] Kernel panic - not syncing: Fatal exception [ 249.550605][ T275] Kernel Offset: disabled [ 249.554936][ T275] Rebooting in 86400 seconds..