last executing test programs: 4.20024185s ago: executing program 3 (id=828): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000380)=[{0x39, '\x00', @data, 0x400}]}) 3.98471922s ago: executing program 3 (id=831): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xc0, 0xc, 0xa, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x8, 0x700, 0x7, 0x2}}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x44000, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmar+\x00', &(0x7f0000000940), 0x0, 0x2}, {0x1, 0x870, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d", 0x80, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57", 0x39, 0x32}]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000640)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000680)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000007c0)={&(0x7f0000000740)=[r5, 0x0, r6, r7], &(0x7f0000000780)=[0x7fff, 0x0], 0x2, 0x4, 0x7}) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000000000000004) r8 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28000600) (async) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) (async) close_range(r11, 0xffffffffffffffff, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$int_in(r0, 0x40000000af01, 0x0) 3.805833152s ago: executing program 3 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000008000b4000000002040004800900010073797a300000000008000a4000000006"], 0x7c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.805483186s ago: executing program 0 (id=833): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @local, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0x7, 0xc, 0x6, 0x6}, 0x3c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0487470ce4"], 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r7, &(0x7f0000000100)="97", 0x1) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000002c0)=""/75) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001c000400000007fd17e5ffff8800040000000000000000", 0x39}], 0x1) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'net'}]}, 0x5) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 3.66722203s ago: executing program 3 (id=835): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0xff, 0x10}, 0x2) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x0, 0x17, 0x6, "a9eb70c43008"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (rerun: 32) 3.573813188s ago: executing program 0 (id=836): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={"9ad0bf41", 0x4, 0xfb, 0x0, 0x8, 0xc, "cce2dbdf45f40ea492c6392f76389a", "e9299ae1", "78d52133", "1040bd7d", ["958ca577c88be63e95c916fe", "6b31ddbcd65df6383c0d6b18", "71beb6f99d54abc3521d22aa", "84f56b9fd62cd2cde15325d1"]}) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x4}}, 0x9) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1, 0x0, 0x0, 0xf5000000}, 0x10141) r4 = fcntl$dupfd(r0, 0x0, r0) write$tun(r4, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0xf2, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[@dstopts={0x4, 0xf, '\x00', [@generic={0x8, 0x71, "513edb9da4a12c7fc9581dc1fef6eaca1f7dc3c19ab127dc4236ca508c559b6e8ac14f928a3ef2617d92b23e52cdd34054adc3f1ef2105fa369dddffd7b284f9c40694eba7970f70c71362f55e2ed74a2bf85ae01d5e036af21087fc790508b68b4fd066944c6de5f708d72aa6834ea5d7"}, @ra={0x5, 0x2, 0xbcda}, @padn]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x6, 0x18, 0xe39c, [@private2, @empty, @private0]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x11a) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @loopback}, 0x208, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0xfb5}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x86, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x1, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xf8, {{0xa, 0x24, 0x6, 0x0, 0x0, "a0394b561a"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x0, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x7, 0x4, 0xe}, @obex={0x5, 0x24, 0x15, 0xfffd}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xffba, 0x81, 0x9, 0x3ff, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x8c, 0xff, 0x7, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0xc, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x43, 0x2}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6, 0xa4, 0x2, 0x10, 0x8}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0xd, 0x10}]}, 0x1, [{0x34, &(0x7f00000001c0)=@string={0x34, 0x3, "f9bbe03d181577bd63042b7ed6dc5b56333d04a46468ac17136319aecd224d51603c3ae2104b9eec1fb48a8c6ae857de7fb7"}}]}) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.281333452s ago: executing program 1 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x1, 0x0, 0xffffffffffffffd3}, &(0x7f0000000380)=0x40) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 2.280793714s ago: executing program 2 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="92035289add55f1c2144000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc000000000000000000000000000001080002000500000007000600ff020000000000000000000000000001"], 0x44}}, 0x0) listen(r0, 0x204) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x48, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) socket(0xb, 0x800, 0x81) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) ppoll(&(0x7f0000004c80)=[{r3, 0x10}], 0x1, &(0x7f0000004cc0)={0x0, 0x3938700}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.159834372s ago: executing program 1 (id=843): prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) 2.054635692s ago: executing program 1 (id=844): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0xfffffffffffff000, 0x101000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0xfffffffffffff000, 0x101000) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) 2.000375986s ago: executing program 3 (id=845): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0xab, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0xe, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "ff3be713e632"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x42d3, 0x9, 0xf}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x81}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x401, [0x0, 0x72, 0x0, 0x9, 0x4, 0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mdlm_detail={0x32, 0x24, 0x13, 0x5, "5e3ccc811d6e1e2d1afb6fb59394fbb9f42cc5ae6541c950a47e986da6e41b6a320911cc850c6d87b00ac6a1543f"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xf, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0xff, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x6, 0x6, 0x40, 0xff, 0x1}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x7, 0x4, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "016b7cd3b97a93816d3fa9716bca2bd37688de3ba9499e966031c565ec4b1436235b4668d8d67e6f767205bac92e02fffba43e3c0b313dd9dcb5e86c91adda271a9a27d49bea2678e75f6e050786e4654c8c8747763153140e23be947322fe6cf05d0ad536a23365b6b9b676f46d6bcbe46b8c08149cc29acfdeeed2eba0f761fa4c407b556316d5847ccbeb9051436aa2c245fb19db45c6b1a28005baeac2fbda19da1282698cd81cdc57098bdcb5e046"}}, {0x4c, &(0x7f00000003c0)=@string={0x4c, 0x3, "2a7e348e4f87a2612cb169f3ba80ee71d78f7fe8a580da3806d4c68abcf2cd80c74a3a9d386111b63844d282a84439e08e44bdc00203d24239873899c3b87d34f0d1d615ffa4620df499"}}]}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) (async) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0xab, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0xe, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "ff3be713e632"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x42d3, 0x9, 0xf}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x81}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x401, [0x0, 0x72, 0x0, 0x9, 0x4, 0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mdlm_detail={0x32, 0x24, 0x13, 0x5, "5e3ccc811d6e1e2d1afb6fb59394fbb9f42cc5ae6541c950a47e986da6e41b6a320911cc850c6d87b00ac6a1543f"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xf, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0xff, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x6, 0x6, 0x40, 0xff, 0x1}, 0x13, &(0x7f0000000280)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x7, 0x4, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "016b7cd3b97a93816d3fa9716bca2bd37688de3ba9499e966031c565ec4b1436235b4668d8d67e6f767205bac92e02fffba43e3c0b313dd9dcb5e86c91adda271a9a27d49bea2678e75f6e050786e4654c8c8747763153140e23be947322fe6cf05d0ad536a23365b6b9b676f46d6bcbe46b8c08149cc29acfdeeed2eba0f761fa4c407b556316d5847ccbeb9051436aa2c245fb19db45c6b1a28005baeac2fbda19da1282698cd81cdc57098bdcb5e046"}}, {0x4c, &(0x7f00000003c0)=@string={0x4c, 0x3, "2a7e348e4f87a2612cb169f3ba80ee71d78f7fe8a580da3806d4c68abcf2cd80c74a3a9d386111b63844d282a84439e08e44bdc00203d24239873899c3b87d34f0d1d615ffa4620df499"}}]}) (async) 1.866646104s ago: executing program 1 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) lseek(r5, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) (async) lseek(r5, 0x1, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) (async) 1.861515185s ago: executing program 0 (id=847): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) memfd_secret(0x80000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) accept4$unix(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffd8a, 0x0, 0x0, 0x0) 1.54780976s ago: executing program 1 (id=848): r0 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)) (rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef522"], 0xf8) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "43aa167ea3f88695b05c16"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001640)={@remote, 0x52}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0xaa, 0x39, 0x8, 0x4dd, 0x8002, 0x7303, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5, 0x10, 0x2, "", [{{0x9, 0x4, 0xfa, 0x8, 0x0, 0xff, 0x2, 0xe2, 0x1e}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x200, 0x4000, 0x39565559, 0x4, 0xa, [{0x40000}, {0x0, 0x80}, {0xb6e5, 0x7}, {0x0, 0xffffffff}, {0x2000000}, {0xa8, 0x2}, {0x1, 0x2000}, {0x0, 0x2}], 0x9d, 0x0, 0x0, 0x2}}) (async) getsockopt(0xffffffffffffffff, 0x114, 0x271b, 0x0, 0x0) 1.328300412s ago: executing program 1 (id=849): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}}, 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x810c9365, 0x0) (async) r5 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) (async) write$UHID_INPUT(r6, 0x0, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x8, 0x1c, {0x1c, 0xb, "15ca35b0fc2f3fd629383de8d78de5542d9cde97e37c10ee7e98"}}, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\x00\x00']}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x40, "27805bbca042a1da662e806ade4166507e19fe857f9f018d6f0749ee38d6ce2f4e657e38950a97ff517c35d2caf71ac2821e9ce932501dd5b57502d1d11f3efb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 878.170375ms ago: executing program 0 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r2, 0x5, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003040)={0x14, 0x2b, 0x9, 0x70bd25, 0x25dfdbfc, {0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) getpeername$unix(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140)=0x2, 0x4) 807.849288ms ago: executing program 3 (id=851): syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd25, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 675.917423ms ago: executing program 2 (id=852): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000180)={0x5, 0x0, 0x828}) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2000000000032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5a, @mcast1, 0x72}, 0x1c) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 560.498313ms ago: executing program 0 (id=853): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000004"], 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x4008af25, &(0x7f0000001540)) 476.455128ms ago: executing program 2 (id=854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00006dd000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4020ae46, &(0x7f0000000440)={0x6, 0x1, [{0x0, 0x2, 0x0, 0x0, @adapter={0x0, 0x4, 0x59, 0x7, 0x3}}, {0x0, 0x5, 0x0, 0x0, @sint={0xb, 0xffffff81}}, {0x0, 0x5, 0x0, 0x0, @sint={0xfffff000, 0x3}}, {0x6, 0x1, 0x1, 0x0, @adapter={0x2, 0x4, 0x37ce, 0x9, 0x2}}, {0x1, 0x5, 0x1, 0x0, @msi={0x100001, 0x3, 0xd, 0x2}}, {0x101, 0x5, 0x4744285c9288e188, 0x0, @adapter={0xe, 0xf4ee, 0xffffffff, 0x23ab, 0x1ff}}]}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000100)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 454.794239ms ago: executing program 0 (id=855): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x1, 0xac, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000480)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="20109c0000009c2235fa1922a4291aece0efd90da045addd39043a20973a1dbd006a9ab966be89071c0c2cff3c4e4e357d878b561e086a428a270ea8a3bafa1dbac14c8818206b325c5f1e4b2738069dd26c52d13942dd822dee1eb75744b62364c76745de7460b22771e0545bc22653293b6748b4d9508fadd12566016e37ec05536838d157bdaf9223624a7f0587f3d915737278cef0b2d8acd1485e49e4097685"], &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x0, 0xf, 0x3c, "9ab36c5553a910767e904830fa25d5f8cb7e67a7eb0c3245c6130d82f55690e6467ded8dcfb29238215bf9d61369b8678b9064b0af5fb5528cb305bf"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x2, 0x10, 0x6, 0x5, 0x9, 0x3, 0x5, 0x5, 0x2, 0x2, 0x8, 0x7}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0xf, 0x2, 0x4, 0xff, 0x9, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x2, 0x5, 0x400000c9}, {0x2, 0x2, 0x1, 0x40, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20a}, {0x40000001, 0x3, 0x38, 0x3, 0x84, 0x7, 0xd6, 0x0, 0x8, 0x5, 0x4, 0x9, 0x1}], 0xffffffef}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f00000003c0)={0x1f, 0xd3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) listen(r8, 0x9) ioctl$sock_TIOCINQ(r8, 0x541b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xae) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x81], 0x80a0000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 315.94176ms ago: executing program 2 (id=856): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0x10000}}, 0x30) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x9, @raw_data="1e9343b8f4b34a31f54bbdbc0b27b5a329d7f095dafa2e05b08479f069b0de8e76666db9607b78715feada94811befe3637038a5ee5386e8bb75a6fe58a09b30ce47e5c064a137a29e5a360e25c0cd323f630eb3d1bdde17fb0990040cb683cee002ec96b17604253b18de62604d83f51ce25db4052b14bdf9a6ba247030f2fb4e7e0ca7aefe18404924e68d0fead607234fb3be33736919bd4671bf1ed1d86c5d6c41adb477837c2668511d869b2ea276e0ecd0e4d515b1d220bc55177ef7d15e8d431731edc060"}) 240.653255ms ago: executing program 2 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) pipe2(&(0x7f00000003c0), 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/155, 0x9b}, {&(0x7f00000024c0)=""/170, 0xaa}], 0x4}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/240, 0xf0}, {&(0x7f0000004680)=""/149, 0x95}, {&(0x7f0000004740)=""/7, 0x7}, {&(0x7f0000004780)=""/121, 0x79}, {&(0x7f0000004800)=""/97, 0x61}, {&(0x7f0000004880)=""/129, 0x81}, {&(0x7f0000004940)=""/182, 0xb6}], 0x9, &(0x7f0000004ac0)=""/49, 0x31}, 0x10001}], 0x2, 0x2, 0x0) 0s ago: executing program 2 (id=858): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f017d000f2261650fc76f00670f78efc7442400912fdef6c74424020d000000c7442406000000000f0114240f01c30f919111320000c4e2113f50edb8010000000f01d9", 0x44}], 0x1, 0x11, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) syz_clone3(&(0x7f00000007c0)={0xa0000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x0], 0x1}, 0x58) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): ain item tag 0x2 [ 181.950622][ T5931] apple 0003:05AC:027D.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 182.059557][ T5932] usb 4-1: USB disconnect, device number 52 [ 182.343685][ T5931] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 182.498184][ T5931] usb 1-1: Invalid ep0 maxpacket: 16 [ 182.629818][ T5931] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 182.699063][ T5932] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 182.797013][ T5931] usb 1-1: Invalid ep0 maxpacket: 16 [ 182.802951][ T5931] usb usb1-port1: attempt power cycle [ 182.856705][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 182.863344][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.873348][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 182.885082][ T5932] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 182.894324][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.902456][ T5932] usb 3-1: Product: syz [ 182.906516][ T993] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 182.906854][ T5932] usb 3-1: Manufacturer: syz [ 182.919038][ T5932] usb 3-1: SerialNumber: syz [ 182.928812][ T5932] usb 3-1: config 0 descriptor?? [ 183.077506][ T993] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 183.088685][ T993] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.101869][ T993] usb 4-1: config 1 interface 0 has no altsetting 0 [ 183.110842][ T993] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 183.120063][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.128168][ T993] usb 4-1: Product: syz [ 183.132586][ T993] usb 4-1: Manufacturer: syz [ 183.137387][ T993] usb 4-1: SerialNumber: syz [ 183.145409][ T5931] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 183.156311][ T7805] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 183.185891][ T5931] usb 1-1: Invalid ep0 maxpacket: 16 [ 183.327336][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.339070][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.347134][ T5931] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 183.357079][ T5845] usb 3-1: USB disconnect, device number 49 [ 183.384230][ T993] usblp0: Disabling reads from problematic bidirectional printer [ 183.398030][ T5931] usb 1-1: Invalid ep0 maxpacket: 16 [ 183.403921][ T5931] usb usb1-port1: unable to enumerate USB device [ 183.419844][ T993] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 7 proto 1 vid 0x03F0 pid 0x0004 [ 183.440743][ T993] usb 4-1: USB disconnect, device number 53 [ 183.453696][ T993] usblp0: removed [ 183.637903][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.647011][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.657768][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.667965][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.677197][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.686106][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.694839][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.704542][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.713551][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.722467][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.734491][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.745689][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.241094][ T5888] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 184.392188][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.403474][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.413346][ T5888] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 184.422681][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.433456][ T5888] usb 4-1: config 0 descriptor?? [ 184.863419][ T7831] fuse: Bad value for 'fd' [ 185.047457][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 185.056420][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 185.068943][ T5888] usb 4-1: USB disconnect, device number 54 [ 185.237508][ T5845] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 185.388809][ T5845] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.397998][ T5845] usb 3-1: not running at top speed; connect to a high speed hub [ 185.407175][ T5845] usb 3-1: config 3 has an invalid interface number: 170 but max is 0 [ 185.415652][ T5845] usb 3-1: config 3 has no interface number 0 [ 185.421836][ T5845] usb 3-1: config 3 interface 170 has no altsetting 0 [ 185.430796][ T5845] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.ff [ 185.440152][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.448293][ T5845] usb 3-1: Product: syz [ 185.452546][ T5845] usb 3-1: Manufacturer: syz [ 185.457285][ T5845] usb 3-1: SerialNumber: syz [ 185.496838][ T993] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 185.649912][ T993] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.665915][ T993] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.679699][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.691935][ T993] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.702831][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.710743][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.721402][ T993] usb 1-1: SerialNumber: syz [ 185.732430][ T5845] ums-onetouch 3-1:3.170: USB Mass Storage device detected [ 185.819416][ T5845] usb 3-1: USB disconnect, device number 50 [ 185.947842][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.958265][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.974037][ T993] usb 1-1: 0:2 : does not exist [ 186.006250][ T993] usb 1-1: USB disconnect, device number 64 [ 186.037160][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.074583][ T5932] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 186.224549][ T5932] usb 4-1: no configurations [ 186.229287][ T5932] usb 4-1: can't read configurations, error -22 [ 186.374022][ T5932] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 186.543829][ T5932] usb 4-1: no configurations [ 186.548675][ T5932] usb 4-1: can't read configurations, error -22 [ 186.556820][ T5932] usb usb4-port1: attempt power cycle [ 186.667809][ T7856] fuse: Bad value for 'fd' [ 186.720138][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.731708][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.743097][ T5941] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 186.753456][ T5931] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 186.764356][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.773340][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.871983][ T5941] usb 3-1: device descriptor read/64, error -71 [ 186.901972][ T5932] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 186.912748][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 186.920036][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.930000][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 186.936055][ T5932] usb 4-1: no configurations [ 186.946210][ T5932] usb 4-1: can't read configurations, error -22 [ 186.951158][ T5931] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 186.962687][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.970708][ T5931] usb 1-1: Product: syz [ 186.975755][ T5931] usb 1-1: Manufacturer: syz [ 186.980382][ T5931] usb 1-1: SerialNumber: syz [ 187.081362][ T5932] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 187.104103][ T5932] usb 4-1: no configurations [ 187.108968][ T5932] usb 4-1: can't read configurations, error -22 [ 187.116345][ T5932] usb usb4-port1: unable to enumerate USB device [ 187.122958][ T5941] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 187.197659][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.204805][ T5931] usb 1-1: MIDIStreaming interface descriptor not found [ 187.251679][ T5931] usb 1-1: USB disconnect, device number 65 [ 187.272296][ T5941] usb 3-1: device descriptor read/64, error -71 [ 187.318546][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.381002][ T5941] usb usb3-port1: attempt power cycle [ 187.413191][ T7863] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 187.424390][ C0] comedi comedi0: fifo overflow [ 187.430929][ T7864] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 187.441968][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.456592][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.469300][ T7863] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 187.759221][ T5941] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 187.792507][ T5941] usb 3-1: device descriptor read/8, error -71 [ 187.917843][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 188.048816][ T5941] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 188.078932][ T5941] usb 3-1: device descriptor read/8, error -71 [ 188.111130][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 188.198637][ T5941] usb usb3-port1: unable to enumerate USB device [ 188.549703][ T7885] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 188.596924][ T5888] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 188.756257][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 188.768385][ T5888] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 188.787270][ T5888] usb 1-1: config 2 has no interface number 0 [ 188.800578][ T5888] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 188.836112][ T5888] usb 1-1: config 2 interface 88 has no altsetting 0 [ 188.851087][ T5888] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 188.868345][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.883119][ T5888] usb 1-1: Product: syz [ 188.892620][ T5888] usb 1-1: Manufacturer: syz [ 188.900840][ T5888] usb 1-1: SerialNumber: syz [ 188.923807][ T7881] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 189.146651][ T7880] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 189.162640][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.181395][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.193800][ T7901] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 189.229719][ T5888] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 189.258336][ T5888] asix 1-1:2.88: probe with driver asix failed with error -71 [ 189.300720][ T5888] usb 1-1: USB disconnect, device number 66 [ 189.535747][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.546830][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.556824][ T7912] binder: 7911:7912 ioctl c0306201 200000000080 returned -14 [ 189.578766][ T7912] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 189.589395][ T993] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 189.598399][ T7912] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 189.608455][ T7912] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 189.733672][ T993] usb 4-1: device descriptor read/64, error -71 [ 189.823391][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 189.954651][ T5941] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 189.973115][ T993] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 189.985234][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 189.995096][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.003205][ T9] usb 3-1: Product: syz [ 190.007388][ T9] usb 3-1: Manufacturer: syz [ 190.011983][ T9] usb 3-1: SerialNumber: syz [ 190.019291][ T9] usb 3-1: config 0 descriptor?? [ 190.102687][ T993] usb 4-1: device descriptor read/64, error -71 [ 190.114712][ T5941] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 190.123154][ T5941] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 190.134454][ T5941] usb 1-1: config 5 has no interface number 0 [ 190.143266][ T5941] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 190.152472][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.160492][ T5941] usb 1-1: Product: syz [ 190.164770][ T5941] usb 1-1: Manufacturer: syz [ 190.169660][ T5941] usb 1-1: SerialNumber: syz [ 190.212594][ T993] usb usb4-port1: attempt power cycle [ 190.229642][ T9] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 190.237739][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 190.246316][ T9] usb 3-1: Please update to version 0.2 or newer [ 190.429943][ T9] usb 3-1: Firmware: build  [ 190.551447][ T993] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 190.584147][ T993] usb 4-1: device descriptor read/8, error -71 [ 190.821487][ T993] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 190.841963][ T993] usb 4-1: device descriptor read/8, error -71 [ 190.916287][ T24] usb 3-1: USB disconnect, device number 55 [ 190.951133][ T993] usb usb4-port1: unable to enumerate USB device [ 191.473431][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 191.898278][ T5845] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 192.047821][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 192.054562][ T5845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.064651][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.074776][ T5845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.084883][ T5845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.098193][ T5845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.107287][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.316493][ T7913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.327014][ T5845] usb 3-1: GET_CAPABILITIES returned 0 [ 192.334202][ T5845] usbtmc 3-1:16.0: can't read capabilities [ 192.508806][ T5941] comedi comedi5: Wrong number of endpoints [ 192.516865][ T5941] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 192.546787][ T5845] usb 3-1: USB disconnect, device number 56 [ 192.566516][ T5941] usb 1-1: USB disconnect, device number 67 [ 192.728479][ T7939] overlayfs: conflicting options: userxattr,redirect_dir=on [ 193.108310][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 193.777710][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 193.786912][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.793223][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732245][ T7937] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 195.582268][ T7937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.588412][ T7937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.599278][ T7937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.612502][ T7937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.618532][ T7937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.627587][ T7937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.638098][ T7937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.644508][ T7937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.654601][ T7937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.671580][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.688094][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.223633][ T7984] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 196.269383][ T5932] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 196.353263][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.366200][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.439095][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 196.446147][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.456603][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.467098][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.481461][ T5932] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.491065][ T5932] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.500211][ T5932] usb 4-1: Manufacturer: syz [ 196.507066][ T5932] usb 4-1: config 0 descriptor?? [ 196.588848][ T5845] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 196.718680][ T5845] usb 3-1: device descriptor read/64, error -71 [ 196.818440][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.888495][ T5932] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 196.935108][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.945179][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.957487][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.966370][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.975034][ T5845] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 197.060001][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.070335][ T5932] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.079474][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.090008][ T5932] usb 1-1: config 0 descriptor?? [ 197.101492][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 197.108145][ T5845] usb 3-1: device descriptor read/64, error -71 [ 197.218628][ T5845] usb usb3-port1: attempt power cycle [ 197.502279][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 197.512613][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.533191][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.557341][ T5845] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 197.570155][ T8004] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 197.578549][ T5845] usb 3-1: device descriptor read/8, error -71 [ 197.656506][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.669833][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.688642][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.694816][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.767054][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 197.782384][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 197.817577][ T5845] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 197.837379][ T5845] usb 3-1: device descriptor read/8, error -71 [ 197.947551][ T5845] usb usb3-port1: unable to enumerate USB device [ 197.990660][ T5932] pwc: recv_control_msg error -71 req 04 val 1400 [ 197.998971][ T5932] pwc: recv_control_msg error -71 req 02 val 2000 [ 198.005935][ T5932] pwc: recv_control_msg error -71 req 02 val 2100 [ 198.013709][ T5932] pwc: recv_control_msg error -71 req 04 val 1500 [ 198.020791][ T5932] pwc: recv_control_msg error -71 req 02 val 2500 [ 198.028769][ T5932] pwc: recv_control_msg error -71 req 02 val 2400 [ 198.035589][ T5932] pwc: recv_control_msg error -71 req 02 val 2600 [ 198.042525][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 198.049673][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.056815][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 198.064458][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 198.073997][ T5932] pwc: Registered as video103. [ 198.081416][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 198.104338][ T5932] usb 1-1: USB disconnect, device number 68 [ 198.238532][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.252871][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.466231][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.479098][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.825334][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 198.886254][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.975527][ T9] usb 1-1: no configurations [ 198.980343][ T9] usb 1-1: can't read configurations, error -22 [ 199.037793][ T993] usb 4-1: USB disconnect, device number 63 [ 199.124987][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 199.268499][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.277979][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.300534][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.308520][ T9] usb 1-1: no configurations [ 199.314704][ T9] usb 1-1: can't read configurations, error -22 [ 199.321439][ T9] usb usb1-port1: attempt power cycle [ 199.326429][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.685499][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 199.749913][ T9] usb 1-1: no configurations [ 199.763919][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.766570][ T9] usb 1-1: can't read configurations, error -22 [ 199.777958][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.850590][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.861990][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.933975][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 199.965402][ T9] usb 1-1: no configurations [ 199.972989][ T9] usb 1-1: can't read configurations, error -22 [ 199.998311][ T9] usb usb1-port1: unable to enumerate USB device [ 200.383368][ T5932] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 200.543548][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 200.567484][ T5932] usb 4-1: config 7 has an invalid interface number: 124 but max is 0 [ 200.577331][ T5932] usb 4-1: config 7 has no interface number 0 [ 200.583600][ T5932] usb 4-1: config 7 interface 124 has no altsetting 0 [ 200.596623][ T5932] usb 4-1: New USB device found, idVendor=04bb, idProduct=094b, bcdDevice=13.1a [ 200.607341][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.615449][ T5932] usb 4-1: Product: syz [ 200.620548][ T5932] usb 4-1: Manufacturer: syz [ 200.625267][ T5932] usb 4-1: SerialNumber: syz [ 200.693439][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 200.845945][ T5932] usb-storage 4-1:7.124: USB Mass Storage device detected [ 200.862715][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 200.870023][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.880502][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.893674][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.903544][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.913395][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.931129][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.948251][ T5932] usb 4-1: USB disconnect, device number 64 [ 200.959296][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.968147][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.978986][ T9] usb 3-1: Manufacturer: syz [ 200.998357][ T9] usb 3-1: config 0 descriptor?? [ 201.218115][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.243658][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.261422][ T8085] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 201.270910][ T8085] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 201.286293][ T8085] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 201.439853][ T8111] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 201.444465][ T9] rc_core: IR keymap rc-hauppauge not found [ 201.445362][ T8111] binder: 8110:8111 ioctl 80045010 200000000040 returned -22 [ 201.452199][ T9] Registered IR keymap rc-empty [ 201.453023][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.491748][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.523858][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.545820][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 201.560809][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.581688][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.601875][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.632932][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.653038][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.681574][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.711413][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.731583][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.751380][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.761484][ T5845] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 201.772481][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.793658][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 201.802585][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 201.815813][ T9] usb 3-1: USB disconnect, device number 61 [ 201.841288][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.841300][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.901189][ T5845] usb 4-1: device descriptor read/64, error -71 [ 201.991010][ T5932] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 202.140991][ T5845] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 202.151071][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.159923][ T5932] usb 1-1: not running at top speed; connect to a high speed hub [ 202.161492][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 202.177714][ T5932] usb 1-1: config 86 has an invalid interface number: 1 but max is 0 [ 202.186045][ T5932] usb 1-1: config 86 has no interface number 0 [ 202.192519][ T5932] usb 1-1: config 86 interface 1 has no altsetting 0 [ 202.201976][ T5932] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=89.37 [ 202.212005][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.220040][ T5932] usb 1-1: Product: syz [ 202.224353][ T5932] usb 1-1: Manufacturer: syz [ 202.228985][ T5932] usb 1-1: SerialNumber: syz [ 202.280792][ T5845] usb 4-1: device descriptor read/64, error -71 [ 202.321653][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 202.329343][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.342489][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.349178][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 202.358994][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.370132][ T9] usb 3-1: config 0 descriptor?? [ 202.392557][ T5845] usb usb4-port1: attempt power cycle [ 202.446650][ T5932] usb 1-1: selecting invalid altsetting 2 [ 202.452558][ T5932] i2c-cp2615 1-1:86.1: probe with driver i2c-cp2615 failed with error -22 [ 202.466405][ T5932] usb 1-1: USB disconnect, device number 73 [ 202.741029][ T5845] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 202.760986][ T5845] usb 4-1: device descriptor read/8, error -71 [ 202.784331][ T9] hid_parser_main: 5 callbacks suppressed [ 202.784350][ T9] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 202.799194][ T9] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 202.808573][ T9] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 202.816715][ T9] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 202.825201][ T9] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 202.835777][ T9] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 202.861080][ T9] hid-thrustmaster 0003:044F:B65D.000B: setup data couldn't be sent [ 203.000298][ C0] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 203.004508][ T5932] usb 3-1: USB disconnect, device number 62 [ 203.019502][ T5845] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 203.065034][ T5845] usb 4-1: device descriptor read/8, error -71 [ 203.189947][ T5845] usb usb4-port1: unable to enumerate USB device [ 203.252559][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.261588][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.419440][ T808] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 203.584947][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.600152][ T808] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 203.611980][ T808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 203.623444][ T808] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 203.641151][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.659127][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.670769][ T808] usb 1-1: Product: syz [ 203.680098][ T808] usb 1-1: Manufacturer: syz [ 203.697705][ T808] usb 1-1: SerialNumber: syz [ 203.926290][ T808] cdc_ncm 1-1:1.0: bind() failure [ 203.938655][ T808] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 203.945699][ T808] cdc_ncm 1-1:1.1: bind() failure [ 203.959694][ T808] usb 1-1: USB disconnect, device number 74 [ 203.978831][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 204.138655][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 204.151736][ T9] usb 3-1: descriptor type invalid, skip [ 204.164859][ T9] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 204.175437][ T9] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.188591][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 204.200653][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.210074][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.218187][ T9] usb 3-1: Product: syz [ 204.222517][ T9] usb 3-1: Manufacturer: syz [ 204.227228][ T9] usb 3-1: SerialNumber: syz [ 204.629130][ T9] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 204.650071][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 204.663982][ T9] usb 3-1: USB disconnect, device number 63 [ 204.794059][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.805728][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.967833][ T5845] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 205.097822][ T5845] usb 4-1: device descriptor read/64, error -71 [ 205.127638][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 205.279032][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 205.286515][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 205.294867][ T9] usb 1-1: config 0 has no interface number 0 [ 205.302450][ T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.312456][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [ 205.323106][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 205.332599][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.340743][ T9] usb 1-1: Product: syz [ 205.344934][ T9] usb 1-1: Manufacturer: syz [ 205.349627][ T9] usb 1-1: SerialNumber: syz [ 205.351194][ T5845] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 205.363828][ T9] usb 1-1: config 0 descriptor?? [ 205.380698][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 205.390800][ T9] em28xx 1-1:0.89: Video interface 89 found: [ 205.427528][ T993] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 205.440083][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.450077][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.460703][ T8154] netlink: 176 bytes leftover after parsing attributes in process `syz.1.602'. [ 205.472791][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.483513][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.523703][ T5845] usb 4-1: device descriptor read/64, error -71 [ 205.597295][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 205.604489][ T993] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 205.613031][ T993] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 205.622384][ T993] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 205.632460][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.642310][ T993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.652202][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 205.658404][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 205.658886][ T5845] usb usb4-port1: attempt power cycle [ 205.670305][ T993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 205.685443][ T993] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.698599][ T993] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.707884][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.718997][ T993] usb 3-1: config 0 descriptor?? [ 205.724951][ T8152] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 205.746395][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 205.754969][ T9] em28xx 1-1:0.89: board has no eeprom [ 205.817050][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 205.824451][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 205.831146][ T5888] em28xx 1-1:0.89: Registering V4L2 extension [ 205.859097][ T9] usb 1-1: USB disconnect, device number 75 [ 205.874332][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 205.902484][ T5888] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 205.910166][ T5888] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 205.918423][ T5888] em28xx 1-1:0.89: No AC97 audio processor [ 205.933653][ T5888] usb 1-1: Decoder not found [ 205.941929][ T5888] em28xx 1-1:0.89: failed to create media graph [ 205.949803][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.958820][ T5888] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 205.967265][ T993] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.978005][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.998578][ T5888] em28xx 1-1:0.89: Registering snapshot button... [ 206.013704][ T5888] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input23 [ 206.026819][ T5845] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 206.041349][ T5888] em28xx 1-1:0.89: Remote control support is not available for this card. [ 206.050808][ T9] em28xx 1-1:0.89: Closing input extension [ 206.057565][ T9] em28xx 1-1:0.89: Deregistering snapshot button [ 206.058306][ T5845] usb 4-1: device descriptor read/8, error -71 [ 206.198174][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.224286][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.234859][ T8152] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 206.262827][ T9] em28xx 1-1:0.89: Freeing device [ 206.339056][ T5845] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 206.388473][ T5845] usb 4-1: device descriptor read/8, error -71 [ 206.506591][ T5845] usb usb4-port1: unable to enumerate USB device [ 206.577841][ T8177] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 206.608540][ T8173] syz.1.607 (8173) used greatest stack depth: 17816 bytes left [ 206.810131][ T8195] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.612'. [ 206.839522][ T8198] netlink: 'syz.0.613': attribute type 2 has an invalid length. [ 206.848177][ T8198] netlink: 'syz.0.613': attribute type 8 has an invalid length. [ 206.856533][ T8198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.613'. [ 206.991216][ T29] audit: type=1326 audit(1775403687.957:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8204 comm="syz.1.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fac39c819 code=0x0 [ 207.205731][ T5845] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 207.359552][ T5845] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 207.368417][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.378261][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.389350][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.399179][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.406979][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.416006][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.426943][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.436908][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.444745][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.453809][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.465033][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.475766][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.483548][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.492552][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.503640][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.513684][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.521861][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.530832][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.541966][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.551935][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.559795][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.568778][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.580424][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.590461][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.598760][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.607767][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.619176][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.642872][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.652994][ T5845] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.662976][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.674226][ T5845] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 207.691903][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.704284][ T5845] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 207.713810][ T5845] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.722568][ T5845] usb 1-1: Product: syz [ 207.727343][ T5845] usb 1-1: Manufacturer: syz [ 207.732048][ T5845] usb 1-1: SerialNumber: syz [ 207.747354][ T5845] usb 1-1: config 0 descriptor?? [ 207.762377][ T5845] yurex 1-1:0.0: Could not submitting URB [ 207.768858][ T5845] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 207.989657][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.000068][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.012030][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'. [ 208.154480][ T24] usb 1-1: USB disconnect, device number 76 [ 208.175973][ T5845] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 208.208545][ T808] usb 3-1: USB disconnect, device number 64 [ 208.224360][ T808] usblp0: removed [ 208.278716][ T29] audit: type=1326 audit(1775403689.248:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2d3f9c819 code=0x0 [ 208.354395][ T5845] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.376506][ T5845] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.386951][ T5845] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.399500][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.412475][ T8217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.428347][ T5845] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.648621][ T8232] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 208.693233][ T8232] mkiss: ax0: crc mode is auto. [ 208.753846][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 208.787888][ T8214] dvmrp0: entered allmulticast mode [ 208.825754][ T808] usb 4-1: USB disconnect, device number 73 [ 209.047560][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 209.060307][ T8243] binder: 8241:8243 ioctl 4018620d 200000000040 returned -16 [ 209.223804][ T29] audit: type=1800 audit(1775403690.189:6): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.621" name="file0" dev="tmpfs" ino=805 res=0 errno=0 [ 209.282803][ T8252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.428630][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.438980][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.461258][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.472504][ T8258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.670132][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 209.855840][ T9] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.880884][ T9] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 209.904579][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 209.925707][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 209.950467][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.973534][ T808] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 209.982768][ T9] usb 3-1: Product: syz [ 209.998726][ T9] usb 3-1: Manufacturer: syz [ 210.011519][ T8271] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 210.021765][ T8271] netlink: 216 bytes leftover after parsing attributes in process `syz.3.635'. [ 210.022797][ T9] usb 3-1: SerialNumber: syz [ 210.075653][ T8256] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.091869][ T8256] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.123522][ T808] usb 1-1: device descriptor read/64, error -71 [ 210.132114][ T8271] kvm: apic: phys broadcast and lowest prio [ 210.364825][ T808] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 210.514641][ T808] usb 1-1: device descriptor read/64, error -71 [ 210.603856][ T8279] loop4: detected capacity change from 0 to 7 [ 210.611027][ T8279] buffer_io_error: 11 callbacks suppressed [ 210.611045][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.625283][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.633531][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.636081][ T808] usb usb1-port1: attempt power cycle [ 210.642610][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.656009][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.735973][ T8280] support for the xor transformation has been removed. [ 210.744806][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.754936][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.763993][ T8279] ldm_validate_partition_table(): Disk read failed. [ 210.770722][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.779315][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.788601][ T8279] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.799448][ T8279] Dev loop4: unable to read RDB block 0 [ 210.805560][ T8279] loop4: unable to read partition table [ 210.811560][ T8279] loop4: partition table beyond EOD, truncated [ 210.818179][ T8279] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 210.925559][ T8281] overlayfs: statfs failed on './file0' [ 211.002862][ T808] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 211.043509][ T808] usb 1-1: device descriptor read/8, error -71 [ 211.128293][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:ae:1e:cd:f0:f1 [ 211.180994][ T9] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 211.209376][ T9] usb 3-1: USB disconnect, device number 65 [ 211.298411][ T8285] futex_wake_op: syz.1.638 tries to shift op by -1; fix this program [ 211.307228][ T808] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 211.319221][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.330300][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.337038][ T808] usb 1-1: device descriptor read/8, error -71 [ 211.351038][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.364473][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.456153][ T808] usb usb1-port1: unable to enumerate USB device [ 212.133545][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.147490][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.166849][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.641'. [ 212.713650][ T808] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 212.742626][ T5888] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 212.783217][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.795175][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.912410][ T5888] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 212.918259][ T808] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 212.932047][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.941530][ T808] usb 3-1: config 0 has no interface number 0 [ 212.952829][ T808] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 212.955930][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.976526][ T808] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 39668, setting to 64 [ 212.999045][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.008245][ T808] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 213.015640][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.031334][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.037065][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.063319][ T808] usb 3-1: Product: syz [ 213.070934][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.074346][ T808] usb 3-1: Manufacturer: syz [ 213.080727][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.094719][ T808] usb 3-1: SerialNumber: syz [ 213.101690][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.120489][ T808] usb 3-1: config 0 descriptor?? [ 213.123618][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.132688][ T8304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.141988][ T8304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.150254][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.159765][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.171688][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.178936][ T808] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.182689][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.209387][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.231084][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.244007][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.258881][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.270056][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.278076][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.287536][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.299266][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.319263][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.352507][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.388557][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.396976][ T808] usb 3-1: USB disconnect, device number 66 [ 213.416817][ T5888] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.428867][ T5888] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.440161][ T5888] usb 4-1: Product: syz [ 213.448789][ T5888] usb 4-1: Manufacturer: syz [ 213.453847][ T5888] usb 4-1: SerialNumber: syz [ 213.484424][ T5888] usb 4-1: config 0 descriptor?? [ 213.527182][ T5888] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.765063][ T8319] program syz.3.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.972471][ T808] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 214.143873][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.155728][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.166242][ T808] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 214.183945][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.215625][ T808] usb 1-1: config 0 descriptor?? [ 214.430821][ T5888] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 214.439749][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 214.590618][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 214.598671][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.609799][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.622724][ T5888] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 214.632101][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.645787][ T5888] usb 3-1: config 0 descriptor?? [ 214.671835][ T808] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 214.696371][ T808] playstation 0003:054C:0BA0.000C: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 214.861224][ T5888] samsung 0003:0419:0600.000D: item fetching failed at offset 12/41 [ 214.876245][ T5888] samsung 0003:0419:0600.000D: parse failed [ 214.877006][ T808] playstation 0003:054C:0BA0.000C: Invalid reportID received, expected 18 got 179 [ 214.882991][ T5888] samsung 0003:0419:0600.000D: probe with driver samsung failed with error -22 [ 214.916762][ T808] playstation 0003:054C:0BA0.000C: Failed to retrieve DualShock4 pairing info: -22 [ 214.943201][ T5888] usb 3-1: USB disconnect, device number 67 [ 214.946546][ T808] playstation 0003:054C:0BA0.000C: Failed to get MAC address from DualShock4 [ 214.965801][ T808] playstation 0003:054C:0BA0.000C: Failed to create dualshock4. [ 215.015899][ T808] playstation 0003:054C:0BA0.000C: probe with driver playstation failed with error -22 [ 215.082573][ T808] usb 1-1: USB disconnect, device number 81 [ 215.340355][ T5888] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 215.490204][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 215.497909][ T5888] usb 3-1: config 0 has no interfaces? [ 215.506698][ T5888] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 215.516077][ T5888] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 215.526444][ T5888] usb 3-1: Product: syz [ 215.531108][ T5888] usb 3-1: Manufacturer: syz [ 215.535830][ T5888] usb 3-1: SerialNumber: syz [ 215.539845][ T808] usb 4-1: USB disconnect, device number 74 [ 215.560373][ T5888] usb 3-1: config 0 descriptor?? [ 215.574990][ T808] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 215.705785][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.721682][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.736536][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.746824][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.762288][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.771503][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.781276][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.792753][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.804438][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.814767][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.824178][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.833491][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.846580][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.856130][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.866463][ T9] usb 3-1: USB disconnect, device number 68 [ 215.945416][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.955502][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.969932][ T5888] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 215.978668][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.988570][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.030255][ T808] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 216.109980][ T5888] usb 1-1: device descriptor read/64, error -71 [ 216.159900][ T808] usb 4-1: device descriptor read/64, error -71 [ 216.319766][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 216.351749][ T5888] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 216.399730][ T808] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 216.473928][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b7.5a [ 216.483637][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.490137][ T5888] usb 1-1: device descriptor read/64, error -71 [ 216.492602][ T24] usb 3-1: Product: syz [ 216.502410][ T24] usb 3-1: Manufacturer: syz [ 216.507068][ T24] usb 3-1: SerialNumber: syz [ 216.516237][ T24] usb 3-1: config 0 descriptor?? [ 216.526576][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 216.534418][ T808] usb 4-1: device descriptor read/64, error -71 [ 216.542171][ T24] ftdi_sio ttyUSB0: unknown device type: 0xb75a [ 216.592766][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 216.604063][ T5888] usb usb1-port1: attempt power cycle [ 216.649924][ T808] usb usb4-port1: attempt power cycle [ 216.727112][ T9] usb 3-1: USB disconnect, device number 69 [ 216.738133][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.751662][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.759920][ T9] ftdi_sio 3-1:0.0: device disconnected [ 216.950299][ T5888] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 216.970348][ T5888] usb 1-1: device descriptor read/8, error -71 [ 216.989458][ T808] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 217.020325][ T808] usb 4-1: device descriptor read/8, error -71 [ 217.219373][ T5888] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 217.242229][ T5888] usb 1-1: device descriptor read/8, error -71 [ 217.260581][ T808] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 217.300826][ T808] usb 4-1: device descriptor read/8, error -71 [ 217.360796][ T5888] usb usb1-port1: unable to enumerate USB device [ 217.409700][ T808] usb usb4-port1: unable to enumerate USB device [ 218.029877][ T8359] binder: 8358:8359 ioctl c0046209 0 returned -22 [ 218.030564][ T8360] binder: 8358:8360 ioctl c0046209 0 returned -22 [ 218.478806][ T5888] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 218.630753][ T5888] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 218.639275][ T5888] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 218.647382][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 218.656477][ T5888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 218.667432][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 218.678537][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 218.688394][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 218.705840][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 218.712855][ T5888] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 218.722258][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.733801][ T5888] usb 3-1: config 0 descriptor?? [ 218.746068][ T5888] hub 3-1:0.0: bad descriptor, ignoring hub [ 218.752238][ T5888] hub 3-1:0.0: probe with driver hub failed with error -5 [ 218.779114][ T5888] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 218.955981][ T5888] usb 3-1: USB disconnect, device number 70 [ 219.105906][ T8380] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.667'. [ 219.123685][ T8380] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.667'. [ 219.293782][ T8388] lo speed is unknown, defaulting to 1000 [ 219.361837][ T8395] netlink: 6 bytes leftover after parsing attributes in process `syz.0.671'. [ 219.371742][ T8395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 219.493681][ T8401] netlink: 14 bytes leftover after parsing attributes in process `syz.0.673'. [ 219.664635][ T29] audit: type=1326 audit(1775403700.634:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.701378][ T29] audit: type=1326 audit(1775403700.664:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.724235][ T29] audit: type=1326 audit(1775403700.664:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.746943][ T29] audit: type=1326 audit(1775403700.664:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.792939][ T29] audit: type=1326 audit(1775403700.664:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.858480][ T29] audit: type=1326 audit(1775403700.664:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.885595][ T29] audit: type=1326 audit(1775403700.664:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 219.912286][ T8388] lo speed is unknown, defaulting to 1000 [ 219.922807][ T8410] overlayfs: failed to resolve './file1/file0': -2 [ 219.939937][ T5931] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 219.959824][ T29] audit: type=1326 audit(1775403700.664:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 220.004572][ T29] audit: type=1326 audit(1775403700.664:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 220.046704][ T29] audit: type=1326 audit(1775403700.664:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9738b9c819 code=0x7ffc0000 [ 220.151551][ T5931] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 220.172153][ T5931] usb 1-1: config 1 has no interface number 0 [ 220.182961][ T5931] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 220.195734][ T5931] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 220.205695][ T5931] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 220.217807][ T5931] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 220.254701][ T5931] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 220.264981][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.273125][ T5931] usb 1-1: Product: syz [ 220.277507][ T5931] usb 1-1: Manufacturer: syz [ 220.284129][ T5931] usb 1-1: SerialNumber: syz [ 220.307474][ T8407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.418053][ T993] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 220.546852][ T8407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.583195][ T993] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 220.593254][ T5931] usb 1-1: No status endpoint found [ 220.599309][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.611246][ T993] usb 3-1: Product: syz [ 220.615550][ T993] usb 3-1: Manufacturer: syz [ 220.621040][ T993] usb 3-1: SerialNumber: syz [ 220.639039][ T993] usb 3-1: config 0 descriptor?? [ 220.857098][ T993] usb 3-1: USB disconnect, device number 71 [ 221.067083][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.685'. [ 221.126954][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.416694][ T8452] fuse: Unknown parameter 'default_@' [ 221.471052][ T8454] fuse: Bad value for 'group_id' [ 221.476036][ T8454] fuse: Bad value for 'group_id' [ 221.624065][ T8459] netlink: 168 bytes leftover after parsing attributes in process `syz.2.692'. [ 221.655445][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.672948][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.686083][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.696364][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.001074][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 222.109625][ T8479] fuse: Bad value for 'group_id' [ 222.116952][ T8479] fuse: Bad value for 'group_id' [ 222.334166][ T8487] tmpfs: Bad value for 'mpol' [ 222.741986][ T5931] usb 1-1: USB disconnect, device number 86 [ 222.793956][ T8490] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 222.931028][ T8492] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 223.195789][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.206194][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.228562][ T5845] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 223.287247][ T808] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 223.387088][ T5845] usb 1-1: Invalid ep0 maxpacket: 16 [ 223.438507][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 223.446244][ T808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 223.459830][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 223.473762][ T808] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 223.489776][ T808] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 223.508935][ T808] usb 3-1: Product: syz [ 223.517363][ T5845] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 223.527525][ T808] usb 3-1: Manufacturer: syz [ 223.533790][ T808] usb 3-1: SerialNumber: syz [ 223.542755][ T808] usb 3-1: config 0 descriptor?? [ 223.559333][ T808] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 223.686959][ T5845] usb 1-1: Invalid ep0 maxpacket: 16 [ 223.692851][ T5845] usb usb1-port1: attempt power cycle [ 223.767393][ T8508] fuse: Bad value for 'group_id' [ 223.773610][ T8508] fuse: Bad value for 'group_id' [ 223.850912][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.871244][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.901967][ T5941] usb 3-1: USB disconnect, device number 72 [ 223.905751][ T12] usb 3-1: Failed to submit usb control message: -71 [ 223.943923][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 223.957950][ T12] usb 3-1: unable to get target info from device [ 223.964419][ T12] usb 3-1: could not get target info (-71) [ 223.970486][ T12] usb 3-1: could not probe fw (-71) [ 224.056924][ T5845] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 224.087680][ T5845] usb 1-1: Invalid ep0 maxpacket: 16 [ 224.151087][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.163112][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.226929][ T5845] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 224.247614][ T5845] usb 1-1: Invalid ep0 maxpacket: 16 [ 224.253215][ T5845] usb usb1-port1: unable to enumerate USB device [ 224.383198][ T8519] netlink: 104 bytes leftover after parsing attributes in process `syz.3.713'. [ 224.696739][ T5845] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 224.726877][ T993] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 224.744739][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 224.744756][ T29] audit: type=1804 audit(1775403705.716:77): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.716" name="/newroot/247/file1" dev="tmpfs" ino=1372 res=1 errno=0 [ 224.872108][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.880786][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 224.888846][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.889781][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.906750][ T5845] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.915345][ T5845] usb 4-1: config 0 has no interface number 0 [ 224.921758][ T993] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 224.930915][ T5845] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.930945][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.930966][ T5845] usb 4-1: Product: syz [ 224.952821][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.955469][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.968477][ T993] usb 3-1: Product: syz [ 224.970211][ T5845] usb 4-1: Manufacturer: syz [ 224.978359][ T993] usb 3-1: Manufacturer: syz [ 224.978380][ T993] usb 3-1: SerialNumber: syz [ 224.989033][ T5845] usb 4-1: SerialNumber: syz [ 224.996138][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.001741][ T993] usb 3-1: config 0 descriptor?? [ 225.009000][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.023538][ T5845] usb 4-1: config 0 descriptor?? [ 225.030781][ T993] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 225.222146][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.231280][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.245072][ T8527] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 225.262933][ T8528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.461642][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 225.472621][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.090215][ T8521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.112435][ T8521] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 226.219981][ T8535] loop6: detected capacity change from 0 to 2640 [ 226.227599][ T8535] buffer_io_error: 14 callbacks suppressed [ 226.227617][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.242399][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.250596][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.258789][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.266970][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.286359][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.309767][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.320225][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.332346][ T8535] ldm_validate_partition_table(): Disk read failed. [ 226.340185][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.349034][ T8535] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.355035][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 226.359954][ T8535] Dev loop6: unable to read RDB block 0 [ 226.375120][ T8535] loop6: unable to read partition table [ 226.380952][ T5845] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 226.410480][ T8535] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 226.438264][ T5210] ldm_validate_partition_table(): Disk read failed. [ 226.446909][ T5210] Dev loop6: unable to read RDB block 0 [ 226.453212][ T5210] loop6: unable to read partition table [ 226.581372][ T8540] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.590689][ T8540] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 226.599480][ T8540] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.607616][ T8540] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 226.813113][ T8545] veth0_macvtap: entered allmulticast mode [ 227.186223][ T29] audit: type=1800 audit(1775403708.157:78): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="bus" dev="tmpfs" ino=1405 res=0 errno=0 [ 227.211622][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.235151][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.489834][ T9] usb 4-1: USB disconnect, device number 79 [ 227.895947][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 227.976245][ T5888] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 227.993908][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.004938][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.057218][ T9] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 228.066735][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 228.074383][ T9] usb 4-1: can't read configurations, error -61 [ 228.135789][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 228.142872][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.155803][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 228.167089][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.178366][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.187533][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.198390][ T5888] usb 1-1: config 0 descriptor?? [ 228.205846][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 228.214748][ T8567] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 228.224263][ T5888] hub 1-1:0.0: USB hub found [ 228.245657][ T993] gspca_stk1135: reg_w 0x352 err -71 [ 228.252982][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.260013][ T993] gspca_stk1135: Sensor write failed [ 228.265403][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.272366][ T993] gspca_stk1135: Sensor write failed [ 228.278219][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.284901][ T993] gspca_stk1135: Sensor read failed [ 228.290234][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.296634][ T993] gspca_stk1135: Sensor read failed [ 228.301864][ T993] gspca_stk1135: Detected sensor type unknown (0x0) [ 228.308751][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.317669][ T993] gspca_stk1135: Sensor read failed [ 228.322960][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.329469][ T993] gspca_stk1135: Sensor read failed [ 228.334715][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.341330][ T993] gspca_stk1135: Sensor write failed [ 228.346998][ T993] gspca_stk1135: serial bus timeout: status=0x00 [ 228.353983][ T993] gspca_stk1135: Sensor write failed [ 228.359450][ T993] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 228.368359][ T9] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 228.378871][ T993] usb 3-1: USB disconnect, device number 73 [ 228.387508][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 228.395339][ T9] usb 4-1: can't read configurations, error -61 [ 228.410650][ T9] usb usb4-port1: attempt power cycle [ 228.637419][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.646499][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.750432][ T5888] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 228.758595][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 228.779679][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 228.792590][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 228.802140][ T9] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 228.816387][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 228.835490][ T5888] usb 1-1: USB disconnect, device number 91 [ 228.841593][ T9] usb 4-1: can't read configurations, error -61 [ 228.986418][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 229.007393][ T9] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 229.029221][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 229.045663][ T9] usb 4-1: can't read configurations, error -61 [ 229.052454][ T9] usb usb4-port1: unable to enumerate USB device [ 229.293542][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.302655][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.317132][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 229.376142][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.385011][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.412992][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 229.500114][ T24] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 229.509397][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.521128][ T24] usb 3-1: Product: syz [ 229.525324][ T24] usb 3-1: Manufacturer: syz [ 229.530105][ T24] usb 3-1: SerialNumber: syz [ 229.538367][ T24] usb 3-1: config 0 descriptor?? [ 229.548364][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 229.695591][ T5845] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 229.847297][ T5845] usb 1-1: config 120 has an invalid interface number: 138 but max is 0 [ 229.855793][ T5845] usb 1-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 229.866514][ T5845] usb 1-1: config 120 has no interface number 0 [ 229.872883][ T5845] usb 1-1: config 120 interface 138 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 229.886446][ T5845] usb 1-1: config 120 interface 138 has no altsetting 0 [ 229.897320][ T5845] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 229.906461][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.914475][ T5845] usb 1-1: Product: syz [ 229.918735][ T5845] usb 1-1: Manufacturer: syz [ 229.923372][ T5845] usb 1-1: SerialNumber: syz [ 230.175155][ T5845] ums-usbat 1-1:120.138: USB Mass Storage device detected [ 230.215718][ T5845] ums-usbat 1-1:120.138: This device (03f0,0307,0001 S ee P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 230.215718][ T5845] Please send a copy of this message to and [ 230.299500][ T5845] usb 1-1: USB disconnect, device number 92 [ 230.341504][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.360064][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.370863][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.382619][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.394590][ T9] usb 3-1: USB disconnect, device number 74 [ 230.402330][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.423236][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.444608][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.455647][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.466195][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.475102][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.487083][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.496253][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.507636][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.518802][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.900482][ T8630] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 230.907082][ T8630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.918332][ T8630] vhci_hcd vhci_hcd.0: Device attached [ 230.928494][ T8630] vhci_hcd vhci_hcd.0: port 0 already used [ 230.968178][ T8631] vhci_hcd: connection closed [ 230.969346][ T58] vhci_hcd vhci_hcd.0: stop threads [ 230.979743][ T58] vhci_hcd vhci_hcd.0: release socket [ 230.985265][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 230.987939][ T5845] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 231.087490][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.096653][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.145324][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 231.152822][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.166588][ T5845] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 231.175804][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.186146][ T5845] usb 4-1: config 0 descriptor?? [ 231.197271][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.206387][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.315204][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 231.465115][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.473000][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.485011][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.494943][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 231.504274][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.518029][ T9] usb 3-1: config 0 descriptor?? [ 231.606526][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.621005][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.629987][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.639678][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.647139][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.654335][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 231.661813][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x4 [ 231.670591][ T5845] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x6 [ 231.679224][ T5845] zeroplus 0003:0C12:0030.000E: reserved main item tag 0xd [ 231.686895][ T5845] zeroplus 0003:0C12:0030.000E: reserved main item tag 0xd [ 231.703774][ T5845] zeroplus 0003:0C12:0030.000E: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 231.715260][ T5845] zeroplus 0003:0C12:0030.000E: no inputs found [ 231.811941][ T5888] usb 4-1: USB disconnect, device number 84 [ 231.960025][ T9] nintendo 0003:057E:200E.000F: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 231.995062][ T5845] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 232.036467][ T9] nintendo 0003:057E:200E.000F: Failed charging grip handshake [ 232.046407][ T9] nintendo 0003:057E:200E.000F: Failed to initialize controller; ret=-110 [ 232.075138][ T9] nintendo 0003:057E:200E.000F: probe - fail = -110 [ 232.082043][ T9] nintendo 0003:057E:200E.000F: probe with driver nintendo failed with error -110 [ 232.156261][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.158347][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.170169][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.183066][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.193897][ T5845] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 232.194727][ T9] usb 3-1: USB disconnect, device number 75 [ 232.204342][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.234368][ T5845] usb 1-1: config 0 descriptor?? [ 232.379705][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 232.493279][ T5845] usbhid 1-1:0.0: can't add hid device: -71 [ 232.501314][ T5845] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 232.532185][ T5845] usb 1-1: USB disconnect, device number 93 [ 232.675205][ T808] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 232.826644][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.837723][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.847714][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.861153][ T808] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.870758][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.882723][ T808] usb 4-1: config 0 descriptor?? [ 232.945429][ T5845] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 233.014903][ T5941] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 233.096896][ T5845] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 233.107027][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.116062][ T5845] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.125279][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.133485][ T5845] usb 1-1: Product: syz [ 233.137744][ T5845] usb 1-1: Manufacturer: syz [ 233.142375][ T5845] usb 1-1: SerialNumber: syz [ 233.150279][ T5845] usb 1-1: config 0 descriptor?? [ 233.157207][ T8659] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 233.169610][ T5941] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.182545][ T5845] usb 1-1: selecting invalid altsetting 0 [ 233.188750][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.203247][ T5941] usb 3-1: Product: syz [ 233.209125][ T5941] usb 3-1: Manufacturer: syz [ 233.215352][ T5941] usb 3-1: SerialNumber: syz [ 233.246913][ T5941] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.299041][ T5932] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.371103][ T808] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 233.496457][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.507655][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.555077][ T993] usb 1-1: USB disconnect, device number 94 [ 233.621782][ T8667] trusted_key: syz.0.756 sent an empty control message without MSG_MORE. [ 233.870290][ T9] usb 4-1: USB disconnect, device number 85 [ 233.932837][ T8674] netlink: 'syz.3.758': attribute type 27 has an invalid length. [ 234.001057][ T8676] netlink: 'syz.3.759': attribute type 12 has an invalid length. [ 234.012040][ T993] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 234.184424][ T8679] autofs: Bad value for 'fd' [ 234.191181][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 234.197244][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.215800][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.217143][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.236851][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.251157][ T8679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.760'. [ 234.261470][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.271329][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 234.280298][ T993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.291378][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.306005][ T993] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.316155][ T993] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.324214][ T993] usb 1-1: Manufacturer: syz [ 234.332119][ T993] usb 1-1: config 0 descriptor?? [ 234.384907][ T5932] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 234.395284][ T5932] ath9k_htc: Failed to initialize the device [ 234.431674][ T5932] usb 3-1: ath9k_htc: USB layer deinitialized [ 234.595340][ T993] rc_core: IR keymap rc-hauppauge not found [ 234.605447][ T993] Registered IR keymap rc-empty [ 234.610455][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.634687][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.650123][ T5932] usb 3-1: USB disconnect, device number 76 [ 234.663077][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 234.678104][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 234.693794][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.714912][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.734629][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.756009][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.794685][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.814035][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.822701][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.830590][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.854793][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.885189][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.906269][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.935326][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.956734][ T993] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 234.967235][ T993] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.111406][ T5932] usb 1-1: USB disconnect, device number 95 [ 235.334556][ T993] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 235.495687][ T5845] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 235.499222][ T993] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 235.525035][ T993] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 235.535512][ T993] usb 4-1: config 160 has no interface number 0 [ 235.542457][ T993] usb 4-1: config 160 interface 200 altsetting 30 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 235.553916][ T993] usb 4-1: config 160 interface 200 altsetting 30 endpoint 0x8 has invalid wMaxPacketSize 0 [ 235.564102][ T993] usb 4-1: config 160 interface 200 has no altsetting 0 [ 235.578085][ T993] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 235.587888][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.596444][ T993] usb 4-1: Product: syz [ 235.600668][ T993] usb 4-1: Manufacturer: syz [ 235.605399][ T993] usb 4-1: SerialNumber: syz [ 235.664490][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 235.682450][ T5845] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.696078][ T5845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.702766][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 235.713148][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.727707][ T5845] usb 3-1: config 0 descriptor?? [ 235.843325][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.857810][ T993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.869013][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.885319][ T993] usb 4-1: MIDIStreaming interface descriptor not found [ 235.902596][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.925513][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.030187][ T993] usb 4-1: USB disconnect, device number 86 [ 236.059670][ T8730] netlink: 294 bytes leftover after parsing attributes in process `syz.0.774'. [ 236.072953][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.105933][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.126489][ T8730] netlink: 52 bytes leftover after parsing attributes in process `syz.0.774'. [ 236.137289][ T8730] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 236.369294][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 236.381527][ T8741] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 236.384025][ T5845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 236.435787][ T5845] usb 3-1: USB disconnect, device number 77 [ 236.586850][ T8745] program syz.0.779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.872055][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.881304][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.941502][ T8758] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 236.949435][ T8758] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 236.959093][ T8758] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.783'. [ 237.054615][ T5845] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 237.204992][ T993] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 237.224748][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 237.232230][ T5845] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 237.240556][ T5845] usb 4-1: config 0 has no interface number 0 [ 237.246960][ T5845] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 237.257379][ T5845] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 237.272281][ T5845] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 237.284020][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.292441][ T5845] usb 4-1: Product: syz [ 237.296761][ T5845] usb 4-1: Manufacturer: syz [ 237.301453][ T5845] usb 4-1: SerialNumber: syz [ 237.313162][ T5845] usb 4-1: config 0 descriptor?? [ 237.321181][ T8743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.329068][ T8743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.333726][ T8767] lo speed is unknown, defaulting to 1000 [ 237.384323][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 237.397072][ T993] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 237.414280][ T993] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 237.430221][ T993] usb 1-1: config 8 has no interface number 0 [ 237.438048][ T993] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 237.450770][ T993] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 237.461927][ T993] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.475879][ T993] usb 1-1: config 8 interface 206 has no altsetting 0 [ 237.485438][ T993] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 237.494577][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.502617][ T993] usb 1-1: Product: syz [ 237.507771][ T993] usb 1-1: Manufacturer: syz [ 237.512426][ T993] usb 1-1: SerialNumber: syz [ 237.549675][ T8743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.579512][ T8743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.727437][ T993] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 237.756207][ T993] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 237.769707][ T993] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 237.798218][ T993] usb 1-1: USB disconnect, device number 96 [ 237.813417][ T5845] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 237.829064][ T993] garmin_gps 1-1:8.206: device disconnected [ 237.843649][ T5845] asix 4-1:0.34: probe with driver asix failed with error -32 [ 237.904586][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 238.071168][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.075717][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 238.089484][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.095545][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.106470][ T8780] netlink: 'syz.1.791': attribute type 11 has an invalid length. [ 238.117096][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 238.129486][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.138607][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.146643][ T9] usb 3-1: Product: syz [ 238.150803][ T9] usb 3-1: Manufacturer: syz [ 238.155458][ T9] usb 3-1: SerialNumber: syz [ 238.368898][ T8774] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 238.396294][ T8782] A٨: renamed from lo (while UP) [ 238.644102][ T808] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 238.750943][ T8784] 8021q: VLANs not supported on bond0 [ 238.814602][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 238.833660][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.853448][ T808] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.863812][ T808] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.878568][ T808] usb 1-1: Product: syz [ 238.882936][ T808] usb 1-1: Manufacturer: syz [ 238.888056][ T808] usb 1-1: SerialNumber: syz [ 238.899309][ T808] usb 1-1: config 0 descriptor?? [ 238.906359][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 238.979155][ T9] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 239.015613][ T9] cdc_ncm 3-1:1.0: bind() failure [ 239.038713][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 239.046074][ T9] cdc_ncm 3-1:1.1: bind() failure [ 239.056985][ T9] usb 3-1: USB disconnect, device number 78 [ 239.111204][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.122682][ T993] usb 1-1: USB disconnect, device number 97 [ 239.129869][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.201843][ T8795] Bluetooth: MGMT ver 1.23 [ 239.211183][ T8795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.230921][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.240427][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.494662][ T5932] usb 4-1: USB disconnect, device number 87 [ 239.649579][ T8800] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 239.671183][ T8800] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 239.867717][ T8811] netlink: 'syz.1.803': attribute type 61 has an invalid length. [ 239.938761][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.947740][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.972665][ T993] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 240.003961][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 240.084009][ T5932] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 240.126824][ T993] usb 4-1: config index 0 descriptor too short (expected 54328, got 56) [ 240.135540][ T993] usb 4-1: config 2 has too many interfaces: 151, using maximum allowed: 32 [ 240.144646][ T993] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 240.154840][ T993] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 151 [ 240.164067][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 240.169258][ T993] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.182488][ T993] usb 4-1: config 2 interface 0 has no altsetting 0 [ 240.191097][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.201628][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.212646][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.222617][ T993] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 240.232152][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.242188][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.250253][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.254075][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 240.263272][ T993] usb 4-1: Product: syz [ 240.272602][ T993] usb 4-1: Manufacturer: syz [ 240.275779][ T5932] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 240.277628][ T993] usb 4-1: SerialNumber: syz [ 240.286770][ T5932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 240.292732][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.302984][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 240.321311][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.329499][ T9] usb 1-1: Manufacturer: syz [ 240.334142][ T5932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 240.334173][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.334199][ T5932] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.334241][ T5932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.334265][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.395401][ T9] usb 1-1: config 0 descriptor?? [ 240.559866][ T993] ims_pcu 4-1:2.0: Missing CDC union descriptor [ 240.566400][ T993] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 240.578586][ T993] usb 4-1: USB disconnect, device number 88 [ 240.588391][ T5932] usb 3-1: GET_CAPABILITIES returned 0 [ 240.601933][ T5932] usbtmc 3-1:16.0: can't read capabilities [ 240.723912][ T9] rc_core: IR keymap rc-hauppauge not found [ 240.735801][ T9] Registered IR keymap rc-empty [ 240.741638][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.774039][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.792517][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 240.804992][ T8809] usbtmc 3-1:16.0: Unable to send data, error -71 [ 240.809999][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 240.821189][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 240.833020][ T8824] usbtmc 3-1:16.0: Unable to send data, error -71 [ 240.835976][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.855729][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 240.868719][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.904643][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.964485][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.973577][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.982287][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.012295][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.035906][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.065687][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.100027][ T808] usb 3-1: USB disconnect, device number 79 [ 241.100753][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.153656][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.190567][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.204374][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.205352][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.250925][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.279610][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.316152][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 241.326133][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.381280][ T9] usb 1-1: USB disconnect, device number 98 [ 241.556940][ T8837] netlink: 'syz.2.811': attribute type 5 has an invalid length. [ 241.616926][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.627855][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.710271][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.775611][ T8847] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 241.840074][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.852187][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.861828][ T8851] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 241.875274][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.884607][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.938278][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.956068][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.973661][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.985486][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.465957][ T5932] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 242.499494][ T5845] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 242.667403][ T8875] netlink: 120 bytes leftover after parsing attributes in process `syz.2.822'. [ 242.676753][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.677742][ T5932] usb 1-1: config 100 has an invalid descriptor of length 1, skipping remainder of the config [ 242.677766][ T5932] usb 1-1: config 100 has 0 interfaces, different from the descriptor's value: 1 [ 242.707566][ T5932] usb 1-1: New USB device found, idVendor=0572, idProduct=cb06, bcdDevice=d6.60 [ 242.708301][ T8875] netlink: 128 bytes leftover after parsing attributes in process `syz.2.822'. [ 242.728684][ T5845] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 242.741953][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.750132][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.758478][ T5932] usb 1-1: Product: syz [ 242.762766][ T5845] usb 4-1: Product: syz [ 242.767138][ T5932] usb 1-1: Manufacturer: syz [ 242.771877][ T5845] usb 4-1: Manufacturer: syz [ 242.776655][ T5932] usb 1-1: SerialNumber: syz [ 242.781331][ T5845] usb 4-1: SerialNumber: syz [ 242.797681][ T5845] usb 4-1: config 0 descriptor?? [ 242.813396][ T5845] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 242.844707][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.854389][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.280790][ T5845] gspca_stk1135: reg_w 0x5 err -71 [ 243.297019][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.315567][ T5845] gspca_stk1135: Sensor write failed [ 243.328091][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.345818][ T5845] gspca_stk1135: Sensor write failed [ 243.353885][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.361592][ T5845] gspca_stk1135: Sensor read failed [ 243.367932][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.374380][ T5845] gspca_stk1135: Sensor read failed [ 243.380741][ T5845] gspca_stk1135: Detected sensor type unknown (0x0) [ 243.392813][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.412118][ T5845] gspca_stk1135: Sensor read failed [ 243.418355][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.433196][ T5845] gspca_stk1135: Sensor read failed [ 243.439805][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.446464][ T5845] gspca_stk1135: Sensor write failed [ 243.452346][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 243.459011][ T5845] gspca_stk1135: Sensor write failed [ 243.465520][ T5845] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 243.481921][ T5845] usb 4-1: USB disconnect, device number 89 [ 243.565914][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.599700][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.823514][ T5845] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 243.866057][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.883487][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.986320][ T5845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.000503][ T5845] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.012703][ T5845] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.023676][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.032857][ T5845] usb 4-1: SerialNumber: syz [ 244.392732][ T5845] usb 4-1: 0:2 : does not exist [ 244.405889][ T5845] usb 4-1: unit 5: unexpected type 0x09 [ 244.424596][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.436167][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.465823][ T5932] usb 1-1: USB disconnect, device number 99 [ 244.476334][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 244.648561][ T5845] usb 4-1: USB disconnect, device number 90 [ 244.740512][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.927208][ T5858] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 244.935297][ T8913] netlink: 'syz.0.833': attribute type 28 has an invalid length. [ 245.014501][ T8916] random: crng reseeded on system resumption [ 245.105465][ T5858] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 245.116666][ T8920] sg_write: data in/out 455132/240 bytes for SCSI command 0x0-- guessing data in; [ 245.116666][ T8920] program syz.0.836 not setting count and/or reply_len properly [ 245.287865][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 245.398586][ T5932] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 245.411387][ T8922] netlink: 260 bytes leftover after parsing attributes in process `syz.1.837'. [ 245.458928][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 245.465840][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.475217][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.485963][ T9] usb 4-1: config 0 descriptor?? [ 245.566111][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 245.573355][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 245.584998][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 245.595954][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 245.605801][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 245.616939][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 245.630889][ T5932] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 245.639991][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.648086][ T5932] usb 1-1: Product: syz [ 245.652616][ T5932] usb 1-1: Manufacturer: syz [ 245.657973][ T5932] usb 1-1: SerialNumber: syz [ 245.666105][ T5932] usb 1-1: config 0 descriptor?? [ 245.708099][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.719168][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.729782][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.737306][ T9] usb 4-1: media controller created [ 245.757711][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.889649][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.899576][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.960887][ T8926] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 246.019772][ T9] az6027: usb out operation failed. (-71) [ 246.040378][ T9] stb0899_attach: Driver disabled by Kconfig [ 246.058388][ T9] az6027: no front-end attached [ 246.058388][ T9] [ 246.081299][ T9] az6027: usb out operation failed. (-71) [ 246.101664][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 246.130556][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 246.144361][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.171550][ T5932] input input29: Device does not respond to id packet M [ 246.181168][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.188323][ T5932] input input29: Device does not respond to id packet P [ 246.197239][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.220117][ T5932] input input29: Device does not respond to id packet B [ 246.220671][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 246.240099][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.252355][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.254170][ T5932] input input29: Device does not respond to id packet N [ 246.292136][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.304692][ T9] usb 4-1: USB disconnect, device number 91 [ 246.315754][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.342119][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.367891][ T5932] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 246.416498][ T5932] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input29 [ 246.509773][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 246.521640][ T5932] usb 1-1: USB disconnect, device number 100 [ 246.635874][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.667092][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.705735][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.721264][ T5888] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 246.741402][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.927627][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 246.982129][ T5888] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 247.021329][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.033398][ T9] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 247.056307][ T5888] usb 3-1: config 0 descriptor?? [ 247.067200][ T8934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 247.214036][ T9] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 247.246614][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.280358][ T9] usb 4-1: config 0 has no interface number 0 [ 247.305497][ T9] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 247.342770][ T9] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 247.370491][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 247.378193][ T9] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 247.393102][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.407883][ T9] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 247.430489][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.439071][ T5888] usb 3-1: USB disconnect, device number 80 [ 247.452137][ T9] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 247.474863][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.485635][ T9] usb 4-1: Product: syz [ 247.490131][ T9] usb 4-1: Manufacturer: syz [ 247.494957][ T9] usb 4-1: SerialNumber: syz [ 247.500054][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.509916][ T9] usb 4-1: config 0 descriptor?? [ 247.526283][ T9] symbolserial 4-1:0.175: symbol converter detected [ 247.545641][ T9] usb 4-1: symbol converter now attached to ttyUSB0 [ 247.734486][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.751077][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.792780][ T5888] usb 4-1: USB disconnect, device number 92 [ 247.866009][ T5888] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 247.908956][ T5888] symbolserial 4-1:0.175: device disconnected [ 248.291641][ T5888] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 248.475041][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 248.488039][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.497630][ T5888] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 248.507361][ T5888] usb 4-1: config 0 has no interface number 0 [ 248.513621][ T5888] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 248.525612][ T5888] usb 4-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 248.538853][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 248.547220][ T5888] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 248.563671][ T5888] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.575180][ T5888] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 248.585661][ T5888] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 248.595929][ T5888] usb 4-1: config 0 interface 122 has no altsetting 0 [ 248.606813][ T5888] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 248.631522][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.661379][ T5888] usb 4-1: Product: syz [ 248.675532][ T5888] usb 4-1: Manufacturer: syz [ 248.684247][ T5888] usb 4-1: SerialNumber: syz [ 248.705161][ T5888] usb 4-1: config 0 descriptor?? [ 248.726756][ T8990] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 248.734880][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 248.746669][ T8990] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 248.754882][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.767613][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.779038][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 248.790390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.801841][ T9] usb 1-1: Product: syz [ 248.806491][ T9] usb 1-1: Manufacturer: syz [ 248.811240][ T9] usb 1-1: SerialNumber: syz [ 248.822906][ T9] usb 1-1: config 0 descriptor?? [ 249.007949][ T5888] pl2303 4-1:0.122: pl2303 converter detected [ 249.016838][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 249.032421][ T9009] [ 249.034906][ T9009] ================================ [ 249.040025][ T9009] WARNING: inconsistent lock state [ 249.045190][ T9009] syzkaller #0 Tainted: G L [ 249.051188][ T9009] -------------------------------- [ 249.056313][ T9009] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. [ 249.063186][ T9009] syz.2.858/9009 [HC0[0]:SC0[2]:HE1:SE0] takes: [ 249.069452][ T9009] ffff88803165a868 (&dev->spinlock){?...}-{3:3}, at: waveform_ao_cancel+0x8d/0x120 [ 249.078815][ T9009] {IN-HARDIRQ-W} state was registered at: [ 249.084556][ T9009] lock_acquire+0x106/0x350 [ 249.089181][ T9009] _raw_spin_lock+0x2e/0x40 [ 249.093797][ T9009] das16m1_interrupt+0x5e/0x180 [ 249.098760][ T9009] __handle_irq_event_percpu+0x216/0x9a0 [ 249.104515][ T9009] handle_irq_event+0x8b/0x1e0 [ 249.109398][ T9009] handle_edge_irq+0x23b/0x9f0 [ 249.114275][ T9009] __common_interrupt+0x141/0x1f0 [ 249.119423][ T9009] common_interrupt+0xb6/0xe0 [ 249.124213][ T9009] asm_common_interrupt+0x26/0x40 [ 249.129360][ T9009] _raw_spin_unlock_irqrestore+0x47/0x80 [ 249.135115][ T9009] serial8250_config_port+0x1464/0x53b0 [ 249.140776][ T9009] univ8250_config_port+0x3b9/0x980 [ 249.146093][ T9009] uart_ioctl+0x1513/0x1aa0 [ 249.150717][ T9009] tty_ioctl+0x928/0xde0 [ 249.155066][ T9009] __se_sys_ioctl+0xfc/0x170 [ 249.159768][ T9009] do_syscall_64+0x15f/0xf80 [ 249.164475][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.170487][ T9009] irq event stamp: 8298 [ 249.174661][ T9009] hardirqs last enabled at (8297): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.185022][ T9009] hardirqs last disabled at (8296): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 249.194968][ T9009] softirqs last enabled at (8292): [] __irq_exit_rcu+0xca/0x220 [ 249.204294][ T9009] softirqs last disabled at (8298): [] waveform_ao_cancel+0x8d/0x120 [ 249.213958][ T9009] [ 249.213958][ T9009] other info that might help us debug this: [ 249.222037][ T9009] Possible unsafe locking scenario: [ 249.222037][ T9009] [ 249.229503][ T9009] CPU0 [ 249.232798][ T9009] ---- [ 249.236086][ T9009] lock(&dev->spinlock); [ 249.240449][ T9009] [ 249.243931][ T9009] lock(&dev->spinlock); [ 249.248464][ T9009] [ 249.248464][ T9009] *** DEADLOCK *** [ 249.248464][ T9009] [ 249.256629][ T9009] 1 lock held by syz.2.858/9009: [ 249.261585][ T9009] #0: ffff88803165a8f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_close+0x70/0x5e0 [ 249.270897][ T9009] [ 249.270897][ T9009] stack backtrace: [ 249.276833][ T9009] CPU: 0 UID: 0 PID: 9009 Comm: syz.2.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.276860][ T9009] Tainted: [L]=SOFTLOCKUP [ 249.276867][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.276884][ T9009] Call Trace: [ 249.276892][ T9009] [ 249.276900][ T9009] dump_stack_lvl+0xe8/0x150 [ 249.276930][ T9009] print_usage_bug+0x28b/0x2e0 [ 249.276959][ T9009] mark_lock_irq+0x410/0x420 [ 249.276989][ T9009] mark_lock+0x115/0x190 [ 249.277015][ T9009] __lock_acquire+0x9d0/0x2cf0 [ 249.277041][ T9009] ? __lock_acquire+0x6b5/0x2cf0 [ 249.277068][ T9009] ? __mutex_lock+0x320/0x1420 [ 249.277097][ T9009] ? waveform_ao_cancel+0x8d/0x120 [ 249.277120][ T9009] lock_acquire+0x106/0x350 [ 249.277149][ T9009] ? waveform_ao_cancel+0x8d/0x120 [ 249.277177][ T9009] ? waveform_ao_cancel+0x8d/0x120 [ 249.277200][ T9009] _raw_spin_lock_bh+0x36/0x50 [ 249.277221][ T9009] ? waveform_ao_cancel+0x8d/0x120 [ 249.277244][ T9009] waveform_ao_cancel+0x8d/0x120 [ 249.277268][ T9009] ? __pfx_waveform_ao_cancel+0x10/0x10 [ 249.277291][ T9009] comedi_close+0x27e/0x5e0 [ 249.277317][ T9009] ? __pfx_comedi_close+0x10/0x10 [ 249.277338][ T9009] __fput+0x44f/0xa60 [ 249.277365][ T9009] task_work_run+0x1d9/0x270 [ 249.277388][ T9009] ? __pfx_task_work_run+0x10/0x10 [ 249.277412][ T9009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.277431][ T9009] exit_to_user_mode_loop+0xed/0x480 [ 249.277454][ T9009] ? rcu_is_watching+0x15/0xb0 [ 249.277482][ T9009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.277500][ T9009] do_syscall_64+0x33e/0xf80 [ 249.277524][ T9009] ? clear_bhb_loop+0x40/0x90 [ 249.277545][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.277563][ T9009] RIP: 0033:0x7ff2d3f9c819 [ 249.277585][ T9009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.277602][ T9009] RSP: 002b:00007fffee800cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 249.277620][ T9009] RAX: 0000000000000000 RBX: 00007ff2d4217da0 RCX: 00007ff2d3f9c819 [ 249.277632][ T9009] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 249.277643][ T9009] RBP: 00007ff2d4217da0 R08: 0000000000000006 R09: 0000000000000000 [ 249.277654][ T9009] R10: 00000000003ffcc0 R11: 0000000000000246 R12: 000000000003ce79 [ 249.277665][ T9009] R13: 00007ff2d4215fac R14: 000000000003cc1c R15: 00007ff2d4215fa0 [ 249.277686][ T9009] [ 249.519915][ T5888] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 249.532349][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 249.544901][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 249.553324][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 249.563311][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 249.571606][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 249.584190][ T5888] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 249.593549][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 249.602388][ T5888] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 249.611238][ T5888] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 249.619577][ T9] imon:send_packet: packet tx failed (-71) [ 249.625531][ T5888] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 249.634720][ T5888] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 249.644341][ T9] imon 1-1:0.0: panel buttons/knobs setup failed [ 249.651416][ T5888] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 249.661443][ T5888] usb 4-1: USB disconnect, device number 93 [ 249.670717][ T5888] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 249.678975][ T5888] pl2303 4-1:0.122: device disconnected [ 249.767242][ T9] rc_core: IR keymap rc-imon-pad not found [ 249.773233][ T9] Registered IR keymap rc-empty [ 249.778450][ T9] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 249.788623][ T9] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 249.798179][ T9] imon:send_packet: packet tx failed (-71) [ 249.820265][ T9] imon 1-1:0.0: remote input dev register failed [ 249.826874][ T9] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 249.837210][ T9] imon 1-1:0.0: unable to initialize intf0, err 0 [ 249.843747][ T9] imon:imon_probe: failed to initialize context! [ 249.850120][ T9] imon 1-1:0.0: unable to register, err -19 [ 249.858137][ T9] usb 1-1: USB disconnect, device number 101 [ 250.194206][ T9] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 250.354573][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 250.504192][ T9] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 250.664521][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 250.670229][ T9] usb usb1-port1: attempt power cycle [ 251.049605][ T9] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 251.071226][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.220398][ T9] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 251.252914][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 251.258578][ T9] usb usb1-port1: unable to enumerate USB device [ 256.170933][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.179913][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.186818][ T1316] ieee802154 phy1 wpan1: encryption failed: -22