last executing test programs: 18.579234389s ago: executing program 1 (id=1718): socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 15.23298204s ago: executing program 1 (id=1725): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0", 0x89}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 14.296379783s ago: executing program 4 (id=1731): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 13.624990049s ago: executing program 1 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 12.244865803s ago: executing program 4 (id=1736): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.063118827s ago: executing program 4 (id=1738): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 11.854924172s ago: executing program 4 (id=1739): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 10.838835857s ago: executing program 1 (id=1740): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r0, &(0x7f0000000a00), 0x0) write(r1, &(0x7f0000000800)='AAAA', 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cc, 0x8) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 10.606907402s ago: executing program 4 (id=1741): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="1f", 0x1, 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 8.66383002s ago: executing program 0 (id=1744): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) fstat(r2, &(0x7f0000000440)) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/l\x00', 0x100, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x800]}, 0x4, 0x0, 0x0}) 7.780036791s ago: executing program 3 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) 7.668414294s ago: executing program 0 (id=1747): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 6.851848073s ago: executing program 3 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30802}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 6.58296965s ago: executing program 3 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) getpid() getrlimit(0xb, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget(0x2, 0x217) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0317000000000000"], 0x8, 0x800) 6.337100566s ago: executing program 4 (id=1752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) 6.304652697s ago: executing program 0 (id=1753): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x17b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1a, r2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r3) syz_clone3(0x0, 0x0) 6.260414408s ago: executing program 1 (id=1754): socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 4.632065917s ago: executing program 0 (id=1755): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r6 = syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) write$usbip_server(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000005c0)=0xd) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46ee6c5456902a3cfafbc39b7eff6e4f0b77a82deb80000"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0xffff0000, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4.456466062s ago: executing program 1 (id=1756): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @private0, 0xffff}, {0xa, 0x4e23, 0x94, @local, 0x5}}}, 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x20, 0x4c004}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x48043) r7 = dup(0xffffffffffffffff) write$cgroup_pid(r7, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000000)=['', '%\x00'], 0x2}) 4.030400942s ago: executing program 3 (id=1758): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) fstat(r2, &(0x7f0000000440)) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/l\x00', 0x100, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x800]}, 0x4, 0x0, 0x0}) 2.972687118s ago: executing program 3 (id=1759): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081"], 0x10) 2.956021808s ago: executing program 2 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) 2.281944484s ago: executing program 2 (id=1761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.219411066s ago: executing program 0 (id=1762): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0', 0xb) 2.170003807s ago: executing program 2 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30802}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 1.956235172s ago: executing program 0 (id=1764): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r0, &(0x7f0000000a00), 0x0) write(r1, &(0x7f0000000800)='AAAA', 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cc, 0x8) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 1.881770754s ago: executing program 2 (id=1765): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x17b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1a, r2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r3) syz_clone3(0x0, 0x0) 1.820566486s ago: executing program 3 (id=1766): socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 1.64926175s ago: executing program 2 (id=1767): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 0s ago: executing program 2 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) getpid() getrlimit(0xb, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget(0x2, 0x217) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0317000000000000"], 0x8, 0x800) kernel console output (not intermixed with test programs): ig 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.254530][ T2173] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 153.290503][ T2173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.329759][ T2173] usb 2-1: Product: syz [ 153.344926][ T2173] usb 2-1: Manufacturer: syz [ 153.349814][ T2173] usb 2-1: SerialNumber: syz [ 153.364139][ T2173] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 153.401379][ T2173] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 153.470609][ T2173] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 153.572042][ T2173] usb 2-1: USB disconnect, device number 4 [ 153.582840][ T2173] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 153.624170][ T2173] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 153.732588][ T2173] ti_usb_3410_5052 2-1:2.0: device disconnected [ 155.760259][ T5648] UBIFS error (pid: 5648): cannot open "/dev/sequencer", error -22 [ 156.715452][ T5666] CIFS: Attempting to mount \\127.0.0.1\share [ 158.060309][ T5666] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 158.074079][ T5666] CIFS: VFS: cifs_mount failed w/return code = -112 [ 158.437189][ T26] audit: type=1800 audit(1785529464.109:3): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.363" name="bus" dev="ramfs" ino=39037 res=0 errno=0 [ 158.574660][ T5688] binder: BINDER_SET_CONTEXT_MGR already set [ 158.581440][ T5688] binder: 5687:5688 ioctl 4018620d 200000000300 returned -16 [ 159.113928][ T5696] UBIFS error (pid: 5696): cannot open "/dev/sequencer", error -22 [ 159.326390][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.343824][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.924046][ T5704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.550266][ T5075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.770175][ T5075] usb 5-1: Using ep0 maxpacket: 16 [ 161.785165][ T5075] usb 5-1: config 0 has an invalid interface number: 75 but max is 0 [ 161.863065][ T5075] usb 5-1: config 0 has no interface number 0 [ 161.927401][ T5075] usb 5-1: config 0 interface 75 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.952264][ T5075] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 161.967492][ T5075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.329610][ T5075] usb 5-1: Product: syz [ 162.334149][ T5075] usb 5-1: Manufacturer: syz [ 162.338774][ T5075] usb 5-1: SerialNumber: syz [ 162.353814][ T5075] usb 5-1: config 0 descriptor?? [ 162.359958][ T5716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.425401][ T5075] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.534614][ T5736] binder: BINDER_SET_CONTEXT_MGR already set [ 162.564221][ T5736] binder: 5732:5736 ioctl 4018620d 200000000300 returned -16 [ 162.596350][ T47] usb 5-1: Failed to submit usb control message: -71 [ 162.596402][ T5075] usb 5-1: USB disconnect, device number 4 [ 162.640090][ T47] usb 5-1: unable to send the bmi data to the device: -71 [ 162.657724][ T47] usb 5-1: unable to get target info from device [ 162.664909][ T47] usb 5-1: could not get target info (-71) [ 162.675940][ T47] usb 5-1: could not probe fw (-71) [ 166.190939][ T5779] gadgetfs: bound to dummy_udc driver [ 166.459928][ T130] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.474036][ C1] gadgetfs: connected [ 166.480645][ T130] gadgetfs: disconnected [ 166.562610][ T5784] Bluetooth: MGMT ver 1.22 [ 166.660404][ C1] gadgetfs: connected [ 166.671338][ T130] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 166.680668][ T130] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 166.689713][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.729472][ C1] gadgetfs: configuration #1 [ 166.781389][ T5778] gadgetfs: suspended from state 4 [ 166.781608][ T130] usb 1-1: can't set config #1, error -71 [ 166.801936][ T5778] gadgetfs: disconnected [ 166.830130][ T130] usb 1-1: USB disconnect, device number 6 [ 168.779983][ T5817] gadgetfs: bound to dummy_udc driver [ 168.900059][ T4353] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.090687][ T32] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 169.116738][ C1] gadgetfs: connected [ 169.126390][ T32] gadgetfs: disconnected [ 169.245589][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.254415][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.351679][ C1] gadgetfs: connected [ 169.358740][ T32] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 169.417008][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 169.535702][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.653774][ C1] gadgetfs: configuration #1 [ 169.723198][ T5816] gadgetfs: suspended from state 4 [ 169.723307][ T32] usb 1-1: can't set config #1, error -71 [ 169.734706][ T5816] gadgetfs: disconnected [ 169.783902][ T32] usb 1-1: USB disconnect, device number 7 [ 169.790100][ T4353] usb 5-1: Using ep0 maxpacket: 8 [ 169.798202][ T4353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.829117][ T4353] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 169.860360][ T4353] usb 5-1: New USB device found, idVendor=200c, idProduct=e10b, bcdDevice=4a.0f [ 169.869454][ T4353] usb 5-1: New USB device strings: Mfr=227, Product=2, SerialNumber=3 [ 169.898133][ T4353] usb 5-1: Product: syz [ 169.908504][ T4353] usb 5-1: Manufacturer: syz [ 169.931173][ T4353] usb 5-1: SerialNumber: syz [ 170.476789][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.537804][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.008784][ T5811] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.017905][ T5811] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.028243][ T5811] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.038387][ T5811] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.604598][ T5853] UBIFS error (pid: 5853): cannot open "/dev/sequencer", error -22 [ 172.430129][ T4353] usb 5-1: USB disconnect, device number 5 [ 173.769597][ T5871] loop5: detected capacity change from 0 to 7 [ 173.812714][ T4355] Dev loop5: unable to read RDB block 7 [ 173.825055][ T4355] loop5: unable to read partition table [ 173.856185][ T4355] loop5: partition table beyond EOD, truncated [ 173.880891][ T5871] Dev loop5: unable to read RDB block 7 [ 173.886762][ T5871] loop5: unable to read partition table [ 173.904297][ T5871] loop5: partition table beyond EOD, truncated [ 173.940031][ T5871] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.166575][ T5894] ======================================================= [ 175.166575][ T5894] WARNING: The mand mount option has been deprecated and [ 175.166575][ T5894] and is ignored by this kernel. Remove the mand [ 175.166575][ T5894] option from the mount to silence this warning. [ 175.166575][ T5894] ======================================================= [ 175.231505][ T5893] UBIFS error (pid: 5893): cannot open "/dev/sequencer", error -22 [ 175.244973][ T5894] 9pnet_fd: Insufficient options for proto=fd [ 176.552146][ T5927] netlink: 228 bytes leftover after parsing attributes in process `syz.4.438'. [ 177.333957][ T5946] 9pnet_fd: Insufficient options for proto=fd [ 179.854150][ T26] audit: type=1800 audit(1785529485.529:4): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.451" name="bus" dev="ramfs" ino=39478 res=0 errno=0 [ 180.354986][ T5996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 180.355072][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.355180][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 180.450568][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 180.512884][ T5997] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 180.531898][ T4376] vhci_hcd: stop threads [ 180.548689][ T4376] vhci_hcd: release socket [ 180.569347][ T4376] vhci_hcd: disconnect device [ 180.583106][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.600030][ T4321] vhci_hcd: vhci_device speed not set [ 180.772908][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.841749][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.912779][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.927958][ T14] usb 1-1: Product: syz [ 180.943169][ T14] usb 1-1: Manufacturer: syz [ 180.947826][ T14] usb 1-1: SerialNumber: syz [ 181.205172][ T14] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.423872][ T14] usb 1-1: USB disconnect, device number 8 [ 181.463133][ T14] usblp0: removed [ 181.516920][ T26] audit: type=1804 audit(1785529487.189:5): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.467" name="bus" dev="ramfs" ino=39523 res=1 errno=0 [ 181.591698][ T26] audit: type=1804 audit(1785529487.209:6): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.467" name="bus" dev="ramfs" ino=39523 res=1 errno=0 [ 181.611752][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.878643][ T6018] binder: 6017:6018 ioctl c0306201 0 returned -14 [ 182.086411][ T6021] binder: 6017:6021 ioctl c0306201 0 returned -14 [ 184.622696][ T26] audit: type=1800 audit(1785529490.309:7): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.474" name="bus" dev="ramfs" ino=39590 res=0 errno=0 [ 185.531414][ T4353] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.741471][ T4353] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.818968][ T4353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 185.840370][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 185.848537][ T4353] usb 1-1: Product: syz [ 185.927578][ T4353] usb 1-1: Manufacturer: syz [ 185.951221][ T4353] usb 1-1: SerialNumber: syz [ 186.027475][ T6071] gadgetfs: bound to dummy_udc driver [ 186.289994][ T4353] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 186.320004][ T4316] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 186.370990][ C1] gadgetfs: connected [ 186.388714][ T4316] gadgetfs: disconnected [ 186.680810][ C1] gadgetfs: connected [ 186.691548][ T4316] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 186.742541][ T4316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 186.840613][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.911137][ T4353] usb 1-1: USB disconnect, device number 9 [ 186.918574][ T4353] usblp0: removed [ 187.826095][ C1] gadgetfs: configuration #1 [ 187.831134][ T6081] gadgetfs: suspended from state 4 [ 187.837507][ T4316] usb 2-1: can't set config #1, error -71 [ 187.840136][ T6081] gadgetfs: disconnected [ 187.851382][ T4316] usb 2-1: USB disconnect, device number 5 [ 188.379978][ T4352] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 189.423264][ T4352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.441793][ T4352] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 189.449603][ T4352] usb 5-1: can't read configurations, error -71 [ 189.680078][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.754279][ T6121] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 189.754307][ T6121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.754385][ T6121] vhci_hcd vhci_hcd.0: Device attached [ 189.953867][ T6123] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 189.966769][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 189.986255][ T4376] vhci_hcd: stop threads [ 189.991290][ T4376] vhci_hcd: release socket [ 190.010020][ T4376] vhci_hcd: disconnect device [ 190.016983][ T4318] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.039967][ T14] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 190.068003][ T14] usb 39-1: enqueue for inactive port 0 [ 190.094800][ T4318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 190.941759][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 190.964977][ T4318] usb 2-1: Product: syz [ 190.993899][ T14] vhci_hcd: vhci_device speed not set [ 191.004008][ T4318] usb 2-1: Manufacturer: syz [ 191.008799][ T4318] usb 2-1: SerialNumber: syz [ 191.109516][ T26] audit: type=1800 audit(1785529496.779:8): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.502" name="bus" dev="ramfs" ino=39713 res=0 errno=0 [ 191.318919][ T4318] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.518533][ T4352] usb 2-1: USB disconnect, device number 6 [ 191.539626][ T4352] usblp0: removed [ 194.344223][ T6158] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 194.400222][ T6162] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 194.405847][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416922][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.450898][ T6161] loop5: detected capacity change from 0 to 7 [ 194.478691][ T4355] Dev loop5: unable to read RDB block 7 [ 194.486591][ T4355] loop5: unable to read partition table [ 194.503317][ T4355] loop5: partition table beyond EOD, truncated [ 194.531978][ T6161] Dev loop5: unable to read RDB block 7 [ 194.560097][ T6161] loop5: unable to read partition table [ 194.569582][ T6161] loop5: partition table beyond EOD, truncated [ 194.599932][ T6161] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.850045][ T4352] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.168335][ T4352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.229510][ T4352] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 195.240058][ T6175] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 195.246796][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.254784][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 195.319720][ T6181] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 195.346530][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 195.381995][ T5078] vhci_hcd: stop threads [ 195.386974][ T5078] vhci_hcd: release socket [ 195.488097][ T4352] usb 3-1: can't read configurations, error -71 [ 197.520978][ T5078] vhci_hcd: disconnect device [ 199.611069][ T6193] gadgetfs: bound to dummy_udc driver [ 199.930184][ T4316] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 199.965505][ C1] gadgetfs: connected [ 199.969799][ T4316] gadgetfs: disconnected [ 200.400228][ C1] gadgetfs: connected [ 200.405652][ T4316] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 201.378119][ T4316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 201.387534][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.403084][ C1] gadgetfs: configuration #1 [ 201.463747][ T6205] loop5: detected capacity change from 0 to 7 [ 201.475126][ T6205] Dev loop5: unable to read RDB block 7 [ 201.480857][ T6205] loop5: unable to read partition table [ 201.486824][ T6205] loop5: partition table beyond EOD, truncated [ 201.520688][ T6192] gadgetfs: suspended from state 4 [ 201.520918][ T4316] usb 1-1: can't set config #1, error -71 [ 201.527348][ T6192] gadgetfs: disconnected [ 201.536789][ T4316] usb 1-1: USB disconnect, device number 10 [ 201.547727][ T6205] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.599945][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 201.603214][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 201.606096][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.612292][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 201.622996][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 202.470982][ T26] audit: type=1326 audit(1785529508.139:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 202.525520][ T26] audit: type=1326 audit(1785529508.169:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 203.844660][ T26] audit: type=1326 audit(1785529508.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.190285][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.247675][ T26] audit: type=1326 audit(1785529508.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.594038][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.695560][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 204.704583][ T26] audit: type=1326 audit(1785529508.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.721404][ T14] usb 2-1: can't read configurations, error -71 [ 204.729369][ T26] audit: type=1326 audit(1785529508.179:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.759139][ T26] audit: type=1326 audit(1785529508.179:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.785982][ T26] audit: type=1326 audit(1785529508.179:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.1.536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1359e019 code=0x7ffc0000 [ 204.883756][ T6237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 204.883783][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 204.883845][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 204.885481][ T6237] netlink: 'syz.4.544': attribute type 12 has an invalid length. [ 205.220771][ T4316] usb 42-1: SetAddress Request (2) to port 0 [ 205.221000][ T4316] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.539425][ T6238] vhci_hcd: connection reset by peer [ 205.548002][ T4424] vhci_hcd: stop threads [ 205.549046][ T4424] vhci_hcd: release socket [ 205.549192][ T4424] vhci_hcd: disconnect device [ 206.126990][ T6243] 9pnet_fd: Insufficient options for proto=fd [ 206.148626][ T6240] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 206.176931][ T6240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.184484][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.190922][ T6240] vhci_hcd vhci_hcd.0: Device attached [ 206.276741][ T6247] gadgetfs: bound to dummy_udc driver [ 206.382369][ T6244] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0 [ 206.396814][ T9] vhci_hcd: stop threads [ 206.413956][ T9] vhci_hcd: release socket [ 206.418963][ T9] vhci_hcd: disconnect device [ 206.480139][ T130] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 206.589924][ T32] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 207.303688][ T130] usb 39-1: enqueue for inactive port 0 [ 207.309756][ C1] gadgetfs: connected [ 207.314023][ T32] gadgetfs: disconnected [ 207.335633][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 207.379975][ T130] vhci_hcd: vhci_device speed not set [ 207.490085][ C1] gadgetfs: connected [ 207.495510][ T32] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 207.506992][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 207.565811][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.610658][ C1] gadgetfs: configuration #1 [ 209.175275][ T6257] gadgetfs: suspended from state 4 [ 209.181715][ T32] usb 1-1: can't set config #1, error -71 [ 209.238041][ T32] usb 1-1: USB disconnect, device number 11 [ 209.240050][ T6257] gadgetfs: disconnected [ 209.628883][ T6276] UBIFS error (pid: 6276): cannot open "/dev/sequencer", error -22 [ 209.701314][ T6282] binder: 6280:6282 ioctl 4018620d 0 returned -22 [ 210.129930][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.144205][ T6295] gadgetfs: bound to dummy_udc driver [ 210.320108][ T4316] usb 42-1: device descriptor read/8, error -110 [ 210.336322][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.378863][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.392551][ T14] usb 3-1: can't read configurations, error -71 [ 210.430063][ T4318] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 210.437875][ C1] gadgetfs: connected [ 210.468226][ T4318] gadgetfs: disconnected [ 210.660265][ C1] gadgetfs: connected [ 210.667078][ T4318] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 210.705574][ T4318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 210.757376][ T4316] usb usb42-port1: attempt power cycle [ 210.824972][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.033053][ T6300] gadgetfs: suspended from state 3 [ 211.092402][ T4318] usb 1-1: can't set config #1, error -71 [ 211.177430][ T6300] gadgetfs: disconnected [ 211.239284][ T4318] usb 1-1: USB disconnect, device number 12 [ 211.411380][ T4316] usb usb42-port1: unable to enumerate USB device [ 211.646503][ T6333] UBIFS error (pid: 6333): cannot open "/dev/sequencer", error -22 [ 212.538005][ T6337] binder: BINDER_SET_CONTEXT_MGR already set [ 212.600603][ T6337] binder: 6335:6337 ioctl 4018620d 200000000300 returned -16 [ 212.717741][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 212.813960][ T26] audit: type=1804 audit(1785529518.489:17): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.577" name="bus" dev="ramfs" ino=41257 res=1 errno=0 [ 213.700393][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 213.728963][ T26] audit: type=1804 audit(1785529518.519:18): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.577" name="bus" dev="ramfs" ino=41257 res=1 errno=0 [ 214.096437][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.116418][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 214.162089][ T14] usb 1-1: can't read configurations, error -71 [ 214.416133][ T6362] netlink: 'syz.3.582': attribute type 4 has an invalid length. [ 215.497082][ T6379] UBIFS error (pid: 6379): cannot open "/dev/sequencer", error -22 [ 216.340300][ T6389] binder: BINDER_SET_CONTEXT_MGR already set [ 216.382310][ T6389] binder: 6388:6389 ioctl 4018620d 200000000300 returned -16 [ 216.705539][ T6402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.070004][ T6402] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.580'. [ 217.632330][ T6419] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 218.199937][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.998217][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.005859][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.116004][ T6446] binder: BINDER_SET_CONTEXT_MGR already set [ 219.139320][ T6446] binder: 6443:6446 ioctl 4018620d 200000000300 returned -16 [ 220.360388][ T6460] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 220.366980][ T6460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.374875][ T6460] vhci_hcd vhci_hcd.0: Device attached [ 220.893467][ T6461] vhci_hcd: connection closed [ 220.895260][ T57] vhci_hcd: stop threads [ 221.868294][ T57] vhci_hcd: release socket [ 221.950424][ T57] vhci_hcd: disconnect device [ 223.600520][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.906915][ T32] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 223.969080][ T32] usb 3-1: chopping to 0 config(s) [ 224.009648][ T32] usb 3-1: can't read configurations, error -32 [ 224.210013][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 224.265630][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.381376][ T32] usb 3-1: device descriptor read/64, error -32 [ 224.415344][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.511078][ T32] usb usb3-port1: attempt power cycle [ 224.697383][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.919974][ T32] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.969766][ T32] usb 3-1: device descriptor read/8, error -32 [ 225.280089][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.339938][ T32] usb 3-1: device descriptor read/8, error -32 [ 225.467835][ T32] usb usb3-port1: unable to enumerate USB device [ 225.637986][ T6491] binder: 6490:6491 ioctl c0306201 0 returned -14 [ 226.598118][ T6423] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.607414][ T6423] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.616391][ T6423] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.626144][ T6423] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.140677][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 227.259172][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.293955][ T6507] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.623'. [ 228.381663][ T6519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 228.381831][ T6523] netlink: 'syz.2.626': attribute type 12 has an invalid length. [ 228.388223][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.403988][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 228.539669][ T6520] vhci_hcd: connection closed [ 228.541346][ T47] vhci_hcd: stop threads [ 228.730223][ T4352] usb 38-1: SetAddress Request (2) to port 0 [ 228.750905][ T4352] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 228.784667][ T47] vhci_hcd: release socket [ 228.851263][ T47] vhci_hcd: disconnect device [ 232.523118][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.531598][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.359711][ T6565] binder: 6564:6565 ioctl c0306201 0 returned -14 [ 233.467524][ T6565] binder: BINDER_SET_CONTEXT_MGR already set [ 233.515048][ T6569] loop5: detected capacity change from 0 to 7 [ 233.565068][ T6565] binder: 6564:6565 ioctl 4018620d 200000000300 returned -16 [ 233.610409][ T6470] Dev loop5: unable to read RDB block 7 [ 233.705517][ T6470] loop5: unable to read partition table [ 233.713041][ T6470] loop5: partition table beyond EOD, truncated [ 233.838464][ T6569] Dev loop5: unable to read RDB block 7 [ 233.860287][ T6569] loop5: unable to read partition table [ 233.870342][ T6569] loop5: partition table beyond EOD, truncated [ 233.902648][ T6569] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.928041][ T4352] usb 38-1: device descriptor read/8, error -110 [ 234.932856][ T6577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.945869][ T6577] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.644'. [ 234.972922][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.037153][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.064487][ T6581] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 235.071125][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.079719][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 235.241979][ T4352] usb usb38-port1: attempt power cycle [ 235.354739][ T6532] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.365525][ T6532] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.375281][ T6532] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.384857][ T6532] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.400079][ T32] usb 34-1: SetAddress Request (2) to port 0 [ 235.407679][ T32] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.506071][ T6581] netlink: 'syz.0.646': attribute type 12 has an invalid length. [ 235.516830][ T6582] vhci_hcd: connection reset by peer [ 235.524645][ T4376] vhci_hcd: stop threads [ 235.529002][ T4376] vhci_hcd: release socket [ 235.565918][ T4376] vhci_hcd: disconnect device [ 235.912717][ T4352] usb usb38-port1: unable to enumerate USB device [ 240.479948][ T32] usb 34-1: device descriptor read/8, error -110 [ 241.267276][ T32] usb usb34-port1: attempt power cycle [ 243.311097][ T32] usb usb34-port1: unable to enumerate USB device [ 244.407027][ T6681] gadgetfs: bound to dummy_udc driver [ 244.979974][ T4318] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 245.184176][ C1] gadgetfs: connected [ 245.209983][ T4318] gadgetfs: disconnected [ 245.404981][ C1] gadgetfs: connected [ 245.410838][ T4318] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 245.449956][ T4318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 245.471920][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.495909][ C1] gadgetfs: configuration #1 [ 245.513778][ T6680] gadgetfs: suspended from state 3 [ 245.514035][ T4318] usb 1-1: can't set config #1, error -71 [ 245.522109][ T6680] gadgetfs: disconnected [ 245.543265][ T4318] usb 1-1: USB disconnect, device number 15 [ 248.656376][ T6735] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 249.592560][ T6735] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 252.253675][ T6757] gadgetfs: bound to dummy_udc driver [ 252.579919][ T14] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 253.198473][ C0] gadgetfs: connected [ 253.203201][ T14] gadgetfs: disconnected [ 253.390971][ C0] gadgetfs: connected [ 253.401942][ T14] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 254.219380][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 254.324530][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.959105][ C0] gadgetfs: configuration #1 [ 255.002163][ T6756] gadgetfs: suspended from state 3 [ 255.002273][ T6756] gadgetfs: disconnected [ 255.002638][ T14] usb 1-1: can't set config #1, error -71 [ 255.007926][ T14] usb 1-1: USB disconnect, device number 16 [ 255.841502][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847829][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.687049][ T6784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 256.693622][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.701811][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 256.712895][ T6787] vhci_hcd: connection closed [ 256.713785][ T5099] vhci_hcd: stop threads [ 256.872577][ T5099] vhci_hcd: release socket [ 256.959075][ T5099] vhci_hcd: disconnect device [ 256.990031][ T130] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 261.477492][ T6825] gadgetfs: bound to dummy_udc driver [ 262.309921][ T130] vhci_hcd: vhci_device speed not set [ 262.509989][ T14] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 262.523302][ C0] gadgetfs: connected [ 262.527682][ T14] gadgetfs: disconnected [ 262.711110][ C0] gadgetfs: connected [ 262.725454][ T14] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 262.870567][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 262.897588][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.920645][ C0] gadgetfs: configuration #1 [ 263.020954][ T6821] gadgetfs: suspended from state 3 [ 263.026522][ T6821] gadgetfs: disconnected [ 263.047341][ T14] usb 1-1: can't set config #1, error -71 [ 263.501159][ T14] usb 1-1: USB disconnect, device number 17 [ 263.675291][ T6837] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.682769][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.013630][ T6863] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 265.020207][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.028263][ T6863] vhci_hcd vhci_hcd.0: Device attached [ 265.036958][ T6864] vhci_hcd: connection closed [ 265.039587][ T4424] vhci_hcd: stop threads [ 265.609700][ T4424] vhci_hcd: release socket [ 265.628311][ T4424] vhci_hcd: disconnect device [ 265.655239][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.663488][ T7] vhci_hcd: vhci_device speed not set [ 265.718044][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.252021][ T6837] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.261744][ T6837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.272963][ T6837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.282507][ T6837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.356560][ T6837] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 266.860095][ T4352] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.855607][ T4352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.874787][ T4352] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 267.900534][ T4352] usb 3-1: can't read configurations, error -71 [ 270.020599][ T6909] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 270.027155][ T6909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 270.084832][ T6909] vhci_hcd vhci_hcd.0: Device attached [ 270.213897][ T6906] netlink: 'syz.1.743': attribute type 12 has an invalid length. [ 270.253417][ T6911] vhci_hcd: connection closed [ 270.253713][ T57] vhci_hcd: stop threads [ 270.410176][ T2173] usb 36-1: SetAddress Request (2) to port 0 [ 270.417840][ T2173] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 270.974881][ T57] vhci_hcd: release socket [ 270.984166][ T57] vhci_hcd: disconnect device [ 271.100083][ T2173] usb 36-1: enqueue for inactive port 0 [ 271.287009][ T6936] UBIFS error (pid: 6936): cannot open "/dev/sequencer", error -22 [ 271.530681][ T2173] usb usb36-port1: attempt power cycle [ 272.182951][ T2173] usb usb36-port1: unable to enumerate USB device [ 275.990019][ T6974] netlink: 'syz.4.763': attribute type 12 has an invalid length. [ 276.167333][ T6987] UBIFS error (pid: 6987): cannot open "/dev/sequencer", error -22 [ 276.171081][ T6970] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 276.185757][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.194465][ T6979] vhci_hcd: connection closed [ 276.194869][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 276.229508][ T4424] vhci_hcd: stop threads [ 276.234957][ T4424] vhci_hcd: release socket [ 276.239578][ T4424] vhci_hcd: disconnect device [ 282.462430][ T7029] UBIFS error (pid: 7029): cannot open "/dev/sequencer", error -22 [ 287.567519][ T7074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 287.582140][ T7074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.599871][ T7074] vhci_hcd vhci_hcd.0: Device attached [ 287.609108][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 288.466585][ T7076] vhci_hcd: connection closed [ 288.466870][ T5099] vhci_hcd: stop threads [ 288.470159][ T2173] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 288.476716][ T5099] vhci_hcd: release socket [ 288.549061][ T7097] UBIFS error (pid: 7097): cannot open "/dev/sequencer", error -22 [ 289.149929][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 290.285397][ T5099] vhci_hcd: disconnect device [ 291.314172][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.332920][ T4320] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 291.361538][ T4320] usb 4-1: can't read configurations, error -71 [ 293.600416][ T2173] vhci_hcd: vhci_device speed not set [ 295.303651][ T7133] overlayfs: failed to resolve './file1': -2 [ 297.007534][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 298.029909][ T4352] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.187888][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 299.370392][ T7168] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 299.377063][ T7168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 299.384929][ T7168] vhci_hcd vhci_hcd.0: Device attached [ 299.392699][ T7169] vhci_hcd: connection closed [ 299.393532][ T5080] vhci_hcd: stop threads [ 299.502901][ T5080] vhci_hcd: release socket [ 299.550776][ T5080] vhci_hcd: disconnect device [ 300.045722][ T4352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.070042][ T4352] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 301.047547][ T4352] usb 4-1: can't read configurations, error -71 [ 302.896840][ T7190] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 304.299265][ T7207] binder: 7206:7207 ioctl 4018620d 0 returned -22 [ 304.499256][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 304.789854][ T4352] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 306.551766][ T7224] loop5: detected capacity change from 0 to 7 [ 306.573894][ T6470] Dev loop5: unable to read RDB block 7 [ 306.579610][ T6470] loop5: unable to read partition table [ 306.590011][ T6470] loop5: partition table beyond EOD, truncated [ 306.606343][ T7224] Dev loop5: unable to read RDB block 7 [ 306.620035][ T7224] loop5: unable to read partition table [ 306.638155][ T4352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.663608][ T7224] loop5: partition table beyond EOD, truncated [ 306.667695][ T4352] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 306.679902][ T7224] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.717748][ T4352] usb 5-1: can't read configurations, error -71 [ 306.851309][ T26] audit: type=1804 audit(1785529612.529:19): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.841" name="bus" dev="ramfs" ino=44350 res=1 errno=0 [ 306.893432][ T7237] netlink: 'syz.0.840': attribute type 2 has an invalid length. [ 309.860526][ T7266] loop5: detected capacity change from 0 to 7 [ 309.961802][ T6470] Dev loop5: unable to read RDB block 7 [ 309.969216][ T6470] loop5: unable to read partition table [ 310.039838][ T6470] loop5: partition table beyond EOD, truncated [ 310.456604][ T26] audit: type=1804 audit(1785529616.129:20): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.854" name="bus" dev="ramfs" ino=43557 res=1 errno=0 [ 310.478878][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 310.533858][ T26] audit: type=1804 audit(1785529616.159:21): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.854" name="bus" dev="ramfs" ino=43557 res=1 errno=0 [ 310.939963][ T2173] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 312.699228][ T2173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.801795][ T2173] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 312.822964][ T2173] usb 2-1: can't read configurations, error -71 [ 313.466960][ T7296] loop5: detected capacity change from 0 to 7 [ 313.518261][ T7296] Dev loop5: unable to read RDB block 7 [ 313.548811][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 313.675044][ T7296] loop5: unable to read partition table [ 313.869599][ T7296] loop5: partition table beyond EOD, truncated [ 313.928973][ T7296] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.033886][ T7] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 314.095849][ T7] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.217244][ T7] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.323576][ T7] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 314.457817][ T7] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 314.531522][ T7] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.305761][ T7] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.993515][ T7] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 317.282844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.289741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.013503][ T7] usb 4-1: string descriptor 0 read error: -71 [ 319.637814][ T7] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 319.647307][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.657767][ T7] usb 4-1: can't set config #2, error -71 [ 319.665010][ T7] usb 4-1: USB disconnect, device number 8 [ 319.897438][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 320.792773][ T2173] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 321.053551][ T2173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 321.086035][ T2173] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 321.109129][ T2173] usb 5-1: can't read configurations, error -71 [ 322.408800][ T7358] loop5: detected capacity change from 0 to 7 [ 322.461616][ T7358] Dev loop5: unable to read RDB block 7 [ 322.482971][ T7358] loop5: unable to read partition table [ 322.497464][ T7358] loop5: partition table beyond EOD, truncated [ 322.609919][ T2173] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 323.641855][ T7358] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.921869][ T2173] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 323.960231][ T2173] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.042339][ T2173] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.081663][ T2173] usb 5-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.116896][ T2173] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 324.157841][ T2173] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.179278][ T2173] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.199672][ T2173] usb 5-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.233305][ T2173] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 324.259933][ T2173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.300086][ T2173] usb 5-1: Product: syz [ 324.317433][ T2173] usb 5-1: Manufacturer: syz [ 324.323732][ T2173] usb 5-1: SerialNumber: syz [ 324.353660][ T2173] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 324.364627][ T2173] ti_usb_3410_5052 5-1:2.0: missing endpoints [ 325.144530][ T4352] usb 5-1: USB disconnect, device number 12 [ 325.410018][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 326.965795][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.028302][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 327.100131][ T7] usb 4-1: can't read configurations, error -71 [ 328.705644][ T7414] loop5: detected capacity change from 0 to 7 [ 328.720767][ T7317] Dev loop5: unable to read RDB block 7 [ 328.726859][ T7317] loop5: unable to read partition table [ 328.750081][ T7317] loop5: partition table beyond EOD, truncated [ 328.765853][ T7414] Dev loop5: unable to read RDB block 7 [ 328.810078][ T7414] loop5: unable to read partition table [ 328.847088][ T7414] loop5: partition table beyond EOD, truncated [ 328.899858][ T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 328.942464][ T7414] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 328.957255][ T7417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 328.964005][ T7417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.972005][ T7417] vhci_hcd vhci_hcd.0: Device attached [ 329.057108][ T7418] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 2 [ 329.078091][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 329.091892][ T57] vhci_hcd: stop threads [ 329.096630][ T57] vhci_hcd: release socket [ 329.148114][ T57] vhci_hcd: disconnect device [ 330.331401][ T32] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 330.346016][ T32] usb 2-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 330.368109][ T32] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 330.408988][ T32] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 330.442727][ T32] usb 2-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 330.641485][ T32] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 331.310170][ T32] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 331.336345][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.366815][ T32] usb 2-1: Product: syz [ 331.395307][ T32] usb 2-1: Manufacturer: syz [ 331.405440][ T32] usb 2-1: SerialNumber: syz [ 331.451096][ T32] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 332.532149][ T32] ti_usb_3410_5052 2-1:2.0: missing endpoints [ 333.899889][ T4320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 333.948284][ T32] usb 2-1: USB disconnect, device number 11 [ 334.149352][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.248683][ T4320] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 334.661456][ T4320] usb 5-1: can't read configurations, error -71 [ 336.151255][ T7464] loop5: detected capacity change from 0 to 7 [ 336.164077][ T7317] Dev loop5: unable to read RDB block 7 [ 336.169699][ T7317] loop5: unable to read partition table [ 336.199988][ T7317] loop5: partition table beyond EOD, truncated [ 336.319103][ T7464] Dev loop5: unable to read RDB block 7 [ 336.423862][ T7464] loop5: unable to read partition table [ 336.429740][ T7464] loop5: partition table beyond EOD, truncated [ 336.483224][ T7464] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 336.894807][ T7486] binder: 7485:7486 ioctl 4018620d 0 returned -22 [ 336.999874][ T4261] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 337.139837][ T4320] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 337.972185][ T4261] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 337.982679][ T4320] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 338.342760][ T7498] UBIFS error (pid: 7498): cannot open "/dev/sequencer", error -22 [ 338.756005][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 338.774740][ T4320] usb 5-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 338.785565][ T4320] usb 5-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.798726][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.813575][ T4320] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 338.824319][ T4261] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 338.834593][ T4320] usb 5-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 338.845603][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 338.856534][ T4320] usb 5-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.869596][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.887281][ T4320] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 338.896638][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.904953][ T4320] usb 5-1: Product: syz [ 338.909551][ T4320] usb 5-1: Manufacturer: syz [ 338.916657][ T4261] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 338.930822][ T4320] usb 5-1: SerialNumber: syz [ 338.936642][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.963776][ T4320] ti_usb_3410_5052 5-1:2.0: required endpoints missing [ 339.021774][ T4261] usb 4-1: Product: syz [ 339.026014][ T4261] usb 4-1: Manufacturer: syz [ 339.146788][ T4261] usb 4-1: SerialNumber: syz [ 339.258988][ T7] usb 5-1: USB disconnect, device number 15 [ 339.307569][ T4261] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 339.360136][ T4261] ti_usb_3410_5052 4-1:2.0: missing endpoints [ 339.941376][ T7554] loop5: detected capacity change from 0 to 7 [ 339.959734][ T7553] binder: 7551:7553 ioctl 4018620d 0 returned -22 [ 339.969345][ T7554] Dev loop5: unable to read RDB block 7 [ 339.992364][ T7554] loop5: unable to read partition table [ 340.013280][ T7554] loop5: partition table beyond EOD, truncated [ 340.036725][ T7554] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.127726][ T7] usb 4-1: USB disconnect, device number 11 [ 341.374824][ T7569] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 342.379275][ T7582] UBIFS error (pid: 7582): cannot open "/dev/sequencer", error -22 [ 343.310524][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 343.409560][ T7621] binder: 7619:7621 ioctl c0306201 0 returned -14 [ 343.543246][ T7] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 343.557941][ T7] usb 2-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 343.573304][ T7] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 343.605098][ T7] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 343.619206][ T7] usb 2-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 343.662171][ T7] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 343.704172][ T7] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 343.724448][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.746230][ T7] usb 2-1: Product: syz [ 343.757440][ T7] usb 2-1: Manufacturer: syz [ 343.770767][ T7] usb 2-1: SerialNumber: syz [ 343.789655][ T7] ti_usb_3410_5052 2-1:2.0: required endpoints missing [ 343.837720][ T7633] netlink: 'syz.4.951': attribute type 2 has an invalid length. [ 343.970409][ T2173] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 344.195429][ T2173] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 344.244823][ T2173] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.338125][ T2173] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 344.429488][ T2173] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 344.598146][ T2173] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 344.626343][ T7] usb 2-1: USB disconnect, device number 12 [ 344.700502][ T2173] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.599902][ T2173] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 345.609614][ T2173] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 345.641552][ T7648] UBIFS error (pid: 7648): cannot open "/dev/sequencer", error -22 [ 345.656457][ T2173] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 345.674264][ T2173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.689587][ T2173] usb 4-1: Product: syz [ 345.746205][ T2173] usb 4-1: Manufacturer: syz [ 345.764978][ T2173] usb 4-1: SerialNumber: syz [ 345.785590][ T2173] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 345.987088][ T2173] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 346.133095][ T2173] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 346.159323][ T7682] binder: 7678:7682 ioctl c0306201 0 returned -14 [ 346.251333][ T7685] netlink: 'syz.4.957': attribute type 12 has an invalid length. [ 346.369393][ T7683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 346.375978][ T7683] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 346.384135][ T7683] vhci_hcd vhci_hcd.0: Device attached [ 346.846767][ T7684] vhci_hcd: connection closed [ 346.847844][ T5086] vhci_hcd: stop threads [ 347.135071][ T5086] vhci_hcd: release socket [ 347.272996][ T7627] ttyUSB ttyUSB0: ldisc open failed (-12), clearing slot 0 [ 347.364959][ T5086] vhci_hcd: disconnect device [ 347.424189][ T7] usb 4-1: USB disconnect, device number 12 [ 347.434091][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 347.448223][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 347.460497][ T7] ti_usb_3410_5052 4-1:2.0: device disconnected [ 349.079853][ T4321] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 349.911452][ T4321] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 349.956918][ T4321] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.972725][ T4321] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 349.997325][ T4321] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 350.021948][ T4321] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 350.032661][ T4321] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.042682][ T4321] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.182890][ T4321] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 350.238948][ T4321] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 350.249798][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.258607][ T4321] usb 4-1: Product: syz [ 350.264128][ T4321] usb 4-1: Manufacturer: syz [ 350.269813][ T4321] usb 4-1: SerialNumber: syz [ 350.331990][ T4321] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 350.351789][ T4321] ti_usb_3410_5052 4-1:2.0: missing endpoints [ 350.528053][ T7] usb 4-1: USB disconnect, device number 13 [ 352.263941][ T7755] netlink: 'syz.3.970': attribute type 12 has an invalid length. [ 353.694660][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 353.892130][ T7763] binder: 7762:7763 ioctl c0306201 0 returned -14 [ 353.894460][ T7] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 353.932772][ T7] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.952366][ T7] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 353.980364][ T7] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 354.036307][ T7] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 354.070110][ T7] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 354.099982][ T7] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 354.149983][ T7] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 354.196067][ T7] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 354.232519][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.251798][ T7] usb 3-1: Product: syz [ 354.257933][ T7] usb 3-1: Manufacturer: syz [ 354.268444][ T7] usb 3-1: SerialNumber: syz [ 355.121904][ T7] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 355.194346][ T7] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 355.227792][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'. [ 355.246180][ T7] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 355.256323][ T7758] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 357.496792][ T4321] usb 3-1: USB disconnect, device number 13 [ 357.519815][ T4321] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 357.562258][ T4321] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 357.581433][ T4321] ti_usb_3410_5052 3-1:2.0: device disconnected [ 357.623365][ T7791] UBIFS error (pid: 7791): cannot open "/dev/sequencer", error -22 [ 360.998868][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 361.018331][ T7844] binder: 7842:7844 ioctl c0306201 0 returned -14 [ 362.149916][ T4321] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 362.341228][ T4321] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 362.390111][ T4321] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.401946][ T4321] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.406215][ T7860] UBIFS error (pid: 7860): cannot open "/dev/sequencer", error -22 [ 362.412292][ T4321] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 362.435365][ T4321] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 362.455973][ T4321] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.466319][ T4321] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.486232][ T4321] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 362.517999][ T4321] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 362.537451][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.549860][ T4321] usb 1-1: Product: syz [ 362.554395][ T4321] usb 1-1: Manufacturer: syz [ 362.566562][ T4321] usb 1-1: SerialNumber: syz [ 362.601003][ T4321] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 362.622595][ T4321] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 362.642392][ T4321] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 363.501305][ T7849] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 363.700965][ T7872] loop5: detected capacity change from 0 to 7 [ 363.709020][ T7872] Dev loop5: unable to read RDB block 7 [ 363.825298][ T7872] loop5: unable to read partition table [ 363.919627][ T7872] loop5: partition table beyond EOD, truncated [ 364.029994][ T7872] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 365.142101][ T4261] usb 1-1: USB disconnect, device number 18 [ 365.165906][ T4261] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 365.181398][ T4261] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 365.192819][ T4261] ti_usb_3410_5052 1-1:2.0: device disconnected [ 365.213481][ T7911] binder: 7910:7911 ioctl c0306201 0 returned -14 [ 366.070187][ T7917] UBIFS error (pid: 7917): cannot open "/dev/sequencer", error -22 [ 367.058142][ T7922] netlink: 'syz.0.1004': attribute type 12 has an invalid length. [ 367.688838][ T7920] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 367.695422][ T7920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 367.703596][ T7920] vhci_hcd vhci_hcd.0: Device attached [ 367.709704][ T7921] vhci_hcd: connection closed [ 367.741258][ T4425] vhci_hcd: stop threads [ 367.762672][ T4425] vhci_hcd: release socket [ 367.792124][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 367.801171][ T4425] vhci_hcd: disconnect device [ 370.292683][ T7974] gadgetfs: bound to dummy_udc driver [ 370.389866][ T4261] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 371.216127][ T7984] UBIFS error (pid: 7984): cannot open "/dev/sequencer", error -22 [ 371.291543][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 371.409946][ T4321] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 372.141113][ T4261] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 372.155890][ C1] gadgetfs: connected [ 372.179723][ T4321] gadgetfs: disconnected [ 372.185277][ T4261] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 372.210205][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.218374][ T4261] usb 4-1: Product: syz [ 372.229068][ T4261] usb 4-1: Manufacturer: syz [ 372.234337][ T4261] usb 4-1: SerialNumber: syz [ 372.248148][ T4261] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 372.259422][ T4261] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 372.272129][ T4261] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 372.289426][ T7995] loop5: detected capacity change from 0 to 7 [ 372.296800][ T7995] Dev loop5: unable to read RDB block 7 [ 372.309995][ T7995] loop5: unable to read partition table [ 372.315949][ T7995] loop5: partition table beyond EOD, truncated [ 372.349931][ T7995] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 372.380329][ C1] gadgetfs: connected [ 372.386169][ T4321] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 372.426265][ T4321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 372.439189][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.453509][ T7970] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 372.462873][ C1] gadgetfs: configuration #1 [ 372.613687][ T7987] gadgetfs: suspended from state 4 [ 372.613936][ T4321] usb 1-1: can't set config #1, error -71 [ 372.700780][ T8004] netlink: 'syz.1.1022': attribute type 12 has an invalid length. [ 373.095448][ T7987] gadgetfs: disconnected [ 373.767788][ T8002] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 373.774429][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 373.784358][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 373.796246][ T8003] vhci_hcd: connection closed [ 373.801338][ T11] vhci_hcd: stop threads [ 373.933522][ T4321] usb 1-1: USB disconnect, device number 19 [ 373.943093][ T11] vhci_hcd: release socket [ 373.947576][ T11] vhci_hcd: disconnect device [ 374.069317][ T32] usb 4-1: USB disconnect, device number 14 [ 374.141268][ T32] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 374.259225][ T32] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 374.889247][ T32] ti_usb_3410_5052 4-1:2.0: device disconnected [ 377.211240][ T8046] netlink: 'syz.3.1036': attribute type 12 has an invalid length. [ 378.725571][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.142877][ T8078] gadgetfs: bound to dummy_udc driver [ 379.229864][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 379.456313][ T32] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 379.499862][ T4320] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 379.958666][ C0] gadgetfs: connected [ 380.086788][ T4320] gadgetfs: disconnected [ 380.269998][ C0] gadgetfs: connected [ 380.275241][ T4320] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 380.800545][ T4320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 380.810662][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.810823][ T32] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 380.822042][ C0] gadgetfs: configuration #1 [ 380.928029][ T32] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 380.989056][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.012751][ T32] usb 5-1: Product: syz [ 381.016985][ T32] usb 5-1: Manufacturer: syz [ 381.032890][ T32] usb 5-1: SerialNumber: syz [ 381.088943][ T32] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 381.123279][ T8078] gadgetfs: suspended from state 4 [ 381.123524][ T4320] usb 1-1: can't set config #1, error -71 [ 381.132103][ T32] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 381.150938][ T8078] gadgetfs: disconnected [ 381.156161][ T4320] usb 1-1: USB disconnect, device number 20 [ 381.195875][ T32] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 381.294466][ T8076] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 383.207584][ T4320] usb 5-1: USB disconnect, device number 16 [ 383.229640][ T4320] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 383.266466][ T8113] loop5: detected capacity change from 0 to 7 [ 383.275381][ T8113] Dev loop5: unable to read RDB block 7 [ 383.289389][ T8113] loop5: unable to read partition table [ 383.295427][ T8113] loop5: partition table beyond EOD, truncated [ 383.312629][ T8113] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.313804][ T4320] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 384.141308][ T4320] ti_usb_3410_5052 5-1:2.0: device disconnected [ 384.338715][ T8121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 384.345330][ T8121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 384.360917][ T8124] netlink: 'syz.1.1051': attribute type 12 has an invalid length. [ 384.371303][ T8121] vhci_hcd vhci_hcd.0: Device attached [ 384.690203][ T4261] usb 36-1: SetAddress Request (6) to port 0 [ 384.987585][ T8122] vhci_hcd: connection closed [ 384.988790][ T5104] vhci_hcd: stop threads [ 385.225971][ T4261] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 385.528255][ T5104] vhci_hcd: release socket [ 385.591951][ T5104] vhci_hcd: disconnect device [ 385.619865][ T4261] usb 36-1: enqueue for inactive port 0 [ 386.167463][ T4261] usb usb36-port1: attempt power cycle [ 386.678320][ T8162] gadgetfs: bound to dummy_udc driver [ 387.079828][ T7] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 387.087737][ C0] gadgetfs: connected [ 387.130391][ T7] gadgetfs: disconnected [ 387.350250][ C0] gadgetfs: connected [ 387.356341][ T4261] usb usb36-port1: unable to enumerate USB device [ 387.363210][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 387.383470][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 387.426720][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.481753][ C0] gadgetfs: configuration #1 [ 387.521350][ T8162] gadgetfs: suspended from state 4 [ 387.521572][ T7] usb 1-1: can't set config #1, error -71 [ 387.547294][ T8162] gadgetfs: disconnected [ 387.573743][ T7] usb 1-1: USB disconnect, device number 21 [ 389.333945][ T8186] loop5: detected capacity change from 0 to 7 [ 389.394543][ T8186] Dev loop5: unable to read RDB block 7 [ 389.434891][ T8186] loop5: unable to read partition table [ 389.450344][ T8186] loop5: partition table beyond EOD, truncated [ 389.456614][ T8186] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 389.566387][ T8191] binder: 8190:8191 ioctl c0306201 0 returned -14 [ 389.827323][ T8200] netlink: 'syz.1.1064': attribute type 12 has an invalid length. [ 389.865895][ T8197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 389.872480][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 389.880673][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 390.190067][ T7] usb 36-1: SetAddress Request (10) to port 0 [ 390.366234][ T7] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 390.507383][ T8199] vhci_hcd: connection closed [ 390.509498][ T4512] vhci_hcd: stop threads [ 391.039959][ T4512] vhci_hcd: release socket [ 391.044515][ T4512] vhci_hcd: disconnect device [ 391.102614][ T7] usb 36-1: enqueue for inactive port 0 [ 392.223034][ T7] usb usb36-port1: attempt power cycle [ 393.097245][ T7] usb usb36-port1: unable to enumerate USB device [ 393.161111][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 393.557387][ T8234] loop5: detected capacity change from 0 to 7 [ 393.565451][ T8234] Dev loop5: unable to read RDB block 7 [ 393.576401][ T8234] loop5: unable to read partition table [ 393.582755][ T8235] binder: 8231:8235 ioctl c0306201 0 returned -14 [ 393.590262][ T8234] loop5: partition table beyond EOD, truncated [ 393.607470][ T8234] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 394.068877][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 395.387593][ T8245] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 395.394290][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.402303][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 395.412992][ T8246] vhci_hcd: connection closed [ 395.413744][ T4371] vhci_hcd: stop threads [ 395.518192][ T4371] vhci_hcd: release socket [ 395.680129][ T4261] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 395.969882][ T4371] vhci_hcd: disconnect device [ 395.975755][ T4261] usb 35-1: enqueue for inactive port 0 [ 396.080179][ T4261] vhci_hcd: vhci_device speed not set [ 396.115152][ T8250] binder: BINDER_SET_CONTEXT_MGR already set [ 396.140013][ T8250] binder: 8249:8250 ioctl 4018620d 200000000300 returned -16 [ 396.168551][ T8250] binder: 8249:8250 ioctl c0306201 0 returned -14 [ 399.036841][ T8278] binder: 8277:8278 ioctl c0306201 0 returned -14 [ 399.181135][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 401.195434][ T8298] binder: 8297:8298 ioctl c0306201 0 returned -14 [ 401.273846][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 402.090302][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1100'. [ 405.561923][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 406.471380][ T8339] binder: 8338:8339 ioctl c0306201 0 returned -14 [ 410.837388][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 410.863814][ T8379] gadgetfs: bound to dummy_udc driver [ 410.977512][ T8386] loop5: detected capacity change from 0 to 7 [ 410.991453][ T7317] Dev loop5: unable to read RDB block 7 [ 410.998303][ T7317] loop5: unable to read partition table [ 411.017684][ T7317] loop5: partition table beyond EOD, truncated [ 411.033590][ T8386] Dev loop5: unable to read RDB block 7 [ 411.050231][ T8386] loop5: unable to read partition table [ 411.067460][ T8386] loop5: partition table beyond EOD, truncated [ 411.096186][ T8386] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.140087][ T4261] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 411.155753][ C0] gadgetfs: connected [ 411.164918][ T4261] gadgetfs: disconnected [ 411.351133][ C0] gadgetfs: connected [ 411.358037][ T4261] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 412.122834][ T4261] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 412.143106][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.177027][ C0] gadgetfs: configuration #1 [ 412.182032][ T8389] gadgetfs: suspended from state 4 [ 412.187256][ T8389] gadgetfs: disconnected [ 412.223140][ T4261] usb 1-1: can't set config #1, error -71 [ 412.271191][ T4261] usb 1-1: USB disconnect, device number 22 [ 416.721864][ T8435] gadgetfs: bound to dummy_udc driver [ 417.628816][ T32] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 418.125130][ C1] gadgetfs: connected [ 418.136845][ T32] gadgetfs: disconnected [ 418.275993][ T8443] gadgetfs: suspended from state 2 [ 418.442775][ T8451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.529927][ T32] usb 1-1: device not accepting address 23, error -71 [ 420.736957][ T26] audit: type=1107 audit(1785529726.409:22): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 422.732561][ T8490] gadgetfs: bound to dummy_udc driver [ 423.170494][ T32] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 423.209003][ C1] gadgetfs: connected [ 423.219311][ T32] gadgetfs: disconnected [ 423.421795][ T8502] tmpfs: Unknown parameter 'usrquota' [ 423.470460][ C1] gadgetfs: connected [ 423.477141][ T32] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 423.509665][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 423.676145][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.761715][ C1] gadgetfs: configuration #1 [ 423.843425][ T8489] gadgetfs: suspended from state 4 [ 423.843605][ T32] usb 1-1: can't set config #1, error -71 [ 423.848969][ T8489] gadgetfs: disconnected [ 423.884697][ T32] usb 1-1: USB disconnect, device number 25 [ 424.102496][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'. [ 424.312457][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.734614][ T130] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 425.939887][ T130] usb 5-1: Using ep0 maxpacket: 8 [ 426.159670][ T130] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 426.808192][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.824686][ T130] usb 5-1: Product: syz [ 426.829122][ T130] usb 5-1: Manufacturer: syz [ 426.840759][ T130] usb 5-1: SerialNumber: syz [ 426.866949][ T130] usb 5-1: config 0 descriptor?? [ 426.961105][ T130] gspca_main: sq930x-2.14.0 probing 2770:930c [ 427.229860][ T4320] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 427.610194][ T130] gspca_sq930x: reg_r 001f failed -110 [ 427.813268][ T130] sq930x: probe of 5-1:0.0 failed with error -110 [ 427.982094][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.671788][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.683475][ T4320] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 428.711231][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.737274][ T4320] usb 4-1: Product: syz [ 428.751773][ T4320] usb 4-1: Manufacturer: syz [ 428.763186][ T4320] usb 4-1: SerialNumber: syz [ 429.659961][ T4320] usb 4-1: 0:1 : does not exist [ 429.665413][ T4320] usb 4-1: unit 9 not found! [ 429.679822][ T4320] usb 4-1: unit 0 not found! [ 429.725796][ T4320] usb 4-1: USB disconnect, device number 15 [ 429.802104][ T32] usb 5-1: USB disconnect, device number 17 [ 430.008440][ T7317] udevd[7317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.579564][ T8616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.699959][ T4320] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 432.904955][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 432.919568][ T4320] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 432.950393][ T4320] usb 1-1: can't read configurations, error -71 [ 433.874433][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 433.884146][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 433.906587][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 433.915957][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 433.962371][ T8631] loop2: detected capacity change from 0 to 7 [ 434.015814][ T8631] Dev loop2: unable to read RDB block 7 [ 434.046336][ T8631] loop2: unable to read partition table [ 434.081867][ T8631] loop2: partition table beyond EOD, truncated [ 434.139274][ T8631] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.310394][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 434.337193][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 434.503201][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.523639][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.546955][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 434.576800][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 434.622524][ T7] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 434.653479][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.711552][ T7] cxacru 2-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 434.719949][ T7] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 434.727546][ T7] cxacru: probe of 2-1:1.0 failed with error -22 [ 434.735237][ T8654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.766266][ T4320] usb 2-1: USB disconnect, device number 13 [ 436.140003][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 436.160124][ T4261] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 436.353245][ T4261] usb 1-1: not running at top speed; connect to a high speed hub [ 436.371287][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.392204][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 436.403595][ T4261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 436.425014][ T7] usb 4-1: can't read configurations, error -71 [ 436.435981][ T4261] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 436.452236][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.490567][ T4261] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 436.526860][ T4261] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 436.686631][ T4261] usb 1-1: USB disconnect, device number 28 [ 436.712237][ T4261] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 436.729925][ T4261] garmin_gps 1-1:1.0: device disconnected [ 437.163414][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.214231][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.420869][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 438.759198][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 438.980025][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 438.989295][ T7] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 439.019056][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.039847][ T7] usb 5-1: Product: syz [ 439.046537][ T7] usb 5-1: Manufacturer: syz [ 439.055378][ T7] usb 5-1: SerialNumber: syz [ 439.077980][ T7] usb 5-1: config 0 descriptor?? [ 439.098067][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 439.249900][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 439.299189][ T7] gspca_sq930x: reg_r 001f failed -71 [ 439.313607][ T7] sq930x: probe of 5-1:0.0 failed with error -71 [ 439.335011][ T7] usb 5-1: USB disconnect, device number 18 [ 439.462279][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.479231][ T32] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 439.494794][ T32] usb 2-1: can't read configurations, error -71 [ 439.597507][ T8735] netlink: 'syz.2.1249': attribute type 2 has an invalid length. [ 439.609599][ T8735] netlink: 'syz.2.1249': attribute type 8 has an invalid length. [ 439.618020][ T8735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1249'. [ 439.911102][ T8738] netlink: 'syz.0.1250': attribute type 12 has an invalid length. [ 439.946292][ T8737] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 439.953048][ T8737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 441.110749][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.117261][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.160771][ T8737] vhci_hcd vhci_hcd.0: Device attached [ 441.160836][ T8741] vhci_hcd: connection closed [ 441.168610][ T4378] vhci_hcd: stop threads [ 441.216810][ T4378] vhci_hcd: release socket [ 441.221889][ T4378] vhci_hcd: disconnect device [ 442.107099][ T8751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.489939][ T8761] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 442.496681][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.530047][ T8761] vhci_hcd vhci_hcd.0: Device attached [ 442.676539][ T8765] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 442.698333][ T5099] vhci_hcd: stop threads [ 442.702929][ T5099] vhci_hcd: release socket [ 442.720015][ T5099] vhci_hcd: disconnect device [ 442.726548][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 442.749842][ T4320] vhci_hcd: vhci_device speed not set [ 443.169841][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 444.729883][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 444.941917][ T7] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 445.012087][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.040008][ T7] usb 2-1: Product: syz [ 445.049995][ T7] usb 2-1: Manufacturer: syz [ 445.069814][ T7] usb 2-1: SerialNumber: syz [ 445.093241][ T7] usb 2-1: config 0 descriptor?? [ 445.115515][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 445.243749][ T8790] loop5: detected capacity change from 0 to 7 [ 445.252518][ T7317] Dev loop5: unable to read RDB block 7 [ 445.258285][ T7317] loop5: unable to read partition table [ 445.267675][ T7317] loop5: partition table beyond EOD, truncated [ 445.285587][ T8790] Dev loop5: unable to read RDB block 7 [ 445.293553][ T8790] loop5: unable to read partition table [ 445.313487][ T7] gspca_sq930x: reg_r 001f failed -71 [ 445.321343][ T8790] loop5: partition table beyond EOD, truncated [ 445.323106][ T7] sq930x: probe of 2-1:0.0 failed with error -71 [ 445.349818][ T8790] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.366996][ T7] usb 2-1: USB disconnect, device number 16 [ 446.457432][ T8800] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 446.463987][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 446.497842][ T8800] vhci_hcd vhci_hcd.0: Device attached [ 446.500161][ T8796] netlink: 'syz.2.1270': attribute type 12 has an invalid length. [ 446.522777][ T8801] vhci_hcd: connection closed [ 446.522962][ T4430] vhci_hcd: stop threads [ 446.554791][ T4430] vhci_hcd: release socket [ 446.559287][ T4430] vhci_hcd: disconnect device [ 446.713705][ T8806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.219945][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 447.332987][ T8817] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 447.360117][ T8817] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.179338][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.203536][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 448.220091][ T7] usb 4-1: can't read configurations, error -71 [ 449.634326][ T8833] binder_alloc: 8829: pid 8829 spamming oneway? 2 buffers allocated for a total size of 5120 [ 449.861727][ T8831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 449.861754][ T8831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.863062][ T8831] vhci_hcd vhci_hcd.0: Device attached [ 450.026220][ T8837] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 450.056603][ T4303] vhci_hcd: stop threads [ 450.069012][ T4303] vhci_hcd: release socket [ 450.079243][ T4303] vhci_hcd: disconnect device [ 450.130011][ T130] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 450.156280][ T130] usb 41-1: enqueue for inactive port 0 [ 450.164685][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 450.348472][ T130] vhci_hcd: vhci_device speed not set [ 450.979338][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 451.200350][ T8854] capability: warning: `syz.3.1288' uses 32-bit capabilities (legacy support in use) [ 451.220489][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 451.234473][ T7] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 451.279954][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.295820][ T7] usb 1-1: Product: syz [ 451.309940][ T7] usb 1-1: Manufacturer: syz [ 451.330136][ T7] usb 1-1: SerialNumber: syz [ 451.359327][ T7] usb 1-1: config 0 descriptor?? [ 451.386763][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 451.490924][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 451.576602][ T7] gspca_sq930x: reg_r 001f failed -71 [ 451.587617][ T7] sq930x: probe of 1-1:0.0 failed with error -71 [ 451.644754][ T7] usb 1-1: USB disconnect, device number 29 [ 452.069863][ T4320] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 453.432238][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.456773][ T4320] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 453.475025][ T4320] usb 5-1: can't read configurations, error -71 [ 454.519150][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 456.645624][ T8914] loop5: detected capacity change from 0 to 7 [ 456.670896][ T8914] Dev loop5: unable to read RDB block 7 [ 456.676553][ T8914] loop5: unable to read partition table [ 456.704080][ T8914] loop5: partition table beyond EOD, truncated [ 456.753559][ T8914] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.116362][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 463.300146][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 465.949808][ T130] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 466.140047][ T130] usb 2-1: Using ep0 maxpacket: 8 [ 466.148276][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 466.180079][ T130] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.227626][ T130] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 466.263212][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.271742][ T130] usb 2-1: Product: syz [ 466.275938][ T130] usb 2-1: Manufacturer: syz [ 466.285572][ T130] usb 2-1: SerialNumber: syz [ 466.307375][ T130] usb 2-1: config 0 descriptor?? [ 467.495717][ T4320] usb 2-1: USB disconnect, device number 17 [ 469.592242][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 469.604847][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.037151][ T9059] Invalid ELF header magic: != ELF [ 471.907242][ T9061] loop5: detected capacity change from 0 to 7 [ 472.017203][ T9061] Dev loop5: unable to read RDB block 7 [ 472.083911][ T9061] loop5: unable to read partition table [ 472.149544][ T9061] loop5: partition table beyond EOD, truncated [ 472.994811][ T9069] using random self ethernet address [ 473.000738][ T9069] using random host ethernet address [ 473.013192][ T9061] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.087130][ T26] audit: type=1800 audit(1785529778.769:23): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="UDC" dev="configfs" ino=49023 res=0 errno=0 [ 473.300408][ T9069] udc dummy_udc.0: failed to start g1: -4 [ 473.308652][ T9069] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 473.325514][ T9069] UDC core: g1: couldn't find an available UDC or it's busy [ 473.665612][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 475.166771][ T9106] lo speed is unknown, defaulting to 1000 [ 475.172833][ T9106] lo speed is unknown, defaulting to 1000 [ 475.180218][ T9106] lo speed is unknown, defaulting to 1000 [ 475.207219][ T9106] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 475.241079][ T9102] loop5: detected capacity change from 0 to 7 [ 475.259910][ T7317] Dev loop5: unable to read RDB block 7 [ 475.266306][ T7317] loop5: unable to read partition table [ 475.279065][ T7317] loop5: partition table beyond EOD, truncated [ 475.286146][ T9102] Dev loop5: unable to read RDB block 7 [ 475.336725][ T9106] lo speed is unknown, defaulting to 1000 [ 475.348248][ T9106] lo speed is unknown, defaulting to 1000 [ 475.358417][ T9106] lo speed is unknown, defaulting to 1000 [ 475.372832][ T9106] lo speed is unknown, defaulting to 1000 [ 475.382988][ T9106] lo speed is unknown, defaulting to 1000 [ 475.657592][ T9102] loop5: unable to read partition table [ 475.664163][ T9102] loop5: partition table beyond EOD, truncated [ 475.678165][ T9102] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.473108][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.995650][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 480.166768][ T9173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.549824][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 480.669926][ T4321] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 480.709809][ T7] usb 5-1: device descriptor read/64, error -71 [ 480.870037][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 480.886235][ T4321] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 480.979840][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 481.865624][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.170151][ T4321] usb 2-1: Product: syz [ 482.206456][ T4321] usb 2-1: Manufacturer: syz [ 482.260524][ T4321] usb 2-1: SerialNumber: syz [ 482.289862][ T7] usb 5-1: device descriptor read/64, error -71 [ 482.338656][ T4321] usb 2-1: config 0 descriptor?? [ 482.515947][ T7] usb usb5-port1: attempt power cycle [ 482.592308][ T4321] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 482.608107][ T4321] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 482.709110][ T4321] usb 2-1: USB disconnect, device number 18 [ 484.819796][ T4321] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 486.079794][ T4321] usb 1-1: device descriptor read/64, error -71 [ 486.354554][ T4321] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 486.529505][ T9238] tmpfs: Unknown parameter 'usrquota' [ 486.569791][ T4321] usb 1-1: device descriptor read/64, error -71 [ 486.569816][ T4375] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 486.699970][ T4321] usb usb1-port1: attempt power cycle [ 486.779820][ T4375] usb 5-1: device descriptor read/64, error -71 [ 487.589834][ T4321] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 487.743934][ T4375] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 487.819958][ T4321] usb 1-1: device not accepting address 32, error -71 [ 487.825713][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 487.867762][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 487.881447][ T26] audit: type=1800 audit(1785529793.569:24): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1429" name="bus" dev="ramfs" ino=50335 res=0 errno=0 [ 487.902645][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 487.917152][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 487.940026][ T4375] usb 5-1: device descriptor read/64, error -71 [ 488.060029][ T4375] usb usb5-port1: attempt power cycle [ 489.839835][ T130] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 490.039789][ T32] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 490.047528][ T130] usb 2-1: Using ep0 maxpacket: 16 [ 491.413285][ T130] usb 2-1: config 14 interface 0 has no altsetting 0 [ 491.450750][ T130] usb 2-1: New USB device found, idVendor=1bc7, idProduct=10d0, bcdDevice= 7.4e [ 491.503798][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.522279][ T130] usb 2-1: Product: syz [ 491.531678][ T130] usb 2-1: Manufacturer: syz [ 491.546989][ T130] usb 2-1: SerialNumber: syz [ 491.579804][ T32] usb 1-1: device descriptor read/64, error -71 [ 491.860818][ T32] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 491.889801][ T4375] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 491.890044][ T130] usb 2-1: USB disconnect, device number 19 [ 492.060026][ T32] usb 1-1: device descriptor read/64, error -71 [ 492.191084][ T32] usb usb1-port1: attempt power cycle [ 492.599974][ T32] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 492.662598][ T32] usb 1-1: device descriptor read/8, error -71 [ 492.989949][ T32] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 493.921480][ T32] usb 1-1: device descriptor read/8, error -71 [ 494.086712][ T32] usb usb1-port1: unable to enumerate USB device [ 494.099783][ T4375] usb 4-1: device descriptor read/64, error -71 [ 494.409934][ T130] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 494.439770][ T4375] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 495.339863][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 495.347475][ T130] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 495.379399][ T130] usb 2-1: config 0 interface 0 has no altsetting 0 [ 495.418494][ T130] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 495.435089][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.495126][ T130] usb 2-1: config 0 descriptor?? [ 496.411574][ T130] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 496.432282][ T130] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 496.559523][ T130] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 496.587822][ T130] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 496.595748][ T130] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 498.253010][ T130] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 498.273109][ T26] audit: type=1800 audit(1785529803.949:25): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1460" name="bus" dev="ramfs" ino=49902 res=0 errno=0 [ 498.339424][ C1] usb 2-1: input irq status -75 received [ 498.522653][ T4375] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 498.699973][ T4375] usb 1-1: device descriptor read/64, error -71 [ 498.734097][ T130] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -110 [ 498.784083][ T130] usb 2-1: USB disconnect, device number 20 [ 498.874431][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 498.979834][ T4375] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 499.017072][ T9352] fido_id[9352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 499.049911][ T32] usb 3-1: device descriptor read/64, error -71 [ 499.149966][ T4375] usb 1-1: device descriptor read/64, error -71 [ 499.345433][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 499.510162][ T32] usb 3-1: device descriptor read/64, error -71 [ 499.640607][ T32] usb usb3-port1: attempt power cycle [ 499.690135][ T130] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 499.911439][ T130] usb 5-1: device descriptor read/all, error -71 [ 500.073771][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 500.125213][ T32] usb 3-1: device descriptor read/8, error -71 [ 500.150102][ T4375] usb usb1-port1: attempt power cycle [ 500.409774][ T32] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 500.559787][ T4375] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 500.611907][ T4375] usb 1-1: device descriptor read/8, error -71 [ 500.919846][ T4375] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 500.971779][ T4375] usb 1-1: device descriptor read/8, error -71 [ 501.060415][ T32] usb 3-1: device descriptor read/8, error -71 [ 501.170132][ T4375] usb usb1-port1: unable to enumerate USB device [ 501.179470][ T9382] loop5: detected capacity change from 0 to 7 [ 501.185942][ T32] usb usb3-port1: unable to enumerate USB device [ 501.194429][ T9382] Dev loop5: unable to read RDB block 7 [ 501.200382][ T9382] loop5: unable to read partition table [ 501.206547][ T9382] loop5: partition table beyond EOD, truncated [ 501.212920][ T9382] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.381730][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 501.602478][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.608999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.520592][ T26] audit: type=1800 audit(1785529810.199:26): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1487" name="bus" dev="ramfs" ino=50552 res=0 errno=0 [ 504.889804][ T4375] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 505.085881][ T4375] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.866297][ T4375] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 505.938574][ T4375] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 506.000708][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.930882][ T4375] usb 1-1: USB disconnect, device number 42 [ 509.849914][ T4261] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.989880][ T2173] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 510.039808][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 510.184935][ T2173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.865094][ T4261] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.896909][ T2173] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 510.916993][ T4261] usb 2-1: config 0 interface 0 has no altsetting 0 [ 510.924048][ T2173] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 510.939804][ T4261] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 510.943943][ T2173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.949094][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.976400][ T4261] usb 2-1: config 0 descriptor?? [ 511.031308][ T26] audit: type=1800 audit(1785529816.709:27): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1522" name="bus" dev="ramfs" ino=50690 res=0 errno=0 [ 511.217122][ T32] usb 4-1: USB disconnect, device number 22 [ 512.423072][ T4261] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 512.479911][ T4320] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 512.564446][ T32] usb 2-1: USB disconnect, device number 21 [ 512.678275][ T4320] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 512.719833][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.727977][ T4320] usb 5-1: Product: syz [ 512.743971][ T9515] fido_id[9515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 512.758674][ T4320] usb 5-1: Manufacturer: syz [ 512.778910][ T4320] usb 5-1: SerialNumber: syz [ 512.788087][ T4320] usbsevseg 5-1:1.0: USB 7 Segment device now attached [ 512.992280][ T4320] usb 5-1: USB disconnect, device number 29 [ 512.998669][ T4320] usbsevseg 5-1:1.0: USB 7 Segment now disconnected [ 514.640240][ T32] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 515.440975][ T32] usb 5-1: device descriptor read/64, error -71 [ 515.729842][ T32] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 515.915167][ T32] usb 5-1: device descriptor read/64, error -71 [ 516.069997][ T32] usb usb5-port1: attempt power cycle [ 516.117766][ T9568] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1552'. [ 516.499875][ T32] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 516.571847][ T32] usb 5-1: device descriptor read/8, error -71 [ 516.900730][ T32] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 516.978156][ T32] usb 5-1: device descriptor read/8, error -71 [ 517.141635][ T32] usb usb5-port1: unable to enumerate USB device [ 517.317153][ T9588] gadgetfs: bound to dummy_udc driver [ 517.630050][ T4261] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 517.650349][ C0] gadgetfs: connected [ 517.654726][ T4261] gadgetfs: disconnected [ 517.739258][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1566'. [ 517.840318][ C0] gadgetfs: connected [ 517.846508][ T4261] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 517.858600][ T4261] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 517.884600][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.907059][ C0] gadgetfs: configuration #1 [ 518.018062][ T9587] gadgetfs: suspended from state 3 [ 518.024331][ T4261] usb 1-1: can't set config #1, error -71 [ 518.099555][ T9587] gadgetfs: disconnected [ 518.124647][ T4261] usb 1-1: USB disconnect, device number 43 [ 520.329879][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 521.539761][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 521.546065][ T32] usb 2-1: no configurations [ 521.817076][ T9649] syz.0.1579 (9649): drop_caches: 2 [ 521.863175][ T32] usb 2-1: can't read configurations, error -22 [ 521.959576][ T9658] gadgetfs: bound to dummy_udc driver [ 522.054710][ T32] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 522.259781][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 522.279823][ T130] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 523.059793][ C1] gadgetfs: connected [ 523.064094][ T130] gadgetfs: disconnected [ 523.272967][ T32] usb 2-1: device descriptor read/all, error -71 [ 523.280387][ T32] usb usb2-port1: attempt power cycle [ 524.561435][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'. [ 524.580955][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 524.909926][ T4375] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 525.106206][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 525.112602][ T4375] usb 3-1: no configurations [ 525.132013][ T4375] usb 3-1: can't read configurations, error -22 [ 525.151834][ T9726] gadgetfs: bound to dummy_udc driver [ 525.893758][ T9731] device vlan0 entered promiscuous mode [ 525.941811][ T4375] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 526.049887][ T130] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 526.068140][ C1] gadgetfs: connected [ 526.072774][ T130] gadgetfs: disconnected [ 526.149881][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 526.156120][ T4375] usb 3-1: no configurations [ 526.189380][ T4375] usb 3-1: can't read configurations, error -22 [ 526.225550][ T4375] usb usb3-port1: attempt power cycle [ 526.260053][ C1] gadgetfs: connected [ 526.264527][ T9735] gadgetfs: suspended from state 3 [ 526.265883][ T130] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 526.271745][ T9735] gadgetfs: disconnected [ 526.295342][ T130] usb 1-1: can't read configurations, error -71 [ 526.719849][ T4375] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 526.760439][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 526.766302][ T4375] usb 3-1: no configurations [ 526.776350][ T4375] usb 3-1: can't read configurations, error -22 [ 526.939829][ T4375] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 526.980528][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 526.987206][ T4375] usb 3-1: no configurations [ 527.009210][ T4375] usb 3-1: can't read configurations, error -22 [ 527.031654][ T4375] usb usb3-port1: unable to enumerate USB device [ 527.113304][ T26] audit: type=1326 audit(1785529832.789:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 527.188552][ T26] audit: type=1326 audit(1785529832.819:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 527.346327][ T26] audit: type=1326 audit(1785529832.819:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 528.326748][ T26] audit: type=1326 audit(1785529832.819:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.013180][ T26] audit: type=1326 audit(1785529832.819:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.142389][ T26] audit: type=1326 audit(1785529832.819:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.229915][ T26] audit: type=1326 audit(1785529832.819:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.293463][ T9773] gadgetfs: bound to dummy_udc driver [ 529.295935][ T26] audit: type=1326 audit(1785529832.819:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.562616][ T26] audit: type=1326 audit(1785529832.819:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 529.609777][ T4261] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 529.617738][ C0] gadgetfs: connected [ 529.946518][ T26] audit: type=1326 audit(1785529832.819:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.4.1616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63819e019 code=0x7ffc0000 [ 530.073136][ T4261] gadgetfs: disconnected [ 530.269952][ C0] gadgetfs: connected [ 530.274598][ T9773] gadgetfs: suspended from state 3 [ 530.284813][ T9773] gadgetfs: disconnected [ 530.290428][ T4261] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 530.322127][ T4261] usb 1-1: can't read configurations, error -71 [ 531.485582][ T9811] gadgetfs: bound to dummy_udc driver [ 531.760942][ T130] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 531.779024][ C1] gadgetfs: connected [ 531.783604][ T9810] gadgetfs: suspended from state 3 [ 531.788804][ T9810] gadgetfs: disconnected [ 531.827503][ T9825] gadgetfs: bound to dummy_udc driver [ 531.949937][ T4261] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 532.047120][ T9840] binder: BINDER_SET_CONTEXT_MGR already set [ 532.054183][ T9840] binder: 9838:9840 ioctl 4018620d 2000000002c0 returned -16 [ 532.177563][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.191211][ C1] gadgetfs: connected [ 532.199105][ T130] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 532.236103][ T130] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 532.302593][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.395662][ C1] gadgetfs: configuration #1 [ 532.823456][ T9841] gadgetfs: suspended from state 4 [ 532.829058][ T130] usb 1-1: can't set config #1, error -71 [ 532.898604][ T130] usb 1-1: USB disconnect, device number 49 [ 532.929155][ T9841] gadgetfs: disconnected [ 532.951809][ T4261] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 532.979742][ T4261] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 532.988837][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.013909][ T4261] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 533.245591][ T32] usb 2-1: USB disconnect, device number 25 [ 535.310951][ T9891] gadgetfs: bound to dummy_udc driver [ 536.259774][ T32] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 536.271470][ C1] gadgetfs: connected [ 536.286992][ T32] gadgetfs: disconnected [ 536.434379][ T9903] gadgetfs: suspended from state 2 [ 536.669782][ T32] usb 1-1: device not accepting address 50, error -71 [ 536.989795][ T130] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 537.197405][ T130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.454011][ T130] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 537.464890][ T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.473328][ T130] usb 4-1: Product: syz [ 537.477534][ T130] usb 4-1: Manufacturer: syz [ 537.482616][ T130] usb 4-1: SerialNumber: syz [ 537.488794][ T130] usb 4-1: config 0 descriptor?? [ 537.496596][ T130] asix: probe of 4-1:0.0 failed with error -22 [ 538.392298][ T9915] CIFS mount error: No usable UNC path provided in device string! [ 538.392298][ T9915] [ 538.420899][ T9943] netlink: 'syz.1.1677': attribute type 12 has an invalid length. [ 538.430915][ T9935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 538.437586][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 538.445419][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 538.462523][ T9939] vhci_hcd: connection closed [ 538.463822][ T5078] vhci_hcd: stop threads [ 538.502670][ T9915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 538.530457][ T5078] vhci_hcd: release socket [ 538.534963][ T5078] vhci_hcd: disconnect device [ 538.786307][ T32] usb 4-1: USB disconnect, device number 23 [ 538.868105][ T9955] gadgetfs: bound to dummy_udc driver [ 539.105906][ T9969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.282285][ T2173] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 539.290755][ C1] gadgetfs: connected [ 539.295050][ T2173] gadgetfs: disconnected [ 540.072395][ T9966] gadgetfs: suspended from state 2 [ 540.329784][ T2173] usb 1-1: device not accepting address 52, error -71 [ 541.863733][T10003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 541.870375][T10003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 541.878220][T10003] vhci_hcd vhci_hcd.0: Device attached [ 541.913891][T10003] netlink: 'syz.2.1698': attribute type 12 has an invalid length. [ 541.923991][T10006] vhci_hcd: connection closed [ 541.925640][ T5104] vhci_hcd: stop threads [ 541.960238][ T5104] vhci_hcd: release socket [ 543.092035][ T5104] vhci_hcd: disconnect device [ 543.119978][ T32] usb 38-1: enqueue for inactive port 0 [ 543.673688][ T32] usb usb38-port1: attempt power cycle [ 544.158970][T10032] gadgetfs: bound to dummy_udc driver [ 544.371282][ T32] usb usb38-port1: unable to enumerate USB device [ 544.479996][ T2173] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 544.492411][ C1] gadgetfs: connected [ 544.496724][ T2173] gadgetfs: disconnected [ 544.683865][T10022] syz.1.1702 (10022): drop_caches: 2 [ 544.750106][ C1] gadgetfs: connected [ 544.756443][ T2173] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 544.770018][ T2173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 544.779892][ T2173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.816322][ C1] gadgetfs: configuration #1 [ 544.830493][T10030] gadgetfs: suspended from state 3 [ 544.836130][ T2173] usb 1-1: can't set config #1, error -71 [ 544.843148][T10030] gadgetfs: disconnected [ 544.862162][ T2173] usb 1-1: USB disconnect, device number 54 [ 546.858874][T10066] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 546.865452][T10066] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 546.873896][T10066] vhci_hcd vhci_hcd.0: Device attached [ 546.883929][T10066] netlink: 'syz.1.1718': attribute type 12 has an invalid length. [ 546.893742][T10067] vhci_hcd: connection closed [ 546.894070][ T4512] vhci_hcd: stop threads [ 546.949395][ T4512] vhci_hcd: release socket [ 546.969230][ T4512] vhci_hcd: disconnect device [ 549.269149][T10083] gadgetfs: bound to dummy_udc driver [ 549.559923][ T4375] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 549.569962][ C0] gadgetfs: connected [ 549.574225][ T4375] gadgetfs: disconnected [ 549.749956][ C0] gadgetfs: connected [ 549.755422][ T4375] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 549.766016][ T4375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 549.796206][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.823776][ C0] gadgetfs: configuration #1 [ 549.841803][T10082] gadgetfs: suspended from state 3 [ 549.847173][ T4375] usb 1-1: can't set config #1, error -71 [ 549.855907][T10093] binder: BINDER_SET_CONTEXT_MGR already set [ 549.863674][T10082] gadgetfs: disconnected [ 549.880923][ T4375] usb 1-1: USB disconnect, device number 55 [ 549.887813][T10093] binder: 10092:10093 ioctl 4018620d 2000000002c0 returned -16 [ 554.249765][ T2173] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 554.421633][T10140] netlink: 'syz.3.1735': attribute type 12 has an invalid length. [ 555.730102][ T2173] usb 5-1: Using ep0 maxpacket: 32 [ 555.744598][ T2173] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 555.786131][ T2173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 555.808952][ T2173] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 555.831067][ T2173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.970757][ T2173] usb 5-1: config 0 descriptor?? [ 556.043439][T10149] gadgetfs: bound to dummy_udc driver [ 556.849801][ T4261] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 556.857938][ C0] gadgetfs: connected [ 557.040839][ T2173] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 557.048986][ T2173] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 557.059290][ T2173] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 557.070644][ T2173] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 557.078383][ T2173] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 557.109264][ T2173] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 557.145958][ T4261] gadgetfs: disconnected [ 557.222514][ C1] usb 5-1: input irq status -75 received [ 557.528154][ T2173] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -110 [ 557.639944][ C0] gadgetfs: connected [ 557.645779][ T4261] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 557.656134][ T4261] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 557.751096][ T2173] usb 5-1: USB disconnect, device number 34 [ 557.846305][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.864666][T10148] gadgetfs: suspended from state 3 [ 557.871656][T10148] gadgetfs: disconnected [ 558.060289][ T4261] usb 1-1: can't set config #1, error -71 [ 558.081005][ T4261] usb 1-1: USB disconnect, device number 56 [ 558.400984][T10175] fido_id[10175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 558.901807][T10193] netlink: 'syz.1.1754': attribute type 12 has an invalid length. [ 560.029807][T10199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 560.029836][T10199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 560.029910][T10199] vhci_hcd vhci_hcd.0: Device attached [ 560.130547][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 560.179750][T10200] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 560.198545][ T5099] vhci_hcd: stop threads [ 560.206018][ T5099] vhci_hcd: release socket [ 560.260450][ T5099] vhci_hcd: disconnect device [ 560.395553][ T4261] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 560.409895][ T4261] usb 33-1: enqueue for inactive port 0 [ 560.499816][ T4261] vhci_hcd: vhci_device speed not set [ 562.355915][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 562.355935][ T26] audit: type=1800 audit(1785529868.029:98): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1762" name="UDC" dev="configfs" ino=54441 res=0 errno=0 [ 562.382523][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.403257][T10227] usb0: HOST MAC 9e:08:d2:89:b1:4e [ 562.408457][T10227] usb0: MAC 92:4d:92:d5:57:77 [ 562.655403][T10232] gadgetfs: bound to dummy_udc driver [ 562.709800][ T2173] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 562.911555][ T2173] usb 1-1: Dual-Role OTG device on HNP port [ 563.009842][ T4320] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 563.025531][T10244] netlink: 'syz.3.1766': attribute type 12 has an invalid length. [ 563.043162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.121823][ T2173] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 563.236873][T10242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 563.243537][T10242] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 563.251857][T10242] vhci_hcd vhci_hcd.0: Device attached [ 563.652043][T10243] vhci_hcd: connection closed [ 563.652998][ T4512] vhci_hcd: stop threads [ 564.190019][ C0] gadgetfs: connected [ 564.195103][ T4320] gadgetfs: disconnected [ 564.219933][ T4512] vhci_hcd: release socket [ 564.228763][T10247] netlink: 'syz.2.1767': attribute type 4 has an invalid length. [ 564.245512][ T2173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.262113][ T4512] vhci_hcd: disconnect device [ 564.373609][ C0] gadgetfs: connected [ 564.390758][ T4320] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 564.421140][ T4320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 564.469237][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.504895][ T2173] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 9e:08:d2:89:b1:4e [ 564.539403][ C0] gadgetfs: configuration #1 [ 564.544533][T10236] gadgetfs: suspended from state 3 [ 564.550086][ T4320] usb 2-1: can't set config #1, error -71 [ 564.550122][T10236] gadgetfs: disconnected [ 564.583106][ T4320] usb 2-1: USB disconnect, device number 26 [ 565.252849][T10236] ------------[ cut here ]------------ [ 565.258457][T10236] WARNING: CPU: 0 PID: 10236 at drivers/usb/gadget/udc/dummy_hcd.c:690 dummy_free_request+0x63/0x70 [ 565.270093][T10236] Modules linked in: [ 565.274027][T10236] CPU: 0 PID: 10236 Comm: syz.0.1764 Not tainted syzkaller #0 [ 565.281692][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.291927][T10236] RIP: 0010:dummy_free_request+0x63/0x70 [ 565.297599][T10236] Code: 53 fb 48 8b 03 48 39 d8 75 1b e8 58 5a 02 fb 48 89 df 5b 41 5e e9 dd fe 3a fb e8 48 5a 02 fb 0f 0b 5b 41 5e c3 e8 3d 5a 02 fb <0f> 0b eb e1 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 [ 565.317306][T10236] RSP: 0018:ffffc9000c99fbc0 EFLAGS: 00010287 [ 565.323429][T10236] RAX: ffffffff867fd3e3 RBX: ffff888055611800 RCX: 0000000000080000 [ 565.331447][T10236] RDX: ffffc9000ebf9000 RSI: 0000000000035765 RDI: 0000000000035766 [ 565.339444][T10236] RBP: 1ffff110288e518b R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 565.347986][T10236] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888144728068 [ 565.356086][T10236] R13: dffffc0000000000 R14: ffff888144728068 R15: ffff888055611810 [ 565.364122][T10236] FS: 00007fa4067216c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 565.374015][T10236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.380658][T10236] CR2: 000000110c356e3b CR3: 0000000028d73000 CR4: 00000000003506f0 [ 565.388650][T10236] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 565.396869][T10236] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.405344][T10236] Call Trace: [ 565.408630][T10236] [ 565.411679][T10236] gadgetfs_unbind+0x1a5/0x2a0 [ 565.416792][T10236] gadget_unbind_driver+0x1bb/0x3d0 [ 565.422293][T10236] ? gadget_bind_driver+0x760/0x760 [ 565.427547][T10236] device_release_driver_internal+0x47d/0x7c0 [ 565.433848][T10236] driver_detach+0x1ef/0x2d0 [ 565.438456][T10236] bus_remove_driver+0x11c/0x230 [ 565.443465][T10236] ? sysfs_remove_groups+0x8a/0xa0 [ 565.448621][T10236] usb_gadget_unregister_driver+0x4a/0x70 [ 565.454501][T10236] dev_release+0x82/0x1f0 [ 565.458842][T10236] ? gadget_dev_open+0x1b0/0x1b0 [ 565.463810][T10236] __fput+0x20a/0x8b0 [ 565.467871][T10236] task_work_run+0x1d0/0x260 [ 565.472584][T10236] ? task_work_cancel+0x220/0x220 [ 565.477618][T10236] ? ksys_write+0x1fd/0x260 [ 565.483125][T10236] ? exit_to_user_mode_loop+0x3b/0x110 [ 565.488786][T10236] exit_to_user_mode_loop+0xe6/0x110 [ 565.494128][T10236] exit_to_user_mode_prepare+0xee/0x180 [ 565.499713][T10236] syscall_exit_to_user_mode+0x16/0x40 [ 565.505207][T10236] do_syscall_64+0x58/0xa0 [ 565.509854][T10236] ? clear_bhb_loop+0x60/0xb0 [ 565.514640][T10236] ? clear_bhb_loop+0x60/0xb0 [ 565.519349][T10236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.525482][T10236] RIP: 0033:0x7fa40579e019 [ 565.529945][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.550373][T10236] RSP: 002b:00007fa406721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.558796][T10236] RAX: fffffffffffffffd RBX: 00007fa405a26090 RCX: 00007fa40579e019 [ 565.566908][T10236] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 565.575096][T10236] RBP: 00007fa40583500c R08: 0000000000000000 R09: 0000000000000000 [ 565.583391][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.591384][T10236] R13: 00007fa405a26128 R14: 00007fa405a26090 R15: 00007ffc9acfadf8 [ 565.600065][T10236] [ 565.603094][T10236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 565.610361][T10236] CPU: 0 PID: 10236 Comm: syz.0.1764 Not tainted syzkaller #0 [ 565.617935][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.628071][T10236] Call Trace: [ 565.631344][T10236] [ 565.634268][T10236] dump_stack_lvl+0x188/0x24e [ 565.639408][T10236] ? memcpy+0x3c/0x60 [ 565.643486][T10236] ? show_regs_print_info+0x12/0x12 [ 565.648701][T10236] ? load_image+0x410/0x410 [ 565.653234][T10236] panic+0x2d3/0x710 [ 565.657238][T10236] ? bpf_jit_dump+0xd0/0xd0 [ 565.661738][T10236] __warn+0x2f8/0x4f0 [ 565.665734][T10236] ? dummy_free_request+0x63/0x70 [ 565.670751][T10236] ? dummy_free_request+0x63/0x70 [ 565.675773][T10236] report_bug+0x2ba/0x4f0 [ 565.680123][T10236] ? dummy_free_request+0x63/0x70 [ 565.685137][T10236] handle_bug+0x3a/0x70 [ 565.689283][T10236] exc_invalid_op+0x16/0x40 [ 565.693778][T10236] asm_exc_invalid_op+0x16/0x20 [ 565.698621][T10236] RIP: 0010:dummy_free_request+0x63/0x70 [ 565.704331][T10236] Code: 53 fb 48 8b 03 48 39 d8 75 1b e8 58 5a 02 fb 48 89 df 5b 41 5e e9 dd fe 3a fb e8 48 5a 02 fb 0f 0b 5b 41 5e c3 e8 3d 5a 02 fb <0f> 0b eb e1 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 [ 565.724582][T10236] RSP: 0018:ffffc9000c99fbc0 EFLAGS: 00010287 [ 565.730757][T10236] RAX: ffffffff867fd3e3 RBX: ffff888055611800 RCX: 0000000000080000 [ 565.738741][T10236] RDX: ffffc9000ebf9000 RSI: 0000000000035765 RDI: 0000000000035766 [ 565.746720][T10236] RBP: 1ffff110288e518b R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 565.754687][T10236] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888144728068 [ 565.762658][T10236] R13: dffffc0000000000 R14: ffff888144728068 R15: ffff888055611810 [ 565.770632][T10236] ? dummy_free_request+0x63/0x70 [ 565.775664][T10236] gadgetfs_unbind+0x1a5/0x2a0 [ 565.780448][T10236] gadget_unbind_driver+0x1bb/0x3d0 [ 565.785719][T10236] ? gadget_bind_driver+0x760/0x760 [ 565.790918][T10236] device_release_driver_internal+0x47d/0x7c0 [ 565.796986][T10236] driver_detach+0x1ef/0x2d0 [ 565.801664][T10236] bus_remove_driver+0x11c/0x230 [ 565.806604][T10236] ? sysfs_remove_groups+0x8a/0xa0 [ 565.811742][T10236] usb_gadget_unregister_driver+0x4a/0x70 [ 565.817586][T10236] dev_release+0x82/0x1f0 [ 565.821911][T10236] ? gadget_dev_open+0x1b0/0x1b0 [ 565.826852][T10236] __fput+0x20a/0x8b0 [ 565.830833][T10236] task_work_run+0x1d0/0x260 [ 565.835449][T10236] ? task_work_cancel+0x220/0x220 [ 565.840473][T10236] ? ksys_write+0x1fd/0x260 [ 565.844973][T10236] ? exit_to_user_mode_loop+0x3b/0x110 [ 565.850449][T10236] exit_to_user_mode_loop+0xe6/0x110 [ 565.855815][T10236] exit_to_user_mode_prepare+0xee/0x180 [ 565.861357][T10236] syscall_exit_to_user_mode+0x16/0x40 [ 565.866818][T10236] do_syscall_64+0x58/0xa0 [ 565.871329][T10236] ? clear_bhb_loop+0x60/0xb0 [ 565.876022][T10236] ? clear_bhb_loop+0x60/0xb0 [ 565.880812][T10236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.886711][T10236] RIP: 0033:0x7fa40579e019 [ 565.891149][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.910749][T10236] RSP: 002b:00007fa406721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.919169][T10236] RAX: fffffffffffffffd RBX: 00007fa405a26090 RCX: 00007fa40579e019 [ 565.927133][T10236] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 565.935096][T10236] RBP: 00007fa40583500c R08: 0000000000000000 R09: 0000000000000000 [ 565.943084][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.951174][T10236] R13: 00007fa405a26128 R14: 00007fa405a26090 R15: 00007ffc9acfadf8 [ 565.959240][T10236] [ 565.962620][T10236] Kernel Offset: disabled [ 565.966989][T10236] Rebooting in 86400 seconds..