last executing test programs: 4m24.506720249s ago: executing program 2 (id=214): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000340)={0xa, 0x0, 0x7, @remote, 0x7, 0x3}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002800)={'erspan0\x00', &(0x7f0000002780)={'gretap0\x00', 0x0, 0x7, 0x8, 0xc53, 0x2, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x2b, 0x14, [@private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @remote, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="ab7c63aed7525287458a97fb2bee157c6e972dda", @ANYRES16, @ANYRES16, @ANYRES16], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) flistxattr(r3, &(0x7f0000000300)=""/203, 0xcb) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) 4m23.228152548s ago: executing program 2 (id=217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x802, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1d5280, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3010080, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x240}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4m20.361637906s ago: executing program 2 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x0) 4m18.287256418s ago: executing program 2 (id=227): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x4}}, 0xb) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4m16.477781095s ago: executing program 2 (id=235): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x802, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1d5280, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3010080, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4m12.68099341s ago: executing program 2 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 4m11.704616877s ago: executing program 32 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1m40.193494495s ago: executing program 0 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000880)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = fcntl$dupfd(r1, 0x0, r1) bind$rose(r5, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 1m37.300877614s ago: executing program 0 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 1m36.973811144s ago: executing program 0 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c000280080001"], 0xec}}, 0x0) 1m36.174958429s ago: executing program 0 (id=832): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) 1m35.743777012s ago: executing program 0 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 1m35.331601279s ago: executing program 0 (id=840): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) 1m19.999928108s ago: executing program 33 (id=840): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) 15.180524787s ago: executing program 1 (id=1209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 13.569650513s ago: executing program 1 (id=1222): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 12.352439311s ago: executing program 3 (id=1227): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11.981721946s ago: executing program 5 (id=1230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000500)={0x0, 0x6, 0x3, "00c04c"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)={0x0, 0x18}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0xc6}, 0x0}) 10.453295147s ago: executing program 1 (id=1235): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 8.987101245s ago: executing program 3 (id=1241): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)="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", 0xfd}], 0x1, 0x0, 0x68}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.750728962s ago: executing program 1 (id=1243): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 8.73115301s ago: executing program 3 (id=1244): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000040)={0x40, 0x13, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.572370925s ago: executing program 5 (id=1249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e72c982b5", 0xb}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) 7.235363772s ago: executing program 5 (id=1250): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x8000, 0x2, 0xa, 0xb0}, 0x26, [0xf0d, 0x8, 0x5, 0x10001, 0x4, 0x84cc, 0x3, 0x6, 0xa, 0x7, 0x7, 0xc, 0x81, 0x6, 0x2, 0x6, 0x23f17a65, 0x800, 0x7, 0x1, 0x7, 0x0, 0x3, 0x7, 0x40, 0x7, 0xfffffffc, 0x7, 0x6, 0x7, 0xe0000, 0x4, 0xffff, 0x1ff, 0xffffff01, 0x7, 0x0, 0x3, 0x627, 0x0, 0x6, 0x800, 0x2, 0x8000, 0x16f1, 0x6, 0x9c89, 0xff, 0x9, 0x24, 0xffffffff, 0x85, 0x6, 0x2, 0xfffffff2, 0x3, 0x8, 0x8, 0x8, 0x3, 0xffffffff, 0x6, 0xb, 0x3d], [0xa8, 0x0, 0xfffffff2, 0x7ff, 0x5, 0x2, 0x7f8, 0x5938, 0x8, 0x1, 0x9, 0xfffffffe, 0x8, 0x2, 0x1, 0xf, 0x0, 0x3, 0x9, 0x3, 0x8, 0x0, 0x9, 0xfffffffd, 0x0, 0x24b00000, 0x8, 0x5, 0x3, 0x0, 0xb014, 0x7, 0x4, 0x3, 0x80000001, 0x8, 0x8, 0x7, 0xa1, 0xffff, 0x6, 0x3, 0x5, 0x9, 0x5, 0x4, 0x8000, 0x2, 0x6, 0x8, 0x8, 0x80000001, 0x40, 0x59, 0x5, 0x10, 0x3, 0xe60, 0x0, 0x6, 0x8, 0x3, 0x10, 0x4], [0x100, 0x7, 0x6, 0xc, 0x7fff, 0x3, 0x918, 0x80, 0x4, 0xb1a, 0x4, 0x7, 0xc, 0x6a, 0x1, 0x2, 0x8, 0x7, 0x2, 0x9, 0xfff, 0x6, 0xffffffff, 0x1, 0x8, 0xcba8, 0xc, 0x5, 0xfffffffa, 0xc0, 0x7fffffff, 0x6ff, 0x4, 0x3c, 0x7, 0xfc, 0x5, 0x3, 0x0, 0x6, 0x9, 0x5, 0x5, 0x9, 0x80000000, 0x8, 0x2, 0xa5, 0x9, 0x1, 0x39, 0x6c6, 0x8000, 0x8, 0x9, 0x5, 0xba14, 0x9b8e, 0xa8, 0xe4, 0x0, 0xc7, 0x710, 0x5], [0x5, 0xb8000, 0x4, 0x7, 0x1, 0x0, 0x200, 0x3, 0x2, 0x7, 0x4, 0x8c48, 0xfffffff8, 0xf, 0xc, 0x0, 0x6, 0x4873, 0x1fa4e05b, 0x1, 0x4, 0x9, 0x8, 0x10, 0x6, 0x7ff, 0x10, 0x28, 0x8, 0x9, 0x80, 0x3bc, 0x9394, 0xe, 0x0, 0xffffffff, 0x2, 0xaf1, 0x17, 0x5, 0x4, 0x9, 0xfffffffe, 0xd, 0x5, 0x18f2210a, 0x7ff, 0x0, 0x3, 0x3, 0x9, 0x0, 0x4, 0x2, 0x9, 0xdaa, 0x2, 0x1, 0x49, 0x7, 0xa, 0x3, 0x3, 0x2b]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) pipe2$9p(&(0x7f0000000140), 0x800) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.730015113s ago: executing program 7 (id=1253): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.052154691s ago: executing program 5 (id=1254): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.843623927s ago: executing program 6 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4152], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 5.604824204s ago: executing program 3 (id=1256): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.35752809s ago: executing program 1 (id=1257): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.444020639s ago: executing program 7 (id=1260): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.276268742s ago: executing program 7 (id=1262): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e72c982b5", 0xb}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) 4.141447621s ago: executing program 7 (id=1264): r0 = socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x80003519, 0x0, 0x0, 0x0, 0x0) 4.01635278s ago: executing program 4 (id=1265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000080)="e02742e80f1c335a9782762f86", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.961547236s ago: executing program 4 (id=1266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.68105529s ago: executing program 6 (id=1267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) 2.677620582s ago: executing program 3 (id=1268): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x2, "65c1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.563792403s ago: executing program 1 (id=1269): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.365862909s ago: executing program 5 (id=1270): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.064120313s ago: executing program 7 (id=1271): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) 1.833360935s ago: executing program 5 (id=1272): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.57577191s ago: executing program 6 (id=1273): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x0) 1.485036423s ago: executing program 6 (id=1274): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.358235414s ago: executing program 6 (id=1275): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000800)=[{0x24, 0x0, 0x2, &(0x7f0000000240)="8037"}, {0x7, 0x4000, 0x0, 0x0}], 0x100000000000009a}) 644.387071ms ago: executing program 4 (id=1276): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) 522.520113ms ago: executing program 4 (id=1277): 469.523486ms ago: executing program 4 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000080)="e02742e80f1c335a9782762f86", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 365.68574ms ago: executing program 4 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4152], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 363.11172ms ago: executing program 7 (id=1280): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 164.72057ms ago: executing program 3 (id=1281): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 6 (id=1282): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x5, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x3, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) kernel console output (not intermixed with test programs): ][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.214122][ T6094] Tainted: [L]=SOFTLOCKUP [ 339.214131][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 339.214149][ T6094] Workqueue: writeback wb_workfn (flush-7:6) [ 339.214197][ T6094] Call Trace: [ 339.214207][ T6094] [ 339.214217][ T6094] dump_stack_lvl+0xe8/0x150 [ 339.214253][ T6094] f2fs_handle_critical_error+0x37c/0x540 [ 339.214298][ T6094] f2fs_write_end_io+0x886/0xb60 [ 339.214358][ T6094] __submit_merged_bio+0x256/0x650 [ 339.214396][ T6094] __submit_merged_write_cond+0x269/0x530 [ 339.214435][ T6094] f2fs_write_data_pages+0x2806/0x3360 [ 339.214515][ T6094] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.214569][ T6094] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 339.214655][ T6094] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 339.214685][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 339.214736][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.214766][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 339.214811][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.214844][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.214878][ T6094] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.214914][ T6094] do_writepages+0x32e/0x550 [ 339.214958][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.214986][ T6094] ? reacquire_held_locks+0x104/0x190 [ 339.215017][ T6094] ? writeback_sb_inodes+0x41f/0x1820 [ 339.215055][ T6094] __writeback_single_inode+0x133/0x1230 [ 339.215091][ T6094] ? do_raw_spin_unlock+0xf5/0x210 [ 339.215134][ T6094] writeback_sb_inodes+0x92c/0x1820 [ 339.215175][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215228][ T6094] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 339.215255][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.215348][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215376][ T6094] ? rcu_is_watching+0x15/0xb0 [ 339.215409][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215450][ T6094] wb_writeback+0x445/0xad0 [ 339.215485][ T6094] ? queue_io+0x1e1/0x450 [ 339.215524][ T6094] ? __pfx_wb_writeback+0x10/0x10 [ 339.215549][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.215609][ T6094] wb_workfn+0x3f8/0xef0 [ 339.215645][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215673][ T6094] ? look_up_lock_class+0x57/0x110 [ 339.215737][ T6094] ? __pfx_wb_workfn+0x10/0x10 [ 339.215773][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215807][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215836][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.215870][ T6094] ? lock_acquire+0x106/0x330 [ 339.215898][ T6094] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.215939][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.215972][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216005][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216041][ T6094] ? process_scheduled_works+0xa0f/0x17a0 [ 339.216068][ T6094] ? process_scheduled_works+0xa0f/0x17a0 [ 339.216104][ T6094] process_scheduled_works+0xaec/0x17a0 [ 339.216173][ T6094] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.216197][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.216236][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216260][ T6094] ? assign_work+0x3d3/0x440 [ 339.216291][ T6094] worker_thread+0x89f/0xd90 [ 339.216318][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216352][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216379][ T6094] ? __kthread_parkme+0x7a/0x1f0 [ 339.216424][ T6094] kthread+0x726/0x8b0 [ 339.216462][ T6094] ? __pfx_worker_thread+0x10/0x10 [ 339.216485][ T6094] ? __pfx_kthread+0x10/0x10 [ 339.216510][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216546][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.216577][ T6094] ? __pfx_kthread+0x10/0x10 [ 339.216608][ T6094] ret_from_fork+0x51b/0xa40 [ 339.216635][ T6094] ? __pfx_ret_from_fork+0x10/0x10 [ 339.216654][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.216678][ T6094] ? __switch_to+0xc82/0x1410 [ 339.216714][ T6094] ? __pfx_kthread+0x10/0x10 [ 339.216745][ T6094] ret_from_fork_asm+0x1a/0x30 [ 339.216800][ T6094] [ 339.612636][ T6094] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 339.666656][ T8936] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 339.675568][ T5982] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 339.695495][ T8936] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 339.715153][ T8936] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 339.730171][ T52] Bluetooth: hci6: command tx timeout [ 339.758814][ T8936] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 339.873097][ T5982] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 339.882317][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.890830][ T5982] usb 2-1: Product: syz [ 339.894991][ T5982] usb 2-1: Manufacturer: syz [ 339.899693][ T5982] usb 2-1: SerialNumber: syz [ 339.923232][ T5982] usb 2-1: config 0 descriptor?? [ 339.939192][ T5982] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 339.997934][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.111460][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.200090][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.207315][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.310438][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.317596][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.328216][ T9024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.942'. [ 340.699585][ T5971] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 340.885944][ T9] usb write operation failed. (-71) [ 340.888388][ T5971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.903657][ T5971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.916269][ T5971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 28521, setting to 64 [ 340.983971][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.064404][ T5971] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.073562][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.074363][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.094554][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 341.110767][ T9038] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 341.177377][ T9] usb 6-1: media controller created [ 341.457124][ T9] usb read operation failed. (-71) [ 341.457156][ T5971] hub 5-1:1.0: bad descriptor, ignoring hub [ 341.526737][ T5971] hub 5-1:1.0: probe with driver hub failed with error -5 [ 341.545562][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.554246][ T9] usb write operation failed. (-71) [ 341.572708][ T5971] cdc_wdm 5-1:1.0: skipping garbage [ 341.573632][ T9] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 341.577968][ T5971] cdc_wdm 5-1:1.0: skipping garbage [ 341.621007][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.684298][ T9] usb 6-1: USB disconnect, device number 6 [ 341.694560][ T5982] gspca_sunplus: reg_r err -71 [ 341.704791][ T5971] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 341.723435][ T5982] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 341.752805][ T5971] cdc_wdm 5-1:1.0: Unknown control protocol [ 341.778060][ T5982] usb 2-1: USB disconnect, device number 10 [ 341.810458][ T52] Bluetooth: hci6: command tx timeout [ 341.856037][ T5971] usb 5-1: USB disconnect, device number 12 [ 342.531272][ T9074] loop6: detected capacity change from 0 to 40427 [ 342.540598][ T9074] F2FS-fs (loop6): invalid crc value [ 342.630473][ T9074] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 342.640005][ T9074] F2FS-fs (loop6): Start checkpoint disabled! [ 342.647149][ T9074] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 342.655038][ T9074] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 342.788646][ T5967] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 343.248932][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.428139][ T5967] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.568738][ T5967] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.640003][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.658491][ T5967] usb 5-1: config 0 descriptor?? [ 343.765090][ T8936] veth0_vlan: entered promiscuous mode [ 343.800628][ T8936] veth1_vlan: entered promiscuous mode [ 343.837262][ T6094] kworker/u8:18: attempt to access beyond end of device [ 343.837262][ T6094] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.896909][ T8936] veth0_macvtap: entered promiscuous mode [ 343.908737][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.908774][ T6094] Tainted: [L]=SOFTLOCKUP [ 343.908783][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 343.908800][ T6094] Workqueue: writeback wb_workfn (flush-7:6) [ 343.908848][ T6094] Call Trace: [ 343.908865][ T6094] [ 343.908875][ T6094] dump_stack_lvl+0xe8/0x150 [ 343.908911][ T6094] f2fs_handle_critical_error+0x37c/0x540 [ 343.908952][ T6094] f2fs_write_end_io+0x886/0xb60 [ 343.909012][ T6094] __submit_merged_bio+0x256/0x650 [ 343.909051][ T6094] __submit_merged_write_cond+0x269/0x530 [ 343.909091][ T6094] f2fs_write_data_pages+0x2806/0x3360 [ 343.909171][ T6094] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 343.909224][ T6094] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 343.909310][ T6094] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 343.909341][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 343.909396][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.909426][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 343.909471][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.909504][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.909537][ T6094] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 343.909573][ T6094] do_writepages+0x32e/0x550 [ 343.909617][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.909645][ T6094] ? reacquire_held_locks+0x104/0x190 [ 343.909676][ T6094] ? writeback_sb_inodes+0x41f/0x1820 [ 343.909714][ T6094] __writeback_single_inode+0x133/0x1230 [ 343.909745][ T6094] ? do_raw_spin_unlock+0xf5/0x210 [ 343.909789][ T6094] writeback_sb_inodes+0x92c/0x1820 [ 343.909861][ T6094] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 343.909887][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.909978][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910006][ T6094] ? rcu_is_watching+0x15/0xb0 [ 343.910037][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910078][ T6094] wb_writeback+0x445/0xad0 [ 343.910112][ T6094] ? queue_io+0x1e1/0x450 [ 343.910151][ T6094] ? __pfx_wb_writeback+0x10/0x10 [ 343.910176][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.910235][ T6094] wb_workfn+0x3f8/0xef0 [ 343.910270][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910299][ T6094] ? look_up_lock_class+0x57/0x110 [ 343.910361][ T6094] ? __pfx_wb_workfn+0x10/0x10 [ 343.910397][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910431][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910458][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.910490][ T6094] ? lock_acquire+0x106/0x330 [ 343.910517][ T6094] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 343.910557][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910589][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910620][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910656][ T6094] ? process_scheduled_works+0xa0f/0x17a0 [ 343.910682][ T6094] ? process_scheduled_works+0xa0f/0x17a0 [ 343.910712][ T6094] process_scheduled_works+0xaec/0x17a0 [ 343.910780][ T6094] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.910805][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.910849][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910884][ T6094] ? assign_work+0x3d3/0x440 [ 343.910919][ T6094] worker_thread+0x89f/0xd90 [ 343.910952][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.910990][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.911020][ T6094] ? __kthread_parkme+0x7a/0x1f0 [ 343.911066][ T6094] kthread+0x726/0x8b0 [ 343.911104][ T6094] ? __pfx_worker_thread+0x10/0x10 [ 343.911132][ T6094] ? __pfx_kthread+0x10/0x10 [ 343.911163][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.911199][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.911230][ T6094] ? __pfx_kthread+0x10/0x10 [ 343.911266][ T6094] ret_from_fork+0x51b/0xa40 [ 343.911297][ T6094] ? __pfx_ret_from_fork+0x10/0x10 [ 343.911319][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.911347][ T6094] ? __switch_to+0xc82/0x1410 [ 343.911390][ T6094] ? __pfx_kthread+0x10/0x10 [ 343.911426][ T6094] ret_from_fork_asm+0x1a/0x30 [ 343.911485][ T6094] [ 343.922079][ T8936] veth1_macvtap: entered promiscuous mode [ 343.974741][ T6094] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 344.340559][ T5967] usb 5-1: USB disconnect, device number 13 [ 344.653114][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.720990][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.744496][ T6417] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.774803][ T6417] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.804524][ T6417] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.817326][ T6417] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.826673][ T5967] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 345.000627][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 345.017211][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.080452][ T5967] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.109465][ T5967] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 345.137614][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.146237][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.154581][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.192605][ T5967] usb 5-1: config 0 descriptor?? [ 345.302296][ T9098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.959'. [ 345.329201][ T6610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.367760][ T6610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.564590][ T5821] usb 5-1: USB disconnect, device number 14 [ 346.346767][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 346.699890][ T6016] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 346.900887][ T6016] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 346.923764][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.944018][ T6016] usb 8-1: Product: syz [ 346.949516][ T6016] usb 8-1: Manufacturer: syz [ 346.954119][ T6016] usb 8-1: SerialNumber: syz [ 346.990576][ T6016] usb 8-1: config 0 descriptor?? [ 347.020791][ T6016] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 347.443195][ T9136] loop5: detected capacity change from 0 to 40427 [ 347.476443][ T9136] F2FS-fs (loop5): invalid crc value [ 347.552478][ T9136] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 347.562289][ T9136] F2FS-fs (loop5): Start checkpoint disabled! [ 347.576199][ T9136] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 347.588817][ T9136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 348.673575][ T9142] syzkaller0: entered promiscuous mode [ 348.699993][ T6016] gspca_sunplus: reg_r err -71 [ 348.709713][ T6016] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 348.727170][ T6016] usb 8-1: USB disconnect, device number 2 [ 348.824774][ T6684] kworker/u8:24: attempt to access beyond end of device [ 348.824774][ T6684] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 348.859534][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: kworker/u8:24 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.859575][ T6684] Tainted: [L]=SOFTLOCKUP [ 348.859584][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 348.859602][ T6684] Workqueue: writeback wb_workfn (flush-7:5) [ 348.859651][ T6684] Call Trace: [ 348.859661][ T6684] [ 348.859672][ T6684] dump_stack_lvl+0xe8/0x150 [ 348.859709][ T6684] f2fs_handle_critical_error+0x37c/0x540 [ 348.859751][ T6684] f2fs_write_end_io+0x886/0xb60 [ 348.859814][ T6684] __submit_merged_bio+0x256/0x650 [ 348.859862][ T6684] __submit_merged_write_cond+0x269/0x530 [ 348.859903][ T6684] f2fs_write_data_pages+0x2806/0x3360 [ 348.859987][ T6684] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 348.860042][ T6684] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 348.860135][ T6684] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 348.860167][ T6684] ? __lock_acquire+0x6b5/0x2cf0 [ 348.860219][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860250][ T6684] ? __lock_acquire+0x6b5/0x2cf0 [ 348.860295][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860329][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860364][ T6684] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 348.860402][ T6684] do_writepages+0x32e/0x550 [ 348.860448][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860477][ T6684] ? reacquire_held_locks+0x104/0x190 [ 348.860509][ T6684] ? writeback_sb_inodes+0x41f/0x1820 [ 348.860548][ T6684] __writeback_single_inode+0x133/0x1230 [ 348.860581][ T6684] ? do_raw_spin_unlock+0xf5/0x210 [ 348.860625][ T6684] writeback_sb_inodes+0x92c/0x1820 [ 348.860693][ T6684] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 348.860720][ T6684] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.860815][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860844][ T6684] ? rcu_is_watching+0x15/0xb0 [ 348.860883][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.860925][ T6684] wb_writeback+0x445/0xad0 [ 348.860961][ T6684] ? queue_io+0x1e1/0x450 [ 348.861001][ T6684] ? __pfx_wb_writeback+0x10/0x10 [ 348.861027][ T6684] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.861089][ T6684] wb_workfn+0x3f8/0xef0 [ 348.861125][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861155][ T6684] ? look_up_lock_class+0x57/0x110 [ 348.861219][ T6684] ? __pfx_wb_workfn+0x10/0x10 [ 348.861257][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861292][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861321][ T6684] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.861355][ T6684] ? lock_acquire+0x106/0x330 [ 348.861385][ T6684] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.861427][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861461][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861495][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861532][ T6684] ? process_scheduled_works+0xa0f/0x17a0 [ 348.861559][ T6684] ? process_scheduled_works+0xa0f/0x17a0 [ 348.861591][ T6684] process_scheduled_works+0xaec/0x17a0 [ 348.861662][ T6684] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.861689][ T6684] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.861736][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861766][ T6684] ? assign_work+0x3d3/0x440 [ 348.861803][ T6684] worker_thread+0x89f/0xd90 [ 348.861837][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861886][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.861918][ T6684] ? __kthread_parkme+0x7a/0x1f0 [ 348.861965][ T6684] kthread+0x726/0x8b0 [ 348.862008][ T6684] ? __pfx_worker_thread+0x10/0x10 [ 348.862037][ T6684] ? __pfx_kthread+0x10/0x10 [ 348.862069][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.862106][ T6684] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.862139][ T6684] ? __pfx_kthread+0x10/0x10 [ 348.862177][ T6684] ret_from_fork+0x51b/0xa40 [ 348.862209][ T6684] ? __pfx_ret_from_fork+0x10/0x10 [ 348.862234][ T6684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.862264][ T6684] ? __switch_to+0xc82/0x1410 [ 348.862309][ T6684] ? __pfx_kthread+0x10/0x10 [ 348.862347][ T6684] ret_from_fork_asm+0x1a/0x30 [ 348.862409][ T6684] [ 348.879518][ T6684] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 348.949587][ T5971] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 349.389938][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 349.486704][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.515155][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.551969][ T5971] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 349.589803][ T6080] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 349.606611][ T5971] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.633493][ T5971] usb 5-1: Manufacturer: syz [ 349.651445][ T5971] usb 5-1: config 0 descriptor?? [ 349.785122][ T6080] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.809684][ T6080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.821768][ T5910] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 349.828004][ T6080] usb 2-1: Product: syz [ 349.839517][ T6080] usb 2-1: Manufacturer: syz [ 349.844156][ T6080] usb 2-1: SerialNumber: syz [ 349.859637][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 349.982387][ T5910] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 349.991567][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.003540][ T5910] usb 4-1: config 0 descriptor?? [ 350.019137][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110 [ 350.026023][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 350.041467][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 350.069457][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.077507][ T9] usb 8-1: Product: syz [ 350.088270][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.089722][ T9] usb 8-1: Manufacturer: syz [ 350.095400][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.106871][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.109802][ T9] usb 8-1: SerialNumber: syz [ 350.123448][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.131458][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.132412][ T9] usb 8-1: config 0 descriptor?? [ 350.146003][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.157333][ T5971] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 350.169622][ T5971] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 350.222708][ T5910] gspca_spca508: reg_read err -32 [ 350.229335][ T5910] gspca_spca508: reg_read err -32 [ 350.266933][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 350.278964][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 350.368543][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.382534][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 350.407125][ T9] usb 8-1: USB disconnect, device number 3 [ 350.441264][ T5910] gspca_spca508: reg_read err -32 [ 350.458153][ T5910] gspca_spca508: reg_read err -32 [ 350.474272][ T5910] gspca_spca508: reg write: error -71 [ 350.480149][ T5910] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 350.507763][ T5910] usb 4-1: USB disconnect, device number 12 [ 350.724039][ T9171] netlink: 48 bytes leftover after parsing attributes in process `syz.5.987'. [ 350.937130][ T5971] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 350.979976][ T5971] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 351.023328][ T5971] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 351.104532][ T5971] usb 5-1: USB disconnect, device number 15 [ 351.593482][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 351.596523][ T9178] fido_id[9178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 351.666143][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 351.731650][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 351.811610][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 351.871265][ T6080] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.920361][ T6080] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 351.991478][ T6080] usb 2-1: USB disconnect, device number 11 [ 352.741534][ T5910] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 352.916744][ T5910] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 352.938901][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.963340][ T5910] usb 4-1: Product: syz [ 352.976715][ T5910] usb 4-1: Manufacturer: syz [ 352.997985][ T5910] usb 4-1: SerialNumber: syz [ 353.018921][ T5910] usb 4-1: config 0 descriptor?? [ 353.056129][ T5910] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 353.379591][ T6656] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 353.449625][ T6296] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 353.529783][ T6656] usb 2-1: Using ep0 maxpacket: 32 [ 353.549155][ T6656] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 353.567753][ T6656] usb 2-1: config 0 has no interface number 0 [ 353.584335][ T6656] usb 2-1: config 0 interface 12 has no altsetting 0 [ 353.596843][ T6656] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 353.613283][ T6296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.639518][ T6656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.657206][ T6296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.667311][ T6656] usb 2-1: Product: syz [ 353.679501][ T6656] usb 2-1: Manufacturer: syz [ 353.684127][ T6656] usb 2-1: SerialNumber: syz [ 353.700661][ T6296] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 353.722296][ T6296] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 353.732116][ T6656] usb 2-1: config 0 descriptor?? [ 353.744885][ T6296] usb 8-1: Manufacturer: syz [ 353.757612][ T6296] usb 8-1: config 0 descriptor?? [ 354.070210][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 354.184235][ T6296] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 354.210249][ T9] usb 5-1: device descriptor read/64, error -71 [ 354.216899][ T6296] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 354.224601][ T6296] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 354.236433][ T6296] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 354.449563][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 354.549763][ T1206] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 354.599992][ T9] usb 5-1: device descriptor read/64, error -71 [ 354.663426][ T5910] gspca_sunplus: reg_r err -71 [ 354.679888][ T5910] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 354.700763][ T5910] usb 4-1: USB disconnect, device number 13 [ 354.719182][ T9] usb usb5-port1: attempt power cycle [ 354.738253][ T1206] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 354.775213][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.783589][ T1206] usb 6-1: Product: syz [ 354.791958][ T1206] usb 6-1: Manufacturer: syz [ 354.799036][ T1206] usb 6-1: SerialNumber: syz [ 354.989031][ T6296] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 355.000759][ T6296] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 355.011573][ T6296] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 355.037079][ T6296] usb 8-1: USB disconnect, device number 4 [ 355.119925][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 355.150182][ T9] usb 5-1: device descriptor read/8, error -71 [ 355.158169][ T9242] fido_id[9242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 355.226263][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 355.276448][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 355.395418][ T9243] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1014'. [ 355.399548][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 355.430269][ T9] usb 5-1: device descriptor read/8, error -71 [ 355.602276][ T9] usb usb5-port1: unable to enumerate USB device [ 356.895335][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 356.914043][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 356.926826][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 356.939382][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 356.966411][ T1206] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 357.012621][ T1206] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 357.075302][ T1206] usb 6-1: USB disconnect, device number 7 [ 357.130111][ T6656] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 357.137670][ T6656] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 357.189472][ T6656] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 357.232593][ T6656] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 357.270799][ T6656] usb 2-1: USB disconnect, device number 12 [ 357.979477][ T6656] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 358.161050][ T6656] usb 6-1: Using ep0 maxpacket: 8 [ 358.179238][ T6656] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 358.212470][ T6656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.243960][ T6656] usb 6-1: Product: syz [ 358.254063][ T6656] usb 6-1: Manufacturer: syz [ 358.268070][ T6656] usb 6-1: SerialNumber: syz [ 358.287596][ T6656] usb 6-1: config 0 descriptor?? [ 358.329494][ T5971] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 358.371561][ T8061] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 358.513856][ T6656] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 358.673554][ T8061] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.689659][ T8061] usb 7-1: config 0 has no interface number 0 [ 358.695948][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.710773][ T8061] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 359.399464][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.414096][ T8061] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.433956][ T8061] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 359.444969][ T8061] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 359.455988][ T8061] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 359.479650][ T5971] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 359.489140][ T5971] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.517043][ T8061] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 359.539455][ T8061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.557627][ T5971] usb 8-1: Manufacturer: syz [ 359.582259][ T5971] usb 8-1: config 0 descriptor?? [ 359.593193][ T8061] usb 7-1: config 0 descriptor?? [ 359.603798][ T9277] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 359.653996][ T8061] hub 7-1:0.3: bad descriptor, ignoring hub [ 359.670206][ T8061] hub 7-1:0.3: probe with driver hub failed with error -5 [ 359.704351][ T8061] sierra 7-1:0.3: Sierra USB modem converter detected [ 359.958522][ T8061] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 359.998432][ T8061] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 360.053214][ T5971] hid_parser_main: 4 callbacks suppressed [ 360.053239][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.070390][ T8061] usb 7-1: USB disconnect, device number 12 [ 360.099918][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.106723][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.150269][ T8061] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 360.163379][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.179100][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.191280][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.199910][ T8061] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 360.250250][ T6656] usb write operation failed. (-71) [ 360.303701][ T8061] sierra 7-1:0.3: device disconnected [ 360.309383][ T5971] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 360.331670][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'. [ 360.356603][ T5971] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 360.358529][ T6656] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.450256][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'. [ 360.463800][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'. [ 360.478134][ T6656] dvbdev: DVB: registering new adapter (Terratec H7) [ 360.559481][ T6656] usb 6-1: media controller created [ 360.569543][ T6656] usb read operation failed. (-71) [ 360.593080][ T6656] usb write operation failed. (-71) [ 360.627904][ T6656] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 360.749758][ T6656] usb 6-1: USB disconnect, device number 8 [ 361.289536][ T9289] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 361.547678][ T9289] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 361.976849][ T5971] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 362.016585][ T9289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.029554][ T5971] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 362.060724][ T9289] usb 5-1: config 0 descriptor?? [ 362.067818][ T5971] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 362.119912][ T5971] usb 8-1: USB disconnect, device number 5 [ 362.289612][ T1206] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 362.306347][ T9325] fido_id[9325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 362.459557][ T6656] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 362.471275][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.612809][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.835924][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1039'. [ 362.849675][ T6656] usb 7-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 362.864633][ T6656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.875085][ T1206] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 28521, setting to 64 [ 362.886189][ T1206] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.901053][ T6656] usb 7-1: config 0 descriptor?? [ 362.920079][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.920933][ T6656] pwc: Creative Labs Webcam Pro Ex detected. [ 362.946515][ T9321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 363.161694][ T1206] hub 2-1:1.0: bad descriptor, ignoring hub [ 363.167672][ T1206] hub 2-1:1.0: probe with driver hub failed with error -5 [ 363.283312][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 363.319547][ T1206] cdc_wdm 2-1:1.0: skipping garbage [ 363.383510][ T1206] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 363.399936][ T1206] cdc_wdm 2-1:1.0: Unknown control protocol [ 363.461089][ T1206] usb 2-1: USB disconnect, device number 13 [ 363.569693][ T5971] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 363.642185][ T6656] pwc: recv_control_msg error -32 req 02 val 2b00 [ 363.658609][ T6656] pwc: recv_control_msg error -32 req 02 val 2700 [ 363.693272][ T6656] pwc: recv_control_msg error -32 req 04 val 1600 [ 363.720227][ T6656] pwc: recv_control_msg error -71 req 02 val 2c00 [ 363.736982][ T6656] pwc: recv_control_msg error -71 req 04 val 1000 [ 363.751498][ T5971] usb 8-1: Using ep0 maxpacket: 16 [ 363.757926][ T6656] pwc: recv_control_msg error -71 req 04 val 1300 [ 363.761836][ T5971] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.781652][ T5971] usb 8-1: config 0 has no interface number 0 [ 363.798364][ T6656] pwc: recv_control_msg error -71 req 04 val 1400 [ 363.816141][ T5971] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 363.830172][ T5971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.835993][ T6656] pwc: recv_control_msg error -71 req 02 val 2000 [ 363.838330][ T5971] usb 8-1: Product: syz [ 363.870947][ T6656] pwc: recv_control_msg error -71 req 02 val 2100 [ 363.871435][ T5971] usb 8-1: Manufacturer: syz [ 363.889483][ T5971] usb 8-1: SerialNumber: syz [ 363.905619][ T6656] pwc: recv_control_msg error -71 req 06 val 0600 [ 363.922765][ T6656] pwc: recv_control_msg error -71 req 04 val 1500 [ 363.926487][ T5971] usb 8-1: config 0 descriptor?? [ 363.949887][ T6656] pwc: recv_control_msg error -71 req 02 val 2500 [ 363.951837][ T5971] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 363.989966][ T6656] pwc: recv_control_msg error -71 req 02 val 2400 [ 364.003747][ T6656] pwc: recv_control_msg error -71 req 02 val 2600 [ 364.041372][ T6656] pwc: recv_control_msg error -71 req 02 val 2900 [ 364.074396][ T6656] pwc: recv_control_msg error -71 req 02 val 2800 [ 364.100970][ T6656] pwc: recv_control_msg error -71 req 04 val 1100 [ 364.129383][ T6656] pwc: recv_control_msg error -71 req 04 val 1200 [ 364.196519][ T6656] pwc: Registered as video103. [ 364.217936][ T6656] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 364.307178][ T6656] usb 7-1: USB disconnect, device number 13 [ 364.396748][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.430282][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.507444][ T5971] gspca_spca1528: reg_w err -71 [ 364.559543][ T5971] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 364.633606][ T5971] usb 8-1: USB disconnect, device number 6 [ 364.668160][ T9289] pegasus 5-1:0.0: setup Pegasus II specific registers [ 364.779585][ T5910] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 364.982952][ T5910] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 365.004112][ T5910] usb 2-1: config 0 has no interface number 0 [ 365.029913][ T5910] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 365.045407][ T5910] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 365.064590][ T5910] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 365.075613][ T5910] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 365.128809][ T5910] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 365.156490][ T5910] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 365.175383][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.215700][ T5910] usb 2-1: config 0 descriptor?? [ 365.241496][ T9343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 365.276534][ T5910] hub 2-1:0.3: bad descriptor, ignoring hub [ 365.312666][ T5910] hub 2-1:0.3: probe with driver hub failed with error -5 [ 365.370803][ T5910] sierra 2-1:0.3: Sierra USB modem converter detected [ 365.524148][ T5910] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 365.573833][ T5910] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 365.675680][ T5910] usb 2-1: USB disconnect, device number 14 [ 365.733968][ T5910] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 365.754866][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 365.776068][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 365.792068][ T5910] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 365.801610][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 365.823505][ T5910] sierra 2-1:0.3: device disconnected [ 365.904561][ T9289] pegasus 5-1:0.0: can't locate MII phy, using default [ 365.947004][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 365.969593][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 366.005797][ T9289] pegasus 5-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, d6:e1:87:0c:04:a7 [ 366.017039][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 366.041246][ T9289] usb 5-1: USB disconnect, device number 20 [ 366.129795][ T6656] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 366.333568][ T6656] usb 8-1: Using ep0 maxpacket: 32 [ 366.457661][ T6656] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 366.458861][ T5971] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 366.664215][ T6656] usb 8-1: config 0 has no interface number 0 [ 366.789524][ T6656] usb 8-1: config 0 interface 12 has no altsetting 0 [ 366.798258][ T5971] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 366.810600][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.818693][ T5971] usb 4-1: Product: syz [ 366.829135][ T6656] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 366.869337][ T5971] usb 4-1: Manufacturer: syz [ 366.880360][ T5971] usb 4-1: SerialNumber: syz [ 366.892852][ T6656] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.948939][ T6656] usb 8-1: Product: syz [ 366.969465][ T6656] usb 8-1: Manufacturer: syz [ 366.974072][ T6656] usb 8-1: SerialNumber: syz [ 367.005173][ T6656] usb 8-1: config 0 descriptor?? [ 367.500314][ T1206] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 367.513985][ T5971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 367.565509][ T5971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 367.605538][ T5971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.634254][ T5971] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 367.655894][ T1206] usb 5-1: device descriptor read/64, error -71 [ 367.680672][ T5971] usb 4-1: USB disconnect, device number 14 [ 367.690103][ T5910] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 367.873335][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 367.895804][ T5910] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 367.914752][ T5910] usb 6-1: config 0 has no interface number 0 [ 367.921306][ T1206] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 367.951173][ T5910] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 367.982921][ T5910] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 367.996280][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.004461][ T5910] usb 6-1: Product: syz [ 368.008660][ T5910] usb 6-1: Manufacturer: syz [ 368.013313][ T5910] usb 6-1: SerialNumber: syz [ 368.022876][ T5910] usb 6-1: config 0 descriptor?? [ 368.028898][ T9393] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 368.099770][ T1206] usb 5-1: device descriptor read/64, error -71 [ 368.211252][ T1206] usb usb5-port1: attempt power cycle [ 368.244414][ T9411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.270021][ T9393] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 368.423417][ T9403] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1067'. [ 368.559573][ T1206] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 368.599608][ T6296] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 368.613374][ T1206] usb 5-1: device descriptor read/8, error -71 [ 368.782765][ T6296] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 368.792928][ T6296] usb 2-1: config 0 has no interface number 0 [ 368.799214][ T6296] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 368.811431][ T6296] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 368.821363][ T6296] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 368.832348][ T6296] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 368.853237][ T6296] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 368.861105][ T5971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 368.869602][ T1206] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 368.887415][ T6296] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 368.899065][ T6296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.930265][ T1206] usb 5-1: device descriptor read/8, error -71 [ 368.939781][ T6296] usb 2-1: config 0 descriptor?? [ 368.951688][ T9415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.969540][ T6296] hub 2-1:0.3: bad descriptor, ignoring hub [ 368.975555][ T6296] hub 2-1:0.3: probe with driver hub failed with error -5 [ 368.987153][ T6296] sierra 2-1:0.3: Sierra USB modem converter detected [ 369.001484][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'. [ 369.016584][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'. [ 369.029505][ T5971] usb 4-1: Using ep0 maxpacket: 32 [ 369.036545][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.039557][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'. [ 369.049296][ T5971] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 369.056272][ T1206] usb usb5-port1: unable to enumerate USB device [ 369.067310][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.080397][ T5971] usb 4-1: Product: syz [ 369.084557][ T5971] usb 4-1: Manufacturer: syz [ 369.089150][ T5971] usb 4-1: SerialNumber: syz [ 369.109084][ T5971] usb 4-1: config 0 descriptor?? [ 369.183209][ T6296] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 369.226111][ T6296] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 369.307275][ T6296] usb 2-1: USB disconnect, device number 15 [ 369.356008][ T6296] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 369.369908][ T5971] kaweth 4-1:0.0: Firmware present in device. [ 369.410040][ T6296] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 369.428298][ T6296] sierra 2-1:0.3: device disconnected [ 369.552837][ T5971] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 369.567800][ T5971] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 369.588318][ T5971] usb 4-1: USB disconnect, device number 15 [ 369.952659][ T6656] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 369.969555][ T6656] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 369.976937][ T6656] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 369.992182][ T6656] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 370.015063][ T6656] usb 8-1: USB disconnect, device number 7 [ 370.159494][ T5971] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 370.329543][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 370.359692][ T5971] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 370.368962][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.388473][ T5971] usb 2-1: Product: syz [ 370.393055][ T5971] usb 2-1: Manufacturer: syz [ 370.397655][ T5971] usb 2-1: SerialNumber: syz [ 370.414900][ T5971] usb 2-1: config 0 descriptor?? [ 370.741643][ T5971] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 371.019488][ T1206] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 371.109589][ T6296] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 371.192559][ T1206] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 371.208081][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.220198][ T1206] usb 4-1: config 0 descriptor?? [ 371.229246][ T5910] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 371.242860][ T1206] pwc: Creative Labs Webcam Pro Ex detected. [ 371.255754][ T5910] asix 6-1:0.188: probe with driver asix failed with error -71 [ 371.268991][ T5910] usb 6-1: USB disconnect, device number 9 [ 371.289659][ T6296] usb 8-1: Using ep0 maxpacket: 32 [ 371.298759][ T6296] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 371.313021][ T6296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.327170][ T6296] usb 8-1: config 0 descriptor?? [ 371.341899][ T6296] as10x_usb: device has been detected [ 371.348442][ T6296] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 371.376692][ T6296] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 371.397836][ T6296] as10x_usb: error during firmware upload part1 [ 371.406737][ T6296] Registered device nBox DVB-T Dongle [ 371.449729][ T6080] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 371.544043][ T9458] program syz.7.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.558722][ T5910] usb 8-1: USB disconnect, device number 8 [ 371.606547][ T5910] Unregistered device nBox DVB-T Dongle [ 371.610904][ T6080] usb 7-1: Using ep0 maxpacket: 32 [ 371.612822][ T5910] as10x_usb: device has been disconnected [ 371.643159][ T6080] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 371.652452][ T6080] usb 7-1: config 0 has no interface number 0 [ 371.664992][ T6080] usb 7-1: config 0 interface 12 has no altsetting 0 [ 371.674954][ T6080] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 371.684510][ T6080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.692595][ T6080] usb 7-1: Product: syz [ 371.696918][ T6080] usb 7-1: Manufacturer: syz [ 371.701582][ T6080] usb 7-1: SerialNumber: syz [ 371.709168][ T6080] usb 7-1: config 0 descriptor?? [ 371.837113][ T1206] pwc: recv_control_msg error -32 req 02 val 2b00 [ 371.845821][ T1206] pwc: recv_control_msg error -32 req 02 val 2700 [ 371.857733][ T1206] pwc: recv_control_msg error -32 req 04 val 1600 [ 371.875410][ T1206] pwc: recv_control_msg error -71 req 02 val 2c00 [ 371.883065][ T1206] pwc: recv_control_msg error -71 req 04 val 1000 [ 371.890404][ T1206] pwc: recv_control_msg error -71 req 04 val 1300 [ 371.897550][ T1206] pwc: recv_control_msg error -71 req 04 val 1400 [ 371.899717][ T5982] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 371.905073][ T1206] pwc: recv_control_msg error -71 req 02 val 2000 [ 371.920334][ T1206] pwc: recv_control_msg error -71 req 02 val 2100 [ 371.927304][ T1206] pwc: recv_control_msg error -71 req 06 val 0600 [ 371.934824][ T1206] pwc: recv_control_msg error -71 req 04 val 1500 [ 371.945605][ T1206] pwc: recv_control_msg error -71 req 02 val 2500 [ 371.952936][ T1206] pwc: recv_control_msg error -71 req 02 val 2400 [ 371.960495][ T1206] pwc: recv_control_msg error -71 req 02 val 2600 [ 371.972192][ T1206] pwc: recv_control_msg error -71 req 02 val 2900 [ 371.979062][ T1206] pwc: recv_control_msg error -71 req 02 val 2800 [ 371.986832][ T1206] pwc: recv_control_msg error -71 req 04 val 1100 [ 371.994077][ T1206] pwc: recv_control_msg error -71 req 04 val 1200 [ 372.010290][ T1206] pwc: Registered as video103. [ 372.021847][ T1206] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 372.058233][ T1206] usb 4-1: USB disconnect, device number 16 [ 372.069676][ T5910] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 372.101879][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.136975][ T5982] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 372.156817][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.182958][ T5982] usb 5-1: config 0 descriptor?? [ 372.249457][ T5910] usb 8-1: Using ep0 maxpacket: 32 [ 372.256553][ T5910] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 372.267727][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.284126][ T5910] usb 8-1: config 0 descriptor?? [ 372.301058][ T5971] usb write operation failed. (-71) [ 372.321651][ T5971] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.324197][ T5910] as10x_usb: device has been detected [ 372.345870][ T5910] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 372.354679][ T5971] dvbdev: DVB: registering new adapter (Terratec H7) [ 372.390489][ T5971] usb 2-1: media controller created [ 372.397336][ T5971] usb read operation failed. (-71) [ 372.405823][ T5910] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 372.414162][ T5971] usb write operation failed. (-71) [ 372.433457][ T5910] as10x_usb: error during firmware upload part1 [ 372.439985][ T5971] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 372.463994][ T5910] Registered device nBox DVB-T Dongle [ 372.465106][ T5971] usb 2-1: USB disconnect, device number 16 [ 372.526425][ T5910] usb 8-1: USB disconnect, device number 9 [ 372.593711][ T9471] __nla_validate_parse: 6 callbacks suppressed [ 372.593762][ T9471] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1092'. [ 372.626056][ T5910] Unregistered device nBox DVB-T Dongle [ 372.633424][ T5982] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 372.648946][ T5910] as10x_usb: device has been disconnected [ 372.698580][ T5982] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input39 [ 372.867634][ T5982] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 373.140976][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'. [ 373.240468][ T5982] usb 5-1: USB disconnect, device number 25 [ 373.262790][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'. [ 373.286086][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'. [ 373.356025][ T6080] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 373.404287][ T6080] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 373.409964][ T5910] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 373.471460][ T6080] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 373.519549][ T6080] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 373.578194][ T6080] usb 7-1: USB disconnect, device number 14 [ 373.606844][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.642997][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.657396][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 373.682399][ T5910] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.692641][ T5910] usb 2-1: Manufacturer: syz [ 373.713255][ T5910] usb 2-1: config 0 descriptor?? [ 374.140973][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.194145][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.201725][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.208573][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.215796][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.582387][ T5982] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 374.601557][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.610566][ T5910] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 374.624349][ T5910] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 374.758368][ T5982] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 374.779503][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.795466][ T5982] usb 5-1: Product: syz [ 374.804624][ T5982] usb 5-1: Manufacturer: syz [ 374.809231][ T5982] usb 5-1: SerialNumber: syz [ 375.046267][ T5910] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 375.069506][ T5910] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 375.086144][ T5910] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -32 [ 375.124388][ T5910] usb 2-1: USB disconnect, device number 17 [ 375.229797][ T6656] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 375.307723][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 375.336265][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 375.399529][ T6656] usb 6-1: Using ep0 maxpacket: 32 [ 375.408035][ T6656] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 375.416728][ T6656] usb 6-1: config 0 has no interface number 0 [ 375.424460][ T6656] usb 6-1: config 0 interface 12 has no altsetting 0 [ 375.434120][ T6656] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 375.443579][ T6656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.454108][ T6296] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 375.461747][ T6656] usb 6-1: Product: syz [ 375.466251][ T6656] usb 6-1: Manufacturer: syz [ 375.471900][ T6656] usb 6-1: SerialNumber: syz [ 375.482349][ T6656] usb 6-1: config 0 descriptor?? [ 375.529557][ T9289] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 375.619622][ T6296] usb 7-1: Using ep0 maxpacket: 16 [ 375.631147][ T6296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.664963][ T6296] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.688709][ T6296] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.699570][ T9289] usb 8-1: Using ep0 maxpacket: 8 [ 375.709791][ T6296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.714948][ T9289] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 375.729589][ T6296] usb 7-1: Product: syz [ 375.736169][ T6296] usb 7-1: Manufacturer: syz [ 375.740865][ T6296] usb 7-1: SerialNumber: syz [ 375.749596][ T9289] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.763285][ T9289] usb 8-1: Product: syz [ 375.767499][ T9289] usb 8-1: Manufacturer: syz [ 375.790271][ T9289] usb 8-1: SerialNumber: syz [ 375.800499][ T9289] usb 8-1: config 0 descriptor?? [ 375.875136][ T9516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1108'. [ 375.970557][ T6296] usb 7-1: 0:2 : does not exist [ 375.985222][ T6296] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 376.025100][ T9289] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 376.045030][ T6296] usb 7-1: USB disconnect, device number 15 [ 376.125774][ T8974] udevd[8974]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.143917][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 376.318142][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.340351][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.350213][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.369265][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.378721][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.392727][ T5910] usb 2-1: config 0 descriptor?? [ 376.775838][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 376.849566][ T6296] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 376.857510][ T5910] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 376.994986][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 377.017932][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 377.030440][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 377.031565][ T6296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.040627][ T5982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 377.051961][ T6296] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.065765][ T8061] usb 2-1: USB disconnect, device number 18 [ 377.076004][ T6296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.089295][ T5982] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 377.101726][ T6296] usb 7-1: config 0 descriptor?? [ 377.139170][ T5982] usb 5-1: USB disconnect, device number 26 [ 377.441842][ T9289] usb write operation failed. (-71) [ 377.455233][ T9289] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.466219][ T9289] dvbdev: DVB: registering new adapter (Terratec H7) [ 377.473317][ T9289] usb 8-1: media controller created [ 377.479089][ T9289] usb read operation failed. (-71) [ 377.485245][ T9289] usb write operation failed. (-71) [ 377.497880][ T9289] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 377.522917][ T9289] usb 8-1: USB disconnect, device number 10 [ 377.531800][ T6296] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 377.577649][ T6296] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000A/input/input41 [ 377.791561][ T6296] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 377.814502][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.823462][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.964608][ T6656] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 377.993283][ T6656] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 378.022211][ T6656] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 378.044379][ T6656] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 378.113162][ T6656] usb 6-1: USB disconnect, device number 10 [ 378.162567][ T6296] usb 7-1: USB disconnect, device number 16 [ 378.457119][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.479564][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.495566][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.679542][ T6296] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 378.709917][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.742279][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.753738][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 378.979629][ T6656] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 379.040325][ T6296] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.068546][ T9558] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 379.078624][ T9558] PKCS7: Only support pkcs7_signedData type [ 379.147529][ T6296] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.194791][ T6296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.215934][ T6656] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.233201][ T6656] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.248990][ T6296] usb 8-1: config 0 descriptor?? [ 379.276239][ T6296] pwc: Askey VC010 type 2 USB webcam detected. [ 379.284691][ T6656] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.305320][ T6656] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.338689][ T6656] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.377581][ T6656] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.390140][ T6656] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.419249][ T6656] usb 6-1: Product: syz [ 379.434163][ T6656] usb 6-1: Manufacturer: syz [ 379.498477][ T6656] cdc_wdm 6-1:1.0: skipping garbage [ 379.515239][ T6656] cdc_wdm 6-1:1.0: skipping garbage [ 379.540236][ T6656] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 379.563780][ T6656] cdc_wdm 6-1:1.0: Unknown control protocol [ 379.674938][ T6296] pwc: recv_control_msg error -32 req 02 val 2b00 [ 379.682460][ T6296] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.710933][ T6296] pwc: recv_control_msg error -32 req 02 val 2c00 [ 379.727797][ T6296] pwc: recv_control_msg error -32 req 04 val 1000 [ 379.737871][ T9553] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 379.748891][ T6296] pwc: recv_control_msg error -32 req 04 val 1300 [ 379.771068][ T9565] fuse: Bad value for 'fd' [ 379.800459][ T6296] pwc: recv_control_msg error -32 req 04 val 1400 [ 379.840618][ T6656] usb 6-1: USB disconnect, device number 11 [ 379.851941][ T6296] pwc: recv_control_msg error -32 req 02 val 2000 [ 379.904292][ T6296] pwc: recv_control_msg error -32 req 02 val 2100 [ 379.933774][ T6296] pwc: recv_control_msg error -32 req 04 val 1500 [ 379.972549][ T6296] pwc: recv_control_msg error -32 req 02 val 2500 [ 379.985480][ T6296] pwc: recv_control_msg error -32 req 02 val 2400 [ 380.016061][ T6296] pwc: recv_control_msg error -32 req 02 val 2600 [ 380.036673][ T6296] pwc: recv_control_msg error -32 req 02 val 2900 [ 380.142915][ T6297] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 380.254418][ T6296] pwc: recv_control_msg error -71 req 04 val 1100 [ 380.278307][ T6296] pwc: recv_control_msg error -71 req 04 val 1200 [ 380.313130][ T6296] pwc: Registered as video103. [ 380.325946][ T6296] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input43 [ 380.339513][ T6297] usb 5-1: Using ep0 maxpacket: 16 [ 380.347231][ T6297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.348981][ T6296] usb 8-1: USB disconnect, device number 11 [ 380.404624][ T6297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.451389][ T6297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.494566][ T6297] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.515785][ T6297] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.551057][ T6297] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.581018][ T9571] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1123'. [ 380.590492][ T6297] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.636931][ T6297] usb 5-1: Manufacturer: syz [ 380.674720][ T6297] usb 5-1: config 0 descriptor?? [ 380.999643][ T5971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 381.059546][ T6297] rc_core: IR keymap rc-hauppauge not found [ 381.065480][ T6297] Registered IR keymap rc-empty [ 381.084239][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.110135][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.144009][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1134'. [ 381.158487][ T6297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 381.185328][ T6297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input44 [ 381.216671][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.229496][ T6296] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 381.231892][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.250569][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.258271][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.272459][ T9289] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 381.280423][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.293238][ T5971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.307116][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.315478][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.330862][ T5971] usb 2-1: config 0 descriptor?? [ 381.340021][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.369730][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.389643][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.399599][ T6296] usb 6-1: Using ep0 maxpacket: 8 [ 381.412744][ T6296] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 381.429785][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.437137][ T6296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.449458][ T6296] usb 6-1: Product: syz [ 381.449464][ T9289] usb 8-1: Using ep0 maxpacket: 16 [ 381.450527][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.453619][ T6296] usb 6-1: Manufacturer: syz [ 381.453641][ T6296] usb 6-1: SerialNumber: syz [ 381.474972][ T6296] usb 6-1: config 0 descriptor?? [ 381.486327][ T9289] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.500817][ T9289] usb 8-1: config 0 has no interface number 0 [ 381.525474][ T9289] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 381.542971][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.559445][ T9289] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.567525][ T9289] usb 8-1: Product: syz [ 381.569592][ T6656] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 381.591792][ T6297] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.599224][ T9289] usb 8-1: Manufacturer: syz [ 381.604194][ T9289] usb 8-1: SerialNumber: syz [ 381.614628][ T9289] usb 8-1: config 0 descriptor?? [ 381.635752][ T6297] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.651423][ T9289] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 381.663924][ T6297] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.695011][ T6297] usb 5-1: USB disconnect, device number 27 [ 381.720602][ T6296] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 381.769964][ T5971] usbhid 2-1:0.0: can't add hid device: -71 [ 381.776033][ T5971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 381.781590][ T6656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.800358][ T6656] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 381.811918][ T6656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.844507][ T6656] usb 4-1: config 0 descriptor?? [ 381.848985][ T5971] usb 2-1: USB disconnect, device number 19 [ 381.900847][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.911254][ T6656] pwc: Askey VC010 type 2 USB webcam detected. [ 381.964827][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.994172][ T9289] gspca_spca1528: reg_w err -71 [ 382.033786][ T9289] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 382.062987][ T9289] usb 8-1: USB disconnect, device number 12 [ 382.281696][ T6656] pwc: recv_control_msg error -32 req 02 val 2b00 [ 382.320094][ T6656] pwc: recv_control_msg error -32 req 02 val 2700 [ 382.332979][ T6656] pwc: recv_control_msg error -32 req 02 val 2c00 [ 382.340348][ T6656] pwc: recv_control_msg error -32 req 04 val 1000 [ 382.348277][ T6656] pwc: recv_control_msg error -32 req 04 val 1300 [ 382.356234][ T6656] pwc: recv_control_msg error -32 req 04 val 1400 [ 382.363469][ T6656] pwc: recv_control_msg error -32 req 02 val 2000 [ 382.630495][ T6656] pwc: recv_control_msg error -71 req 04 val 1500 [ 382.680094][ T6656] pwc: recv_control_msg error -71 req 02 val 2500 [ 382.687315][ T6656] pwc: recv_control_msg error -71 req 02 val 2400 [ 382.695655][ T6656] pwc: recv_control_msg error -71 req 02 val 2600 [ 382.702717][ T9606] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 382.709523][ T9606] PKCS7: Only support pkcs7_signedData type [ 382.737203][ T6656] pwc: recv_control_msg error -71 req 02 val 2900 [ 382.746703][ T6656] pwc: recv_control_msg error -71 req 02 val 2800 [ 382.811640][ T6656] pwc: recv_control_msg error -71 req 04 val 1100 [ 382.838404][ T6656] pwc: recv_control_msg error -71 req 04 val 1200 [ 382.877837][ T6656] pwc: Registered as video103. [ 382.918170][ T6656] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 383.002010][ T6656] usb 4-1: USB disconnect, device number 17 [ 383.144571][ T6296] usb write operation failed. (-71) [ 383.157913][ T6296] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.201585][ T6296] dvbdev: DVB: registering new adapter (Terratec H7) [ 383.223460][ T6296] usb 6-1: media controller created [ 383.238052][ T6296] usb read operation failed. (-71) [ 383.369922][ T6296] usb write operation failed. (-71) [ 383.431330][ T6296] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 383.514082][ T6296] usb 6-1: USB disconnect, device number 12 [ 384.016113][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.097356][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.119071][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.131259][ T9289] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 384.165762][ T9631] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1147'. [ 384.319677][ T9289] usb 7-1: device descriptor read/64, error -71 [ 384.366680][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.406579][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.437647][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 384.590363][ T9289] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 384.769629][ T9289] usb 7-1: device descriptor read/64, error -71 [ 384.890261][ T9289] usb usb7-port1: attempt power cycle [ 385.247394][ T9289] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 385.290197][ T9289] usb 7-1: device descriptor read/8, error -71 [ 385.350087][ T6080] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 385.409613][ T8061] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 385.519564][ T6080] usb 4-1: Using ep0 maxpacket: 32 [ 385.533063][ T6080] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 385.542549][ T9289] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 385.718086][ T6080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.731088][ T9289] usb 7-1: device descriptor read/8, error -71 [ 385.743606][ T6080] usb 4-1: config 0 descriptor?? [ 385.749313][ T8061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.760342][ T8061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.777499][ T6080] as10x_usb: device has been detected [ 385.784181][ T8061] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.798212][ T9657] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 385.805821][ T9657] PKCS7: Only support pkcs7_signedData type [ 385.814856][ T6080] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 385.846897][ T8061] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.856302][ T6080] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 385.868627][ T9289] usb usb7-port1: unable to enumerate USB device [ 385.876933][ T8061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.888183][ T6080] as10x_usb: error during firmware upload part1 [ 385.920911][ T8061] usb 6-1: config 0 descriptor?? [ 385.928223][ T6080] Registered device nBox DVB-T Dongle [ 385.995000][ T9648] program syz.3.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.029014][ T6016] usb 4-1: USB disconnect, device number 18 [ 386.083929][ T6016] Unregistered device nBox DVB-T Dongle [ 386.091829][ T6016] as10x_usb: device has been disconnected [ 386.202444][ T9653] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1148'. [ 386.319576][ T6296] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 386.479180][ T8061] usbhid 6-1:0.0: can't add hid device: -71 [ 386.482703][ T6296] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.494842][ T8061] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 386.512799][ T8061] usb 6-1: USB disconnect, device number 13 [ 386.530312][ T6296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.552772][ T6296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 386.581425][ T6296] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.631497][ T6296] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.650963][ T6296] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.659184][ T6296] usb 2-1: Product: syz [ 386.669089][ T6296] usb 2-1: Manufacturer: syz [ 386.691521][ T6296] cdc_wdm 2-1:1.0: skipping garbage [ 386.697322][ T6296] cdc_wdm 2-1:1.0: skipping garbage [ 386.708059][ T6296] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 386.721607][ T6296] cdc_wdm 2-1:1.0: Unknown control protocol [ 387.032374][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 387.032796][ T9289] usb 2-1: USB disconnect, device number 20 [ 387.038996][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 387.039018][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 388.239509][ T9289] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 388.419641][ T9289] usb 6-1: Using ep0 maxpacket: 32 [ 388.448337][ T9289] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 388.474480][ T9289] usb 6-1: config 0 has no interface number 0 [ 388.482585][ T9289] usb 6-1: config 0 interface 12 has no altsetting 0 [ 388.493696][ T9289] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 388.509506][ T9289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.517784][ T9289] usb 6-1: Product: syz [ 388.539560][ T6080] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 388.559523][ T9289] usb 6-1: Manufacturer: syz [ 388.565218][ T9289] usb 6-1: SerialNumber: syz [ 388.772436][ T9289] usb 6-1: config 0 descriptor?? [ 388.785634][ T9697] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 388.792536][ T9697] PKCS7: Only support pkcs7_signedData type [ 388.828664][ T6080] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 388.838935][ T6080] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.847989][ T6080] usb 8-1: Product: syz [ 388.852791][ T6080] usb 8-1: Manufacturer: syz [ 388.857413][ T6080] usb 8-1: SerialNumber: syz [ 389.029547][ T5982] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 389.193165][ T5982] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.202288][ T5982] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 389.214470][ T5982] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.223688][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 389.234904][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 389.248241][ T5982] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.265905][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.277720][ T5982] usb 7-1: Product: syz [ 389.282042][ T5982] usb 7-1: Manufacturer: syz [ 389.287431][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 389.307515][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 389.313042][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 389.318329][ T5982] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 389.319543][ T6016] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 389.326390][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 389.477016][ T6296] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 389.539496][ T6016] usb 4-1: device descriptor read/64, error -71 [ 389.545980][ T1206] usb 7-1: USB disconnect, device number 21 [ 389.631383][ T6296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.663250][ T6296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.676954][ T6296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.691867][ T6296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.701439][ T6296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.720130][ T6296] usb 5-1: config 0 descriptor?? [ 389.799607][ T6016] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 390.464493][ T6296] usbhid 5-1:0.0: can't add hid device: -71 [ 390.664111][ T6296] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.675442][ T6296] usb 5-1: USB disconnect, device number 28 [ 390.789855][ T6016] usb 4-1: device descriptor read/64, error -71 [ 390.797051][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 390.852559][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 390.899914][ T6016] usb usb4-port1: attempt power cycle [ 391.130516][ T5971] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 391.259918][ T6016] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 391.291117][ T6016] usb 4-1: device descriptor read/8, error -71 [ 391.303114][ T5971] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 391.319814][ T5971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.329752][ T5971] usb 7-1: Product: syz [ 391.339323][ T5971] usb 7-1: Manufacturer: syz [ 391.345269][ T5971] usb 7-1: SerialNumber: syz [ 391.435449][ T9289] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 391.449865][ T9289] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 391.458853][ T9289] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 391.474960][ T9289] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 391.477439][ T9723] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1178'. [ 391.519593][ T9289] usb 6-1: USB disconnect, device number 14 [ 391.549873][ T6016] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 391.570475][ T6016] usb 4-1: device descriptor read/8, error -71 [ 391.680133][ T6016] usb usb4-port1: unable to enumerate USB device [ 391.693641][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 391.718770][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 391.742661][ T6080] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 391.765431][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 391.778468][ T6080] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 391.804274][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 391.819334][ T6080] usb 8-1: USB disconnect, device number 13 [ 392.701630][ T9742] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 392.708360][ T9742] PKCS7: Only support pkcs7_signedData type [ 393.063208][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 393.081725][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 393.159507][ T9289] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 393.209656][ T6016] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 393.229834][ T1206] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 393.344674][ T9289] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.422176][ T9289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.440711][ T9289] usb 2-1: Product: syz [ 393.449804][ T9289] usb 2-1: Manufacturer: syz [ 393.463742][ T9289] usb 2-1: SerialNumber: syz [ 393.469802][ T1206] usb 8-1: Using ep0 maxpacket: 32 [ 393.478687][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.492175][ T1206] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.508733][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.535115][ T1206] usb 8-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 393.559493][ T6016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.575774][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.599743][ T1206] usb 8-1: Product: syz [ 393.603925][ T1206] usb 8-1: Manufacturer: syz [ 393.608514][ T1206] usb 8-1: SerialNumber: syz [ 393.613370][ T6016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.629535][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.658573][ T1206] usb 8-1: config 0 descriptor?? [ 393.688072][ T6016] usb 4-1: config 0 descriptor?? [ 393.779493][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 393.900506][ T1206] kaweth 8-1:0.0: Firmware present in device. [ 393.913218][ T9289] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 393.929806][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 393.942384][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 393.955595][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.961251][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 393.973616][ T9289] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 394.015483][ T5971] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 394.026965][ T9] usb 6-1: config 0 descriptor?? [ 394.054426][ T5971] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 394.092270][ T1206] kaweth 8-1:0.0: Error reading configuration (-32), no net device created [ 394.110782][ T1206] kaweth 8-1:0.0: probe with driver kaweth failed with error -5 [ 394.137057][ T5971] usb 7-1: USB disconnect, device number 22 [ 394.141358][ T1206] usb 8-1: USB disconnect, device number 14 [ 394.157765][ T6016] usbhid 4-1:0.0: can't add hid device: -71 [ 394.177265][ T6016] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.232099][ T6016] usb 4-1: USB disconnect, device number 23 [ 394.789718][ T8061] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 394.989565][ T8061] usb 5-1: Using ep0 maxpacket: 8 [ 395.021110][ T8061] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 395.032302][ T8061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.042265][ T9289] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 395.054752][ T8061] usb 5-1: Product: syz [ 395.058935][ T8061] usb 5-1: Manufacturer: syz [ 395.059527][ T6016] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 395.063632][ T9289] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.080887][ T8061] usb 5-1: SerialNumber: syz [ 395.088503][ T8061] usb 5-1: config 0 descriptor?? [ 395.099562][ T9289] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.118230][ T9289] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 395.159566][ T6296] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 395.261694][ T6016] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.270496][ T6016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.281690][ T6016] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.291504][ T6016] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.306445][ T6016] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.323338][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.333192][ T6016] usb 4-1: Product: syz [ 395.335329][ T8061] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 395.338007][ T6016] usb 4-1: Manufacturer: syz [ 395.352956][ T6296] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 395.364109][ T6296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.381297][ T6016] cdc_wdm 4-1:1.0: skipping garbage [ 395.386520][ T6016] cdc_wdm 4-1:1.0: skipping garbage [ 395.392222][ T6296] usb 8-1: Product: syz [ 395.396402][ T6296] usb 8-1: Manufacturer: syz [ 395.402554][ T6296] usb 8-1: SerialNumber: syz [ 395.424184][ T6016] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 395.451219][ T6016] cdc_wdm 4-1:1.0: Unknown control protocol [ 395.538201][ T9772] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1201'. [ 395.832553][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 395.845386][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 396.111080][ T24] usb 2-1: USB disconnect, device number 21 [ 396.146296][ T8061] usb write operation failed. (-71) [ 396.170528][ T8061] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.186706][ T8061] dvbdev: DVB: registering new adapter (Terratec H7) [ 396.195318][ T8061] usb 5-1: media controller created [ 396.201402][ T8061] usb read operation failed. (-71) [ 396.206931][ T8061] usb write operation failed. (-71) [ 396.216991][ T8061] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 396.235269][ T8061] usb 5-1: USB disconnect, device number 29 [ 396.327241][ T9] pegasus 6-1:0.0: setup Pegasus II specific registers [ 397.036543][ T6080] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 397.066669][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 397.108265][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 397.204211][ T6080] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.219557][ T6080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.233732][ T6080] usb 5-1: Product: syz [ 397.244407][ T6080] usb 5-1: Manufacturer: syz [ 397.249536][ T6080] usb 5-1: SerialNumber: syz [ 397.350866][ T9] pegasus 6-1:0.0: can't locate MII phy, using default [ 397.395546][ T9] pegasus 6-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 3e:23:99:97:ed:1d [ 397.410290][ T9] usb 6-1: USB disconnect, device number 15 [ 397.420025][ T8061] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 397.607609][ T8061] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.631020][ T8061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.639135][ T8061] usb 7-1: Product: syz [ 397.674218][ T8061] usb 7-1: Manufacturer: syz [ 397.678864][ T8061] usb 7-1: SerialNumber: syz [ 397.691699][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 397.729519][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 397.750269][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 397.787172][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 397.807433][ T6296] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.828938][ T6296] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 397.843462][ T24] usb 4-1: USB disconnect, device number 24 [ 397.876112][ T6296] usb 8-1: USB disconnect, device number 15 [ 398.119896][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 398.137694][ T8061] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 398.152457][ T8061] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 398.285180][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.330700][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.368565][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.387699][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.397865][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.420382][ T9] usb 2-1: config 0 descriptor?? [ 398.685225][ T9808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1214'. [ 398.847716][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 398.856776][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.878392][ T9] usb 2-1: USB disconnect, device number 22 [ 398.959542][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 398.968883][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 398.993552][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 399.018630][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 399.031091][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 399.042272][ T6080] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 399.083272][ T6080] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 399.132702][ T6080] usb 5-1: USB disconnect, device number 30 [ 399.146020][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 399.169994][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.178610][ T24] usb 8-1: Product: syz [ 399.186069][ T24] usb 8-1: Manufacturer: syz [ 399.206737][ T24] usb 8-1: SerialNumber: syz [ 399.651475][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 399.669607][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 399.833370][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.843945][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.032434][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.045401][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.060588][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.080014][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 400.088218][ T9] usb 2-1: Product: syz [ 400.099498][ T9] usb 2-1: Manufacturer: syz [ 400.204202][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 400.232599][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 400.249579][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 400.255487][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 400.262491][ T8061] net_ratelimit: 3 callbacks suppressed [ 400.262541][ T8061] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 400.289529][ T6656] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 400.334327][ T8061] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.369716][ T8061] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.405813][ T8061] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 400.445496][ T6656] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 400.459479][ T6656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.469848][ T8061] usb 7-1: USB disconnect, device number 23 [ 400.498159][ T6656] usb 5-1: Product: syz [ 400.510730][ T6656] usb 5-1: Manufacturer: syz [ 400.529696][ T6656] usb 5-1: SerialNumber: syz [ 400.563488][ T6656] usb 5-1: config 0 descriptor?? [ 400.594074][ T6656] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 400.793962][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 400.819824][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.836491][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.891759][ T24] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 400.909855][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 401.073824][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 401.083419][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.092950][ T9] usb 4-1: Product: syz [ 401.097164][ T9] usb 4-1: Manufacturer: syz [ 401.101831][ T9] usb 4-1: SerialNumber: syz [ 401.169515][ T1206] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 401.259478][ T5966] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 401.319589][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 401.327549][ T1206] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.338358][ T1206] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.351043][ T1206] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.362451][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.370534][ T1206] usb 7-1: Product: syz [ 401.374995][ T1206] usb 7-1: Manufacturer: syz [ 401.379716][ T1206] usb 7-1: SerialNumber: syz [ 401.411387][ T5966] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 401.420927][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.432595][ T5966] usb 6-1: config 0 descriptor?? [ 401.519065][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 401.531550][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 401.602244][ T1206] usb 7-1: 0:2 : does not exist [ 401.615388][ T1206] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 401.646416][ T1206] usb 7-1: USB disconnect, device number 24 [ 401.696955][ T8974] udevd[8974]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.844146][ T24] usb 8-1: USB disconnect, device number 16 [ 402.005371][ T6656] gspca_stk1135: reg_w 0xf err -71 [ 402.013243][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.020126][ T6656] gspca_stk1135: Sensor write failed [ 402.027700][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.047891][ T6656] gspca_stk1135: Sensor write failed [ 402.058041][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.064959][ T6656] gspca_stk1135: Sensor read failed [ 402.073345][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.080045][ T6656] gspca_stk1135: Sensor read failed [ 402.085327][ T6656] gspca_stk1135: Detected sensor type unknown (0x0) [ 402.092524][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.098946][ T6656] gspca_stk1135: Sensor read failed [ 402.104511][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.111236][ T6656] gspca_stk1135: Sensor read failed [ 402.116585][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.123283][ T6656] gspca_stk1135: Sensor write failed [ 402.128697][ T6656] gspca_stk1135: serial bus timeout: status=0x00 [ 402.137055][ T6656] gspca_stk1135: Sensor write failed [ 402.142737][ T6656] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 402.169815][ T6656] usb 5-1: USB disconnect, device number 31 [ 402.495463][ T8061] usb 2-1: USB disconnect, device number 23 [ 402.725341][ T9845] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1231'. [ 402.762945][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 402.783293][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 402.819622][ T6656] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 402.939564][ T8061] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 402.942500][ T30] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 402.982351][ T6656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.995474][ T6656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.006778][ T6656] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.021365][ T6656] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.030681][ T6656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.042424][ T6656] usb 7-1: config 0 descriptor?? [ 403.090255][ T30] usb 5-1: device descriptor read/64, error -71 [ 403.099612][ T8061] usb 2-1: Using ep0 maxpacket: 32 [ 403.114129][ T8061] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.122208][ T8061] usb 2-1: config 0 has no interface number 0 [ 403.128321][ T8061] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 403.139072][ T8061] usb 2-1: config 0 interface 1 has no altsetting 0 [ 403.148174][ T8061] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 403.157432][ T8061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.165547][ T8061] usb 2-1: Product: syz [ 403.169820][ T8061] usb 2-1: Manufacturer: syz [ 403.174463][ T8061] usb 2-1: SerialNumber: syz [ 403.183072][ T8061] usb 2-1: config 0 descriptor?? [ 403.329794][ T30] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 403.407069][ T8061] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 403.419039][ T8061] cx231xx 2-1:0.1: Failed to read PCB config [ 403.425950][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 403.427017][ T8061] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 403.446921][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.455899][ T8061] usb 2-1: USB disconnect, device number 24 [ 403.462529][ T30] usb 5-1: device descriptor read/64, error -71 [ 403.465292][ T6656] usbhid 7-1:0.0: can't add hid device: -71 [ 403.477649][ T6656] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 403.487827][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.510620][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 403.521332][ T6656] usb 7-1: USB disconnect, device number 25 [ 403.542885][ T9] usb 4-1: USB disconnect, device number 25 [ 403.572020][ T30] usb usb5-port1: attempt power cycle [ 403.674873][ T5966] pegasus 6-1:0.0: setup Pegasus II specific registers [ 403.929562][ T30] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 403.960261][ T30] usb 5-1: device descriptor read/8, error -71 [ 404.239534][ T30] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 404.260911][ T30] usb 5-1: device descriptor read/8, error -71 [ 404.381703][ T30] usb usb5-port1: unable to enumerate USB device [ 404.529554][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 404.539530][ T6656] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 404.706722][ T5966] pegasus 6-1:0.0: can't locate MII phy, using default [ 404.715970][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 404.737318][ T6656] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 404.756878][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.773423][ T6656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.776633][ T5966] pegasus 6-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, d6:20:02:2f:b0:3c [ 404.791882][ T9] usb 4-1: Product: syz [ 404.796070][ T9] usb 4-1: Manufacturer: syz [ 404.815140][ T6656] usb 2-1: Product: syz [ 404.819351][ T6656] usb 2-1: Manufacturer: syz [ 404.829286][ T9] usb 4-1: SerialNumber: syz [ 404.831725][ T5966] usb 6-1: USB disconnect, device number 16 [ 404.852988][ T6656] usb 2-1: SerialNumber: syz [ 405.300174][ T6656] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 405.319555][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 405.348568][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 405.359740][ T6656] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 406.119523][ T889] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 406.292157][ T889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.319012][ T889] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 406.353852][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.388164][ T889] usb 5-1: config 0 descriptor?? [ 406.403360][ T6656] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 406.407246][ T889] pwc: Askey VC010 type 2 USB webcam detected. [ 406.446770][ T6656] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 406.461167][ T6656] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 406.485427][ T6656] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 406.579559][ T5966] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 406.596291][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 406.629339][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 406.649310][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 406.683872][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 406.719856][ T9] usb 4-1: USB disconnect, device number 26 [ 406.742793][ T5966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.753488][ T5966] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 406.791318][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.826395][ T5966] usb 8-1: config 0 descriptor?? [ 406.834323][ T889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 406.854236][ T5966] pwc: Askey VC010 type 2 USB webcam detected. [ 406.865221][ T889] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.873167][ T889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 406.887901][ T889] pwc: recv_control_msg error -32 req 04 val 1000 [ 406.898009][ T889] pwc: recv_control_msg error -32 req 04 val 1300 [ 406.911396][ T889] pwc: recv_control_msg error -32 req 04 val 1400 [ 406.919294][ T889] pwc: recv_control_msg error -32 req 02 val 2000 [ 406.941361][ T889] pwc: recv_control_msg error -32 req 02 val 2100 [ 406.951716][ T889] pwc: recv_control_msg error -32 req 04 val 1500 [ 406.974739][ T889] pwc: recv_control_msg error -32 req 02 val 2500 [ 406.992141][ T889] pwc: recv_control_msg error -32 req 02 val 2400 [ 407.013421][ T889] pwc: recv_control_msg error -32 req 02 val 2600 [ 407.030467][ T889] pwc: recv_control_msg error -32 req 02 val 2900 [ 407.219473][ T8061] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 407.238820][ T889] pwc: recv_control_msg error -71 req 04 val 1100 [ 407.247059][ T889] pwc: recv_control_msg error -71 req 04 val 1200 [ 407.266109][ T5966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 407.273010][ T889] pwc: Registered as video103. [ 407.278864][ T5966] pwc: recv_control_msg error -32 req 02 val 2700 [ 407.287806][ T889] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 407.323606][ T5966] pwc: recv_control_msg error -32 req 02 val 2c00 [ 407.370239][ T5966] pwc: recv_control_msg error -32 req 04 val 1000 [ 407.408336][ T8061] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.446222][ T889] usb 5-1: USB disconnect, device number 36 [ 407.462686][ T5966] pwc: recv_control_msg error -32 req 04 val 1300 [ 407.478616][ T8061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.495755][ T5966] pwc: recv_control_msg error -32 req 04 val 1400 [ 407.529486][ T8061] usb 6-1: Product: syz [ 407.533695][ T8061] usb 6-1: Manufacturer: syz [ 407.551418][ T5966] pwc: recv_control_msg error -32 req 02 val 2000 [ 407.559236][ T5971] usb 2-1: USB disconnect, device number 25 [ 407.566897][ T5966] pwc: recv_control_msg error -32 req 02 val 2100 [ 407.579654][ T8061] usb 6-1: SerialNumber: syz [ 407.588270][ T5966] pwc: recv_control_msg error -32 req 04 val 1500 [ 407.627154][ T5966] pwc: recv_control_msg error -32 req 02 val 2500 [ 407.646990][ T5966] pwc: recv_control_msg error -32 req 02 val 2400 [ 407.676495][ T5966] pwc: recv_control_msg error -32 req 02 val 2600 [ 407.749501][ T30] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 407.901122][ T5966] pwc: recv_control_msg error -71 req 02 val 2800 [ 407.915165][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 407.942135][ T30] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 407.951852][ T5966] pwc: recv_control_msg error -71 req 04 val 1100 [ 407.976646][ T30] usb 4-1: config 0 has no interface number 0 [ 407.983634][ T5966] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.013329][ T30] usb 4-1: config 0 interface 12 has no altsetting 0 [ 408.022929][ T5966] pwc: Registered as video103. [ 408.030094][ T5971] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 408.042544][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 408.063624][ T30] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 408.082484][ T5966] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input51 [ 408.100057][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.108783][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 408.139879][ T5966] usb 8-1: USB disconnect, device number 17 [ 408.145872][ T30] usb 4-1: Product: syz [ 408.155975][ T30] usb 4-1: Manufacturer: syz [ 408.170462][ T30] usb 4-1: SerialNumber: syz [ 408.198787][ T30] usb 4-1: config 0 descriptor?? [ 408.249538][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 408.260612][ T5971] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 408.282740][ T5971] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 408.302914][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.333993][ T5971] usb 2-1: Product: syz [ 408.338186][ T5971] usb 2-1: Manufacturer: syz [ 408.358004][ T5971] usb 2-1: SerialNumber: syz [ 408.372836][ T5971] usb 2-1: config 0 descriptor?? [ 408.394262][ T5971] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 408.663169][ T9948] input: syz0 as /devices/virtual/input/input52 [ 409.371511][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 409.385148][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 409.449480][ T6656] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 409.611783][ T6656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.623768][ T6656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.637595][ T6656] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 409.653316][ T6656] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 409.661599][ T6656] usb 5-1: Manufacturer: syz [ 409.679798][ T30] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 409.707219][ T30] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 409.732119][ T30] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 409.755617][ T30] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 409.759993][ T6656] usb 5-1: config 0 descriptor?? [ 409.806228][ T5971] gspca_zc3xx: reg_w_i err -71 [ 409.840823][ T30] usb 4-1: USB disconnect, device number 27 [ 410.001441][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 410.019114][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 410.042988][ T8061] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.084774][ T8061] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 410.121604][ T8061] usb 6-1: USB disconnect, device number 17 [ 410.316902][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.349892][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.365436][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.394415][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.420220][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.421708][ T5971] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 410.449476][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.450346][ T5971] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 410.507917][ T6656] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 410.556172][ T5971] usb 2-1: USB disconnect, device number 26 [ 410.559500][ T5910] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 410.579765][ T6656] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 410.629901][ T6656] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 410.639558][ T6656] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 410.668018][ T6656] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -32 [ 410.759528][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 410.779615][ T5910] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 410.812185][ T5910] usb 4-1: config 0 has no interface number 0 [ 410.832445][ T5910] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.871011][ T5910] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 410.953006][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.982222][ T5971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 410.983419][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'. [ 411.009194][ T5910] usb 4-1: Product: syz [ 411.020462][ T5910] usb 4-1: Manufacturer: syz [ 411.026803][ T5910] usb 4-1: SerialNumber: syz [ 411.048370][ T5910] usb 4-1: config 0 descriptor?? [ 411.075230][ T5910] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 411.119565][ T5910] em28xx 4-1:0.132: Video interface 132 found: [ 411.231455][ T5971] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 411.250079][ T5966] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 411.260142][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.275913][ T5971] usb 2-1: Product: syz [ 411.290437][ T5971] usb 2-1: Manufacturer: syz [ 411.297634][ T5971] usb 2-1: SerialNumber: syz [ 411.443342][ T5966] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.453787][ T5966] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.475889][ T5910] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 411.476038][ T5966] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.499666][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 411.518341][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.547706][ T5966] usb 8-1: Product: syz [ 411.554964][ T5966] usb 8-1: Manufacturer: syz [ 411.561009][ T5966] usb 8-1: SerialNumber: syz [ 411.672597][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.683537][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.692849][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.706980][ T24] usb 6-1: config 0 descriptor?? [ 411.722150][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 411.747512][ T5971] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 411.760959][ T5971] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 411.779201][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.788505][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.810116][ T5966] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 411.829164][ T5966] usb 8-1: USB disconnect, device number 18 [ 411.890756][ T6656] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 412.051608][ T6656] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.060265][ T6656] usb 7-1: config 0 has no interface number 0 [ 412.070151][ T6656] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 412.079261][ T6656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.087642][ T6656] usb 7-1: Product: syz [ 412.091912][ T6656] usb 7-1: Manufacturer: syz [ 412.096524][ T6656] usb 7-1: SerialNumber: syz [ 412.106672][ T6656] usb 7-1: config 0 descriptor?? [ 412.114989][ T5910] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 412.124236][ T5910] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 412.126487][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 412.133463][ T5910] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 412.144540][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 412.153981][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 412.161848][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 412.169043][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 412.178180][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 412.188942][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 412.196494][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 412.211994][ T5910] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 412.221176][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 412.227921][ T5910] em28xx 4-1:0.132: analog set to bulk mode. [ 412.228853][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 412.240713][ T6296] em28xx 4-1:0.132: Registering V4L2 extension [ 412.242719][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 412.255577][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 412.262557][ T5910] usb 4-1: USB disconnect, device number 28 [ 412.278444][ T5910] em28xx 4-1:0.132: Disconnecting em28xx [ 412.286116][ T1206] usb 5-1: USB disconnect, device number 37 [ 412.331478][ T6656] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 412.364290][ T6656] usb 7-1: USB disconnect, device number 26 [ 412.382441][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 412.493389][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 412.527542][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 412.545516][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 412.565499][ T24] pwc: Registered as video103. [ 412.603342][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 412.624822][ T6296] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 412.668550][ T6296] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 412.672570][ T24] usb 6-1: USB disconnect, device number 18 [ 412.709593][ T6296] em28xx 4-1:0.132: No AC97 audio processor [ 412.932368][ T5971] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 412.946447][ T5971] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 412.957128][ T6296] usb 4-1: Decoder not found [ 412.957168][ T6296] em28xx 4-1:0.132: failed to create media graph [ 412.957202][ T6296] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 412.979542][ T6296] em28xx 4-1:0.132: Remote control support is not available for this card. [ 412.984039][ T5971] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 412.989056][ T9991] ================================================================== [ 413.004806][ T9991] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 413.012194][ T9991] Read of size 8 at addr ffff8880270c4740 by task v4l_id/9991 [ 413.019652][ T9991] [ 413.021980][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 413.022016][ T9991] Tainted: [L]=SOFTLOCKUP [ 413.022026][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 413.022042][ T9991] Call Trace: [ 413.022052][ T9991] [ 413.022061][ T9991] dump_stack_lvl+0xe8/0x150 [ 413.022096][ T9991] print_report+0xba/0x230 [ 413.022122][ T9991] ? v4l2_fh_open+0xac/0x420 [ 413.022167][ T9991] kasan_report+0x117/0x150 [ 413.022195][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.022227][ T9991] ? v4l2_fh_open+0xac/0x420 [ 413.022265][ T9991] v4l2_fh_open+0xac/0x420 [ 413.022299][ T9991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 413.022341][ T9991] em28xx_v4l2_open+0x157/0x9a0 [ 413.022373][ T9991] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.022414][ T9991] v4l2_open+0x1bf/0x3a0 [ 413.022452][ T9991] chrdev_open+0x4cd/0x5e0 [ 413.022483][ T9991] ? __pfx_chrdev_open+0x10/0x10 [ 413.022511][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.022540][ T9991] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 413.022581][ T9991] ? __pfx_chrdev_open+0x10/0x10 [ 413.022607][ T9991] do_dentry_open+0x7ce/0x1420 [ 413.022648][ T9991] vfs_open+0x3b/0x340 [ 413.022677][ T9991] ? path_openat+0x346e/0x3e20 [ 413.022702][ T9991] path_openat+0x3486/0x3e20 [ 413.022742][ T9991] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 413.022779][ T9991] ? getname_flags+0xb7/0x540 [ 413.022809][ T9991] ? __pfx_path_openat+0x10/0x10 [ 413.022832][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.022860][ T9991] ? __lock_acquire+0x6b5/0x2cf0 [ 413.022947][ T9991] do_filp_open+0x22d/0x490 [ 413.022986][ T9991] ? __pfx_do_filp_open+0x10/0x10 [ 413.023025][ T9991] ? _raw_spin_unlock+0x28/0x50 [ 413.023056][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.023083][ T9991] ? alloc_fd+0x64b/0x6c0 [ 413.023115][ T9991] do_sys_openat2+0x12f/0x220 [ 413.023148][ T9991] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.023180][ T9991] ? exc_page_fault+0x6a/0xc0 [ 413.023213][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.023242][ T9991] ? do_user_addr_fault+0xc7c/0x1360 [ 413.023270][ T9991] __x64_sys_openat+0x138/0x170 [ 413.023304][ T9991] do_syscall_64+0xe2/0xf80 [ 413.023341][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.023364][ T9991] ? trace_irq_disable+0x37/0x100 [ 413.023401][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.023424][ T9991] RIP: 0033:0x7fb4054a7407 [ 413.023444][ T9991] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 413.023465][ T9991] RSP: 002b:00007ffd019cfb20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 413.023491][ T9991] RAX: ffffffffffffffda RBX: 00007fb405cb2880 RCX: 00007fb4054a7407 [ 413.023510][ T9991] RDX: 0000000000000000 RSI: 00007ffd019d0f1d RDI: ffffffffffffff9c [ 413.023528][ T9991] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 413.023542][ T9991] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 413.023557][ T9991] R13: 00007ffd019cfd70 R14: 00007fb405e19000 R15: 0000555feffe74d8 [ 413.023588][ T9991] [ 413.023597][ T9991] [ 413.329871][ T9991] Allocated by task 6296: [ 413.334186][ T9991] kasan_save_track+0x3e/0x80 [ 413.338863][ T9991] __kasan_kmalloc+0x93/0xb0 [ 413.343448][ T9991] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 413.348823][ T9991] em28xx_v4l2_init+0x10b/0x2e70 [ 413.353751][ T9991] em28xx_init_extension+0x120/0x1c0 [ 413.359021][ T9991] process_scheduled_works+0xaec/0x17a0 [ 413.364551][ T9991] worker_thread+0x89f/0xd90 [ 413.369138][ T9991] kthread+0x726/0x8b0 [ 413.373219][ T9991] ret_from_fork+0x51b/0xa40 [ 413.377885][ T9991] ret_from_fork_asm+0x1a/0x30 [ 413.382642][ T9991] [ 413.384948][ T9991] Freed by task 6296: [ 413.388906][ T9991] kasan_save_track+0x3e/0x80 [ 413.393570][ T9991] kasan_save_free_info+0x46/0x50 [ 413.398596][ T9991] __kasan_slab_free+0x5c/0x80 [ 413.403348][ T9991] kfree+0x1be/0x650 [ 413.407237][ T9991] em28xx_v4l2_init+0x1683/0x2e70 [ 413.412249][ T9991] em28xx_init_extension+0x120/0x1c0 [ 413.417531][ T9991] process_scheduled_works+0xaec/0x17a0 [ 413.423065][ T9991] worker_thread+0x89f/0xd90 [ 413.427645][ T9991] kthread+0x726/0x8b0 [ 413.431708][ T9991] ret_from_fork+0x51b/0xa40 [ 413.436287][ T9991] ret_from_fork_asm+0x1a/0x30 [ 413.441055][ T9991] [ 413.443363][ T9991] The buggy address belongs to the object at ffff8880270c4000 [ 413.443363][ T9991] which belongs to the cache kmalloc-8k of size 8192 [ 413.457399][ T9991] The buggy address is located 1856 bytes inside of [ 413.457399][ T9991] freed 8192-byte region [ffff8880270c4000, ffff8880270c6000) [ 413.471352][ T9991] [ 413.473659][ T9991] The buggy address belongs to the physical page: [ 413.480049][ T9991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x270c0 [ 413.488790][ T9991] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 413.497274][ T9991] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 413.505160][ T9991] page_type: f5(slab) [ 413.509132][ T9991] raw: 00fff00000000040 ffff88813ff27280 ffffea0000c93400 0000000000000003 [ 413.517702][ T9991] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 413.526314][ T9991] head: 00fff00000000040 ffff88813ff27280 ffffea0000c93400 0000000000000003 [ 413.535060][ T9991] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 413.543719][ T9991] head: 00fff00000000003 ffffea00009c3001 00000000ffffffff 00000000ffffffff [ 413.552376][ T9991] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 413.561023][ T9991] page dumped because: kasan: bad access detected [ 413.567412][ T9991] page_owner tracks the page as allocated [ 413.573103][ T9991] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9807, tgid 9806 (syz.7.1215), ts 398421709852, free_ts 398363240263 [ 413.592377][ T9991] post_alloc_hook+0x228/0x280 [ 413.597130][ T9991] get_page_from_freelist+0x24dc/0x2580 [ 413.602662][ T9991] __alloc_frozen_pages_noprof+0x18d/0x380 [ 413.608463][ T9991] alloc_pages_mpol+0x232/0x4a0 [ 413.613305][ T9991] allocate_slab+0x86/0x3a0 [ 413.617813][ T9991] ___slab_alloc+0xd82/0x1760 [ 413.622478][ T9991] __slab_alloc+0x65/0x100 [ 413.626882][ T9991] __kmalloc_noprof+0x46c/0x7e0 [ 413.631714][ T9991] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 413.637601][ T9991] ieee80211_inform_bss+0x161/0x1160 [ 413.642971][ T9991] cfg80211_inform_single_bss_data+0xcf9/0x1ab0 [ 413.649202][ T9991] cfg80211_inform_bss_data+0x233/0x3bb0 [ 413.654821][ T9991] cfg80211_inform_bss_frame_data+0x3c7/0x710 [ 413.660884][ T9991] ieee80211_bss_info_update+0x794/0xa40 [ 413.666501][ T9991] ieee80211_scan_rx+0x593/0xa20 [ 413.671424][ T9991] ieee80211_rx_list+0x2508/0x3050 [ 413.676609][ T9991] page last free pid 8936 tgid 8936 stack trace: [ 413.682914][ T9991] __free_frozen_pages+0xbb0/0xd10 [ 413.688015][ T9991] __put_partials+0x146/0x170 [ 413.692683][ T9991] __slab_free+0x294/0x320 [ 413.697092][ T9991] qlist_free_all+0x97/0x100 [ 413.701667][ T9991] kasan_quarantine_reduce+0x148/0x160 [ 413.707111][ T9991] __kasan_slab_alloc+0x22/0x80 [ 413.711955][ T9991] kmem_cache_alloc_noprof+0x370/0x6e0 [ 413.717408][ T9991] vm_area_dup+0x2b/0x680 [ 413.721721][ T9991] dup_mmap+0x896/0x1bb0 [ 413.725948][ T9991] copy_mm+0x13b/0x4b0 [ 413.730004][ T9991] copy_process+0x166e/0x3980 [ 413.734672][ T9991] kernel_clone+0x248/0x870 [ 413.739161][ T9991] __x64_sys_clone+0x1b6/0x230 [ 413.743916][ T9991] do_syscall_64+0xe2/0xf80 [ 413.748426][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.754320][ T9991] [ 413.756623][ T9991] Memory state around the buggy address: [ 413.762233][ T9991] ffff8880270c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 413.770275][ T9991] ffff8880270c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 413.778315][ T9991] >ffff8880270c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 413.786440][ T9991] ^ [ 413.792570][ T9991] ffff8880270c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 413.800611][ T9991] ffff8880270c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 413.808653][ T9991] ================================================================== [ 413.837932][ T5910] em28xx 4-1:0.132: Closing input extension [ 413.879471][ T6656] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 413.894785][ T9991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 413.901989][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 413.912491][ T9991] Tainted: [L]=SOFTLOCKUP [ 413.916809][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 413.926869][ T9991] Call Trace: [ 413.930146][ T9991] [ 413.933078][ T9991] vpanic+0x1e0/0x670 [ 413.937087][ T9991] panic+0xc5/0xd0 [ 413.940813][ T9991] ? __pfx_panic+0x10/0x10 [ 413.945225][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.950851][ T9991] ? preempt_schedule_common+0x82/0xd0 [ 413.956320][ T9991] ? v4l2_fh_open+0xac/0x420 [ 413.960908][ T9991] check_panic_on_warn+0x89/0xb0 [ 413.965848][ T9991] ? v4l2_fh_open+0xac/0x420 [ 413.970430][ T9991] end_report+0x6f/0x140 [ 413.974666][ T9991] kasan_report+0x128/0x150 [ 413.979157][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.984783][ T9991] ? v4l2_fh_open+0xac/0x420 [ 413.989372][ T9991] v4l2_fh_open+0xac/0x420 [ 413.993789][ T9991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 413.999769][ T9991] em28xx_v4l2_open+0x157/0x9a0 [ 414.004616][ T9991] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.009639][ T9991] v4l2_open+0x1bf/0x3a0 [ 414.013893][ T9991] chrdev_open+0x4cd/0x5e0 [ 414.018301][ T9991] ? __pfx_chrdev_open+0x10/0x10 [ 414.023230][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.028863][ T9991] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 414.035188][ T9991] ? __pfx_chrdev_open+0x10/0x10 [ 414.040114][ T9991] do_dentry_open+0x7ce/0x1420 [ 414.044888][ T9991] vfs_open+0x3b/0x340 [ 414.048976][ T9991] ? path_openat+0x346e/0x3e20 [ 414.053734][ T9991] path_openat+0x3486/0x3e20 [ 414.058330][ T9991] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 414.063962][ T9991] ? getname_flags+0xb7/0x540 [ 414.068634][ T9991] ? __pfx_path_openat+0x10/0x10 [ 414.073560][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.079184][ T9991] ? __lock_acquire+0x6b5/0x2cf0 [ 414.084121][ T9991] do_filp_open+0x22d/0x490 [ 414.088613][ T9991] ? __pfx_do_filp_open+0x10/0x10 [ 414.093647][ T9991] ? _raw_spin_unlock+0x28/0x50 [ 414.098494][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.104125][ T9991] ? alloc_fd+0x64b/0x6c0 [ 414.108457][ T9991] do_sys_openat2+0x12f/0x220 [ 414.113138][ T9991] ? __pfx_do_sys_openat2+0x10/0x10 [ 414.118337][ T9991] ? exc_page_fault+0x6a/0xc0 [ 414.123013][ T9991] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.128634][ T9991] ? do_user_addr_fault+0xc7c/0x1360 [ 414.133913][ T9991] __x64_sys_openat+0x138/0x170 [ 414.138760][ T9991] do_syscall_64+0xe2/0xf80 [ 414.143263][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.149838][ T9991] ? trace_irq_disable+0x37/0x100 [ 414.154871][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.160760][ T9991] RIP: 0033:0x7fb4054a7407 [ 414.165173][ T9991] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 414.185201][ T9991] RSP: 002b:00007ffd019cfb20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 414.193607][ T9991] RAX: ffffffffffffffda RBX: 00007fb405cb2880 RCX: 00007fb4054a7407 [ 414.201565][ T9991] RDX: 0000000000000000 RSI: 00007ffd019d0f1d RDI: ffffffffffffff9c [ 414.209611][ T9991] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 414.217566][ T9991] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 414.225518][ T9991] R13: 00007ffd019cfd70 R14: 00007fb405e19000 R15: 0000555feffe74d8 [ 414.233489][ T9991] [ 414.236746][ T9991] Kernel Offset: disabled [ 414.241052][ T9991] Rebooting in 86400 seconds..