last executing test programs: 22.013229901s ago: executing program 4 (id=913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000300)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000010) connect$inet(r4, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 21.78337825s ago: executing program 4 (id=914): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x10000000004, 0x0, 0x200, 0x1ff}, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x5, 0x0) 21.751663744s ago: executing program 4 (id=915): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x14, r6, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x10000) 21.670006349s ago: executing program 4 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9902) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 21.531551712s ago: executing program 4 (id=917): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.467427248s ago: executing program 4 (id=918): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc048aeca, &(0x7f0000000180)={0x8, 0x0, [{0x991, 0x0, 0x20298ce9}, {0xaa8, 0x0, 0xa}, {0xa74, 0x0, 0x400}, {0xa1d, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x5}, {0xa72, 0x0, 0x21b}, {0x40000104, 0x0, 0xfffffffffffffffe}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 19.071565884s ago: executing program 0 (id=924): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @remote, 0x528}, {0xa, 0x4e23, 0x4068d6a4, @mcast2, 0x9da}, 0xffffffffffffffff, 0x3}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 15.820712276s ago: executing program 0 (id=932): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) 13.447310908s ago: executing program 1 (id=935): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.546031361s ago: executing program 0 (id=939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) fchmod(r0, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 10.353379726s ago: executing program 0 (id=940): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x9}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b000100", @ANYRES32=r2, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f", 0xcc}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3"], 0x1c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.085530944s ago: executing program 3 (id=942): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = userfaultfd(0x100001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000001000/0x1000)=nil, 0x1000}, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x100000001}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x23}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x24000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x5c}}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000373f02a082505a0a457900102030109023600010302c0000904b60804aac059616d330045c8000d048109050a031ce58107150905030f000297ee04090508012000050101"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x1a8) close_range(r7, r7, 0x0) recvmmsg$unix(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x162, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x70, 0x3}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0x9, 0xb, 0x8, 0xa}, 0x30, &(0x7f0000000100)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xed, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x5d, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "95e06cf0b63eded49cae789fbec40b78"}, @ptm_cap={0x3}]}}) 9.025332319s ago: executing program 1 (id=943): io_setup(0xfffffff9, &(0x7f00000003c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) setsockopt$inet_opts(r3, 0x0, 0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) r4 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x11) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r6, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406"], 0x0) 7.905794313s ago: executing program 2 (id=944): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.109044793s ago: executing program 3 (id=945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000440)}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) creat(0x0, 0xdafbe5d6891b6e4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x84, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 6.947252449s ago: executing program 2 (id=946): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x48201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="8b0100007d0a0000006f0103000900000004050000000500000000000000000010000900000007000000feffffffffffffff0100850100002d0117e05f00000000cf1e7c7ef42a774958be5b5f12d47a5a7385c42fa23fbc3d824fc7f7f10dd00614bbf1bb99aadbf1f0e3df1c167b220c8c304449ff0229a69e7ea9a209aa57296f961b6d2bcbf1bf0eaaf07c22f733722b4610f250cc1fd77ffc0e2c78e5105efff912000000000000000000932373bffc12a2d6f31b76bc36048c104e6fb5e582d15e66d38b73918d402e316d543ecaf027b9f7b55d27da0f70ca94e7e97b57f5cfbef929be2a8b5714473429f81e50a639b0ab9615dcdfc2f4e33121774786a9593b3a93944b5316a75211b6d63f9eac3af2d734a26445fc1b3b38ca7c3cd997685e6d4b0b46f5e2d383626eba5174fcf6be499a775a91f5c87950ef09aa59b76612c57a667a3e52eec8166e2ecdb1894076351d333000b52ef1d7030426e139374a6485000d000002a98ef30000000000000008070097feef857a0386", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x18b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) r3 = socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, r3, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 6.583482366s ago: executing program 1 (id=947): socketpair$unix(0x1, 0x2, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) 6.556152716s ago: executing program 3 (id=948): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 5.843383407s ago: executing program 1 (id=949): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4402, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, 0x0, 0x804) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xde, 0x0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0xd, 0x7, 0xe0, 0x10, 0x6}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x92, &(0x7f0000000600)=@string={0x92, 0x3, "bd9fa43f54ee56abb4e397625060e293f506bd69df49ebc5b7b3abddf814d1e8be749094fec3e340d63fb7200247f8c3c49b891d4832c2b542104a69c6fbd8ce2b6e34a1978a64f698057060401b2c99db7eebb5988260e739e231b31fd7c6549979d5b02d9a954fb891dc9cdd8b0544396eb6ef54960f6c9a305c4522114280f85419d53677dcea90be7b13426038c9"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x419}}, {0x5, &(0x7f0000000700)=@string={0x5, 0x3, "0f2934"}}]}) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) 5.570835683s ago: executing program 3 (id=950): openat$rfkill(0xffffffffffffff9c, 0x0, 0x4600, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) fcntl$setownex(r1, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x40082) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.771649447s ago: executing program 3 (id=951): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.738585839s ago: executing program 2 (id=952): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) 3.614923427s ago: executing program 2 (id=953): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f00000016c0)={'syz1\x00', {0x8, 0x5, 0x7fff, 0x2}, 0x21, [0x9, 0x81, 0xfffffffa, 0xc, 0x4, 0xfffffff8, 0x4, 0x0, 0x7, 0x3, 0x717e, 0x2, 0x1, 0x2, 0x3, 0x1, 0x8, 0x9, 0x21c, 0x99, 0x9, 0xead, 0x5, 0xf4, 0x14000000, 0x200, 0xb, 0x9, 0x9, 0x3, 0x9, 0x9, 0x80, 0x0, 0x6c, 0x8001, 0x7, 0x2, 0x2, 0x0, 0x80000001, 0x2aa, 0x8000, 0x8, 0xbb2, 0x0, 0x8, 0x24000, 0x7, 0x2, 0x0, 0x1, 0x75fabe34, 0x1ff, 0x4, 0xe, 0x7, 0x80000000, 0xd988, 0x3, 0x0, 0x2, 0xc6, 0x8000], [0x2, 0x4, 0x3, 0x3, 0xfffffeff, 0x8b3, 0x94, 0x5, 0x4, 0x8, 0xd, 0x5, 0x9, 0x101, 0x8, 0x9a1c, 0x1, 0xfc54, 0x80000000, 0x7, 0x80000000, 0x6, 0x3, 0x200, 0x5, 0x8, 0x0, 0x8, 0x3, 0x9, 0x1ff8, 0x43b80000, 0x10001, 0x3, 0x3b, 0x2, 0x81, 0x1, 0x6, 0x1, 0x7fffffff, 0x2, 0x800, 0x0, 0x8001, 0xc01, 0x823000, 0x2, 0x7, 0x3, 0x4, 0x8, 0x0, 0x101, 0x4, 0xb129, 0x5c4, 0xad9, 0x3, 0xfff, 0x0, 0x2], [0x3, 0x3, 0xff, 0x7, 0x8682, 0x5, 0x1, 0x4, 0x1, 0xdf2, 0x5, 0x40, 0x5, 0x9, 0x4, 0x10000, 0x3, 0x8, 0xff, 0xf1, 0x0, 0x4b10, 0x7, 0x6, 0x1, 0x1, 0x5, 0x3, 0x7, 0x2, 0x6, 0x6, 0x7, 0x17e, 0x5, 0x0, 0x8000, 0xffff, 0x200, 0xd, 0x4, 0x9, 0xc2, 0x6, 0xffffffff, 0x0, 0x396e, 0xbf9, 0x207cf864, 0x51, 0x4, 0x2, 0x0, 0x0, 0x12000000, 0xfb, 0x8000000, 0x100, 0x2, 0xad, 0x401, 0xee8, 0xd, 0x80000000], [0xc01d, 0x6, 0x5, 0x4, 0xc, 0x7, 0x5, 0x8, 0x5, 0x9, 0x2, 0x3, 0xcc, 0x1bbd, 0x7, 0x5, 0x2, 0x7, 0x2, 0x4, 0xd, 0x5, 0x80000000, 0x4, 0x6, 0x6, 0x3cb, 0x3, 0x1, 0x7, 0x4fa0, 0x7, 0x3, 0x9ed7, 0x4, 0x1, 0x10001, 0xfffffeff, 0x497, 0x2, 0xffffff12, 0xd, 0x8, 0x9, 0x4, 0x7, 0xbf, 0x5, 0x4, 0x8, 0x0, 0x1ff, 0x47bb, 0x3, 0xe85b, 0x3ff, 0x8, 0x9, 0x400, 0x8, 0x0, 0xff07, 0x5, 0xa0000000]}, 0x45c) 2.665075482s ago: executing program 1 (id=954): openat$rfkill(0xffffffffffffff9c, 0x0, 0x4600, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) fcntl$setownex(r1, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x40082) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x400008001, 0x0, 0x1002001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x1, 0x10, 0x80000002, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.982082446s ago: executing program 2 (id=955): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.548919493s ago: executing program 1 (id=956): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x104}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) 978.564911ms ago: executing program 3 (id=957): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 942.599125ms ago: executing program 0 (id=958): r0 = syz_io_uring_setup(0x34f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x3, 0x316}, &(0x7f0000000200), 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 598.983089ms ago: executing program 0 (id=959): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xcd, 0x97, 0x2c, 0x8, 0x3923, 0x718a, 0x9b2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x30}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6f0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 0s ago: executing program 2 (id=960): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x2, 0x80000, 0xfffffffc) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e10009058317ff"], 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000010200000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): hci0: Opcode 0x0406 failed: -110 [ 122.979379][ T6104] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.072440][ T6104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.072516][ T6104] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.157584][ T6104] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.217520][ T6104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.217610][ T6104] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.261963][ T6104] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.345178][ T6104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.345270][ T6104] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.384944][ T6104] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.480162][ T6104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.480249][ T6104] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.594229][ T6104] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.011514][ T5808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.202074][ T5808] usb 5-1: Using ep0 maxpacket: 8 [ 124.204418][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.206064][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.206081][ T5808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.208491][ T5808] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 124.208520][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.208538][ T5808] usb 5-1: Product: syz [ 124.208551][ T5808] usb 5-1: Manufacturer: syz [ 124.208565][ T5808] usb 5-1: SerialNumber: syz [ 124.261367][ T5966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.341398][ T5113] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.361971][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.386839][ T5808] usb 5-1: config 0 descriptor?? [ 124.411466][ T5931] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.466728][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 124.468962][ T5966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.470337][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.470360][ T5966] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.474071][ T5966] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 124.474099][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.474116][ T5966] usb 2-1: Product: syz [ 124.474130][ T5966] usb 2-1: Manufacturer: syz [ 124.474143][ T5966] usb 2-1: SerialNumber: syz [ 124.541447][ T5931] usb 1-1: device descriptor read/64, error -71 [ 124.541538][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 124.580712][ T5966] usb 2-1: config 0 descriptor?? [ 124.951291][ T9] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 124.951320][ T9] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 124.951336][ T9] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 124.951352][ T9] usb 3-1: config 127 has no interface number 0 [ 124.951383][ T9] usb 3-1: config 127 interface 171 has no altsetting 0 [ 124.981295][ T5931] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.024548][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 125.024591][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.024661][ T9] usb 3-1: Product: syz [ 125.024675][ T9] usb 3-1: Manufacturer: syz [ 125.024698][ T9] usb 3-1: SerialNumber: syz [ 125.124143][ T5113] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.191416][ T5931] usb 1-1: device descriptor read/64, error -71 [ 125.281739][ T5113] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.313374][ T5931] usb usb1-port1: attempt power cycle [ 125.447534][ T5113] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.531354][ T5113] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.734053][ T5931] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.791122][ T5931] usb 1-1: device descriptor read/8, error -71 [ 126.031742][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.214205][ T5931] usb 1-1: device descriptor read/8, error -71 [ 126.359728][ T5931] usb usb1-port1: unable to enumerate USB device [ 127.201516][ T6133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.212067][ T5113] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.372077][ T5113] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.415445][ T6133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.429472][ T6133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.470634][ T6133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.480187][ T6133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.821320][ T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.997168][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.997223][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.997264][ T36] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.997277][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.078486][ T36] usb 1-1: config 0 descriptor?? [ 128.147783][ T36] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 129.327911][ T5113] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.441401][ T5113] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.521498][ T5113] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.521591][ T5113] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.116733][ T9] usb 5-1: USB disconnect, device number 4 [ 130.437048][ T9] usb 3-1: USB disconnect, device number 5 [ 130.582901][ T1229] usb 2-1: USB disconnect, device number 5 [ 130.622485][ T6155] libceph: resolve 'c' (ret=-3): failed [ 130.624108][ T37] audit: type=1326 audit(1772294087.931:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624154][ T37] audit: type=1326 audit(1772294087.931:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624192][ T37] audit: type=1326 audit(1772294087.931:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624229][ T37] audit: type=1326 audit(1772294087.931:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624269][ T37] audit: type=1326 audit(1772294087.931:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624307][ T37] audit: type=1326 audit(1772294087.931:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624355][ T37] audit: type=1326 audit(1772294087.931:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624395][ T37] audit: type=1326 audit(1772294087.931:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624432][ T37] audit: type=1326 audit(1772294087.931:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.624472][ T37] audit: type=1326 audit(1772294087.931:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 130.653998][ T5954] usb 1-1: USB disconnect, device number 14 [ 131.362689][ T5113] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.601550][ T5113] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.618358][ T5113] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.779276][ T1229] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.014897][ T1229] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.014916][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.017842][ T1229] usb 2-1: config 0 descriptor?? [ 132.021144][ T1229] cp210x 2-1:0.0: cp210x converter detected [ 132.103817][ T36] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 132.287084][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.287111][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.287172][ T36] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 132.287195][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.362295][ T36] usb 1-1: config 0 descriptor?? [ 132.431692][ T36] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 132.431747][ T36] dvb-usb: bulk message failed: -22 (3/0) [ 132.558551][ T1229] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 132.727120][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 132.730691][ T36] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 132.730830][ T36] usb 1-1: media controller created [ 132.762868][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.861617][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.862969][ T36] dvb-usb: bulk message failed: -22 (6/0) [ 132.863053][ T36] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 133.011634][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 133.028021][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 133.028045][ T36] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 133.031397][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 133.057952][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.098358][ T9] usb 4-1: config 3 has an invalid interface number: 182 but max is 0 [ 133.098387][ T9] usb 4-1: config 3 has an invalid descriptor of length 109, skipping remainder of the config [ 133.098404][ T9] usb 4-1: config 3 has no interface number 0 [ 133.098508][ T9] usb 4-1: config 3 interface 182 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 133.098531][ T9] usb 4-1: config 3 interface 182 has no altsetting 0 [ 133.110840][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 133.110870][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.110888][ T9] usb 4-1: Product: syz [ 133.110953][ T9] usb 4-1: Manufacturer: syz [ 133.110967][ T9] usb 4-1: SerialNumber: syz [ 133.136770][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136860][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185603][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 133.185637][ T36] dvb-usb: error while querying for an remote control event. [ 133.343527][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 133.343561][ T5863] dvb-usb: error while querying for an remote control event. [ 133.421322][ T36] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.494579][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.495660][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.505263][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 133.505291][ T808] dvb-usb: error while querying for an remote control event. [ 133.544197][ T9] usbtest 4-1:3.182: couldn't get endpoints, -22 [ 133.545252][ T9] usbtest 4-1:3.182: probe with driver usbtest failed with error -22 [ 133.588543][ T9] usb 4-1: USB disconnect, device number 5 [ 133.601642][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 133.659914][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.659941][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.659976][ T36] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 133.659999][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.666549][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 133.666582][ T808] dvb-usb: error while querying for an remote control event. [ 133.757525][ T36] usb 3-1: config 0 descriptor?? [ 133.883393][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 133.883424][ T36] dvb-usb: error while querying for an remote control event. [ 134.041346][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.041426][ T808] dvb-usb: error while querying for an remote control event. [ 134.201311][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.201333][ T808] dvb-usb: error while querying for an remote control event. [ 134.364893][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.364929][ T808] dvb-usb: error while querying for an remote control event. [ 134.524272][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.524304][ T808] dvb-usb: error while querying for an remote control event. [ 134.681745][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.681788][ T808] dvb-usb: error while querying for an remote control event. [ 134.842058][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 134.842082][ T808] dvb-usb: error while querying for an remote control event. [ 135.008464][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 135.008656][ T808] dvb-usb: error while querying for an remote control event. [ 135.261754][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 135.261807][ T36] dvb-usb: error while querying for an remote control event. [ 135.262109][ T5863] usb 1-1: USB disconnect, device number 15 [ 135.592678][ T808] usb 3-1: USB disconnect, device number 6 [ 135.863948][ T5863] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 137.535733][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.604391][ T1229] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -110 [ 137.604425][ T1229] cp210x 2-1:0.0: GPIO initialisation failed: -110 [ 137.610646][ T1229] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.671373][ T808] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 137.741297][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.765685][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.765712][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 137.768412][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.768439][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.768463][ T9] usb 3-1: Product: syz [ 137.768472][ T9] usb 3-1: Manufacturer: syz [ 137.768479][ T9] usb 3-1: SerialNumber: syz [ 137.828098][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 137.831722][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.831746][ T808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.831779][ T808] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 137.831799][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.917324][ T808] usb 1-1: config 0 descriptor?? [ 137.938798][ T9] usb 3-1: config 0 descriptor?? [ 137.957540][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 137.957578][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 138.293757][ T5931] usb 3-1: USB disconnect, device number 7 [ 138.471866][ T5931] usb 2-1: USB disconnect, device number 6 [ 138.479777][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.480490][ T5931] cp210x 2-1:0.0: device disconnected [ 138.661831][ T6199] Invalid logical block size (65536) [ 138.691343][ T808] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.861434][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 138.869589][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 138.869610][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 138.873012][ T808] usb 3-1: string descriptor 0 read error: -22 [ 138.873090][ T808] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.873102][ T808] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.876225][ T808] usb 3-1: config 0 descriptor?? [ 138.879627][ T808] hub 3-1:0.0: bad descriptor, ignoring hub [ 138.879648][ T808] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.182209][ T808] usb 3-1: USB disconnect, device number 8 [ 139.324992][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 139.325008][ T37] audit: type=1326 audit(1772294096.641:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.325709][ T37] audit: type=1326 audit(1772294096.641:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.326120][ T37] audit: type=1326 audit(1772294096.641:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.384210][ T37] audit: type=1326 audit(1772294096.701:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387592][ T37] audit: type=1326 audit(1772294096.701:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387758][ T37] audit: type=1326 audit(1772294096.701:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387800][ T37] audit: type=1326 audit(1772294096.701:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387839][ T37] audit: type=1326 audit(1772294096.701:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387878][ T37] audit: type=1326 audit(1772294096.701:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.387905][ T37] audit: type=1326 audit(1772294096.701:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6205 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c86ddc799 code=0x7ffc0000 [ 139.629512][ T6211] libceph: resolve 'c' (ret=-3): failed [ 140.036256][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 140.040845][ T6220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.040862][ T6220] IPv6: NLM_F_CREATE should be set when creating new route [ 140.040917][ T6220] IPv6: NLM_F_CREATE should be set when creating new route [ 140.040946][ T6220] IPv6: NLM_F_CREATE should be set when creating new route [ 140.271266][ T808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.459853][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.459886][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.459907][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.459948][ T808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.459970][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.610639][ T808] usb 3-1: config 0 descriptor?? [ 141.037604][ T808] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.037637][ T808] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.037654][ T808] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.037670][ T808] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.037684][ T808] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.155137][ T808] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.259306][ T1229] usb 3-1: USB disconnect, device number 9 [ 141.895983][ T808] usb 1-1: USB disconnect, device number 16 [ 142.066809][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.867713][ T6245] netlink: 'syz.3.76': attribute type 9 has an invalid length. [ 142.871509][ T6245] netlink: 'syz.3.76': attribute type 11 has an invalid length. [ 144.041681][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 144.210878][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 144.213939][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.214394][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.443058][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.444083][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 144.444115][ T9] usb 5-1: can't read configurations, error -71 [ 144.771365][ T5954] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.921373][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 144.923427][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 144.923444][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 144.925221][ T5954] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.925237][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.925247][ T5954] usb 2-1: Product: syz [ 144.925254][ T5954] usb 2-1: Manufacturer: syz [ 144.925261][ T5954] usb 2-1: SerialNumber: syz [ 144.947444][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 144.949350][ T6265] Zero length message leads to an empty skb [ 145.051557][ T5954] usb 2-1: config 0 descriptor?? [ 145.066862][ T5954] hub 2-1:0.0: bad descriptor, ignoring hub [ 145.066901][ T5954] hub 2-1:0.0: probe with driver hub failed with error -5 [ 145.451758][ T5954] usb 2-1: USB disconnect, device number 7 [ 145.801308][ T5954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.961345][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 145.966086][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 145.966103][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 145.973535][ T5954] usb 2-1: string descriptor 0 read error: -22 [ 145.973717][ T5954] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 145.973740][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 145.979479][ T5954] usb 2-1: config 0 descriptor?? [ 146.095428][ T5954] hub 2-1:0.0: bad descriptor, ignoring hub [ 146.095465][ T5954] hub 2-1:0.0: probe with driver hub failed with error -5 [ 146.136612][ T1229] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.165029][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 146.291410][ T1229] usb 1-1: Using ep0 maxpacket: 32 [ 146.294130][ T1229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.297167][ T1229] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 146.297197][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.297216][ T1229] usb 1-1: Product: syz [ 146.297229][ T1229] usb 1-1: Manufacturer: syz [ 146.297242][ T1229] usb 1-1: SerialNumber: syz [ 146.434114][ T5863] usb 2-1: USB disconnect, device number 8 [ 148.045897][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 148.097365][ T1229] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 148.192902][ T1229] usb 1-1: USB disconnect, device number 17 [ 152.381359][ T5863] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.531396][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 152.548853][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.551654][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.551677][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.554236][ T5863] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 152.554262][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.554279][ T5863] usb 2-1: Product: syz [ 152.554300][ T5863] usb 2-1: Manufacturer: syz [ 152.554314][ T5863] usb 2-1: SerialNumber: syz [ 152.621981][ T5863] usb 2-1: config 0 descriptor?? [ 152.721387][ T1229] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.876720][ T1229] usb 5-1: Using ep0 maxpacket: 16 [ 152.880159][ T1229] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 152.880184][ T1229] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 152.917693][ T1229] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 152.917727][ T1229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.917745][ T1229] usb 5-1: Product: syz [ 152.917759][ T1229] usb 5-1: Manufacturer: syz [ 152.917772][ T1229] usb 5-1: SerialNumber: syz [ 153.125913][ T6331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.242028][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.242530][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.287743][ T5954] usb 5-1: USB disconnect, device number 7 [ 153.471347][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.662313][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 153.665685][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.667251][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.667267][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.691882][ T31] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 153.691928][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.691947][ T31] usb 3-1: Product: syz [ 153.691961][ T31] usb 3-1: Manufacturer: syz [ 153.691975][ T31] usb 3-1: SerialNumber: syz [ 153.750657][ T31] usb 3-1: config 0 descriptor?? [ 154.204816][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.298604][ T6353] tipc: Started in network mode [ 155.298623][ T6353] tipc: Node identity 4004, cluster identity 4711 [ 155.298630][ T6353] tipc: Node number set to 16388 [ 155.601615][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.790527][ T5954] usb 2-1: USB disconnect, device number 9 [ 155.831278][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 155.835676][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.835700][ T5863] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.835736][ T5863] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 155.835757][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.877145][ T5863] usb 5-1: config 0 descriptor?? [ 156.100133][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 156.100341][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.316739][ T6357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.598954][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 156.599092][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.706758][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.274421][ T5954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.691356][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 157.772021][ T5863] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 157.866417][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.866445][ T5954] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.866467][ T5954] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 157.866479][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.869872][ T5954] usb 2-1: config 0 descriptor?? [ 157.977423][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.977450][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.011232][ T5863] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 158.011263][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.011326][ T5863] usb 1-1: Product: syz [ 158.011338][ T5863] usb 1-1: Manufacturer: syz [ 158.011350][ T5863] usb 1-1: SerialNumber: syz [ 158.017358][ T5863] usb 1-1: config 0 descriptor?? [ 158.064970][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.223854][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.223916][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 158.232159][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.232176][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.232186][ T31] usb 4-1: Product: syz [ 158.232193][ T31] usb 4-1: Manufacturer: syz [ 158.232200][ T31] usb 4-1: SerialNumber: syz [ 158.650271][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.668347][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.684633][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.705399][ T31] usb 4-1: USB disconnect, device number 6 [ 158.743988][ T1229] usb 3-1: USB disconnect, device number 10 [ 158.749022][ T5954] usb 5-1: USB disconnect, device number 8 [ 159.201363][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 159.242800][ T5954] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.353957][ T31] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 159.353985][ T31] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 159.354031][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.354051][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.354091][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.354113][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.368345][ T31] usbtmc 4-1:16.0: bulk endpoints not found [ 159.391938][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 159.395652][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.397442][ T5954] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.397470][ T5954] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 159.397491][ T5954] usb 5-1: config 8 interface 0 has no altsetting 0 [ 159.408533][ T5954] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 159.408561][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.408579][ T5954] usb 5-1: Product: syz [ 159.408592][ T5954] usb 5-1: Manufacturer: syz [ 159.408605][ T5954] usb 5-1: SerialNumber: syz [ 159.575353][ T31] usb 4-1: USB disconnect, device number 7 [ 159.796510][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.796595][ T5954] usb 5-1: selecting invalid altsetting 0 [ 159.967674][ T5966] usb 1-1: USB disconnect, device number 18 [ 160.451644][ T5966] usb 2-1: USB disconnect, device number 10 [ 160.494399][ T6391] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 160.556129][ T5954] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 160.584978][ T5954] usb 5-1: USB disconnect, device number 9 [ 160.821302][ T1229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.840836][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.026713][ T1229] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.026731][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.026741][ T1229] usb 4-1: Product: syz [ 161.026748][ T1229] usb 4-1: Manufacturer: syz [ 161.026755][ T1229] usb 4-1: SerialNumber: syz [ 161.033611][ T1229] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.191448][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.387850][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 161.482341][ T5954] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.509510][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.509535][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.509556][ T5863] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 161.509567][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.517919][ T5863] usb 1-1: config 0 descriptor?? [ 161.626216][ T6399] bond1 (unregistering): Released all slaves [ 161.631345][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.801524][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.801553][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.000140][ T5954] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 163.004863][ T5954] ath9k_htc: Failed to initialize the device [ 164.014206][ T36] usb 4-1: USB disconnect, device number 8 [ 164.128661][ T36] usb 4-1: ath9k_htc: USB layer deinitialized [ 164.145106][ T31] usb 2-1: config 0 descriptor?? [ 164.206465][ T6391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.779824][ T6418] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 164.817280][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.819687][ T6418] bond0: (slave team0): Enslaving as an active interface with an up link [ 168.525401][ T5966] usb 1-1: USB disconnect, device number 19 [ 168.831690][ T31] usb 2-1: can't set config #0, error -71 [ 168.887941][ T31] usb 2-1: USB disconnect, device number 11 [ 170.961925][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.051330][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 171.051342][ T37] audit: type=1326 audit(1772294128.361:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.051369][ T37] audit: type=1326 audit(1772294128.361:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.051390][ T37] audit: type=1326 audit(1772294128.361:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.053916][ T37] audit: type=1326 audit(1772294128.371:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.053955][ T37] audit: type=1326 audit(1772294128.371:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.053976][ T37] audit: type=1326 audit(1772294128.371:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.053996][ T37] audit: type=1326 audit(1772294128.371:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.054017][ T37] audit: type=1326 audit(1772294128.371:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90032c799 code=0x7ffc0000 [ 171.589061][ T37] audit: type=1326 audit(1772294128.811:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9002ecfce code=0x7ffc0000 [ 171.589117][ T37] audit: type=1326 audit(1772294128.901:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe90032c42b code=0x7ffc0000 [ 171.875698][ T5966] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.883577][ T5954] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 172.057601][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.057617][ T5954] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.087864][ T5954] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 172.087883][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.087893][ T5954] usb 3-1: Product: syz [ 172.087900][ T5954] usb 3-1: Manufacturer: syz [ 172.087907][ T5954] usb 3-1: SerialNumber: syz [ 172.090991][ T5954] usb 3-1: config 0 descriptor?? [ 172.091949][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 172.145555][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.145610][ T5966] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.145626][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.148515][ T5966] usb 4-1: config 0 descriptor?? [ 172.208017][ T5966] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 172.512481][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.512984][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.741922][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.891392][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 174.924642][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.945677][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.061836][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.061855][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.061865][ T31] usb 2-1: Product: я [ 175.061872][ T31] usb 2-1: Manufacturer: ᰉ [ 175.061879][ T31] usb 2-1: SerialNumber: ь [ 175.531353][ T5966] usb 3-1: USB disconnect, device number 11 [ 175.961378][ T5877] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 176.111259][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 176.113969][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.113994][ T5877] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.114093][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.114115][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.214150][ T5877] usb 1-1: config 0 descriptor?? [ 176.681387][ T5877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.853525][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 176.860575][ T5877] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 176.860602][ T5877] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 176.900450][ T5877] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 176.900530][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.900550][ T5877] usb 3-1: Product: syz [ 176.900564][ T5877] usb 3-1: Manufacturer: syz [ 176.900577][ T5877] usb 3-1: SerialNumber: syz [ 177.231587][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.233097][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.265151][ T5966] usb 3-1: USB disconnect, device number 12 [ 177.511843][ T5966] usb 4-1: USB disconnect, device number 9 [ 177.936004][ T5966] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.084070][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.084125][ T5966] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 178.084148][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.126253][ T5966] usb 4-1: config 0 descriptor?? [ 178.148302][ T5966] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 178.725330][ T5966] usb 1-1: USB disconnect, device number 20 [ 180.090537][ T31] usb 2-1: bad CDC descriptors [ 180.611985][ T5966] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 180.774848][ T5876] usb 4-1: USB disconnect, device number 10 [ 180.801388][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 180.881431][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.881457][ T5966] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.881532][ T5966] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 180.881546][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.889809][ T5966] usb 1-1: config 0 descriptor?? [ 181.218195][ T5876] usb 2-1: USB disconnect, device number 12 [ 181.719378][ T6576] netlink: 'syz.1.173': attribute type 20 has an invalid length. [ 181.719392][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 181.776081][ T6576] netlink: 'syz.1.173': attribute type 20 has an invalid length. [ 181.776096][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 181.832872][ T4225] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.859470][ T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.873187][ T4534] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.875157][ T989] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.524726][ T1229] usb 1-1: USB disconnect, device number 21 [ 184.400119][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.765492][ T6625] netlink: 'syz.2.189': attribute type 11 has an invalid length. [ 185.869063][ T6633] bond1 (unregistering): Released all slaves [ 185.964073][ T5966] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 186.161371][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 186.443264][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.443280][ T5966] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.443300][ T5966] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 186.443312][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.498023][ T5966] usb 1-1: config 0 descriptor?? [ 187.391300][ T5876] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 187.682469][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.682496][ T5876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.696314][ T5876] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 187.696348][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.696366][ T5876] usb 2-1: Product: syz [ 187.696379][ T5876] usb 2-1: Manufacturer: syz [ 187.696392][ T5876] usb 2-1: SerialNumber: syz [ 187.826129][ T5876] usb 2-1: config 0 descriptor?? [ 188.665617][ T5966] usb 1-1: USB disconnect, device number 22 [ 189.491814][ T1229] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 190.056048][ T5876] usb 2-1: USB disconnect, device number 13 [ 190.176173][ T6721] netlink: 'syz.0.224': attribute type 11 has an invalid length. [ 190.207919][ T1229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.207945][ T1229] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.238844][ T1229] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 190.238875][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.238894][ T1229] usb 4-1: Product: syz [ 190.238907][ T1229] usb 4-1: Manufacturer: syz [ 190.238919][ T1229] usb 4-1: SerialNumber: syz [ 190.277187][ T1229] usb 4-1: config 0 descriptor?? [ 190.741925][ T5877] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 190.901261][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 190.903712][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.906852][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.906877][ T5877] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.913789][ T5877] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 190.913817][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.913835][ T5877] usb 1-1: Product: syz [ 190.913848][ T5877] usb 1-1: Manufacturer: syz [ 190.913862][ T5877] usb 1-1: SerialNumber: syz [ 190.921417][ T5863] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.944501][ T5877] usb 1-1: config 0 descriptor?? [ 191.071400][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 191.076345][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.076398][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.076436][ T5863] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.076458][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.085385][ T5863] usb 3-1: config 0 descriptor?? [ 191.159026][ T5863] hub 3-1:0.0: bad descriptor, ignoring hub [ 191.159048][ T5863] hub 3-1:0.0: probe with driver hub failed with error -5 [ 191.169446][ T5863] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.507070][ T6749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.467657][ T1229] usb 4-1: USB disconnect, device number 11 [ 193.021467][ T1229] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 193.184508][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 193.187329][ T1229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.206561][ T1229] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 193.206591][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.206609][ T1229] usb 4-1: Product: syz [ 193.206622][ T1229] usb 4-1: Manufacturer: syz [ 193.206635][ T1229] usb 4-1: SerialNumber: syz [ 193.671731][ T5876] usb 3-1: USB disconnect, device number 13 [ 193.691923][ T1229] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 193.738237][ T1229] usb 4-1: USB disconnect, device number 12 [ 194.333684][ T5863] usb 1-1: USB disconnect, device number 23 [ 194.604398][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604468][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.061322][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 195.601381][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 195.686037][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.686054][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.686074][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 195.686085][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.749137][ T9] usb 1-1: config 0 descriptor?? [ 197.636096][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 197.636114][ T37] audit: type=1326 audit(1772294154.941:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636158][ T37] audit: type=1326 audit(1772294154.941:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636201][ T37] audit: type=1326 audit(1772294154.941:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636242][ T37] audit: type=1326 audit(1772294154.941:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636283][ T37] audit: type=1326 audit(1772294154.941:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636322][ T37] audit: type=1326 audit(1772294154.941:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636361][ T37] audit: type=1326 audit(1772294154.941:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636400][ T37] audit: type=1326 audit(1772294154.941:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636439][ T37] audit: type=1326 audit(1772294154.941:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 197.636480][ T37] audit: type=1326 audit(1772294154.941:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8624a2c799 code=0x7ffc0000 [ 198.041385][ T1229] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.201277][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 198.205897][ T1229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.205933][ T1229] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 198.205945][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.208863][ T1229] usb 3-1: config 0 descriptor?? [ 198.264140][ T1229] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 198.922871][ T5863] usb 1-1: USB disconnect, device number 24 [ 199.685609][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 200.281692][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.453099][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 200.470638][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.470702][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 200.470724][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.478390][ T9] usb 4-1: config 0 descriptor?? [ 200.561634][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 200.611371][ T5966] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.704335][ T9] usb 3-1: USB disconnect, device number 14 [ 200.785113][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.785166][ T5966] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 200.785187][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.788793][ T5966] usb 2-1: config 0 descriptor?? [ 200.812511][ T5966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.119817][ T9] usb 2-1: USB disconnect, device number 14 [ 201.461328][ T5876] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.611269][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 201.611390][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 201.645534][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.645561][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.645596][ T5876] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 201.645616][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.701125][ T5876] usb 3-1: config 0 descriptor?? [ 201.783935][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.783984][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.784002][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.787727][ T9] usb 2-1: config 0 descriptor?? [ 202.197511][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 202.202004][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 202.209805][ T9] usb 2-1: USB disconnect, device number 15 [ 202.781434][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 202.989209][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.989762][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.072953][ T5954] usb 4-1: USB disconnect, device number 13 [ 203.101399][ T5966] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 203.257016][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.257050][ T5966] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 203.257062][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.263622][ T5966] usb 2-1: config 0 descriptor?? [ 203.272134][ T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 203.272152][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.272163][ T9] usb 1-1: Product: syz [ 203.272170][ T9] usb 1-1: Manufacturer: syz [ 203.272177][ T9] usb 1-1: SerialNumber: syz [ 203.274978][ T9] usb 1-1: config 0 descriptor?? [ 203.275438][ T5966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 203.648437][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 203.692509][ T5954] usb 2-1: USB disconnect, device number 16 [ 203.946199][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.947931][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.926964][ T5876] usb 3-1: USB disconnect, device number 15 [ 205.081369][ T5966] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 205.231281][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 205.234625][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.234694][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.234734][ T5966] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.234753][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.336701][ T5966] usb 2-1: config 0 descriptor?? [ 205.352058][ T5966] hub 2-1:0.0: bad descriptor, ignoring hub [ 205.352094][ T5966] hub 2-1:0.0: probe with driver hub failed with error -5 [ 205.353986][ T5966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 205.461354][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.624305][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.624359][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 205.624380][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.669384][ T9] usb 3-1: config 0 descriptor?? [ 205.690020][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 205.906464][ T5863] usb 3-1: USB disconnect, device number 16 [ 206.349894][ T5863] usb 1-1: USB disconnect, device number 25 [ 206.401418][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.553671][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 206.553701][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.581971][ T9] usb 3-1: config 0 descriptor?? [ 206.597963][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 206.771302][ T5863] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 206.932419][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.932460][ T5863] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 206.935599][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.935627][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.935645][ T5863] usb 1-1: Product: syz [ 206.935657][ T5863] usb 1-1: Manufacturer: syz [ 206.935670][ T5863] usb 1-1: SerialNumber: syz [ 207.219170][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.221157][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.254304][ T5863] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 207.280231][ T5863] usb 1-1: USB disconnect, device number 26 [ 207.413177][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 207.435219][ T9] usb 3-1: USB disconnect, device number 17 [ 208.029501][ T5966] usb 2-1: USB disconnect, device number 17 [ 208.491471][ T1229] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 208.641465][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 208.642418][ T1229] usb 3-1: no configurations [ 208.642433][ T1229] usb 3-1: can't read configurations, error -22 [ 208.751327][ T5863] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 208.771307][ T1229] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 208.911294][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 208.941439][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 208.967951][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.968005][ T5863] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 208.968026][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.968107][ T1229] usb 3-1: no configurations [ 208.968118][ T1229] usb 3-1: can't read configurations, error -22 [ 208.968601][ T1229] usb usb3-port1: attempt power cycle [ 208.985444][ T5863] usb 1-1: config 0 descriptor?? [ 209.060124][ T5863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 209.391325][ T1229] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.417786][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 209.418435][ T1229] usb 3-1: no configurations [ 209.418450][ T1229] usb 3-1: can't read configurations, error -22 [ 209.551359][ T1229] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 209.571882][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 209.572544][ T1229] usb 3-1: no configurations [ 209.572558][ T1229] usb 3-1: can't read configurations, error -22 [ 209.573605][ T1229] usb usb3-port1: unable to enumerate USB device [ 209.671326][ T5966] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.681333][ T5863] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.826171][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 209.836654][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.836673][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.836695][ T5966] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.836707][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.841695][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 209.855484][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.855554][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.855599][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.855621][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.936390][ T5863] usb 4-1: config 0 descriptor?? [ 209.939243][ T5966] usb 2-1: config 0 descriptor?? [ 209.945568][ T5966] hub 2-1:0.0: USB hub found [ 209.954606][ T5863] hub 4-1:0.0: bad descriptor, ignoring hub [ 209.954642][ T5863] hub 4-1:0.0: probe with driver hub failed with error -5 [ 209.963959][ T5863] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 210.153044][ T5966] hub 2-1:0.0: 1 port detected [ 210.766848][ T5966] hub 2-1:0.0: activate --> -90 [ 211.170442][ T5876] usb 2-1: USB disconnect, device number 18 [ 211.329109][ T5966] usb 1-1: USB disconnect, device number 27 [ 211.840429][ T1229] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 212.004727][ T1229] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 212.004757][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.010913][ T1229] usb 1-1: config 0 descriptor?? [ 212.038315][ T1229] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 212.051300][ T5877] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 212.201341][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 212.205724][ T5877] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 212.205750][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.205768][ T5877] usb 2-1: config 0 has no interfaces? [ 212.208706][ T5877] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 212.208735][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.208753][ T5877] usb 2-1: Product: syz [ 212.208765][ T5877] usb 2-1: Manufacturer: syz [ 212.208777][ T5877] usb 2-1: SerialNumber: syz [ 212.245915][ T5877] usb 2-1: config 0 descriptor?? [ 212.458386][ T5877] usb 2-1: USB disconnect, device number 19 [ 212.591714][ T5863] usb 4-1: USB disconnect, device number 14 [ 212.658520][ T1229] usb 1-1: USB disconnect, device number 28 [ 215.232186][ T7198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 215.780282][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 218.111282][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 218.131313][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 218.261319][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 218.266950][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.267012][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 218.267031][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.281312][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 218.283148][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.283169][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.285593][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.285618][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.285635][ T9] usb 3-1: Product: syz [ 218.285648][ T9] usb 3-1: Manufacturer: syz [ 218.285661][ T9] usb 3-1: SerialNumber: syz [ 218.379116][ T31] usb 1-1: config 0 descriptor?? [ 218.389878][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 218.817971][ T9] usb 3-1: 0:2 : does not exist [ 219.021455][ T1229] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 219.038167][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 219.172224][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 219.174252][ T1229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.174311][ T1229] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 219.174333][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.193667][ T9] usb 3-1: USB disconnect, device number 22 [ 219.195624][ T1229] usb 2-1: config 0 descriptor?? [ 219.210799][ T1229] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 219.416324][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.467782][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 219.491827][ T5808] usb 2-1: USB disconnect, device number 20 [ 220.467119][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 220.634051][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.634287][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 220.634310][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.716229][ T31] usb 2-1: config 0 descriptor?? [ 220.728708][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 220.932302][ T1229] usb 1-1: USB disconnect, device number 29 [ 221.971457][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 222.132010][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 222.133949][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.136604][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.136690][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.136708][ T9] usb 3-1: Product: syz [ 222.136716][ T9] usb 3-1: Manufacturer: syz [ 222.136723][ T9] usb 3-1: SerialNumber: syz [ 222.187589][ T9] usb 3-1: config 0 descriptor?? [ 222.196194][ T7322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.234292][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 222.234314][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 222.571380][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 222.741426][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 222.743500][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.743523][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.743563][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 222.743585][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.749211][ T9] usb 1-1: config 0 descriptor?? [ 222.918984][ T7322] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 222.932350][ T5808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.023948][ T9] usb 1-1: USB disconnect, device number 30 [ 223.087294][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.087348][ T5808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 223.087372][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.104602][ T5808] usb 4-1: config 0 descriptor?? [ 223.170905][ T5931] usb 2-1: USB disconnect, device number 21 [ 223.221858][ T7351] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 223.231833][ T5808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 224.430447][ T68] raw-gadget.3 gadget.2: failed to queue suspend event [ 224.451356][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 224.491773][ T7322] raw-gadget.3 gadget.2: failed to queue resume event [ 224.523395][ T989] raw-gadget.3 gadget.2: failed to queue suspend event [ 224.591475][ T7322] raw-gadget.3 gadget.2: failed to queue resume event [ 224.611270][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 224.616758][ T68] raw-gadget.3 gadget.2: failed to queue suspend event [ 224.619550][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.619602][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 224.619625][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.672143][ T31] usb 1-1: config 0 descriptor?? [ 224.681406][ T7322] raw-gadget.3 gadget.2: failed to queue resume event [ 224.696452][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 224.751413][ T43] raw-gadget.3 gadget.2: failed to queue suspend event [ 224.936189][ T7322] raw-gadget.3 gadget.2: failed to queue disconnect event [ 225.051361][ T5808] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 225.201410][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 225.215920][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.215940][ T5808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.215962][ T5808] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 225.215974][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.219574][ T5808] usb 2-1: config 0 descriptor?? [ 225.263082][ T5931] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 225.495586][ T5931] usb 3-1: device firmware changed [ 225.501774][ T5931] usb 3-1: USB disconnect, device number 23 [ 225.733974][ T5808] usb 4-1: USB disconnect, device number 15 [ 225.861576][ T5931] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 226.041349][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 226.065242][ T7418] netlink: 'syz.3.510': attribute type 9 has an invalid length. [ 226.090130][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.090175][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.090196][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.156071][ T5931] usb 3-1: config 0 descriptor?? [ 226.175304][ T5931] hub 3-1:0.0: bad descriptor, ignoring hub [ 226.175343][ T5931] hub 3-1:0.0: probe with driver hub failed with error -5 [ 226.211021][ T5931] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 227.099635][ T5876] usb 1-1: USB disconnect, device number 31 [ 227.721440][ T5876] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 227.872985][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 227.875317][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.875342][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.875376][ T5876] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 227.875397][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.931500][ T5876] usb 1-1: config 0 descriptor?? [ 228.067169][ T5876] usb 2-1: USB disconnect, device number 22 [ 228.181422][ T5877] usb 1-1: USB disconnect, device number 32 [ 228.480405][ T5876] usb 3-1: USB disconnect, device number 24 [ 229.098791][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.309408][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 229.319755][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.335502][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 229.335529][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.335548][ T9] usb 4-1: Product: syz [ 229.335561][ T9] usb 4-1: Manufacturer: syz [ 229.335574][ T9] usb 4-1: SerialNumber: syz [ 229.694920][ T9] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 229.751384][ T5863] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 229.806788][ T9] usb 4-1: USB disconnect, device number 16 [ 229.957879][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.957905][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.969901][ T5863] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 229.969931][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.969949][ T5863] usb 2-1: Product: syz [ 229.969962][ T5863] usb 2-1: Manufacturer: syz [ 229.969975][ T5863] usb 2-1: SerialNumber: syz [ 230.036622][ T5863] usb 2-1: config 0 descriptor?? [ 230.721504][ T7485] ksmbd: Unknown IPC event: 0, ignore. [ 231.001367][ T5863] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.166856][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 231.169653][ T5863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.186924][ T5863] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.186941][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.186952][ T5863] usb 4-1: Product: syz [ 231.186959][ T5863] usb 4-1: Manufacturer: syz [ 231.186966][ T5863] usb 4-1: SerialNumber: syz [ 231.197180][ T5863] usb 4-1: config 0 descriptor?? [ 231.199351][ T7490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 231.245513][ T5863] hub 4-1:0.0: bad descriptor, ignoring hub [ 231.245535][ T5863] hub 4-1:0.0: probe with driver hub failed with error -5 [ 231.961394][ T5863] usb 2-1: USB disconnect, device number 23 [ 231.991338][ T9] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 232.121396][ T7490] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 232.143518][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.143543][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.143585][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.143597][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.193921][ T9] usb 1-1: config 0 descriptor?? [ 232.218288][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.218337][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 232.289870][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.292379][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.292430][ T9] usb 1-1: media controller created [ 232.303680][ T7502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.323905][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.344643][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 232.344724][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 232.455358][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 232.475211][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 232.475233][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 232.631377][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 232.631407][ T5808] dvb-usb: error while querying for an remote control event. [ 232.711365][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 232.791402][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 232.791432][ T5931] dvb-usb: error while querying for an remote control event. [ 232.881387][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 232.934182][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.934208][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.934241][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 232.934262][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.939753][ T9] usb 2-1: config 0 descriptor?? [ 232.951304][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 232.951333][ T5931] dvb-usb: error while querying for an remote control event. [ 233.071326][ T5876] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 233.111371][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 233.111403][ T9] dvb-usb: error while querying for an remote control event. [ 233.231066][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.231085][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.257972][ T5876] usb 3-1: config 0 descriptor?? [ 233.272632][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 233.272665][ T9] dvb-usb: error while querying for an remote control event. [ 233.302214][ T5876] cp210x 3-1:0.0: cp210x converter detected [ 233.431343][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 233.431375][ T9] dvb-usb: error while querying for an remote control event. [ 233.492948][ T5863] usb 1-1: USB disconnect, device number 33 [ 233.658234][ T5863] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 233.676281][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.930563][ T808] usb 4-1: USB disconnect, device number 17 [ 234.722427][ T5931] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.911745][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 234.916993][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.917019][ T5931] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.917055][ T5931] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 234.917076][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.443742][ T5931] usb 4-1: config 0 descriptor?? [ 235.630720][ T5863] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 235.689756][ T5877] usb 4-1: USB disconnect, device number 18 [ 235.781466][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 235.789305][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.789329][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.789596][ T5863] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 235.789619][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.881843][ T5863] usb 1-1: config 0 descriptor?? [ 237.028757][ T5877] usb 2-1: USB disconnect, device number 24 [ 238.301370][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 238.364551][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 238.364569][ T5876] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 238.411667][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0 [ 238.427449][ T5876] usb 3-1: USB disconnect, device number 25 [ 238.439934][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.451281][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 238.457509][ T5876] cp210x 3-1:0.0: device disconnected [ 238.496449][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.499968][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.503542][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.503571][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.503588][ T9] usb 2-1: Product: я [ 238.503601][ T9] usb 2-1: Manufacturer: ᰉ [ 238.503614][ T9] usb 2-1: SerialNumber: ь [ 238.531331][ T5931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.701841][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 238.703967][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.703996][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.704085][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.704108][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.804506][ T5931] usb 4-1: config 0 descriptor?? [ 238.809665][ T5931] hub 4-1:0.0: USB hub found [ 238.991306][ T5876] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 239.013185][ T5931] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 239.040196][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 239.040371][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.084607][ T5931] usb 4-1: USB disconnect, device number 19 [ 239.146951][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 239.152267][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.152320][ T5876] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 239.152343][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.157867][ T5876] usb 3-1: config 0 descriptor?? [ 239.165205][ T5876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 239.861718][ T5863] usb 1-1: USB disconnect, device number 34 [ 240.122498][ T5931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.271469][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 240.274844][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 240.278173][ T5931] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 240.278201][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 240.278288][ T5931] usb 4-1: Product: syz [ 240.278302][ T5931] usb 4-1: Manufacturer: syz [ 240.278315][ T5931] usb 4-1: SerialNumber: syz [ 240.344508][ T5931] usb 4-1: config 0 descriptor?? [ 240.353274][ T7595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.368981][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub [ 240.369022][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5 [ 240.907939][ T7610] netlink: 'syz.0.584': attribute type 9 has an invalid length. [ 241.321507][ T7595] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 241.476716][ T7595] usb 4-1: device firmware changed [ 241.482590][ T5931] usb 4-1: USB disconnect, device number 20 [ 241.681345][ T5931] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 241.793279][ T5876] usb 3-1: USB disconnect, device number 26 [ 241.831298][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 241.833287][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 241.836935][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 241.837681][ T5931] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.837695][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 241.911549][ T5931] usb 4-1: config 0 descriptor?? [ 241.915237][ T7605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.945314][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub [ 241.945352][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5 [ 242.291875][ T5863] usb 4-1: USB disconnect, device number 21 [ 243.965058][ T9] usb 2-1: bad CDC descriptors [ 244.001332][ T9] usb 2-1: USB disconnect, device number 25 [ 244.733896][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 245.276798][ T7662] netlink: 'syz.1.604': attribute type 20 has an invalid length. [ 245.276821][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 245.480351][ T7662] netlink: 'syz.1.604': attribute type 20 has an invalid length. [ 245.480400][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 247.181812][ T7689] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 248.098907][ T5877] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 248.261367][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 248.263717][ T5877] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 248.263742][ T5877] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 248.266586][ T5877] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 248.266612][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.266636][ T5877] usb 1-1: Product: syz [ 248.266649][ T5877] usb 1-1: Manufacturer: syz [ 248.266663][ T5877] usb 1-1: SerialNumber: syz [ 248.274302][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 248.371353][ T1229] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.428455][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 248.430837][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.444938][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.444965][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.449032][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 248.449050][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.449060][ T9] usb 3-1: Product: syz [ 248.449067][ T9] usb 3-1: Manufacturer: syz [ 248.449074][ T9] usb 3-1: SerialNumber: syz [ 248.460285][ T9] usb 3-1: config 0 descriptor?? [ 248.521265][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 248.523714][ T1229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.531157][ T1229] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.531970][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.531993][ T1229] usb 4-1: Product: syz [ 248.532007][ T1229] usb 4-1: Manufacturer: syz [ 248.532021][ T1229] usb 4-1: SerialNumber: syz [ 248.557965][ T1229] usb 4-1: config 0 descriptor?? [ 248.561896][ T7718] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 248.568405][ T1229] hub 4-1:0.0: bad descriptor, ignoring hub [ 248.568442][ T1229] hub 4-1:0.0: probe with driver hub failed with error -5 [ 248.601671][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.624809][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.649639][ T9] usb 1-1: USB disconnect, device number 35 [ 248.924243][ T7741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.491354][ T7718] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 249.611311][ T5863] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 249.656355][ T7742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.764947][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.764974][ T5863] usb 1-1: config 0 has no interfaces? [ 249.764992][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 249.765003][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.770478][ T5863] usb 1-1: config 0 descriptor?? [ 250.491364][ T57] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.571381][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 250.602700][ T57] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.671409][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 250.695607][ T989] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.761409][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 250.786714][ T4225] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.851447][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 250.871393][ T1229] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 250.873818][ T989] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.943454][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 250.965120][ T989] raw-gadget.0 gadget.3: failed to queue suspend event [ 251.022125][ T1229] usb 2-1: Using ep0 maxpacket: 32 [ 251.028200][ T1229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.028250][ T1229] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 251.028262][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.031437][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 251.034127][ T1229] usb 2-1: config 0 descriptor?? [ 251.044044][ T1229] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 251.056301][ T4225] raw-gadget.0 gadget.3: failed to queue suspend event [ 251.149447][ T7718] raw-gadget.0 gadget.3: failed to queue resume event [ 251.175304][ T4225] raw-gadget.0 gadget.3: failed to queue suspend event [ 251.211656][ T7718] raw-gadget.0 gadget.3: failed to queue disconnect event [ 251.321977][ T1229] usb 4-1: USB disconnect, device number 22 [ 251.486877][ T9] usb 3-1: USB disconnect, device number 27 [ 252.426401][ T5863] usb 1-1: USB disconnect, device number 36 [ 252.611370][ T5876] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 252.631384][ T1229] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 252.741325][ T5876] usb 3-1: device descriptor read/64, error -71 [ 252.783300][ T1229] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 252.783327][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.792700][ T1229] usb 4-1: config 0 descriptor?? [ 252.824244][ T1229] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 252.871290][ T5863] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 252.991362][ T5876] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 253.035619][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.035674][ T5863] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 253.035697][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.070162][ T5863] usb 1-1: config 0 descriptor?? [ 253.082997][ T5863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 253.131451][ T5876] usb 3-1: device descriptor read/64, error -71 [ 253.217687][ T1229] gspca_stv06xx: I2C: Read error writing address: -71 [ 253.230583][ T1229] usb 4-1: USB disconnect, device number 23 [ 253.252028][ T5876] usb usb3-port1: attempt power cycle [ 253.591327][ T5876] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 253.613089][ T5876] usb 3-1: device descriptor read/8, error -71 [ 253.635559][ T1229] usb 2-1: USB disconnect, device number 26 [ 253.851395][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 253.872717][ T5876] usb 3-1: device descriptor read/8, error -71 [ 253.981689][ T5876] usb usb3-port1: unable to enumerate USB device [ 254.072619][ T1229] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 254.223521][ T1229] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.223548][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.227248][ T1229] usb 2-1: config 0 descriptor?? [ 254.646914][ T1229] usb 2-1: Cannot read MAC address [ 254.647165][ T1229] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 254.656948][ T1229] usb 2-1: USB disconnect, device number 27 [ 255.611447][ T5808] usb 1-1: USB disconnect, device number 37 [ 256.010018][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.010084][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.061474][ T5808] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 256.211298][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 256.213426][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.213455][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.213489][ T5808] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.213510][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.222424][ T5808] usb 1-1: config 0 descriptor?? [ 256.244212][ T5808] hub 1-1:0.0: USB hub found [ 256.311981][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 256.445867][ T5808] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 256.463487][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.463541][ T5877] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 256.463562][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.475568][ T5808] usbhid 1-1:0.0: can't add hid device: -71 [ 256.476571][ T5808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.512549][ T5808] usb 1-1: USB disconnect, device number 38 [ 256.563221][ T5877] usb 2-1: config 0 descriptor?? [ 256.622995][ T5877] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 256.951113][ T7983] netlink: 'syz.2.742': attribute type 20 has an invalid length. [ 256.951358][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 257.467945][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.468152][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.468180][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.468201][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.513898][ T7983] netlink: 'syz.2.742': attribute type 20 has an invalid length. [ 257.513920][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 257.781429][ T5808] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 257.951063][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 257.961033][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.971958][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.101440][ T5877] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.259441][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 258.272317][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.272350][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.272387][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.272409][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.280251][ T5877] usb 4-1: config 0 descriptor?? [ 258.379148][ T5877] hub 4-1:0.0: USB hub found [ 258.549221][ T5877] hub 4-1:0.0: 1 port detected [ 259.074681][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.076715][ T5808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 259.076750][ T5808] usb 1-1: can't read configurations, error -71 [ 259.161590][ T5877] hub 4-1:0.0: activate --> -90 [ 259.170672][ T5863] usb 2-1: USB disconnect, device number 28 [ 259.362651][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 259.362986][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 259.363394][ T5877] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 259.408271][ T12] usb 4-1: Failed to suspend device, error -71 [ 259.411348][ T1229] usb 4-1: USB disconnect, device number 24 [ 259.470468][ T8021] netlink: 'syz.1.759': attribute type 9 has an invalid length. [ 259.545566][ T8021] netlink: 'syz.1.759': attribute type 11 has an invalid length. [ 262.131332][ T5863] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 262.181320][ T5931] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 262.281300][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 262.283286][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 262.284220][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.284233][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.286167][ T5863] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 262.286182][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.286192][ T5863] usb 1-1: Product: syz [ 262.286199][ T5863] usb 1-1: Manufacturer: syz [ 262.286207][ T5863] usb 1-1: SerialNumber: syz [ 262.289187][ T5863] usb 1-1: config 0 descriptor?? [ 262.351328][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 262.378663][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.378689][ T5931] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.378724][ T5931] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 262.378745][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.441478][ T5931] usb 3-1: config 0 descriptor?? [ 264.099529][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 264.271335][ T5808] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 264.541555][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 264.548495][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.548521][ T5808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.548558][ T5808] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 264.548580][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.615330][ T5808] usb 2-1: config 0 descriptor?? [ 264.895865][ T36] usb 3-1: USB disconnect, device number 32 [ 265.569124][ T5808] usb 1-1: USB disconnect, device number 41 [ 265.942828][ T5931] usb 2-1: USB disconnect, device number 29 [ 266.021326][ T5808] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 266.256798][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 266.274203][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.274724][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.782843][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.788256][ T5808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 266.788294][ T5808] usb 1-1: can't read configurations, error -71 [ 267.381796][ T5877] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 267.561301][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 267.577414][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.587943][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.587966][ T5877] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.595044][ T5877] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 267.595082][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.595099][ T5877] usb 3-1: Product: syz [ 267.595107][ T5877] usb 3-1: Manufacturer: syz [ 267.595114][ T5877] usb 3-1: SerialNumber: syz [ 267.599858][ T5877] usb 3-1: config 0 descriptor?? [ 268.909051][ T1229] IPVS: starting estimator thread 0... [ 268.974209][ T5931] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 269.026426][ T8187] IPVS: using max 15 ests per chain, 36000 per kthread [ 269.153698][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.153725][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.158705][ T5931] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 269.158731][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.158742][ T5931] usb 2-1: Product: syz [ 269.158749][ T5931] usb 2-1: Manufacturer: syz [ 269.158756][ T5931] usb 2-1: SerialNumber: syz [ 269.162804][ T5931] usb 2-1: config 0 descriptor?? [ 270.091312][ T5876] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 270.344703][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.345238][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.973519][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.974517][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 270.974552][ T5876] usb 1-1: can't read configurations, error -71 [ 271.371415][ T1229] usb 2-1: USB disconnect, device number 30 [ 271.580986][ T5877] usb 3-1: USB disconnect, device number 33 [ 271.745473][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 271.750234][ T8234] netlink: 'syz.1.832': attribute type 11 has an invalid length. [ 271.758568][ T8236] netlink: 'syz.0.834': attribute type 20 has an invalid length. [ 271.758581][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 271.766624][ T8236] netlink: 'syz.0.834': attribute type 20 has an invalid length. [ 271.766639][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 271.768089][ T4225] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.770278][ T4225] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.770333][ T4225] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.904782][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 271.906952][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.906976][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.907011][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 271.907030][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.910230][ T9] usb 4-1: config 0 descriptor?? [ 272.129583][ T5931] usb 4-1: USB disconnect, device number 25 [ 275.146485][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 276.761345][ T8013] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 276.947747][ T8013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.947775][ T8013] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.973489][ T8013] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 276.973519][ T8013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.973539][ T8013] usb 3-1: Product: syz [ 276.973553][ T8013] usb 3-1: Manufacturer: syz [ 276.973566][ T8013] usb 3-1: SerialNumber: syz [ 277.035509][ T8013] usb 3-1: config 0 descriptor?? [ 277.332080][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.332680][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.421436][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 277.571333][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 277.703107][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.703136][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.703172][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 277.703194][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.709416][ T9] usb 4-1: config 0 descriptor?? [ 278.658102][ T9] usb 4-1: USB disconnect, device number 26 [ 280.931582][ T8325] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 281.051442][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 281.202256][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 281.225184][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.243437][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.243464][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.290006][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 281.290038][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.290058][ T9] usb 1-1: Product: syz [ 281.290072][ T9] usb 1-1: Manufacturer: syz [ 281.290085][ T9] usb 1-1: SerialNumber: syz [ 281.306295][ T9] usb 1-1: config 0 descriptor?? [ 281.748109][ T8333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.834787][ T5876] usb 3-1: USB disconnect, device number 34 [ 282.581345][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 282.732050][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 282.734589][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.734614][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.734647][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 282.734668][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.739359][ T9] usb 3-1: config 0 descriptor?? [ 283.421305][ T5877] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 283.571333][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 283.580122][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.593977][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.593994][ T5877] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.629348][ T5877] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 283.633243][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.633277][ T5877] usb 2-1: Product: syz [ 283.633291][ T5877] usb 2-1: Manufacturer: syz [ 283.633302][ T5877] usb 2-1: SerialNumber: syz [ 283.640393][ T5877] usb 2-1: config 0 descriptor?? [ 284.050536][ T5877] usb 1-1: USB disconnect, device number 46 [ 285.420561][ T9] usb 3-1: USB disconnect, device number 35 [ 285.641343][ T5931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 285.806216][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 285.806247][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.830857][ T5931] usb 4-1: config 0 descriptor?? [ 285.844420][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 286.201431][ T5863] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 286.296915][ T5877] usb 2-1: USB disconnect, device number 31 [ 286.356450][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.356478][ T5863] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.400392][ T5863] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 286.400423][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.400442][ T5863] usb 3-1: Product: syz [ 286.400456][ T5863] usb 3-1: Manufacturer: syz [ 286.400477][ T5863] usb 3-1: SerialNumber: syz [ 286.439976][ T5863] usb 3-1: config 0 descriptor?? [ 288.412757][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.414387][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.491544][ T8013] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 288.492234][ T5931] usb 4-1: USB disconnect, device number 27 [ 288.650827][ T8013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.650854][ T8013] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.663171][ T8013] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 288.663202][ T8013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.663221][ T8013] usb 2-1: Product: syz [ 288.663243][ T8013] usb 2-1: Manufacturer: syz [ 288.663256][ T8013] usb 2-1: SerialNumber: syz [ 288.679476][ T8013] usb 2-1: config 0 descriptor?? [ 289.131321][ T8013] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 289.281372][ T8013] usb 4-1: Using ep0 maxpacket: 32 [ 289.285890][ T8013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.288490][ T8013] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 289.288512][ T8013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.288522][ T8013] usb 4-1: Product: syz [ 289.288529][ T8013] usb 4-1: Manufacturer: syz [ 289.288536][ T8013] usb 4-1: SerialNumber: syz [ 289.574580][ T8013] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 289.605528][ T8013] usb 4-1: USB disconnect, device number 28 [ 290.184026][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 290.184586][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 290.240475][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 290.240592][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 290.365911][ T5877] usb 2-1: USB disconnect, device number 32 [ 290.496819][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 290.496948][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 290.611338][ T8013] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 290.666121][ T5863] usb 3-1: USB disconnect, device number 36 [ 290.692467][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 290.878804][ T8453] ceph: No mds server is up or the cluster is laggy [ 290.926137][ T8013] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.926153][ T8013] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.972749][ T8013] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 290.972768][ T8013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.972778][ T8013] usb 4-1: Product: syz [ 290.972785][ T8013] usb 4-1: Manufacturer: syz [ 290.972793][ T8013] usb 4-1: SerialNumber: syz [ 290.978539][ T8013] usb 4-1: config 0 descriptor?? [ 291.031483][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 291.031650][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 291.770889][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.786721][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.801400][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.811975][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.816428][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.870027][ T5966] usb 4-1: USB disconnect, device number 29 [ 294.161473][ T5804] Bluetooth: hci5: command tx timeout [ 295.080546][ T117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.531386][ T5876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 295.558594][ T117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.583456][ T5808] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 295.705864][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 295.705895][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.710938][ T5876] usb 4-1: config 0 descriptor?? [ 295.743667][ T5876] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 295.757783][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 295.771322][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.777995][ T5808] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 295.778024][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.778042][ T5808] usb 3-1: Product: syz [ 295.778056][ T5808] usb 3-1: Manufacturer: syz [ 295.778069][ T5808] usb 3-1: SerialNumber: syz [ 295.881340][ T5863] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 296.061359][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 296.065940][ T5863] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 296.065997][ T5863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.066020][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.066043][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.066065][ T5863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.066106][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.066128][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.251366][ T5804] Bluetooth: hci5: command tx timeout [ 296.310471][ T117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.331026][ T5863] usb 2-1: usb_control_msg returned -32 [ 296.337469][ T5863] usbtmc 2-1:16.0: can't read capabilities [ 296.574062][ T5863] usb 2-1: USB disconnect, device number 33 [ 297.078732][ T5808] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 297.096485][ T5808] usb 3-1: USB disconnect, device number 37 [ 297.280675][ T117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.054532][ T1229] usb 4-1: USB disconnect, device number 30 [ 298.342414][ T5804] Bluetooth: hci5: command tx timeout [ 298.716587][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 298.782579][ T8013] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 298.964150][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'. [ 299.066351][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.066889][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.090347][ T5808] IPVS: starting estimator thread 0... [ 300.172884][ T8537] IPVS: using max 14 ests per chain, 33600 per kthread [ 300.419502][ T5804] Bluetooth: hci5: command tx timeout [ 301.035308][ T8013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 301.036264][ T8013] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 301.036299][ T8013] usb 2-1: can't read configurations, error -71 [ 301.250134][ T117] bridge_slave_1: left allmulticast mode [ 301.250315][ T117] bridge_slave_1: left promiscuous mode [ 301.279166][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.425293][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'. [ 301.598177][ T117] bridge_slave_0: left allmulticast mode [ 301.598197][ T117] bridge_slave_0: left promiscuous mode [ 301.598502][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.011351][ T1229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 303.163650][ T5808] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 303.165862][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 303.169063][ T1229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.170863][ T1229] usb 4-1: config 3 has an invalid interface number: 182 but max is 0 [ 303.170888][ T1229] usb 4-1: config 3 has an invalid descriptor of length 109, skipping remainder of the config [ 303.170908][ T1229] usb 4-1: config 3 has no interface number 0 [ 303.171036][ T1229] usb 4-1: config 3 interface 182 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 303.171064][ T1229] usb 4-1: config 3 interface 182 has no altsetting 0 [ 303.248293][ T1229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 303.248323][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.248340][ T1229] usb 4-1: Product: syz [ 303.248347][ T1229] usb 4-1: Manufacturer: syz [ 303.248355][ T1229] usb 4-1: SerialNumber: syz [ 303.474494][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.474522][ T5808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.480094][ T5808] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 303.480175][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.480195][ T5808] usb 2-1: Product: syz [ 303.480209][ T5808] usb 2-1: Manufacturer: syz [ 303.480222][ T5808] usb 2-1: SerialNumber: syz [ 303.637963][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.651992][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.689809][ T5808] usb 2-1: config 0 descriptor?? [ 303.713904][ T1229] usbtest 4-1:3.182: couldn't get endpoints, -22 [ 303.713960][ T1229] usbtest 4-1:3.182: probe with driver usbtest failed with error -22 [ 303.816454][ T1229] usb 4-1: USB disconnect, device number 31 [ 304.298388][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.372898][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.417382][ T117] bond0 (unregistering): Released all slaves [ 304.453314][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.453427][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.453624][ T8471] bridge_slave_0: entered allmulticast mode [ 304.456058][ T8471] bridge_slave_0: entered promiscuous mode [ 304.498016][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.498136][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.498354][ T8471] bridge_slave_1: entered allmulticast mode [ 304.548599][ T8471] bridge_slave_1: entered promiscuous mode [ 304.633816][ T1229] usb 2-1: USB disconnect, device number 36 [ 305.252231][ T117] tipc: Left network mode [ 305.782829][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.248688][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.781403][ T1229] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 308.021949][ T8589] input: syz0 as /devices/virtual/input/input8 [ 308.051366][ T1229] usb 2-1: Using ep0 maxpacket: 8 [ 308.113474][ T1229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.116275][ T1229] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 308.116304][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.116324][ T1229] usb 2-1: Product: syz [ 308.116338][ T1229] usb 2-1: Manufacturer: syz [ 308.116351][ T1229] usb 2-1: SerialNumber: syz [ 308.161913][ T5808] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 308.311300][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 308.313837][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.313869][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.313906][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.313930][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.903559][ T5808] usb 4-1: config 0 descriptor?? [ 308.928512][ T1229] usb 2-1: config 0 descriptor?? [ 308.931528][ T1229] usb 2-1: can't set config #0, error -71 [ 309.039973][ T5808] hub 4-1:0.0: USB hub found [ 309.052062][ T1229] usb 2-1: USB disconnect, device number 37 [ 309.143134][ T5808] hub 4-1:0.0: 1 port detected [ 309.986840][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 309.987325][ T5808] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 310.018109][ T5863] usb 4-1: USB disconnect, device number 32 [ 310.021607][ T1363] usb 4-1: Failed to suspend device, error -19 [ 310.298086][ T8471] team0: Port device team_slave_0 added [ 310.316804][ T8471] team0: Port device team_slave_1 added [ 310.347550][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.956'. [ 310.396829][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.396840][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.396854][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.412460][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.412471][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.412485][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.756746][ T8471] hsr_slave_0: entered promiscuous mode [ 310.757457][ T8471] hsr_slave_1: entered promiscuous mode [ 310.757914][ T8471] debugfs: 'hsr0' already exists in 'hsr' [ 310.757931][ T8471] Cannot create hsr debugfs directory [ 312.332021][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.333390][ T5966] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.333410][ T5966] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 312.485171][ T8471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.524654][ T8471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.571817][ T8471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.609103][ T8471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.785930][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.806555][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.815782][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.815970][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.829859][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.830058][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.174745][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.586826][ T8471] veth0_vlan: entered promiscuous mode [ 313.608495][ T8471] veth1_vlan: entered promiscuous mode [ 313.659609][ T8471] veth0_macvtap: entered promiscuous mode [ 313.677314][ T8471] veth1_macvtap: entered promiscuous mode [ 313.709744][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.731744][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.753991][ T989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.754204][ T989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.754253][ T989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.754286][ T989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.401756][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.401858][ T5966] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 314.401875][ T5966] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 316.481477][ T5804] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.481500][ T5966] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 316.481517][ T5966] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 317.449852][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.449940][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.561412][ T5804] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.562157][ T5966] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 318.562177][ T5966] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 321.441441][ T5966] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 321.441467][ T5966] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 321.441607][ C1] ------------[ cut here ]------------ [ 321.441616][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 321.441654][ C1] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#1: ktimers/1/29 [ 321.441689][ C1] Modules linked in: [ 321.441720][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.441741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.441757][ C1] RIP: 0010:__queue_work+0xd40/0xff0 [ 321.441787][ C1] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e0 10 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 321.441805][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010082 [ 321.441817][ C1] RAX: 1ffff11006645153 RBX: ffff888033228a98 RCX: ffff88801d2bbc80 [ 321.441828][ C1] RDX: ffff888063008168 RSI: ffffffff8a132f70 RDI: ffffffff8f6cfb90 [ 321.441840][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 321.441851][ C1] R10: dffffc0000000000 R11: ffffffff818d5250 R12: 0000000000000100 [ 321.441861][ C1] R13: dffffc0000000000 R14: ffffffff8f6cfb90 R15: ffff888063008168 [ 321.441873][ C1] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 321.441885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.441895][ C1] CR2: 00007f3c194122fb CR3: 000000000dbba000 CR4: 00000000003526f0 [ 321.441908][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.441920][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 321.441934][ C1] Call Trace: [ 321.441946][ C1] [ 321.441963][ C1] call_timer_fn+0x192/0x640 [ 321.441980][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 321.442005][ C1] ? call_timer_fn+0xd4/0x640 [ 321.442019][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 321.442043][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 321.442064][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 321.442097][ C1] __run_timer_base+0x764/0x9f0 [ 321.442133][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 321.442167][ C1] run_timer_softirq+0xb7/0x170 [ 321.442189][ C1] handle_softirqs+0x1de/0x6f0 [ 321.442218][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 321.442240][ C1] run_ktimerd+0x69/0x100 [ 321.442265][ C1] smpboot_thread_fn+0x541/0xa50 [ 321.442290][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 321.442319][ C1] kthread+0x388/0x470 [ 321.442337][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.442360][ C1] ? __pfx_kthread+0x10/0x10 [ 321.442377][ C1] ret_from_fork+0x51e/0xb90 [ 321.442404][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.442427][ C1] ? __switch_to+0xc7d/0x1450 [ 321.442451][ C1] ? __pfx_kthread+0x10/0x10 [ 321.442470][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.442500][ C1] [ 321.442515][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.442527][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.442544][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.442552][ C1] Call Trace: [ 321.442558][ C1] [ 321.442564][ C1] vpanic+0x56c/0xa60 [ 321.442588][ C1] ? __pfx__printk+0x10/0x10 [ 321.442604][ C1] ? __pfx_vpanic+0x10/0x10 [ 321.442626][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 321.442648][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 321.442673][ C1] panic+0xc5/0xd0 [ 321.442694][ C1] ? __pfx_panic+0x10/0x10 [ 321.442722][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 321.442740][ C1] __warn+0x315/0x4f0 [ 321.442761][ C1] ? __queue_work+0xd16/0xff0 [ 321.442786][ C1] ? __queue_work+0xd16/0xff0 [ 321.442807][ C1] __report_bug+0x29a/0x540 [ 321.442826][ C1] ? insert_work+0x3d/0x330 [ 321.442845][ C1] ? __queue_work+0xbb3/0xff0 [ 321.442870][ C1] ? call_timer_fn+0x192/0x640 [ 321.442891][ C1] ? __queue_work+0xd16/0xff0 [ 321.442916][ C1] ? __pfx___report_bug+0x10/0x10 [ 321.442934][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 321.442960][ C1] ? look_up_lock_class+0x57/0x110 [ 321.442982][ C1] ? register_lock_class+0x31/0x2e0 [ 321.443012][ C1] report_bug_entry+0x19a/0x290 [ 321.443031][ C1] ? __queue_work+0xd40/0xff0 [ 321.443051][ C1] ? __queue_work+0xd45/0xff0 [ 321.443071][ C1] handle_bug+0xca/0x200 [ 321.443140][ C1] exc_invalid_op+0x1a/0x50 [ 321.443162][ C1] asm_exc_invalid_op+0x1a/0x20 [ 321.443178][ C1] RIP: 0010:__queue_work+0xd40/0xff0 [ 321.443200][ C1] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e0 10 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 321.443213][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010082 [ 321.443226][ C1] RAX: 1ffff11006645153 RBX: ffff888033228a98 RCX: ffff88801d2bbc80 [ 321.443238][ C1] RDX: ffff888063008168 RSI: ffffffff8a132f70 RDI: ffffffff8f6cfb90 [ 321.443249][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 321.443258][ C1] R10: dffffc0000000000 R11: ffffffff818d5250 R12: 0000000000000100 [ 321.443269][ C1] R13: dffffc0000000000 R14: ffffffff8f6cfb90 R15: ffff888063008168 [ 321.443284][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 321.443312][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 321.443347][ C1] call_timer_fn+0x192/0x640 [ 321.443362][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 321.443385][ C1] ? call_timer_fn+0xd4/0x640 [ 321.443401][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 321.443425][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 321.443448][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 321.443476][ C1] __run_timer_base+0x764/0x9f0 [ 321.443512][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 321.443547][ C1] run_timer_softirq+0xb7/0x170 [ 321.443571][ C1] handle_softirqs+0x1de/0x6f0 [ 321.443602][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 321.443628][ C1] run_ktimerd+0x69/0x100 [ 321.443653][ C1] smpboot_thread_fn+0x541/0xa50 [ 321.443680][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 321.443713][ C1] kthread+0x388/0x470 [ 321.443733][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.443760][ C1] ? __pfx_kthread+0x10/0x10 [ 321.443780][ C1] ret_from_fork+0x51e/0xb90 [ 321.443805][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.443825][ C1] ? __switch_to+0xc7d/0x1450 [ 321.443848][ C1] ? __pfx_kthread+0x10/0x10 [ 321.443865][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.443892][ C1] [ 321.445046][ C1] Kernel Offset: disabled