last executing test programs: 10.298668287s ago: executing program 0 (id=1618): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x560e, 0x2) 10.224418009s ago: executing program 0 (id=1619): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1216}, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0x61a5}}, 0x48) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x4, "67deed26"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002600)={0x34, &(0x7f0000002380)={0x0, 0x16, 0x4, "b34f2667"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.254324426s ago: executing program 0 (id=1632): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (rerun: 64) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.294501176s ago: executing program 1 (id=1634): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000000206050000000000000000000100000405000400000000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x5bd900) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x84ed}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000400)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000340)=[r5], &(0x7f0000000280), 0x0, 0x0, 0x0, 0x7f}) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x10000000004a7, 0x401780) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f000001f880)={0x0, &(0x7f0000000280)=[{}], r7, 0x0, '\x00', 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000580)={0x0, 0x5, 0x1, {0xa, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.29415618s ago: executing program 0 (id=1635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10201, 0x0) fsopen(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x129b01) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x15) close(r0) 5.197371926s ago: executing program 0 (id=1637): ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000a80)={0x4}) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x2, 0xba, {0xba, 0x3, "1c48adda904e475d86fdd3730207bb5626b22d6897dfc903b091c9a04e078d0cc64e838caac6e6a08fa919d9c0a3b5baef2964344f9327c32dc5330452b9d0f125ca95614ad8f254de22ca79126a3435a84c0cca6859bcfc50e381d8196d3a24dac316388d50eec5551a7ac423d4e5f8659c1607838e8f9e663f2e21c144528844351de5b4930aa6fbaa74cf8e356b83383340fb7fb84f64ca6f687b941062b13555d7de2d5cbad9b56e14892e99720a55054d4d80d339d7"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="000ca7000000bf8f60023c44a9a6c108c8b17d7282253be4829b19e5d3496d86ebf1281b985a37d195c6b9382cdd622e1c70ece09565d8d43b5e67a3f303ce0db060b9fbc5347cb371eeea177cf258731f8d6649f8ff1756241da9d2250112c8084921aaf2ffebc79f25026f2a71020c7b32d3f3c5b375239bad12ded87e5b591ee186d8dd071373d33e13628b7b5aae920d549a6ace00000000797d3f566ecfb5ce74913afd673ff58aa45f28a524ef03d4de7f2816b3b718f125d893e52efba59400000000c49bbd2700"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f00000008c0)={0x38, r2, 0x10, 0x1, 0xfffffffc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000ac54b400200220f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={0x1, 0x2, 0xc}, 0x18) openat(r3, &(0x7f0000000780)='./file0\x00', 0x20c000, 0x12) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x0, 0xa, 0x7, {0x7, 0x21, "382c11cc99"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="000304000000040309a8"]}, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x31, 0xfffffffffffffd3e, "9dcdabd3781ce1c4e01a7d874877f621d50348f5d5baa2c3b240cff8dde5081202e462719b04a96f434f5f6e2b4c32800651b395f92ac6245c20adcf61a9e9022adf0e2f222d44db569ec3457199811ee2e790e1ee9b501b29766845f8f3273a282b05634cf7bb1216cf2dbdb5c2c82cc6342c5eafc41f5ab5b0d4da9fe26eb088aa709574fab25f1e152f9ee3357a8f39efa8cf3baeb515"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xa2}, &(0x7f00000005c0)=ANY=[@ANYBLOB="f7080000000000000088b0000000000000000000"], &(0x7f0000000600)={0x20, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x8}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4, 0x2}, {0x2}], 0x2) semctl$GETNCNT(r5, 0x2, 0xe, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5.193262249s ago: executing program 1 (id=1638): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff1}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r3 = syz_usb_connect$uac1(0x1, 0xb8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="3edc2a9cad5a49ca5a96b6fcd3fd8d72fc944cf59eddba24ab38555a9f2126b2c4fe6303c94d37a95a4ddfdf5889afb7423951c4de5aef9fabcfb26e0993c9fbb391a60d1615a3919556e51d49972c145cff24e9c5779f961181aa6f6e66a24ce0e73febae677bc3bdfac24a39b3e66fabc33bcaccbba4b576abc0858b4578dd0b5e2facb1173dbbb5b7b1c7f916ff4598de2eb6baa6cb6843e1f1de2386783813b92db36f81924a6da6c32ae8ab58f5466f60f161a57a2de8d15404d3a11d16deb549c796ff5d2be609a9b2eda642eaf017551eb1"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r5, &(0x7f0000001500)={0x2020}, 0x2020) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x1e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="308101040000d6"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.909167s ago: executing program 2 (id=1642): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0xcd, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0xae, 0x91, 0x40, 0x5ac, 0x259, 0xf0b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x3, 0x72, 0x2}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb", 0x9e}], 0x1}, 0x48002) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100002008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x1000, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x0, 0x8001}, 0x6, 0x0, 0x0, 0x0, 0x0}}) 4.326468366s ago: executing program 2 (id=1643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x20, 0xd, 0x6, {0x6, 0x21, "2d77f597"}}, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x6, 0x6, 0x40, 0x7, 0x76b7}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) close_range(r1, 0xffffffffffffffff, 0x0) 3.638624229s ago: executing program 2 (id=1644): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') write(r0, &(0x7f0000000040)="6b3ce8b09580d295a2a665ee66d9b633b7455257bf5ff35960c50abf9235ce2de9a6f772833fb8fb19fe760c63b6ae946d789f55eabcd7d8681e4e55be42f22361d8f754a30cb13b05dd3cbdad2d6cc50b65e7cb", 0x54) (async) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) exit(0x7) (async) statx(r0, 0x0, 0x1000, 0x10, 0x0) (async) syz_usb_connect$uac1(0x1, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x1, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x81, "0a49cd1704"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0x5, "3707000000f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xcb, 0x74, {0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x18, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x81, 0x7ff}}}}}}}]}}, &(0x7f0000000000)={0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x3}) 2.12761622s ago: executing program 1 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4000) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x1, 0x10010, r4, 0xabdec000) 2.014669355s ago: executing program 3 (id=1646): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, 0x0, 0x1800) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 2.009464502s ago: executing program 3 (id=1647): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x6, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) listen(r5, 0xf) fcntl$setpipe(r3, 0x407, 0x100004) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 1.973039878s ago: executing program 1 (id=1648): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x2000cf2c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r3, &(0x7f0000000140)="8afb", 0x2, 0x8001, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) read$FUSE(r4, &(0x7f0000000940)={0x2020}, 0x2020) 1.050430152s ago: executing program 3 (id=1649): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40345410, &(0x7f00000004c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x400454a4, 0xffffffffffffffff) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0xe) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="852885cae49122", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e00)="63dd58272ae72fcc6e5b58c3b631164e6812fe8ad21e82bc98928a0439caa0082e36e37a662be949775f8331197fff3aa3df51af864e995b2b9845689f522d203f98a18bbddb27de02dae01973dabe041bd8b8e505f544b9add73b180cf7f719a2fde9435e74c435d0997181f1ff473b1a7992fb911912ae59ae4d58434e915b702d01d6e054a464e5f4e5683c7397e81a3a6ad749b3398dbab898ea6b948968d51b8a84c6312f35fb13f1b46427991a318971", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="bd", 0x1}], 0x1}}], 0x3, 0x48800) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b45, 0x3) (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) 1.039136868s ago: executing program 1 (id=1650): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x658400, 0xf5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) close_range(r1, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x7}) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1.034283366s ago: executing program 3 (id=1651): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10a01, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) close(r1) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000240)=""/110, 0x6e, 0x100, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) read(r4, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TCSETS(r0, 0x8925, &(0x7f00000001c0)={0xd729, 0x2, 0x8, 0x7, 0x5, "f5f53646453df8814a84c60a2e83314eec1ab6"}) 878.688056ms ago: executing program 1 (id=1652): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25230000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x8004) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200322000000222495989bdbe73f444901dabc7bd815968059ec27772854ba39acb2"], 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 684.957135ms ago: executing program 0 (id=1653): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000040)={0x20, 0x11, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x4, 0xba, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0xe, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x96cd, 0xe}, [@selector_unit={0xa, 0x24, 0x5, 0x3, 0x3a, "c4d5223839"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x3, 0x2, 0x35, "fa8b10"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x6, 0x2, "ce25eabcbd836af778"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0xff, 0x3, {0x7, 0x25, 0x1, 0x82, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x8c, "560f64", "f2"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4aca, 0x8b, 0x8, "e88b9e0eb770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x6, 0x80, {0x7, 0x25, 0x1, 0x82, 0x8, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x4, 0x8, 0x20, 0x7}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x8c, 0x6, 0x2}]}, 0x4, [{0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "4d9015e51da4f5bf9e242d98c5dd7599bcb7991ef618e5edd7b393fb3818d6159f542a52a579746162438c73c7c404fe4663ddeb3743e04cc266d01721ed60e94e5e61b1c01f8d4533f9a4ac1809f8478adeba18ea5b13961f68a5357febdf6b7240653e88d12378eafbfacac1b1b9dc5efde0ee046fa1dc356b59d20bdd2875de21b5711d8ca3a8520368dd682bc8479b890e60a38097c7fed25da7a99bcd3b5a05da8bdd1a607f03d890bced2f99a91adc483c757fe80cd53772ebe367965a532d310cf2c74b36667c6a74c7edb4991e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x436}}, {0x19, &(0x7f0000000340)=@string={0x19, 0x3, "212cca63d31fbf8481197e9009a105f9f8b52e1837b5cb"}}]}) 146.173675ms ago: executing program 3 (id=1654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000980)="c8", 0xff82, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 50.597805ms ago: executing program 2 (id=1655): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000000240)=[r2], 0x0, 0x0, 0x0, 0x0, 0x300}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000680)="4df3acec40577f177a7757374c563e00329f9f03566cd5bf26530d4085efe228489605241b3df1d771be9d6fc7b39d509b8448af2f3cd55d4abd2fb0488a426ee96bc8c98669ae3f5c24056c21c8213be164b4c908e389da3abec6f0b4d40400000000000000c4f6fa33ddac8c80263ec457ecadd3f296eb08f1a87e4228e6829fc9c5513548470ec732851aa265273e339485fe4869ad95fa6aa0fd78a8880de7cb3855f34b90cfc2491d33218501ae9d1301431debb25713162bb1ae8b8fd3495a45b2546a00e68004e20778e3390a437d000000000000000000", 0xdb, r4) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) (async) keyctl$link(0x8, r6, r5) (async) pipe2$watch_queue(&(0x7f0000002240), 0x80) (async) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 64) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000cc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') (async) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xffffffffffffffff) (async, rerun: 64) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 64) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x2, 0x2, 0x1}) (async) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 50.006293ms ago: executing program 2 (id=1656): socket$igmp(0x2, 0x3, 0x2) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf252700000008000300", @ANYRES32=r4, @ANYBLOB="6f5241608a79d9f200000000e1c6cf3dd2d8655e6b530f890467a7866ceb0bb5d7ac1bf563b8bcd627ea76ccd888c3dde193c8f6f758088e653d271742d9da7087117498bc4506f63ab0e2b703f7f3b16291cfb97fff6409fb21b0107c9cfde223c69914bd4c4080abb4bdb3ba1ba0583c40b9da4b3c4f0dcce89ac316f3af8d7d024d3be42689ea2befb995dffb0cd246510a34d2ae6c6b64"], 0x28}, 0x1, 0x0, 0x0, 0x20004840}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f0000000400)=""/155, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0, 0x2000}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) (rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) (async) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000001980)={0x1, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x12}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 13.051797ms ago: executing program 3 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000500)={0x2a, 0x1}, 0xc) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) (async, rerun: 64) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000180)) (rerun: 64) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r7, 0xc074510c, 0x0) (async) r8 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) close(r7) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 0s ago: executing program 2 (id=1658): r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x249}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xfffffbff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1ff}], 0x2c) listen(r0, 0x100) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000240)="01", 0x1}, {&(0x7f0000000040)="e0", 0x1}, {&(0x7f0000000280)="38cb44cb406b37ec18fd7f697d9daaead6b5d4c13a4a4cba363f5da0524be6be0d77eb67587399c771892be7d48764c6f3bc04cb895b7227b6d43309ab93e1fce634ece72998cbe8533de69c93318ffed3600579d361edc185795a7d954a62611a7b", 0x62}, {&(0x7f0000000480)="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", 0xfc}, {&(0x7f0000000580)="8a8e20251797c4e38a4812b154a826dff2f24c7b30a2e36686aa46d161d55c10feed86f73c46fc9b7e38031ea0857cf120cf09daf37ee14675f79e5d5c3441c6920836e624ba0df4cda9b318dbdc05fcb4e7d5eb0b935faf3c977d0fa4146f09a4536d4438c86a7aac4404d1b6a2791dd68786fc3862f0dda87d25febdcedfead8c547473281d0748d087db3b7de1657b1f6de0c75", 0x95}], 0x5}, 0x49ae57ea648c7453) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="270100000b0f90201e041d407057010203010902120001000010200904ed00002b5b570009a8892fe0d4775e2498918f7168522b2eb6012cef1bebee23f0894849b497b8a76830af7b44d143ed798f10babf3756114a880db3c74ef28eaae774f5198130d1cb5a46645e1ec286060b8816a3d849d084e142b8ca80b0fa33daabdd4a8c6d92054e354fb9e9b9e2f7d2c64a407c1cdd007ff5606ffa5d82daea1d6df660f0e6391a0f747c9f5e2a725592673b2a7563c24d09a3d652ebe929bc57eeeaae54ad3bf750abcf27b0b2d433251e18457196e11ea644840fe16d86adb761aed57a03b5a2cd2b88571260382e8f9217bd32ab59975e8a4b235df9fba86304ea905c020f05afd8776be1fe34ea13f62cba5c71b29900ad2b09c2aeb2c205770b"], 0x0) kernel console output (not intermixed with test programs): idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 308.746494][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 308.755267][ T5862] usb 2-1: Product: syz [ 308.760759][ T5862] usb 2-1: SerialNumber: syz [ 308.767577][ T5862] usb 2-1: config 0 descriptor?? [ 308.994189][ T5917] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 309.124776][ T5917] usb 4-1: device descriptor read/64, error -71 [ 309.176287][ T5862] usb 2-1: USB disconnect, device number 105 [ 309.334206][ T5828] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 309.374153][ T5917] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 309.486098][ T5828] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.494164][ T5828] usb 1-1: config 0 has no interface number 0 [ 309.500413][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.511368][ T5917] usb 4-1: device descriptor read/64, error -71 [ 309.517683][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.527509][ T5828] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 309.536598][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.547211][ T5828] usb 1-1: config 0 descriptor?? [ 309.635033][ T5917] usb usb4-port1: attempt power cycle [ 309.949346][ T5195] Dev loop2: unable to read RDB block 7 [ 309.955170][ T5195] loop2: AHDI p1 p2 p3 [ 309.959418][ T5195] loop2: partition table partially beyond EOD, truncated [ 309.968766][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 309.974231][ T5917] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 309.975929][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 310.005156][ T5917] usb 4-1: device descriptor read/8, error -71 [ 310.064419][ T5195] Dev loop2: unable to read RDB block 7 [ 310.070090][ T5195] loop2: AHDI p1 p2 p3 [ 310.075064][ T5195] loop2: partition table partially beyond EOD, truncated [ 310.082375][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 310.089705][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 310.170420][ T5828] usbhid 1-1:0.1: can't add hid device: -71 [ 310.177193][ T5828] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 310.187385][ T5828] usb 1-1: USB disconnect, device number 116 [ 310.254194][ T5917] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 310.274727][ T5917] usb 4-1: device descriptor read/8, error -71 [ 310.324216][ T5862] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 310.384347][ T5917] usb usb4-port1: unable to enumerate USB device [ 310.485964][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.496755][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 310.507850][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.522474][ T5862] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 310.531541][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.539601][ T5862] usb 3-1: Product: syz [ 310.543759][ T5862] usb 3-1: Manufacturer: syz [ 310.548450][ T5862] usb 3-1: SerialNumber: syz [ 310.554921][ T5862] usb 3-1: config 0 descriptor?? [ 310.761292][ T5862] usb 3-1: USB disconnect, device number 118 [ 310.964182][ T5917] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 311.104291][ T5917] usb 2-1: device descriptor read/64, error -71 [ 311.154180][ T5862] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 311.284495][ T5862] usb 1-1: device descriptor read/64, error -71 [ 311.291142][ T5195] Dev loop2: unable to read RDB block 7 [ 311.296847][ T5195] loop2: AHDI p1 p2 p3 [ 311.301020][ T5195] loop2: partition table partially beyond EOD, truncated [ 311.308710][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.317349][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.344345][ T5917] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 311.398802][ T5195] Dev loop2: unable to read RDB block 7 [ 311.405517][ T5195] loop2: AHDI p1 p2 p3 [ 311.409701][ T5195] loop2: partition table partially beyond EOD, truncated [ 311.417104][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.423884][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.485389][ T5917] usb 2-1: device descriptor read/64, error -71 [ 311.554179][ T5862] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 311.595271][ T5917] usb usb2-port1: attempt power cycle [ 311.711818][ T30] audit: type=1800 audit(2000000123.309:82): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1128" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=29095 res=0 errno=0 [ 311.744156][ T5862] usb 1-1: device descriptor read/64, error -71 [ 311.780671][ T30] audit: type=1800 audit(2000000123.309:83): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1128" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=29095 res=0 errno=0 [ 311.854625][ T5862] usb usb1-port1: attempt power cycle [ 311.893648][ T5195] Dev loop2: unable to read RDB block 7 [ 311.902540][ T5195] loop2: AHDI p1 p2 p3 [ 311.907343][ T5195] loop2: partition table partially beyond EOD, truncated [ 311.914718][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.921496][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.931606][T10132] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 311.934185][ T5917] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 311.969710][ T5917] usb 2-1: device descriptor read/8, error -71 [ 312.039388][ T5195] Dev loop2: unable to read RDB block 7 [ 312.045080][ T5195] loop2: AHDI p1 p2 p3 [ 312.049389][ T5195] loop2: partition table partially beyond EOD, truncated [ 312.056678][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 312.063724][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 312.072465][ T1555] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 312.171640][ T5195] Dev loop2: unable to read RDB block 7 [ 312.177407][ T5195] loop2: AHDI p1 p2 p3 [ 312.181584][ T5195] loop2: partition table partially beyond EOD, truncated [ 312.189136][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 312.197044][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 312.204538][ T5862] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 312.214175][ T1555] usb 4-1: device descriptor read/64, error -71 [ 312.214175][ T5917] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 312.229009][ T5862] usb 1-1: device descriptor read/8, error -71 [ 312.236076][ T5917] usb 2-1: device descriptor read/8, error -71 [ 312.332129][ T5195] Dev loop2: unable to read RDB block 7 [ 312.339755][ T5195] loop2: AHDI p1 p2 p3 [ 312.343935][ T5195] loop2: partition table partially beyond EOD, truncated [ 312.351270][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 312.358330][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 312.374604][ T5917] usb usb2-port1: unable to enumerate USB device [ 312.474258][ T5862] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 312.481980][ T1555] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 312.504587][ T5862] usb 1-1: device descriptor read/8, error -71 [ 312.614333][ T1555] usb 4-1: device descriptor read/64, error -71 [ 312.620670][ T5862] usb usb1-port1: unable to enumerate USB device [ 312.725870][ T1555] usb usb4-port1: attempt power cycle [ 312.891744][ T5195] Dev loop2: unable to read RDB block 7 [ 312.897506][ T5195] loop2: AHDI p1 p2 p3 [ 312.901687][ T5195] loop2: partition table partially beyond EOD, truncated [ 312.909328][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 312.917864][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 313.064200][ T1555] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 313.084566][ T1555] usb 4-1: device descriptor read/8, error -71 [ 313.164172][ T5917] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 313.315768][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.324208][ T1555] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 313.326685][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 313.343621][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.353927][ T5917] usb 3-1: config 0 descriptor?? [ 313.355265][ T1555] usb 4-1: device descriptor read/8, error -71 [ 313.474522][ T1555] usb usb4-port1: unable to enumerate USB device [ 313.779059][T10154] random: crng reseeded on system resumption [ 313.779878][ T5917] magicmouse 0003:05AC:0323.0029: unknown main item tag 0x0 [ 313.801290][ T5917] magicmouse 0003:05AC:0323.0029: unknown main item tag 0x0 [ 313.813973][ T5917] magicmouse 0003:05AC:0323.0029: hidraw0: USB HID v0.0c Device [HID 05ac:0323] on usb-dummy_hcd.2-1/input0 [ 313.986478][ T5917] usb 3-1: USB disconnect, device number 119 [ 314.500237][ T5195] Dev loop2: unable to read RDB block 7 [ 314.506062][ T5195] loop2: AHDI p1 p2 p3 [ 314.510368][ T5195] loop2: partition table partially beyond EOD, truncated [ 314.518182][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 314.525373][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 314.525493][T10175] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.1143'. [ 314.607068][ T5195] Dev loop2: unable to read RDB block 7 [ 314.612792][ T5195] loop2: AHDI p1 p2 p3 [ 314.618038][ T5195] loop2: partition table partially beyond EOD, truncated [ 314.625651][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 314.633427][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 314.874247][ T5917] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 314.924238][ T5828] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 315.024232][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 315.030608][ T5917] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 315.038847][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.049609][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.059613][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.069679][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.082827][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.092024][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.100097][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 315.106786][ T5828] usb 1-1: config index 0 descriptor too short (expected 61476, got 36) [ 315.115515][ T5828] usb 1-1: config 224 has an invalid interface number: 61 but max is -1 [ 315.125112][ T5828] usb 1-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 315.134289][ T5828] usb 1-1: config 224 has no interface number 0 [ 315.141783][ T5828] usb 1-1: config 224 interface 61 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 315.145257][ T1555] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 315.159172][ T5828] usb 1-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 315.168479][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.177001][ T5828] usb 1-1: Product: syz [ 315.181206][ T5828] usb 1-1: Manufacturer: syz [ 315.185822][ T5828] usb 1-1: SerialNumber: syz [ 315.194205][ T5862] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 315.196485][ T5828] em28xx 1-1:224.61: New device syz syz @ 480 Mbps (093b:a005, interface 61, class 61) [ 315.212381][ T5828] em28xx 1-1:224.61: DVB interface 61 found: bulk [ 315.314224][ T1555] usb 4-1: Using ep0 maxpacket: 8 [ 315.320949][ T1555] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.331199][ T1555] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 315.340421][ T1555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.350054][ T5917] usb 3-1: usb_control_msg returned -32 [ 315.351762][ T1555] usb 4-1: config 0 descriptor?? [ 315.363018][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 315.366787][ T1555] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 315.375339][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 315.383479][ T5862] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 315.392299][ T5862] usb 2-1: config 0 has no interface number 0 [ 315.398734][ T5862] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 315.414583][T10181] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 315.415288][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 315.432098][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.440316][ T5862] usb 2-1: Product: syz [ 315.445011][ T5862] usb 2-1: Manufacturer: syz [ 315.449626][ T5862] usb 2-1: SerialNumber: syz [ 315.456702][ T5862] usb 2-1: config 0 descriptor?? [ 315.463767][ T5862] smsc95xx v2.0.0 [ 315.468170][ T5862] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 315.478559][ T5862] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 315.484734][ T5828] em28xx 1-1:224.61: unknown em28xx chip ID (0) [ 315.569935][ T5828] em28xx 1-1:224.61: reading from i2c device at 0xa0 failed (error=-5) [ 315.578545][ T5828] em28xx 1-1:224.61: board has no eeprom [ 315.644186][ T5828] em28xx 1-1:224.61: Identified as Plextor ConvertX PX-TV100U (card=40) [ 315.652586][ T5828] em28xx 1-1:224.61: dvb set to bulk mode. [ 315.658536][ T5917] em28xx 1-1:224.61: Remote control support is not available for this card. [ 315.676090][ T5828] usb 1-1: USB disconnect, device number 121 [ 315.676989][ T5862] usb 2-1: USB disconnect, device number 110 [ 315.684016][ T5828] em28xx 1-1:224.61: Disconnecting em28xx [ 315.693938][ T5828] em28xx 1-1:224.61: Closing input extension [ 315.724806][ T5828] em28xx 1-1:224.61: Freeing device [ 316.775095][ T1555] gspca_vc032x: reg_w err -71 [ 316.781904][ T1555] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 316.784187][ T5917] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 316.798760][ T1555] usb 4-1: USB disconnect, device number 126 [ 316.944151][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 316.950995][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.962729][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.973688][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.985737][ T5917] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 316.994840][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.002820][ T5917] usb 2-1: Product: syz [ 317.006992][ T5917] usb 2-1: Manufacturer: syz [ 317.011595][ T5917] usb 2-1: SerialNumber: syz [ 317.018123][ T5917] usb 2-1: config 0 descriptor?? [ 317.054203][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.226413][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.235289][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.247068][ T5917] pegasus_notetaker 2-1:0.0: packet size is too small (0) [ 317.254419][ T5917] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 317.268070][ T5917] usb 2-1: USB disconnect, device number 111 [ 317.404277][ T1555] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 317.554186][ T44] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 317.565718][ T1555] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 317.574001][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 317.586845][ T1555] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 317.595989][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.603977][ T1555] usb 1-1: Product: syz [ 317.608192][ T1555] usb 1-1: Manufacturer: syz [ 317.612781][ T1555] usb 1-1: SerialNumber: syz [ 317.619510][ T1555] usb 1-1: config 0 descriptor?? [ 317.626392][ T1555] hub 1-1:0.0: bad descriptor, ignoring hub [ 317.632309][ T1555] hub 1-1:0.0: probe with driver hub failed with error -5 [ 317.643497][ T1555] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input47 [ 317.651108][ T5917] usb 3-1: USB disconnect, device number 120 [ 317.657211][ T1555] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 317.681110][ T5195] Dev loop2: unable to read RDB block 7 [ 317.699162][ T1555] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 317.700127][ T5195] loop2: AHDI p1 p2 p3 [ 317.715082][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 317.722512][ T5195] loop2: partition table partially beyond EOD, truncated [ 317.730607][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 317.738018][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 317.746848][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 317.756314][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.775126][ T44] usb 4-1: config 0 descriptor?? [ 317.785734][ T5195] Dev loop2: unable to read RDB block 7 [ 317.786912][ T44] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 317.791303][ T5195] loop2: AHDI p1 p2 p3 [ 317.791335][ T5195] loop2: partition table partially beyond EOD, truncated [ 317.818448][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 317.826714][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 317.838863][T10204] hpfs: Bad magic ... probably not HPFS [ 317.847083][T10205] hpfs: Bad magic ... probably not HPFS [ 317.964964][ T5917] usb 1-1: USB disconnect, device number 122 [ 318.033432][ T5195] Dev loop2: unable to read RDB block 7 [ 318.040518][ T5195] loop2: AHDI p1 p2 p3 [ 318.045165][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.052424][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.059610][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.127065][T10225] syzkaller1: entered promiscuous mode [ 318.132544][T10225] syzkaller1: entered allmulticast mode [ 318.324154][ T1555] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 318.364344][ T5195] Dev loop2: unable to read RDB block 7 [ 318.369937][ T5195] loop2: AHDI p1 p2 p3 [ 318.384365][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.397771][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.407388][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.475554][ T1555] usb 2-1: Using ep0 maxpacket: 32 [ 318.490471][ T1555] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.498315][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 318.500131][ T1555] usb 2-1: config 0 has no interface number 0 [ 318.514031][ T1555] usb 2-1: config 0 interface 184 has no altsetting 0 [ 318.549569][ T1555] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 318.561818][ T5195] Dev loop2: unable to read RDB block 7 [ 318.568681][ T1555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.577205][ T5195] loop2: AHDI p1 p2 p3 [ 318.581390][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.588871][ T1555] usb 2-1: Product: syz [ 318.593041][ T1555] usb 2-1: Manufacturer: syz [ 318.598719][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.605740][ T1555] usb 2-1: SerialNumber: syz [ 318.610402][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.619850][ T1555] usb 2-1: config 0 descriptor?? [ 318.636730][ T1555] smsc75xx v1.0.0 [ 318.753748][ T5195] Dev loop2: unable to read RDB block 7 [ 318.760653][ T5195] loop2: AHDI p1 p2 p3 [ 318.765985][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.773278][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.780214][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.890340][ T5195] Dev loop2: unable to read RDB block 7 [ 318.896219][ T5195] loop2: AHDI p1 p2 p3 [ 318.900428][ T5195] loop2: partition table partially beyond EOD, truncated [ 318.908905][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.916774][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.975242][ T5917] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 319.016758][ T5195] Dev loop2: unable to read RDB block 7 [ 319.022394][ T5195] loop2: AHDI p1 p2 p3 [ 319.027246][ T5195] loop2: partition table partially beyond EOD, truncated [ 319.036791][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.043665][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 319.046464][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1173'. [ 319.065473][T10253] netlink: 'syz.2.1173': attribute type 21 has an invalid length. [ 319.073381][T10253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1173'. [ 319.109986][ T5195] Dev loop2: unable to read RDB block 7 [ 319.116109][ T5195] loop2: AHDI p1 p2 p3 [ 319.120302][ T5195] loop2: partition table partially beyond EOD, truncated [ 319.127835][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.133633][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 319.134667][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 319.151143][ T5917] usb 1-1: config index 0 descriptor too short (expected 5412, got 36) [ 319.169721][ T5917] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 319.193778][ T5917] usb 1-1: config 0 has no interface number 0 [ 319.206919][ T5917] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 319.229890][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.238372][ T5917] usb 1-1: Product: syz [ 319.242561][ T5917] usb 1-1: Manufacturer: syz [ 319.243794][ T1555] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 319.247439][ T5917] usb 1-1: SerialNumber: syz [ 319.251374][ T5917] usb 1-1: config 0 descriptor?? [ 319.268794][ T1555] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 319.272206][ T5917] smsc95xx v2.0.0 [ 319.454210][ T5828] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 319.584209][ T5828] usb 3-1: device descriptor read/64, error -71 [ 319.675984][ T5917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 319.686903][ T5917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 319.744169][ T44] gspca_sonixj: i2c_w8 err -110 [ 319.765162][ T44] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 319.824187][ T5828] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 319.921543][ T5900] usb 4-1: USB disconnect, device number 127 [ 319.968312][ T5828] usb 3-1: device descriptor read/64, error -71 [ 320.084593][ T5828] usb usb3-port1: attempt power cycle [ 320.299055][ T5917] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 320.306904][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 320.310547][ T5917] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 320.333949][ T5917] usb 1-1: USB disconnect, device number 123 [ 320.424394][ T5828] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 320.444809][ T5828] usb 3-1: device descriptor read/8, error -71 [ 320.474169][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 320.481017][ T5900] usb 4-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 320.491441][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.504946][ T5900] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 320.514011][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.524287][ T5900] usb 4-1: config 0 descriptor?? [ 320.684171][ T5828] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 320.704631][ T5828] usb 3-1: device descriptor read/8, error -71 [ 320.814989][ T5828] usb usb3-port1: unable to enumerate USB device [ 320.942016][ T5900] usb 4-1: string descriptor 0 read error: -71 [ 320.959567][ T5900] usb 4-1: USB disconnect, device number 2 [ 321.424254][ T5900] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 321.554573][ T5900] usb 1-1: device descriptor read/64, error -71 [ 321.697491][ T1555] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 321.708507][ T1555] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 321.720255][ T1555] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 321.729983][ T1555] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 321.742652][ T1555] usb 2-1: USB disconnect, device number 112 [ 321.796411][ T5900] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 321.924254][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 321.934159][ T5900] usb 1-1: device descriptor read/64, error -71 [ 322.044482][ T5900] usb usb1-port1: attempt power cycle [ 322.074155][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 322.080548][ T5828] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.091762][ T5828] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.101592][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.108249][ T5828] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 322.117345][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.127996][ T5828] usb 4-1: config 0 descriptor?? [ 322.241662][ T5195] Dev loop2: unable to read RDB block 7 [ 322.248961][ T5195] loop2: AHDI p1 p2 p3 [ 322.253213][ T5195] loop2: partition table partially beyond EOD, truncated [ 322.260873][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 322.271229][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 322.416519][ T5900] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 322.458262][ T5900] usb 1-1: device descriptor read/8, error -71 [ 322.542550][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.549647][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.556401][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.563172][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.570695][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.577556][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.584557][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.591228][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.597960][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.604686][ T5828] kye 0003:0458:0138.002A: unknown main item tag 0x0 [ 322.611917][ T5828] kye 0003:0458:0138.002A: unexpected long global item [ 322.619521][ T5828] kye 0003:0458:0138.002A: parse failed [ 322.625171][ T5828] kye 0003:0458:0138.002A: probe with driver kye failed with error -22 [ 322.704177][ T5900] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 322.725862][ T5900] usb 1-1: device descriptor read/8, error -71 [ 322.745464][ T1555] usb 4-1: USB disconnect, device number 3 [ 322.834629][ T5900] usb usb1-port1: unable to enumerate USB device [ 323.415079][T10320] input: syz1 as /devices/virtual/input/input48 [ 323.554161][ T1555] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 323.704206][ T1555] usb 4-1: Using ep0 maxpacket: 32 [ 323.711458][ T1555] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 323.720157][ T1555] usb 4-1: config 0 has no interface number 0 [ 323.728838][ T1555] usb 4-1: config 0 interface 184 has no altsetting 0 [ 323.738612][ T1555] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 323.748120][ T1555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.757228][ T1555] usb 4-1: Product: syz [ 323.761626][ T1555] usb 4-1: Manufacturer: syz [ 323.768318][ T1555] usb 4-1: SerialNumber: syz [ 323.779950][ T1555] usb 4-1: config 0 descriptor?? [ 323.789933][ T1555] smsc75xx v1.0.0 [ 324.398020][ T1555] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 324.419446][ T1555] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 324.569452][T10344] net veth1_virt_wifi : renamed from virt_wifi0 [ 324.664476][ T5917] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 324.815873][ T5917] usb 1-1: config 9 has an invalid interface number: 252 but max is 0 [ 324.824352][ T5917] usb 1-1: config 9 has no interface number 0 [ 324.830449][ T5917] usb 1-1: config 9 interface 252 has no altsetting 0 [ 324.839450][ T5917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c [ 324.848568][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.854182][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 324.856814][ T5917] usb 1-1: Product: syz [ 324.868404][ T5917] usb 1-1: Manufacturer: syz [ 324.872987][ T5917] usb 1-1: SerialNumber: syz [ 325.018256][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 325.027419][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.035535][ T9] usb 2-1: Product: syz [ 325.039704][ T9] usb 2-1: Manufacturer: syz [ 325.044469][ T9] usb 2-1: SerialNumber: syz [ 325.051747][ T9] usb 2-1: config 0 descriptor?? [ 325.102587][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.252/input/input49 [ 325.116565][ T5180] bcm5974 1-1:9.252: could not read from device [ 325.131695][ T5917] usb 1-1: USB disconnect, device number 2 [ 325.132010][ T5180] bcm5974 1-1:9.252: could not read from device [ 325.322393][ T9] usb 2-1: USB disconnect, device number 113 [ 325.698980][T10357] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.705523][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 325.864179][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 325.871361][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.880671][ T9] usb 2-1: config 1 has no interface number 1 [ 325.886859][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.897644][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 325.910552][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.923870][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.933062][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.941076][ T9] usb 2-1: Product: syz [ 325.945276][ T9] usb 2-1: Manufacturer: syz [ 325.949875][ T9] usb 2-1: SerialNumber: syz [ 326.044196][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 326.204278][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 326.211063][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.226949][ T5917] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 326.236845][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.245543][ T5917] usb 1-1: Product: syz [ 326.249876][ T5917] usb 1-1: Manufacturer: syz [ 326.255146][ T5917] usb 1-1: SerialNumber: syz [ 326.262679][ T5917] usb 1-1: config 0 descriptor?? [ 326.361543][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 326.472828][T10361] binder: 10360:10361 ioctl c018620c 200000000140 returned -22 [ 326.491403][ T5917] kaweth 1-1:0.0: Firmware present in device. [ 326.684935][ T5917] kaweth 1-1:0.0: Statistics collection: 0 [ 326.690765][ T5917] kaweth 1-1:0.0: Multicast filter limit: 0 [ 326.696730][ T5917] kaweth 1-1:0.0: MTU: 0 [ 326.701002][ T5917] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 326.780124][T10370] overlayfs: failed to clone lowerpath [ 326.882378][ T1555] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 326.894904][ T1555] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 326.904703][ T1555] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 326.914758][ T1555] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 326.926619][ T1555] usb 4-1: USB disconnect, device number 4 [ 326.976422][ T9] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 327.095582][ T5917] kaweth 1-1:0.0: Error setting SOFS wait [ 327.102333][ T5917] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 327.115904][ T5917] usb 1-1: USB disconnect, device number 3 [ 327.350520][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1216'. [ 327.735691][T10393] tmpfs: Bad value for 'mpol' [ 327.772564][T10387] "syz.0.1221" (10387) uses obsolete ecb(arc4) skcipher [ 328.068507][T10410] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1226'. [ 328.144220][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 328.214215][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 328.316532][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 328.327701][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 328.337120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.348157][ T9] usb 4-1: config 0 descriptor?? [ 328.362331][T10401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.364333][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 328.386180][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.399367][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.409256][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.417463][ T1555] usb 2-1: USB disconnect, device number 114 [ 328.423618][ T44] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 328.432934][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.443839][ T44] usb 1-1: config 0 descriptor?? [ 328.603273][T10416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1229'. [ 328.616433][T10416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1229'. [ 328.795824][ T9] elan 0003:04F3:0755.002B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 328.882384][ T44] hid (null): report_id 32841 is invalid [ 329.058508][ T5917] usb 4-1: USB disconnect, device number 5 [ 329.151869][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.177442][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.514250][ T1555] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 329.608746][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1236'. [ 329.618272][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1236'. [ 329.666137][ T1555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.677364][ T1555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 329.690934][ T1555] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 329.700065][ T1555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.708260][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 329.718924][ T1555] usb 2-1: config 0 descriptor?? [ 329.724570][T10434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.874173][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 329.880976][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 329.892433][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 329.902215][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 329.910375][ T9] usb 4-1: Product: syz [ 329.914578][ T9] usb 4-1: Manufacturer: syz [ 329.919169][ T9] usb 4-1: SerialNumber: syz [ 329.936999][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.945831][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.130976][ T9] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 330.139393][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 330.147323][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 330.155914][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 330.168064][ T1555] hid_parser_main: 74 callbacks suppressed [ 330.168082][ T1555] lenovo 0003:17EF:60FE.002D: unknown main item tag 0x0 [ 330.183639][ T1555] lenovo 0003:17EF:60FE.002D: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0 [ 330.313921][T10447] sock: sock_set_timeout: `syz.2.1239' (pid 10447) tries to set negative timeout [ 330.367549][ T5917] usb 2-1: USB disconnect, device number 115 [ 330.386437][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.398462][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.408619][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.418947][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.474393][ T9] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 330.482916][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 330.496633][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 330.508836][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 330.895264][T10451] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1240'. [ 331.002377][ T44] usb 1-1: USB disconnect, device number 4 [ 331.363551][T10460] 8021q: VLANs not supported on tunl0 [ 332.184397][ T1555] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 332.373464][ T1555] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.385052][ T1555] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 332.412026][ T1555] usb 2-1: can't read configurations, error -71 [ 332.479489][ T44] usb 4-1: USB disconnect, device number 6 [ 332.499167][ T44] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 332.533063][ T44] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 332.556475][ T44] visor 4-1:1.0: device disconnected [ 332.634173][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 332.784330][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 332.791259][ T5917] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 332.801530][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.815081][ T5917] usb 1-1: config 0 descriptor?? [ 332.994212][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 333.026061][ T5917] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 333.047865][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.081708][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 333.092361][ T5917] usb 1-1: media controller created [ 333.116796][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.154510][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 333.174644][ T44] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 333.182847][ T44] usb 4-1: config 0 has no interface number 0 [ 333.194409][ T44] usb 4-1: config 0 interface 184 has no altsetting 0 [ 333.211869][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 333.226277][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.244573][ T44] usb 4-1: Product: syz [ 333.248748][ T44] usb 4-1: Manufacturer: syz [ 333.273634][ T44] usb 4-1: SerialNumber: syz [ 333.283469][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 333.290656][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 333.305533][ T44] usb 4-1: config 0 descriptor?? [ 333.343102][ T44] smsc75xx v1.0.0 [ 333.404234][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 333.410374][ T5917] Registered IR keymap rc-empty [ 333.415649][ T5917] dvb-usb: could not initialize remote control. [ 333.421921][ T5917] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 333.654176][ T1555] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 333.814189][ T1555] usb 2-1: Using ep0 maxpacket: 32 [ 333.821274][ T1555] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 333.830617][ T1555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.841534][ T1555] usb 2-1: config 0 descriptor?? [ 333.851320][ T1555] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 333.944239][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 333.955226][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.306895][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.316688][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.554426][ T1555] gspca_vc032x: reg_w err -110 [ 334.559225][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.564815][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.570125][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.575539][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.580824][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.586268][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.591549][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.596999][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.602285][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.607696][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.612977][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.618388][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.623674][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.629088][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.634381][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.639725][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.645118][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.650415][ T1555] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.655737][ T1555] gspca_vc032x: Unknown sensor... [ 334.660827][ T1555] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 335.333859][ T5917] usb 1-1: USB disconnect, device number 5 [ 335.388546][ T5917] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 335.439433][T10518] kvm: kvm [10517]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 335.567588][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'. [ 335.814191][ T5917] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 335.944193][ T5917] usb 1-1: device descriptor read/64, error -71 [ 336.184201][ T5917] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 336.269150][ T24] usb 2-1: USB disconnect, device number 118 [ 336.314330][ T5917] usb 1-1: device descriptor read/64, error -71 [ 336.384309][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 336.396376][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 336.406664][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 336.420557][ T44] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 336.431271][ T5917] usb usb1-port1: attempt power cycle [ 336.440143][ T44] usb 4-1: USB disconnect, device number 7 [ 336.684166][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 336.774161][ T5917] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 336.794624][ T5917] usb 1-1: device descriptor read/8, error -71 [ 336.835519][ T24] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 336.843620][ T24] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 336.853881][ T24] usb 2-1: config 0 has no interface number 0 [ 336.860030][ T24] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511 [ 336.870134][ T24] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.885814][ T24] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 336.894961][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.902950][ T24] usb 2-1: Product: syz [ 336.907813][ T24] usb 2-1: Manufacturer: syz [ 336.912413][ T24] usb 2-1: SerialNumber: syz [ 336.921204][ T24] usb 2-1: config 0 descriptor?? [ 336.931998][T10525] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 336.949659][ T24] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 336.953666][T10529] netlink: 'syz.3.1269': attribute type 15 has an invalid length. [ 336.970985][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 336.986708][ T24] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 337.044206][ T5917] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 337.077623][ T5917] usb 1-1: device descriptor read/8, error -71 [ 337.184372][ T5917] usb usb1-port1: unable to enumerate USB device [ 337.598116][T10537] sit0: entered promiscuous mode [ 337.609445][T10537] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 337.617341][T10537] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1271'. [ 338.044164][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 338.195989][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.207569][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.218604][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 338.228477][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.241403][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.250576][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.261279][ T24] usb 4-1: config 0 descriptor?? [ 338.473786][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 338.485605][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 338.498415][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 338.506591][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 338.515043][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 338.537532][ T24] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 338.556179][ T24] usb 4-1: USB disconnect, device number 8 [ 338.627646][T10547] fido_id[10547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 338.904203][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 338.974169][ T1555] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 339.054179][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 339.061270][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.072470][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.083316][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 339.092408][ T24] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 339.100550][ T24] usb 4-1: Manufacturer: syz [ 339.107000][ T24] usb 4-1: config 0 descriptor?? [ 339.134160][ T1555] usb 1-1: Using ep0 maxpacket: 32 [ 339.141118][ T1555] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 339.149714][ T1555] usb 1-1: config 0 has no interface number 0 [ 339.155886][ T1555] usb 1-1: config 0 interface 184 has no altsetting 0 [ 339.164621][ T1555] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.173661][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.181725][ T1555] usb 1-1: Product: syz [ 339.186902][ T1555] usb 1-1: Manufacturer: syz [ 339.191490][ T1555] usb 1-1: SerialNumber: syz [ 339.198515][ T1555] usb 1-1: config 0 descriptor?? [ 339.206032][ T1555] smsc75xx v1.0.0 [ 339.306395][T10524] orangefs_mount: mount request failed with -4 [ 339.318939][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.329681][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.341323][ T5917] usb 2-1: USB disconnect, device number 119 [ 339.360470][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 339.384023][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.406024][ T5917] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 339.425264][ T24] usb 4-1: USB disconnect, device number 9 [ 339.449246][ T5917] cyberjack 2-1:0.69: device disconnected [ 339.766818][ T5917] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 339.807649][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 339.820349][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 339.973176][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 339.980639][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6A, changing to 0xA [ 339.992255][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 47617, setting to 1024 [ 340.008084][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 340.018109][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 340.027234][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.038087][ T5917] usb 2-1: config 0 descriptor?? [ 340.043856][T10567] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.057438][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 340.615068][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.628023][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.640211][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 340.910659][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 340.922276][T10619] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.933479][T10619] overlayfs: maximum fs stacking depth exceeded [ 340.972799][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 341.108146][ T24] usb 2-1: USB disconnect, device number 120 [ 341.314387][ T5917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.476134][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.486327][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 341.495463][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.505908][ T5917] usb 4-1: config 0 descriptor?? [ 341.515621][ T5917] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 341.522053][ T5917] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 341.530236][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 341.696251][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 341.705471][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.716168][ T24] usb 2-1: config 0 descriptor?? [ 341.724930][ T24] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 341.923389][ T24] gspca_sunplus: reg_w_riv err -71 [ 341.930309][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 341.945250][ T24] usb 2-1: USB disconnect, device number 121 [ 342.242518][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 342.251587][T10647] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 342.256486][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 342.273685][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 342.283533][ T1555] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 342.295381][ T1555] usb 1-1: USB disconnect, device number 10 [ 342.994201][ T5917] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 343.155915][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.165685][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.194178][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.214774][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.227608][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.241385][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.250328][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.261510][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.273565][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.285295][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.298121][ T5917] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 343.305837][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.317387][ T5917] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.324149][ T1555] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 343.329469][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.364939][ T5917] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.380241][ T5917] usb 2-1: string descriptor 0 read error: -22 [ 343.387381][ T5917] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.396894][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.423507][ T5917] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.506814][ T1555] usb 1-1: Using ep0 maxpacket: 16 [ 343.529308][T10695] netlink: 'syz.2.1318': attribute type 13 has an invalid length. [ 343.542831][ T1555] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 343.557547][ T1555] usb 1-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 343.578781][ T1555] usb 1-1: config 0 has no interface number 0 [ 343.586135][ T1555] usb 1-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.616842][ T1555] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 343.628671][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.637637][ T1555] usb 1-1: Product: syz [ 343.641817][ T1555] usb 1-1: Manufacturer: syz [ 343.646511][ T1555] usb 1-1: SerialNumber: syz [ 343.665180][ T1555] usb 1-1: config 0 descriptor?? [ 343.893474][ T1555] usb 1-1: USB disconnect, device number 11 [ 343.980456][ T5917] usb 2-1: USB disconnect, device number 122 [ 344.070486][T10702] sg_write: data in/out 768/46 bytes for SCSI command 0x0-- guessing data in; [ 344.070486][T10702] program syz.1.1320 not setting count and/or reply_len properly [ 344.114484][ T1555] usb 4-1: USB disconnect, device number 10 [ 344.278906][T10713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1323'. [ 344.289187][T10713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1323'. [ 344.517664][T10720] vivid-001: ================= START STATUS ================= [ 344.543188][T10720] vivid-001: Radio HW Seek Mode: Bounded [ 344.557225][T10724] overlayfs: missing 'lowerdir' [ 344.559664][T10720] vivid-001: Radio Programmable HW Seek: false [ 344.582638][T10720] vivid-001: RDS Rx I/O Mode: Block I/O [ 344.603844][T10720] vivid-001: Generate RBDS Instead of RDS: false [ 344.620515][T10720] vivid-001: RDS Reception: true [ 344.653284][T10720] vivid-001: RDS Program Type: 0 inactive [ 344.680567][T10720] vivid-001: RDS PS Name: inactive [ 344.690457][T10720] vivid-001: RDS Radio Text: inactive [ 344.706557][T10720] vivid-001: RDS Traffic Announcement: false inactive [ 344.713469][T10720] vivid-001: RDS Traffic Program: false inactive [ 344.719969][T10720] vivid-001: RDS Music: false inactive [ 344.725885][T10720] vivid-001: ================== END STATUS ================== [ 344.804765][T10734] @ÿ: renamed from veth0_vlan (while UP) [ 344.964203][ T1555] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 345.124606][ T1555] usb 2-1: Using ep0 maxpacket: 16 [ 345.131394][ T1555] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.142779][ T1555] usb 2-1: config 0 interface 0 has no altsetting 0 [ 345.149667][ T1555] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 345.158929][ T1555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.171918][ T1555] usb 2-1: config 0 descriptor?? [ 345.334139][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 345.466586][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 345.484366][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 345.491804][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 345.505618][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.518733][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 345.527880][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.536282][ T9] usb 4-1: Product: syz [ 345.540475][ T9] usb 4-1: Manufacturer: syz [ 345.545157][ T9] usb 4-1: SerialNumber: syz [ 345.551986][ T9] usb 4-1: config 0 descriptor?? [ 345.559716][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 345.569653][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 345.714177][ T5917] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 345.865788][ T5917] usb 1-1: config index 0 descriptor too short (expected 35562, got 27) [ 345.874254][ T5917] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 345.882850][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.893003][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 345.901984][ T5917] usb 1-1: config 1 has no interface number 0 [ 345.908147][ T5917] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 345.917201][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.937144][ T5917] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 346.011542][ T1555] usbhid 2-1:0.0: can't add hid device: -71 [ 346.017974][ T1555] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 346.029443][ T1555] usb 2-1: USB disconnect, device number 123 [ 346.129551][ T5917] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 346.138089][ T5917] snd_usb_pod 1-1:1.1: invalid control EP [ 346.143809][ T5917] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 346.150664][ T5917] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 346.158306][ T5917] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 346.167627][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 346.177698][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 346.332234][ T5917] usb 1-1: USB disconnect, device number 12 [ 346.794190][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 346.814248][ T9] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 346.822937][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 346.874852][T10746] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1332'. [ 346.944164][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 346.952077][T10755] netlink: 10916 bytes leftover after parsing attributes in process `syz.0.1333'. [ 346.961440][T10755] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 346.978997][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.988120][ T24] usb 2-1: config 0 has no interface number 0 [ 346.994307][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 347.002810][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.012055][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.014131][ T9] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 347.020096][ T24] usb 2-1: Product: syz [ 347.020113][ T24] usb 2-1: Manufacturer: syz [ 347.029258][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 347.032907][ T24] usb 2-1: SerialNumber: syz [ 347.051032][ T24] usb 2-1: config 0 descriptor?? [ 347.058669][ T24] smsc75xx v1.0.0 [ 347.194420][ T5917] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 347.344212][ T5917] usb 1-1: device descriptor read/64, error -71 [ 347.584232][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 347.586665][ T5917] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 347.603886][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 347.612381][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 347.620215][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 347.636780][ T9] usb 4-1: USB disconnect, device number 11 [ 347.668218][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 347.681180][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.734588][ T5917] usb 1-1: device descriptor read/64, error -71 [ 347.844546][ T5917] usb usb1-port1: attempt power cycle [ 348.184246][ T5917] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 348.214983][ T5917] usb 1-1: device descriptor read/8, error -71 [ 348.394118][ T5828] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 348.455145][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 348.474558][ T5917] usb 1-1: device descriptor read/8, error -71 [ 348.544280][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 348.551347][ T5828] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 348.559771][ T5828] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 348.569588][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 348.578737][ T5828] usb 4-1: config 1 has no interface number 0 [ 348.585015][ T5828] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.596164][ T5917] usb usb1-port1: unable to enumerate USB device [ 348.603270][ T5828] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 348.616219][ T5828] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 348.625385][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.638999][ T5828] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 348.841700][ T5828] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 349.253956][T10772] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 349.261920][T10772] netlink: 'syz.3.1337': attribute type 9 has an invalid length. [ 349.269812][T10772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 349.282825][ T1555] usb 4-1: USB disconnect, device number 12 [ 349.290440][ T1555] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 350.031353][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.041689][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.054319][ T1555] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 350.107243][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 350.118250][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 350.127947][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 350.137655][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 350.149842][ T24] usb 2-1: USB disconnect, device number 124 [ 350.184289][ T1555] usb 4-1: device descriptor read/64, error -71 [ 350.354158][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 350.434390][ T1555] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 350.514165][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 350.520995][ T9] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 350.529730][ T9] usb 1-1: config 0 has no interface number 0 [ 350.537953][ T9] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 350.548646][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.556675][ T9] usb 1-1: Product: syz [ 350.560843][ T9] usb 1-1: Manufacturer: syz [ 350.565444][ T9] usb 1-1: SerialNumber: syz [ 350.571857][ T9] usb 1-1: config 0 descriptor?? [ 350.576938][ T1555] usb 4-1: device descriptor read/64, error -71 [ 350.585147][ T9] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 350.593586][ T9] usb 1-1: Detected SIO [ 350.599027][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 350.694355][ T1555] usb usb4-port1: attempt power cycle [ 350.888055][ T5917] usb 1-1: USB disconnect, device number 17 [ 350.895393][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 350.903844][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.914224][ T5917] ftdi_sio 1-1:0.217: device disconnected [ 351.044277][ T1555] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 351.056406][ T24] usb 2-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config [ 351.066980][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 351.080746][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.090572][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.090693][ T1555] usb 4-1: device descriptor read/8, error -71 [ 351.102036][ T24] usb 2-1: config 0 descriptor?? [ 351.107262][T10784] sctp: [Deprecated]: syz.2.1342 (pid 10784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.107262][T10784] Use struct sctp_sack_info instead [ 351.117801][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 351.374184][ T1555] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 351.395345][ T1555] usb 4-1: device descriptor read/8, error -71 [ 351.504583][ T1555] usb usb4-port1: unable to enumerate USB device [ 352.024213][ T1555] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.174126][ T1555] usb 1-1: Using ep0 maxpacket: 16 [ 352.182319][ T1555] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 352.191620][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.199681][ T1555] usb 1-1: Product: syz [ 352.203841][ T1555] usb 1-1: Manufacturer: syz [ 352.208469][ T1555] usb 1-1: SerialNumber: syz [ 352.216648][ T1555] r8152-cfgselector 1-1: Unknown version 0x0000 [ 352.222907][ T1555] r8152-cfgselector 1-1: config 0 descriptor?? [ 352.499092][T10807] overlayfs: upper fs does not support tmpfile. [ 352.809699][ T24] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 352.859659][T10829] fuse: Unknown parameter '00000000000000000000003' [ 353.040251][T10842] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 353.049312][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1358'. [ 353.059612][T10842] veth0_vlan: entered allmulticast mode [ 353.065890][T10842] bridge0: port 1(veth0_vlan) entered blocking state [ 353.072803][T10842] bridge0: port 1(veth0_vlan) entered disabled state [ 353.081641][T10842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 353.364277][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 353.514134][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 353.520395][ T24] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 353.528586][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 353.538710][ T24] usb 4-1: config 6 has no interface number 0 [ 353.548268][ T24] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.563705][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 353.572778][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.574181][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 353.580806][ T24] usb 4-1: Product: syz [ 353.580823][ T24] usb 4-1: Manufacturer: syz [ 353.597104][ T24] usb 4-1: SerialNumber: syz [ 353.607582][ T24] hso 4-1:6.2: Failed to find INT IN ep [ 353.672417][ T24] usb 2-1: USB disconnect, device number 125 [ 353.747372][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.765418][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.784722][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.794527][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.802659][ T9] usb 1-1: SerialNumber: syz [ 353.808639][ T5828] usb 4-1: USB disconnect, device number 17 [ 353.877382][T10862] bpf: Bad value for 'gid' [ 354.031828][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.043211][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.056577][ T9] usb 1-1: skipping empty audio interface (v1) [ 354.088429][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.094313][ T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 354.103119][ T9] usb 1-1: USB disconnect, device number 19 [ 354.131002][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.274203][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 354.290970][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 354.304529][ T24] usb 2-1: config 0 has no interface number 0 [ 354.312023][ T24] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 354.338268][ T24] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 354.352886][ T24] usb 2-1: config 0 interface 255 has no altsetting 0 [ 354.362219][ T24] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 354.371429][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.381535][ T24] usb 2-1: Product: syz [ 354.390797][ T24] usb 2-1: Manufacturer: syz [ 354.399952][ T24] usb 2-1: SerialNumber: syz [ 354.414880][ T24] usb 2-1: config 0 descriptor?? [ 354.416961][T10876] syzkaller1: entered promiscuous mode [ 354.434820][T10876] syzkaller1: entered allmulticast mode [ 354.633318][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 355.014338][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 355.166008][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 355.176901][ T9] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 355.186109][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 355.196723][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.205882][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.213902][ T9] usb 1-1: Product: syz [ 355.221815][ T9] usb 1-1: Manufacturer: syz [ 355.226768][ T9] usb 1-1: SerialNumber: syz [ 355.334310][ T1555] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 355.460643][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.469274][ T24] gspca_stk1135: reg_w 0x5 err -71 [ 355.474468][ T1555] usb 4-1: device descriptor read/64, error -71 [ 355.481898][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.488770][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.506422][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 355.515511][ T24] gspca_stk1135: Sensor write failed [ 355.520811][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.531696][ T24] gspca_stk1135: Sensor write failed [ 355.546253][ T9] uvcvideo 1-1:220.0: Found Unit with invalid ID 0 [ 355.553710][ T9] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22 [ 355.576972][ T9] usb 1-1: USB disconnect, device number 20 [ 355.668172][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.697613][ T24] gspca_stk1135: Sensor read failed [ 355.702861][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.714360][ T1555] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 355.740006][ T24] gspca_stk1135: Sensor read failed [ 355.748325][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 355.765628][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.772034][ T24] gspca_stk1135: Sensor read failed [ 355.787324][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.793695][ T24] gspca_stk1135: Sensor read failed [ 355.799010][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.819019][ T24] gspca_stk1135: Sensor write failed [ 355.830467][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 355.849789][ T24] gspca_stk1135: Sensor write failed [ 355.856887][ T24] stk1135 2-1:0.255: probe with driver stk1135 failed with error -71 [ 355.865488][ T1555] usb 4-1: device descriptor read/64, error -71 [ 355.868415][ T24] usb 2-1: USB disconnect, device number 126 [ 355.908566][T10891] kAFS: unable to lookup cell '/yz1' [ 355.973547][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 355.983202][T10898] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 355.992361][ T1555] usb usb4-port1: attempt power cycle [ 356.244355][T10905] Invalid ELF header type: 2 != 1 [ 356.337183][T10913] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1383'. [ 356.354933][ T1555] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 356.384646][ T1555] usb 4-1: device descriptor read/8, error -71 [ 356.556289][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 356.634177][ T1555] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 356.665578][ T1555] usb 4-1: device descriptor read/8, error -71 [ 356.714146][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 356.721187][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.731125][ T24] usb 2-1: config 1 has an invalid interface number: 48 but max is 0 [ 356.739281][ T24] usb 2-1: config 1 has no interface number 0 [ 356.745493][ T24] usb 2-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 356.755432][ T24] usb 2-1: config 1 interface 48 has no altsetting 0 [ 356.763991][ T24] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 356.773450][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.781483][ T24] usb 2-1: Product: syz [ 356.784503][ T1555] usb usb4-port1: unable to enumerate USB device [ 356.785695][ T24] usb 2-1: Manufacturer: syz [ 356.796600][ T24] usb 2-1: SerialNumber: syz [ 356.804015][T10911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.019074][ T24] ti_usb_3410_5052 2-1:1.48: TI USB 3410 1 port adapter converter detected [ 357.033059][ T24] usb 2-1: USB disconnect, device number 127 [ 357.273909][T10930] input: syz1 as /devices/virtual/input/input52 [ 357.574336][ T24] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 357.587160][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 357.724203][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 357.839346][T10948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'. [ 357.848781][T10947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1393'. [ 357.854518][ T24] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 358.014266][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 358.019903][ T24] usb usb1-port1: attempt power cycle [ 358.364195][ T24] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 358.384580][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 358.474450][ T1555] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 358.515236][ T24] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 358.534815][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 358.540320][ T24] usb usb1-port1: unable to enumerate USB device [ 358.574210][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 358.647008][ T1555] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 358.655991][ T1555] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.669009][ T1555] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.678112][ T1555] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.686340][ T1555] usb 4-1: Product: syz [ 358.690498][ T1555] usb 4-1: Manufacturer: syz [ 358.695113][ T1555] usb 4-1: SerialNumber: syz [ 358.701546][ T1555] usb 4-1: config 0 descriptor?? [ 358.708170][ T1555] hub 4-1:0.0: bad descriptor, ignoring hub [ 358.714146][ T1555] hub 4-1:0.0: probe with driver hub failed with error -5 [ 358.725660][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 358.739274][ T1555] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 358.739391][ T5904] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 358.758101][ T5904] usb 2-1: config 0 has no interface number 0 [ 358.764526][ T5904] usb 2-1: config 0 interface 184 has no altsetting 0 [ 358.772286][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.773707][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 358.798009][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.806841][ T5904] usb 2-1: Product: syz [ 358.811110][ T5904] usb 2-1: Manufacturer: syz [ 358.816906][ T5904] usb 2-1: SerialNumber: syz [ 358.823448][ T5904] usb 2-1: config 0 descriptor?? [ 358.830605][ T5904] smsc75xx v1.0.0 [ 359.170849][ T5862] usb 4-1: USB disconnect, device number 22 [ 359.432626][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 359.443545][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 359.464167][ T5862] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 359.617493][ T5862] usb 4-1: config 0 has no interfaces? [ 359.623016][ T5862] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 359.632388][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.643417][ T5862] usb 4-1: config 0 descriptor?? [ 359.916876][ T5862] usb 4-1: USB disconnect, device number 23 [ 360.462585][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 360.624254][ T5917] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 360.641660][T10999] overlayfs: failed to clone upperpath [ 360.744223][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 360.785256][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 360.792272][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.813427][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.824526][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.824733][T11005] nfs4: Unknown parameter '"' [ 360.843246][ T5917] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.843293][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.846686][ T5917] usb 1-1: config 0 descriptor?? [ 360.908081][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 360.917320][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.926112][ T24] usb 4-1: Product: syz [ 360.930289][ T24] usb 4-1: Manufacturer: syz [ 360.934925][ T24] usb 4-1: SerialNumber: syz [ 360.941649][ T24] usb 4-1: config 0 descriptor?? [ 361.276658][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.285574][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.303592][ T5917] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002F/input/input53 [ 361.325050][ T5917] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 361.500409][ T5862] usb 1-1: USB disconnect, device number 25 [ 361.553054][ T24] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 361.561592][ T24] f81604 4-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 361.569378][ T24] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 361.875407][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 361.886449][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 361.896174][ T5904] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 361.905792][ T5904] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 361.918309][ T5904] usb 2-1: USB disconnect, device number 2 [ 362.179068][T11040] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1423'. [ 362.694152][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 362.844212][ T9] usb 2-1: device descriptor read/64, error -71 [ 363.084143][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 363.214176][ T9] usb 2-1: device descriptor read/64, error -71 [ 363.328248][ T9] usb usb2-port1: attempt power cycle [ 363.528825][ T5904] usb 4-1: USB disconnect, device number 24 [ 363.674380][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 363.705143][ T9] usb 2-1: device descriptor read/8, error -71 [ 363.904647][ T5904] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 363.954814][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 363.974986][ T9] usb 2-1: device descriptor read/8, error -71 [ 364.074152][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 364.080757][ T5904] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 364.084461][ T9] usb usb2-port1: unable to enumerate USB device [ 364.089872][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.107377][ T5904] usb 4-1: config 0 descriptor?? [ 364.134166][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 364.285939][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.296900][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.306804][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.319769][ T5904] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 364.319808][ T5899] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.341377][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.346409][ T5904] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 364.356572][ T5899] usb 1-1: config 0 descriptor?? [ 364.358773][ T5904] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 364.580255][ T5899] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 364.603391][ T5899] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 364.621118][ T5899] usb 1-1: USB disconnect, device number 26 [ 364.698607][T11078] fido_id[11078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 364.940342][T11096] 9pnet_fd: p9_fd_create_tcp (11096): problem connecting socket to 127.0.0.1 [ 365.234167][ T5862] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 365.397972][ T5862] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 365.407077][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.415123][ T5862] usb 1-1: Product: syz [ 365.419270][ T5862] usb 1-1: Manufacturer: syz [ 365.423835][ T5862] usb 1-1: SerialNumber: syz [ 365.430148][ T5862] usb 1-1: config 0 descriptor?? [ 365.596400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 365.614484][T11116] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 365.642088][ T5862] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.854208][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 366.014127][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 366.020718][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 366.029919][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.040561][ T24] usb 2-1: config 0 descriptor?? [ 366.049834][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 366.164170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 366.659853][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.668718][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.678396][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.687655][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.856418][T11108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.865378][T11108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.077665][T11108] comedi comedi3: pcl711: I/O port conflict (0x4f27,16) [ 367.099223][ T5862] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 367.115408][ T5862] usb 1-1: USB disconnect, device number 27 [ 367.734941][T11158] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 367.742858][T11158] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1458'. [ 367.889691][ T24] gspca_vc032x: reg_w err -71 [ 367.895861][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.901180][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.906725][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.912006][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.917341][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.922618][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.927917][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.933192][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.938508][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.943784][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.949105][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.954417][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.959681][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.964983][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.970258][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.975744][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.981014][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.986383][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 367.991668][ T24] gspca_vc032x: Unknown sensor... [ 367.996836][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 368.007522][ T24] usb 2-1: USB disconnect, device number 7 [ 368.455398][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1463'. [ 368.754215][ T5899] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 368.889556][T11183] syz.3.1466: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 368.905048][T11183] CPU: 1 UID: 0 PID: 11183 Comm: syz.3.1466 Not tainted syzkaller #0 PREEMPT(full) [ 368.905079][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.905091][T11183] Call Trace: [ 368.905100][T11183] [ 368.905107][T11183] dump_stack_lvl+0x189/0x250 [ 368.905138][T11183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.905158][T11183] ? __pfx__printk+0x10/0x10 [ 368.905180][T11183] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.905206][T11183] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.905235][T11183] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 368.905263][T11183] warn_alloc+0x214/0x310 [ 368.905287][T11183] ? stack_trace_save+0x9c/0xe0 [ 368.905314][T11183] ? __pfx_warn_alloc+0x10/0x10 [ 368.905342][T11183] ? kasan_save_track+0x4f/0x80 [ 368.905362][T11183] ? kasan_save_track+0x3e/0x80 [ 368.905381][T11183] ? __kasan_kmalloc+0x93/0xb0 [ 368.905400][T11183] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 368.905421][T11183] ? xskq_create+0x56/0x170 [ 368.905443][T11183] ? xsk_setsockopt+0x4dc/0x8d0 [ 368.905461][T11183] ? do_sock_setsockopt+0x17c/0x1b0 [ 368.905482][T11183] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 368.905503][T11183] ? do_syscall_64+0xfa/0xfa0 [ 368.905529][T11183] __vmalloc_node_range_noprof+0x134/0x1640 [ 368.905580][T11183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.905606][T11183] ? __kasan_kmalloc+0x93/0xb0 [ 368.905630][T11183] vmalloc_user_noprof+0xad/0xf0 [ 368.905650][T11183] ? xskq_create+0xbf/0x170 [ 368.905671][T11183] xskq_create+0xbf/0x170 [ 368.905689][T11183] xsk_init_queue+0xb0/0x110 [ 368.905703][T11183] xsk_setsockopt+0x4dc/0x8d0 [ 368.905716][T11183] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.905730][T11183] ? __pfx_aa_sk_perm+0x10/0x10 [ 368.905743][T11183] ? aa_sock_opt_perm+0xff/0x1b0 [ 368.905755][T11183] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 368.905768][T11183] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.905781][T11183] do_sock_setsockopt+0x17c/0x1b0 [ 368.905796][T11183] __x64_sys_setsockopt+0x13f/0x1b0 [ 368.905812][T11183] do_syscall_64+0xfa/0xfa0 [ 368.905825][T11183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.905835][T11183] ? clear_bhb_loop+0x60/0xb0 [ 368.905847][T11183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.905856][T11183] RIP: 0033:0x7f8ff798f6c9 [ 368.905866][T11183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.905875][T11183] RSP: 002b:00007f8ff5bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 368.905886][T11183] RAX: ffffffffffffffda RBX: 00007f8ff7be6090 RCX: 00007f8ff798f6c9 [ 368.905894][T11183] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 368.905900][T11183] RBP: 00007f8ff7a11f91 R08: 000000000000fff1 R09: 0000000000000000 [ 368.905906][T11183] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 368.905912][T11183] R13: 00007f8ff7be6128 R14: 00007f8ff7be6090 R15: 00007ffe89eda6b8 [ 368.905929][T11183] [ 368.905942][T11183] Mem-Info: [ 368.946381][ T5899] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 368.947944][T11183] active_anon:23372 inactive_anon:0 isolated_anon:0 [ 368.947944][T11183] active_file:8327 inactive_file:49317 isolated_file:0 [ 368.947944][T11183] unevictable:768 dirty:74 writeback:0 [ 368.947944][T11183] slab_reclaimable:8122 slab_unreclaimable:93994 [ 368.947944][T11183] mapped:25337 shmem:18446 pagetables:1436 [ 368.947944][T11183] sec_pagetables:0 bounce:0 [ 368.947944][T11183] kernel_misc_reclaimable:0 [ 368.947944][T11183] free:1304758 free_pcp:15432 free_cma:0 [ 368.954746][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.960415][T11183] Node 0 active_anon:93488kB inactive_anon:0kB active_file:33308kB inactive_file:197064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101348kB dirty:296kB writeback:0kB shmem:72248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11820kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 368.968582][ T5899] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 368.970977][T11183] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 368.977106][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.981063][T11183] Node 0 [ 368.989420][ T5899] usb 2-1: config 0 descriptor?? [ 368.990851][T11183] DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 369.013867][T11180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.015783][T11183] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 369.397462][T11183] Node 0 DMA32 free:1313332kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93488kB inactive_anon:0kB active_file:33308kB inactive_file:197064kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2551680kB mlocked:0kB bounce:0kB free_pcp:39316kB local_pcp:19980kB free_cma:0kB [ 369.430873][T11183] lowmem_reserve[]: 0 0 0 0 0 [ 369.435671][T11183] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.465153][T11183] lowmem_reserve[]: 0 0 0 0 0 [ 369.469886][T11183] Node 1 Normal free:3890356kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21332kB local_pcp:11892kB free_cma:0kB [ 369.502404][T11183] lowmem_reserve[]: 0 0 0 0 0 [ 369.507277][T11183] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 369.508457][ T5899] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 369.522012][T11183] Node 0 DMA32: 2633*4kB (UME) 2244*8kB (UME) 957*16kB (UME) 293*32kB (UME) 93*64kB (UME) 90*128kB (UME) 100*256kB (UME) 77*512kB (UME) 60*1024kB (UME) 19*2048kB (UM) 263*4096kB (UM) = 1313268kB [ 369.522198][T11183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.522303][T11183] Node 1 Normal: 247*4kB (U) 67*8kB (UME) 52*16kB (UME) 104*32kB (UME) 26*64kB [ 369.559746][ T5899] kye 0003:0458:0138.0031: item fetching failed at offset 3/5 [ 369.560657][ T5899] kye 0003:0458:0138.0031: parse failed [ 369.574119][T11183] (UME) [ 369.582119][ T5899] kye 0003:0458:0138.0031: probe with driver kye failed with error -22 [ 369.582756][T11183] 8*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3890356kB [ 369.605467][T11183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.615515][T11183] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 369.624860][T11183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.634541][T11183] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 369.643816][T11183] 76086 total pagecache pages [ 369.648968][T11183] 0 pages in swap cache [ 369.653118][T11183] Free swap = 124996kB [ 369.657407][T11183] Total swap = 124996kB [ 369.661634][T11183] 2097051 pages RAM [ 369.665480][T11183] 0 pages HighMem/MovableOnly [ 369.670217][T11183] 427361 pages reserved [ 369.675600][T11183] 0 pages cma reserved [ 369.709475][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.718309][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.729613][ T5899] usb 2-1: USB disconnect, device number 8 [ 369.897777][T11200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1471'. [ 370.496893][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 370.514291][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.674231][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 370.681722][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.691288][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 370.698907][ T5899] usb 2-1: can't read configurations, error -61 [ 370.889210][ T5899] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 371.084126][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 371.097633][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.110053][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.120123][ T5899] usb 2-1: can't read configurations, error -61 [ 371.127561][ T5899] usb usb2-port1: attempt power cycle [ 371.278389][T11228] Scaler: ================= START STATUS ================= [ 371.278402][T11229] Scaler: ================= START STATUS ================= [ 371.278413][T11229] Scaler: ================== END STATUS ================== [ 371.286015][T11228] Scaler: ================== END STATUS ================== [ 371.299690][T11230] overlay: filesystem on ./file0 not supported as upperdir [ 371.465253][ T5899] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 371.494828][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 371.502355][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.512349][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.520569][ T5899] usb 2-1: can't read configurations, error -61 [ 371.655222][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 371.696117][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 371.703061][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.712605][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.720627][ T5899] usb 2-1: can't read configurations, error -61 [ 371.727904][ T5899] usb usb2-port1: unable to enumerate USB device [ 372.193113][T11243] openvswitch: netlink: IP tunnel dst address not specified [ 372.728434][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 372.740246][T11246] netlink: 'syz.2.1485': attribute type 46 has an invalid length. [ 372.748516][T11246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1485'. [ 372.759093][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 373.764202][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 373.924123][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 373.937597][ T5899] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 373.954129][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.962132][ T5899] usb 1-1: Product: syz [ 373.974454][ T5899] usb 1-1: Manufacturer: syz [ 373.979059][ T5899] usb 1-1: SerialNumber: syz [ 373.990677][ T5899] usb 1-1: config 0 descriptor?? [ 374.007058][ T5899] gspca_main: se401-2.14.0 probing 047d:5003 [ 374.457454][ T5828] IPVS: starting estimator thread 0... [ 374.544224][T11280] IPVS: using max 33 ests per chain, 79200 per kthread [ 374.617254][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.631322][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.653048][ T5899] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 374.676216][ T5899] usb 1-1: USB disconnect, device number 28 [ 374.740163][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 374.905494][ T9] usb 2-1: config 0 has no interfaces? [ 374.912740][ T9] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 374.921826][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.929871][ T9] usb 2-1: Product: syz [ 374.934032][ T9] usb 2-1: Manufacturer: syz [ 374.938667][ T9] usb 2-1: SerialNumber: syz [ 374.945836][ T9] usb 2-1: config 0 descriptor?? [ 375.405420][T11301] netlink: 'syz.0.1504': attribute type 27 has an invalid length. [ 375.614245][T11309] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 375.924347][ T5899] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 376.046854][T11318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.074368][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 376.081517][ T5899] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 376.083360][T11318] IPVS: Scheduler module ip_vs_ not found [ 376.091050][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.099685][T11318] IPVS: set_ctl: invalid protocol: 9 0.0.0.0:3328 [ 376.114724][ T5899] usb 1-1: config 0 descriptor?? [ 376.131414][ T5899] gspca_main: sunplus-2.14.0 probing 041e:400b [ 376.454117][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 377.129097][T11314] netlink: 'syz.0.1508': attribute type 4 has an invalid length. [ 377.494432][ T9] usb 2-1: USB disconnect, device number 13 [ 377.678368][T11345] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 377.742506][ T5899] gspca_sunplus: reg_w_riv err -71 [ 377.751057][ T5899] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 377.770606][ T5899] usb 1-1: USB disconnect, device number 29 [ 378.064187][ T5828] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 378.214399][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 378.223801][ T5828] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 378.234813][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.242818][ T5828] usb 2-1: Product: syz [ 378.255718][ T5828] usb 2-1: Manufacturer: syz [ 378.270880][ T5828] usb 2-1: SerialNumber: syz [ 378.282812][ T5828] usb 2-1: config 0 descriptor?? [ 378.296829][ T5828] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 378.490976][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.967189][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.978992][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.244144][ T5899] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 379.405817][ T5899] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 379.413963][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.426293][ T5899] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 379.435395][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.443363][ T5899] usb 1-1: Product: syz [ 379.447635][ T5899] usb 1-1: Manufacturer: syz [ 379.452250][ T5899] usb 1-1: SerialNumber: syz [ 379.460204][ T5899] usb 1-1: config 0 descriptor?? [ 379.476425][ T5899] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 379.514460][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.523376][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.074010][ T5899] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 380.081133][ T5899] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 380.094884][ T5899] usb 1-1: USB disconnect, device number 30 [ 380.757070][T11413] fuse: Bad value for 'fd' [ 380.842337][ T5828] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 380.849745][ T5828] visor 2-1:0.0: probe with driver visor failed with error -71 [ 380.864482][ T5828] usb 2-1: USB disconnect, device number 14 [ 380.922497][T11421] fuse: Bad value for 'fd' [ 381.321023][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1550'. [ 381.364581][ T5828] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 381.494184][ T5899] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 381.515451][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.526829][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.536651][ T5828] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 381.545714][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.556775][ T5828] usb 2-1: config 0 descriptor?? [ 381.645739][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.655954][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.667428][ T5899] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.676529][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.684580][ T5899] usb 1-1: SerialNumber: syz [ 381.900985][ T5899] usb 1-1: 0:2 : does not exist [ 381.920916][ T5899] usb 1-1: USB disconnect, device number 31 [ 381.961523][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.981768][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.011461][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.039178][ T5828] logitech 0003:046D:C29C.0032: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 382.267376][ T5828] logitech 0003:046D:C29C.0032: no inputs found [ 382.298948][ T5828] usb 2-1: USB disconnect, device number 15 [ 382.493420][T11465] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 382.502187][T11465] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.509623][T11465] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.522910][T11465] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.530232][T11465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.537896][T11465] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.545190][T11465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.560267][T11465] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.573755][T11467] syzkaller0: entered promiscuous mode [ 382.586182][T11467] syzkaller0: entered allmulticast mode [ 382.602955][T11467] netlink: 'syz.3.1561': attribute type 27 has an invalid length. [ 382.611008][T11467] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1561'. [ 382.719498][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 382.946242][T11494] loop0: Can't mount, would change RO state [ 383.018664][T11499] libceph: resolve '400' (ret=-3): failed [ 383.179247][T11505] lo: MTU too low for tipc bearer [ 383.184535][T11505] tipc: Enabling of bearer rejected, failed to enable media [ 383.207326][T11507] lo: MTU too low for tipc bearer [ 383.212413][T11507] tipc: Enabling of bearer rejected, failed to enable media [ 383.265181][ T5862] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 383.375306][T11510] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1575'. [ 383.424304][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 383.431343][ T5862] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 383.440058][ T5862] usb 2-1: config 0 has no interface number 0 [ 383.449812][ T5862] usb 2-1: config 0 interface 184 has no altsetting 0 [ 383.462032][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 383.474129][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.482193][ T5862] usb 2-1: Product: syz [ 383.488525][ T5862] usb 2-1: Manufacturer: syz [ 383.493186][ T5862] usb 2-1: SerialNumber: syz [ 383.502435][ T5862] usb 2-1: config 0 descriptor?? [ 383.518294][ T5862] smsc75xx v1.0.0 [ 384.056999][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 384.124206][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 384.135982][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 384.213519][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 384.222785][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 384.233896][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 384.243043][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.255900][ T9] usb 1-1: config 0 descriptor?? [ 384.802603][T11557] binder: BINDER_SET_CONTEXT_MGR already set [ 384.809858][T11557] binder: 11556:11557 ioctl 4018620d 200000000040 returned -16 [ 385.274288][T11567] kvm: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 385.282810][T11567] kvm: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 385.294248][T11567] kvm: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 385.306184][T11567] kvm: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 385.314928][T11567] kvm: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 385.326048][T11567] kvm_intel: kvm [11566]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 385.872404][ T9] usb 1-1: Cannot set autoneg [ 385.877551][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 386.074469][ T9] usb 1-1: USB disconnect, device number 32 [ 386.555900][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 386.566930][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 386.577826][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 386.587535][ T5862] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 386.603900][ T5862] usb 2-1: USB disconnect, device number 16 [ 386.874143][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 387.024135][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 387.030789][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.041924][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.054116][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 387.066503][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.080243][ T24] usb 1-1: config 0 descriptor?? [ 387.504140][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 387.546480][ T24] apple 0003:05AC:024B.0033: fixing up MacBook JIS keyboard report descriptor [ 387.555876][ T24] apple 0003:05AC:024B.0033: unknown global tag 0xe [ 387.562533][ T24] apple 0003:05AC:024B.0033: item 0 1 1 14 parsing failed [ 387.570497][ T24] apple 0003:05AC:024B.0033: parse failed [ 387.576396][ T24] apple 0003:05AC:024B.0033: probe with driver apple failed with error -22 [ 387.655601][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 387.663921][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 387.672055][ T9] usb 2-1: config 0 has no interface number 0 [ 387.678236][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 387.688277][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.698252][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 387.707306][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.717125][ T9] usb 2-1: config 0 descriptor?? [ 387.746973][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.756309][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.766469][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.775461][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.797057][ T1555] usb 1-1: USB disconnect, device number 33 [ 388.174219][ T1555] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 388.304131][ T1555] usb 1-1: device descriptor read/64, error -71 [ 388.340087][ T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input56 [ 388.356622][ T9] input: failed to attach handler kbd to device input56, error: -5 [ 388.537098][ T5828] usb 2-1: USB disconnect, device number 17 [ 388.555157][ T1555] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 388.651559][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 388.695298][ T1555] usb 1-1: device descriptor read/64, error -71 [ 388.720309][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1602'. [ 388.813802][ T1555] usb usb1-port1: attempt power cycle [ 389.115896][T11652] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1607'. [ 389.141011][T11652] unsupported nla_type 224 [ 389.152731][T11653] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1607'. [ 389.194193][ T1555] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.234726][ T1555] usb 1-1: device descriptor read/8, error -71 [ 389.496470][ T1555] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 389.504289][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.535071][ T1555] usb 1-1: device descriptor read/8, error -71 [ 389.634131][ T5828] usb 2-1: device descriptor read/64, error -71 [ 389.661619][ T1555] usb usb1-port1: unable to enumerate USB device [ 389.875285][ T5828] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 390.009067][ T5828] usb 2-1: device descriptor read/64, error -71 [ 390.127757][ T5828] usb usb2-port1: attempt power cycle [ 390.147904][ T30] audit: type=1326 audit(2000000201.749:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.2.1614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6749b8f6c9 code=0x0 [ 390.474142][ T5828] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 390.494740][ T5828] usb 2-1: device descriptor read/8, error -71 [ 390.734166][ T5828] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 390.754699][ T5828] usb 2-1: device descriptor read/8, error -71 [ 390.874370][ T5828] usb usb2-port1: unable to enumerate USB device [ 391.086434][T11706] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1617'. [ 391.364290][ T1555] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 391.534169][ T1555] usb 1-1: Using ep0 maxpacket: 32 [ 391.541326][ T1555] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 391.549564][ T1555] usb 1-1: config 0 has no interface number 0 [ 391.555744][ T1555] usb 1-1: config 0 interface 184 has no altsetting 0 [ 391.566679][ T1555] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 391.575860][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.583824][ T1555] usb 1-1: Product: syz [ 391.588006][ T1555] usb 1-1: Manufacturer: syz [ 391.592589][ T1555] usb 1-1: SerialNumber: syz [ 391.599158][ T1555] usb 1-1: config 0 descriptor?? [ 391.606500][ T1555] smsc75xx v1.0.0 [ 392.209681][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 392.220799][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 392.326873][T11720] sp0: Synchronizing with TNC [ 394.369557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b4de000: rx timeout, send abort [ 394.379982][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b4de000: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 394.642609][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 394.653642][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 394.663451][ T1555] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 394.673001][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 394.681139][ T1555] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 394.693014][ T1555] usb 1-1: USB disconnect, device number 38 [ 394.834117][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 394.841001][ T5862] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.850882][ T5862] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 394.863759][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 394.870465][ T5862] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 394.879925][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.891021][ T5862] usb 2-1: config 0 descriptor?? [ 395.303755][ T5862] kye 0003:0458:5014.0034: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 395.314641][ T5862] kye 0003:0458:5014.0034: ignoring exceeding usage max [ 395.323895][ T5862] kye 0003:0458:5014.0034: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 395.334860][ T5862] kye 0003:0458:5014.0034: tablet-enabling feature report not found [ 395.342844][ T5862] kye 0003:0458:5014.0034: tablet enabling failed [ 395.414138][ T1555] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 395.505238][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.515019][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.527308][T11742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.543964][ T5862] usb 2-1: USB disconnect, device number 22 [ 395.585429][ T1555] usb 1-1: Using ep0 maxpacket: 8 [ 395.593781][ T1555] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 395.604830][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.612821][ T1555] usb 1-1: Product: syz [ 395.617249][ T1555] usb 1-1: Manufacturer: syz [ 395.621927][ T1555] usb 1-1: SerialNumber: syz [ 395.628240][ T1555] usb 1-1: config 0 descriptor?? [ 395.836268][ T1555] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.076339][ T1555] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 396.101907][ T1555] usb 1-1: USB disconnect, device number 39 [ 396.168803][T11759] usb usb8: usbfs: process 11759 (syz.0.1635) did not claim interface 0 before use [ 396.527427][ T5862] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 396.594154][ T1555] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 396.664159][ T5862] usb 2-1: device descriptor read/64, error -71 [ 396.744125][ T1555] usb 1-1: Using ep0 maxpacket: 8 [ 396.752324][ T1555] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 396.761413][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.769452][ T1555] usb 1-1: Product: syz [ 396.773592][ T1555] usb 1-1: Manufacturer: syz [ 396.778468][ T1555] usb 1-1: SerialNumber: syz [ 396.785290][ T1555] usb 1-1: config 0 descriptor?? [ 396.793690][ T1555] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 396.924186][ T5862] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 397.054678][ T5862] usb 2-1: device descriptor read/64, error -71 [ 397.174486][ T5862] usb usb2-port1: attempt power cycle [ 397.514759][ T5862] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 397.544728][ T5862] usb 2-1: device descriptor read/8, error -71 [ 397.804207][ T5862] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 397.836437][ T5862] usb 2-1: device descriptor read/8, error -71 [ 397.945676][ T5862] usb usb2-port1: unable to enumerate USB device [ 399.323534][T11788] fuse: Unknown parameter 'user_id/dev/kvm' [ 399.411572][ T1555] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 399.615075][T11768] input: syz0 as /devices/virtual/input/input58 [ 399.678972][T11802] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 399.678972][T11802] The task syz.0.1637 (11802) triggered the difference, watch for misbehavior. [ 400.727186][ T5862] usb 1-1: USB disconnect, device number 40 [ 400.767505][ T1555] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 400.924234][ T1555] usb 2-1: Using ep0 maxpacket: 16 [ 400.930886][ T1555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.942557][ T1555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.952343][ T1555] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.966329][ T1555] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.975412][ T1555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.985298][ T1555] usb 2-1: config 0 descriptor?? [ 401.084209][ T5862] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 401.237263][ T5862] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 401.246642][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.254835][ T5862] usb 1-1: Product: syz [ 401.259254][ T5862] usb 1-1: Manufacturer: syz [ 401.263881][ T5862] usb 1-1: SerialNumber: syz [ 401.273691][ T5862] usb 1-1: config 0 descriptor?? [ 401.367477][T11819] futex_wake_op: syz.3.1654 tries to shift op by 144; fix this program [ 401.422914][ T1555] microsoft 0003:045E:07DA.0035: unknown main item tag 0x2 [ 401.444282][ T1555] microsoft 0003:045E:07DA.0035: item 0 2 0 11 parsing failed [ 401.455580][ T1555] microsoft 0003:045E:07DA.0035: parse failed [ 401.462189][ T1555] microsoft 0003:045E:07DA.0035: probe with driver microsoft failed with error -22 [ 401.490160][ T5862] hso 1-1:0.0: Failed to find BULK IN ep [ 401.501253][ T5862] usb-storage 1-1:0.0: USB Mass Storage device detected [ 401.622073][ T5862] usb 2-1: USB disconnect, device number 27 [ 401.690688][ T5899] usb 1-1: USB disconnect, device number 41 [ 401.805107][ C1] ------------[ cut here ]------------ [ 401.810742][ C1] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#1: ksoftirqd/1/23 [ 401.811233][T11844] netlink: 'syz.3.1659': attribute type 23 has an invalid length. [ 401.821059][ C1] Modules linked in: [ 401.821088][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 401.821112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.831637][T11843] netlink: 'syz.3.1659': attribute type 23 has an invalid length. [ 401.832841][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 401.865203][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 401.884952][ C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246 [ 401.891032][ C1] RAX: ffffffff818ed124 RBX: ffff888021ab64a0 RCX: ffff88801daa5b80 [ 401.900506][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 401.900524][ C1] RBP: 0000000000000004 R08: ffff88805ba88e0b R09: 1ffff1100b7511c1 [ 401.900538][ C1] R10: dffffc0000000000 R11: ffffed100b7511c2 R12: dffffc0000000000 [ 401.900552][ C1] R13: ffff888021ab6400 R14: ffff88805ba88c78 R15: ffff88805ba88e08 [ 401.900566][ C1] FS: 0000000000000000(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 401.900583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.900596][ C1] CR2: 00007f8ff5bf5f98 CR3: 00000000789b4000 CR4: 00000000003526f0 [ 401.900616][ C1] Call Trace: [ 401.900625][ C1] [ 401.900636][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 401.900665][ C1] ? rcu_core+0xc37/0x1770 [ 401.900687][ C1] rcu_core+0xcab/0x1770 [ 401.900728][ C1] ? __pfx_rcu_core+0x10/0x10 [ 401.900754][ C1] ? rcu_qs+0xc4/0x170 [ 401.900778][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 401.900800][ C1] ? sched_clock_cpu+0x74/0x430 [ 401.900833][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 401.900857][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 401.900892][ C1] handle_softirqs+0x286/0x870 [ 401.900919][ C1] ? run_ksoftirqd+0x9b/0x100 [ 401.900956][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 401.900977][ C1] ? preempt_schedule_common+0x83/0xd0 [ 401.901010][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.901036][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.901059][ C1] run_ksoftirqd+0x9b/0x100 [ 401.901085][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 401.901110][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 401.901137][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 401.901162][ C1] smpboot_thread_fn+0x542/0xa60 [ 401.901188][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.901221][ C1] kthread+0x711/0x8a0 [ 401.901249][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 401.901270][ C1] ? __pfx_kthread+0x10/0x10 [ 401.901297][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.901324][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.901352][ C1] ? __pfx_kthread+0x10/0x10 [ 401.901380][ C1] ret_from_fork+0x599/0xb30 [ 401.901404][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 401.901436][ C1] ? __switch_to_asm+0x39/0x70 [ 401.901462][ C1] ? __switch_to_asm+0x33/0x70 [ 401.901488][ C1] ? __pfx_kthread+0x10/0x10 [ 401.901514][ C1] ret_from_fork_asm+0x1a/0x30 [ 401.901559][ C1] [ 401.901580][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 401.901596][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 401.901619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.901633][ C1] Call Trace: [ 401.901641][ C1] [ 401.901650][ C1] dump_stack_lvl+0x99/0x250 [ 401.901675][ C1] ? __asan_memcpy+0x40/0x70 [ 401.901699][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.901724][ C1] ? __pfx__printk+0x10/0x10 [ 401.901761][ C1] vpanic+0x237/0x6d0 [ 401.901781][ C1] ? __pfx_vpanic+0x10/0x10 [ 401.901797][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 401.901825][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 401.901861][ C1] panic+0xb9/0xc0 [ 401.901879][ C1] ? __pfx_panic+0x10/0x10 [ 401.901908][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 401.901946][ C1] __warn+0x334/0x4c0 [ 401.901964][ C1] ? put_cred_rcu+0x2c5/0x340 [ 401.901993][ C1] ? put_cred_rcu+0x2c5/0x340 [ 401.902019][ C1] report_bug+0x2be/0x4f0 [ 401.902045][ C1] ? put_cred_rcu+0x2c5/0x340 [ 401.902071][ C1] ? put_cred_rcu+0x2c5/0x340 [ 401.902096][ C1] ? put_cred_rcu+0x2c7/0x340 [ 401.902120][ C1] handle_bug+0x84/0x160 [ 401.902142][ C1] exc_invalid_op+0x1a/0x50 [ 401.902163][ C1] asm_exc_invalid_op+0x1a/0x20 [ 401.902182][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 401.902207][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 401.902225][ C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246 [ 401.902243][ C1] RAX: ffffffff818ed124 RBX: ffff888021ab64a0 RCX: ffff88801daa5b80 [ 401.902256][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 401.902269][ C1] RBP: 0000000000000004 R08: ffff88805ba88e0b R09: 1ffff1100b7511c1 [ 401.902284][ C1] R10: dffffc0000000000 R11: ffffed100b7511c2 R12: dffffc0000000000 [ 401.902299][ C1] R13: ffff888021ab6400 R14: ffff88805ba88c78 R15: ffff88805ba88e08 [ 401.902322][ C1] ? put_cred_rcu+0x2c4/0x340 [ 401.902354][ C1] ? put_cred_rcu+0x2c4/0x340 [ 401.902379][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 401.902404][ C1] ? rcu_core+0xc37/0x1770 [ 401.902426][ C1] rcu_core+0xcab/0x1770 [ 401.902466][ C1] ? __pfx_rcu_core+0x10/0x10 [ 401.902491][ C1] ? rcu_qs+0xc4/0x170 [ 401.902513][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 401.902534][ C1] ? sched_clock_cpu+0x74/0x430 [ 401.902565][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 401.902587][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 401.902622][ C1] handle_softirqs+0x286/0x870 [ 401.902648][ C1] ? run_ksoftirqd+0x9b/0x100 [ 401.902677][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 401.902697][ C1] ? preempt_schedule_common+0x83/0xd0 [ 401.902728][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.902752][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.902773][ C1] run_ksoftirqd+0x9b/0x100 [ 401.902794][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 401.902818][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 401.902843][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 401.902867][ C1] smpboot_thread_fn+0x542/0xa60 [ 401.902892][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 401.902927][ C1] kthread+0x711/0x8a0 [ 401.902956][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 401.902979][ C1] ? __pfx_kthread+0x10/0x10 [ 401.903005][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.903031][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.903057][ C1] ? __pfx_kthread+0x10/0x10 [ 401.903083][ C1] ret_from_fork+0x599/0xb30 [ 401.903106][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 401.903136][ C1] ? __switch_to_asm+0x39/0x70 [ 401.903161][ C1] ? __switch_to_asm+0x33/0x70 [ 401.903187][ C1] ? __pfx_kthread+0x10/0x10 [ 401.903214][ C1] ret_from_fork_asm+0x1a/0x30 [ 401.903258][ C1] [ 401.903516][ C1] Kernel Offset: disabled