last executing test programs: 9.255718705s ago: executing program 3 (id=388): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={"121e770f", 0x4, 0x2, 0x0, 0x8, 0x6, "e62dff05cb663afad34e73bdfa3b8a", "305404ca", "a65d15cc", "42cbd720", ["a48f96825db2cfc1d42aa827", "6a79f78df7433338ea4c9296", "2b85b88194509871a6347460", "4d06ffc7ccd0da95341aea28"]}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) syz_io_uring_setup(0x2e76, &(0x7f0000000280)={0x0, 0x318e, 0x0, 0x0, 0x20c, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000300)) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000440)={0x3, 0x1}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r2, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file1\x00', r2}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181042, 0x148) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000d09050b", @ANYBLOB='a'], 0x0) 7.760290634s ago: executing program 2 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100000009f5010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRES32], 0xd8}}, 0x8080) 7.656669834s ago: executing program 2 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@empty, 0x4e22, 0x0, 0x4e24, 0xe14f, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffc, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x203, 0x0, 0x100000000007fff}, 0xffffffff, 0x6e6bb1, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x104f}}, 0x601) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) recvfrom$inet6(r5, &(0x7f00000000c0)=""/129, 0x81, 0x10120, &(0x7f0000000200)={0xa, 0x4e23, 0x91, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 7.536968516s ago: executing program 2 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = geteuid() creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000004740)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}, {@appraise}, {@fowner_gt={'fowner>', r0}}, {@fsname={'fsname', 0x3d, '#! '}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '\\&['}}, {@euid_gt={'euid>', r0}}], 0x3a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000b80)={"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"}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5) 7.163522348s ago: executing program 3 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001040)='./bus\x00', 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x80000) mount$nfs4(0x0, &(0x7f0000000840)='./bus\x00', &(0x7f0000000880), 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB='noac']) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000054c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000280)="81", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="83", 0x1}], 0x1}}], 0x3, 0x4000001) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0) 7.14684653s ago: executing program 2 (id=397): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={0x14, 0x14, 0x1, 0x0, 0x3, {0x2c}}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7b01acfe2222d", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@null, @default, @null, @default, @null, @default]}, &(0x7f0000000080)=0x40, 0x0) getsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) r7 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x857a, 0xfffe, 0x80, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xffffffffffffffc5, {0x10, 0x10, 0x10001, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) close(0x4) ioctl$TIOCGPTLCK(r0, 0x5420, 0x0) 6.037316079s ago: executing program 3 (id=399): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a", 0x1}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x4c00c014}, 0x40041) r5 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @bcast, 0x0, [@default, @remote, @bcast, @remote, @remote, @null]}, &(0x7f0000000040)=0x40, 0xc00) recvfrom$rose(r5, &(0x7f00000000c0)=""/203, 0xcb, 0x10103, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 5.916990405s ago: executing program 3 (id=400): syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000080009050200000005000009047d02003481af0009a00e002300de69"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x260c0) 5.722135288s ago: executing program 1 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900030073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRES32], 0xd8}}, 0x8080) 5.600918214s ago: executing program 1 (id=403): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x2c}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080009000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000000c00028005000100000000000800f6ddc5060740000000000600124000020000"], 0x9c}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000800)={r8}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01064c1, &(0x7f00000001c0)={r8}) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000380)=@xdp={0x2c, 0x4, 0x0, 0x35}, 0x80, &(0x7f0000000440)}, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r10, &(0x7f0000000180)=[{&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f00000036c0)=""/4098, 0x1002}], 0x4) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 4.82683868s ago: executing program 1 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x5, r1, 0x1, 0x20, 0x6, @multicast}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0xff, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffffff, 0x1ff000100, 0xb, 0x5, {@mac=@multicast, {[0x101, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="9b43a87990be", {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x100, 0xf, 0x400, 0x9, 0xd, 'vlan1\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syslog(0x9, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x8090) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c054b020000000000010902240001000040b109040000020300010009210101000120050009058103ff"], 0x0) r4 = socket(0x400000010, 0x3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000040)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x3) write(r4, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2f, @dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x3, 'lblcr\x00', 0x38, 0x9, 0x12}, {@broadcast, 0x4e22, 0x2000, 0x2, 0x5, 0x4368}}, 0x44) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001940), 0x1, 0x0) linkat(r3, &(0x7f0000000440)='./file0\x00', r8, &(0x7f0000001980)='./file0\x00', 0x1600) read(r7, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000006c0)) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='user.incfs.metadata\x00', &(0x7f0000002200)=""/4096, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r9, &(0x7f00000018c0)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r10, 0x29, 0x40, 0x0, 0xd0060) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) 4.61304078s ago: executing program 2 (id=410): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)={0x40, 0x13, 0x2, "1411"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0014"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x0, 0x31, 0xde, "dc8e99df82914555911caa6a86741c150d208ec38c556b7bfa95e72efedaf3ad87581d6ee1a4eb6b02a70ad26a74d1a69b8a86f80532fb261d5ac696e9abc78fc454b8382f9939e311e6f1112628dcf4f69a5b5bed5efd1aba108fb80083cc888c0e78b81bd86104a6cea0c1fc5d25a562bc513db87f5fefe388061ea3e1b74ba97f4bd4dea8f5ceca925683ef6f3720ddccd8d0d70d9872f0719266359e224dea4e20ddf68a1c93269767368cdbe7ca45df563cf21ac6344c42aa4dc6975a0cfeebb8646e38d3e1cfa3dd3ef26fcf34b486632d83f8c6ad22b2738858b2"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x2, 0xd, 0x8000, 0xbf, 0x0, 0x8001, 0x8, 0xb, 0x9, 0x6, 0x81, 0x8a}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x80}, &(0x7f0000000cc0)={0x20, 0x83, 0x2}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000d40)={0x20, 0x89, 0x2}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x0, 0x9, 0x1, "cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x9, 0xc, {0xc, 0x31, "ec82c9a8798e437e20be"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000100)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x1e, 0xf00, 0x8001, [0x0, 0xff3f00, 0x3f, 0x0]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x5, 0x7, "9548c705", "8514397a"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x80, 0x3, 0xfc, 0x6, 0xd99d}}}, &(0x7f0000000940)={0x84, &(0x7f0000000200)={0x20, 0x13, 0x76, "d5d37906ee29d37784e63db2962db92d7445acccbc807864385d82abd515443eabf10c3ff1589c8f5208e9cb32f3ab013835b909c6369de09612fe230771acf1cf2d0d36434f48c54d960cf7e920f31928db751fb9b1940e23e31858847f965ceedbe17bfff44e81abe608ef8b4e7f8107a17dab2554"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x100, 0x13, [0xff]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xf8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "a607"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xb136}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "ecae"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1ad}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) 4.490862208s ago: executing program 3 (id=412): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000204, 0x2) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x211, 0x2100039, 0x0, 0x0, 0x1, 0x59, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) setreuid(0xee01, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x22) close(r2) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) (async) r3 = socket(0x1, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r3], 0x1c}}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008080}, 0x6b7e369c4a37b0aa) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r6, 0x90004) setresuid(0xee01, 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x7, 0x10001, 0x0, {0x5, 0xfffffffffffffffd, 0x200000006, 0x2000000000006c, 0x7, 0x16729df3, 0x3, 0xfffff2dc, 0x101, 0xa000, 0xfffffffe, 0x0, 0x0, 0x4, 0xa7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"}) 3.385755451s ago: executing program 1 (id=414): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524504bdbb37866f0108d022cfe8f03463b8a992ab9e7225042194289f622c24e275dcea0ffaf0bdfac8bb612b48eb7c7d833fea4a435bce8ccb93bbdb96e5d7c38a6beebb057f024c23b5481d9519c09b6270080af4914459e3e005e152c019fd442d355dfd377feb4cbbd12ae2b1bb66886d23961f1bc35c2754813777e54811b5a0674729f", @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r1], 0x0) 2.173594415s ago: executing program 1 (id=415): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000000000000000000000002000000040001"], 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) mount$pvfs2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x8000, &(0x7f00000006c0)={[{'acl'}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f0000000140)=0x8008, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000300)={0x1, 0x0, 0x8000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a14000000000a030000000000000000000000000014000000000a010100000000000000000700004038000000080a01020000000000000000030000010c00064000000000000000030c00064000000000000000040900020073797a3100000000140000001000010000000000000000000000000a"], 0xfffffffffffffeba}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000100)={0x2000, 0x80, 0x8}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x408000, 0x20, 0x10}, 0x18) renameat2(r5, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000380)='./file1/file0\x00', 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 2.021206206s ago: executing program 0 (id=417): r0 = socket$inet(0x2, 0x802, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b00000000314010026bd7000fcdbdf250900020073797a3200000000080041007278650014003300766c616e3000000000000000000000000900020073797a3200000000080041007369770014003300636169663000000000000000000000000900020073797a300000000008004100727865001400330074756e4c3000000000000000000000000900020073797a310000000008004100727865001400330076657468305f746f5f7465616d0000008078d3bb065c0b9f7d11da3689fb75e89699eef64c3dca34a904cc4802188f45d182228246a3082847b86c1527ff319db2402d338f8fc5a1d7b2c7927237a9c9cd0c4d278923e82e790924eba06c82d56a4eee969011240e6dfde0eb3b37b28d9dc57260473ee36296ce62e39e7c9d518773fcbf1d0a96ccee6da825296576fedaeec3de359d50"], 0xb0}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x181000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000440)={{0x2}, 0x0, 0x4, 0xfffffffa, {0x5, 0x8}, 0x68, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) read(r0, &(0x7f0000000040)=""/25, 0x19) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 1.993499209s ago: executing program 0 (id=418): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x3, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r2, 0xc88719ede475f2bf, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x400c008) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) read$hiddev(r4, &(0x7f0000000600)=""/111, 0x6f) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x0}, 0x0) 1.438071182s ago: executing program 2 (id=419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000200)={0x20, 0x23, 0x29, {0x29, 0x8, "92cf84b0e11bffbf39c39ab288284b52677552d85f12c71f7b7b21f0589f1c9bbc1771f0f4d43e"}}, &(0x7f0000000600)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "e895a1f00d2b5b058e6d414bbef7ad7c77b1fb485e912ee0aca6bd67c2c0324644280cbea4362d4f314a0ee6246e300ef28ab4a436df7199f18523e0a3c99c128310cdb4772f917e79caf52acba3f51a391e3043d21e7695433d7adb7780ac3deecd119cd13d56a84d6c98bba8718afa9ae4c8bb76f3f02df26b2797c337423f8a8a72ba1dcfc33c6538ec329b2837d0bfcf119b1bbee4c4776e93d6e9df636c780e9dbc00f9cb4f7628f84f1dd13ea4b960de51d6d6d4d4377716e08402564464c59f22eb57abbd93f37fd6144f76895e36fe0ac274baa159de8a3779"}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x4, "ebd592c7"}, @local=@item_012={0x1, 0x2, 0x1, "11"}, @local=@item_4={0x3, 0x2, 0xa, "a4b2397d"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x1, 0x1, {0x22, 0xa0}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000880)={0x40, 0x7, 0xae, "b8ab07ab0f61ff073c34a0c249eb7b023ac9939b6ecd903680dd03c01b4ed122297b95a782eeef3b3beecd0ceee65a3875ec0407110db4e244114a4d6fc4ff0d0fa99df46dd89313afe76dc878555cc3488e53df9a49d2cfe143187b2d9dcb496e0145cc522b24246db9b3eda33ce56c368b8c2ac971c51f0b38e64ef5cb59117c6d615970b96b93ddf35eab6ed9f5cabc296ee625d2bbb00c6dd59f955a697e3b9bb9f9c78813f31225687ce9d3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x1, 0xe0, "d8b96dd3573198add3f74ffe3e19dc73262ea237031a8fecd6cb7a95c665d0f4d2f0b7b0d132d0bc18be236f31631e7c826c4340631c18dd37f42d66a1f3c8efa4d0537970fb51c4c015d1f977928f46428cf7b77edff7693dd62fbf431b07fb6e645dfc74a44e8c3005ee472da3fe9f587ee20ca6703fc438ad7a7f1baae99fbf285e24c21973e2c37a56d670e65ecff0d965f93062169a61248fcf42fae9050ad0905678af4e8539d017aa2efabe9a84cf06328a0dea7b1cddc86787ac3b8f56fe1338243eeb1ca9474d5c7d8ab5c0f63aeb03bbbb48eb9015350389431004"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0xc}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x10, 0x8, 0xab, 0x82}, {0x9, 0x5, 0x80, 0x2, 0x40, 0xfc, 0x5, 0x3a}, {0x9, 0x5, 0x8, 0x3, 0x400, 0x9, 0x2, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x0, 0x30, 0x49, {0x49, 0x21, "06c03e6c3ea956ce938b23482426ba4dc6422f4f768b3a6867308a816fee197a36f80138ad69a7854a070945764a27223b140ea8387c79e00fe6ab4264df4e642f7ddde00d7f60"}}, &(0x7f0000000340)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "ba07d2029016c887debd210ddb2eba9802020299e0a0844dd8363f3489477a8a3d78eba146c854b54a59244463e2277ad795cafbb00e9fbe25c88b18fa4c33676a17cc8901769a41f439b74a6f33b803994ab684ab3cae0fae7acbcf40912f99d9ec07d392f8bdab0db79a547c1b0883d58b1d6013079ff429f3a7f68fa14f910e558a07e279406b2e91acc5edf7e013cc8e83fc76fac461e4f07e2eebc7faa76df2c9c76e16382c2b9ea56d72ff30e99705f723847a223473ac9ca1f5617a7b06d4f32b41468003805110d0855a7a2e1e529afb118de99d34b218"}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000440)={0x0, 0x5, 0x68, "3c8af8a3185be51f924fae34f459204db57c1846e809ea2794303eba5d7055943c9d8237c1a39c7cf21ccb6aa0b764a4878f23678345bf322167f6f68fa53de1bb00dc19d89eeefb27253781a8227abf4e87cf7cf224bc3b723839b53d6679e730ed61878ac55cc0"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000004c0)={0x21, 0x0, 0x2, ']D'}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0xda, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.248807664s ago: executing program 1 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x8d0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x16}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 1.24603866s ago: executing program 3 (id=421): syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000080009050200000005000009047d02003481af0009a00e002300de69"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x260c0) 475.793799ms ago: executing program 0 (id=422): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'erspan0\x00', {0x3}, 0x42e0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000100"], 0x58}, 0x1, 0x0, 0x0, 0x44090}, 0x20004080) (async) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000600)={0x0, [[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000001], [0x7b7f, 0x0, 0x0, 0x4000000, 0x1, 0x1, 0x6], [0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001ff]], '\x00', [{0x80000001, 0x0, 0x0, 0x1}, {0x0, 0x1fc}, {0x0, 0x1000}, {}, {0x0, 0x1}, {0x0, 0xffff}, {0xfffffffd}, {0x1, 0xa00000}, {}, {}, {0xffff}, {0x2}], '\x00', 0x3c}) 199.488119ms ago: executing program 0 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100000009000a0073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRES32], 0xd8}}, 0x8080) 74.96016ms ago: executing program 0 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee01, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0xfffffdbf, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x11, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 0s ago: executing program 0 (id=425): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010040000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): th driver pegasus failed with error -121 [ 123.617478][ T6330] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 123.655561][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 123.815814][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 123.825502][ T5199] ldm_validate_partition_table(): Disk read failed. [ 123.832378][ T5199] Dev loop2: unable to read RDB block 0 [ 123.843041][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.853994][ T5199] loop2: unable to read partition table [ 123.866712][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.902111][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.918964][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.930069][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.948600][ T5899] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.958236][ T5899] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.966984][ T5899] usb 1-1: Manufacturer: syz [ 123.985125][ T5899] usb 1-1: config 0 descriptor?? [ 124.317679][ T5899] rc_core: IR keymap rc-hauppauge not found [ 124.323718][ T5899] Registered IR keymap rc-empty [ 124.334084][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.355587][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.383957][ T5899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 124.399821][ T5899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 124.457027][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.479385][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.515635][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.536314][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.555695][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.555872][ T5820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.585719][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.621114][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.645777][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.665662][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.685632][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.708083][ T5899] mceusb 1-1:0.0: Registered 䘢겚삑➨௣๫휚愡∄괙èŠë–¥á¶¹á‘›î±åŒ„ꣻ낢䧲䛾 with mce emulator interface version 1 [ 124.725266][ T5899] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.738705][ T5899] usb 1-1: USB disconnect, device number 14 [ 124.753733][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 124.762582][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.785916][ T5820] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 124.796073][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.804160][ T5820] usb 2-1: Product: syz [ 124.825712][ T5820] usb 2-1: Manufacturer: syz [ 124.830608][ T5820] usb 2-1: SerialNumber: syz [ 124.853521][ T5820] usb 2-1: config 0 descriptor?? [ 124.880237][ T5820] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 124.894963][ T5820] usb 2-1: selecting invalid altsetting 1 [ 125.026530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.218958][ T6360] 9p: Could not find request transport: xen [ 125.258297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 125.270206][ T5831] usb 4-1: USB disconnect, device number 11 [ 125.282508][ T5820] usb 2-1: USB disconnect, device number 10 [ 125.445665][ T5918] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.615570][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 125.623994][ T5918] usb 1-1: config 162 has an invalid interface number: 97 but max is 0 [ 125.633200][ T5918] usb 1-1: config 162 has no interface number 0 [ 125.642834][ T5918] usb 1-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 125.654652][ T5918] usb 1-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.668906][ T5918] usb 1-1: config 162 interface 97 has no altsetting 0 [ 125.679142][ T5918] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 125.694276][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.702904][ T5918] usb 1-1: Product: syz [ 125.711801][ T5918] usb 1-1: Manufacturer: syz [ 125.716744][ T5918] usb 1-1: SerialNumber: syz [ 125.930284][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.978610][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.001968][ T5918] metro_usb 1-1:162.97: interrupt-out endpoint missing [ 126.026084][ T5918] usb 1-1: USB disconnect, device number 15 [ 126.401810][ T6388] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.522004][ T5943] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 126.565527][ T106] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.648325][ T6396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.674278][ T6396] netlink: 'syz.0.131': attribute type 4 has an invalid length. [ 126.698566][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.708923][ T5943] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 126.719544][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.732969][ T5943] usb 4-1: config 0 descriptor?? [ 126.744038][ T106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.765591][ T106] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.776251][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.792374][ T106] usb 2-1: config 0 descriptor?? [ 126.803357][ T106] pwc: Askey VC010 type 2 USB webcam detected. [ 126.950852][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.963196][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.135624][ T5820] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 127.187548][ T5943] prodikeys 0003:041E:2801.0004: unexpected long global item [ 127.198849][ T5943] prodikeys 0003:041E:2801.0004: hid parse failed [ 127.209351][ T5943] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 127.220209][ T106] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.228136][ T106] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.232343][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.250351][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.270144][ T106] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.281513][ T106] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.291288][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.301916][ T5820] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 127.307176][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.328136][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.340833][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.347631][ T5820] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 127.388150][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.391154][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.395148][ T5820] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 127.395179][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.435279][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.436725][ T5820] usb 1-1: config 0 descriptor?? [ 127.498338][ T6401] netlink: 'syz.2.134': attribute type 83 has an invalid length. [ 127.574637][ T106] pwc: recv_control_msg error -71 req 04 val 1400 [ 127.590173][ T106] pwc: recv_control_msg error -71 req 02 val 2000 [ 127.597575][ T106] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.604625][ T106] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.611979][ T106] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.619122][ T106] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.626513][ T106] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.633624][ T106] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.642108][ T106] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.649723][ T106] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.660654][ T6000] usb 4-1: USB disconnect, device number 12 [ 127.666719][ T106] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.679026][ T106] pwc: Registered as video103. [ 127.703796][ T106] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 127.732561][ T106] usb 2-1: USB disconnect, device number 11 [ 127.985544][ T5943] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 128.097896][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 128.121667][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.128406][ T5943] usb 3-1: device descriptor read/64, error -71 [ 128.152862][ T5820] usb 1-1: USB disconnect, device number 16 [ 128.395554][ T5943] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 128.535598][ T5943] usb 3-1: device descriptor read/64, error -71 [ 128.575551][ T5820] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 128.645786][ T5943] usb usb3-port1: attempt power cycle [ 128.745701][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 128.754246][ T5820] usb 4-1: config 0 has an invalid interface number: 179 but max is 0 [ 128.764095][ T6414] : renamed from dummy0 (while UP) [ 128.774825][ T5820] usb 4-1: config 0 has no interface number 0 [ 128.784647][ T5820] usb 4-1: New USB device found, idVendor=0421, idProduct=06ba, bcdDevice=a6.83 [ 128.795049][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.810260][ T5820] usb 4-1: config 0 descriptor?? [ 128.824676][ T5820] cdc_phonet 4-1:0.179: probe with driver cdc_phonet failed with error -22 [ 128.897451][ T6416] process 'syz.0.139' launched './file2' with NULL argv: empty string added [ 128.985613][ T5943] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 129.007585][ T30] audit: type=1326 audit(1766085665.374:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d28b8f749 code=0x0 [ 129.034462][ T5943] usb 3-1: device descriptor read/8, error -71 [ 129.041626][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.054326][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.065258][ T5899] usb 4-1: USB disconnect, device number 13 [ 129.077718][ T6420] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 129.285528][ T5943] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 129.306432][ T5943] usb 3-1: device descriptor read/8, error -71 [ 129.395503][ T5820] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 129.416026][ T5943] usb usb3-port1: unable to enumerate USB device [ 129.545531][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 129.552500][ T5820] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 129.561297][ T5820] usb 1-1: config 0 has no interface number 0 [ 129.570861][ T5820] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.580753][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.589424][ T5820] usb 1-1: Product: syz [ 129.593755][ T5820] usb 1-1: Manufacturer: syz [ 129.598516][ T5820] usb 1-1: SerialNumber: syz [ 129.606726][ T5820] usb 1-1: config 0 descriptor?? [ 129.614950][ T5820] smsc95xx v2.0.0 [ 129.817280][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.835408][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.857669][ T5820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 129.877424][ T5820] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 129.910082][ T5820] usb 1-1: USB disconnect, device number 17 [ 129.979672][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 130.010817][ T6432] netlink: 9872 bytes leftover after parsing attributes in process `syz.0.144'. [ 130.023014][ T5841] Bluetooth: hci0: SCO packet too small [ 130.052112][ T6432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.145519][ T5899] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 130.158944][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.169624][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.187647][ T5899] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 130.197116][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.205150][ T5899] usb 4-1: Product: syz [ 130.210047][ T5899] usb 4-1: Manufacturer: syz [ 130.214892][ T5899] usb 4-1: SerialNumber: syz [ 130.227633][ T5899] usb 4-1: config 0 descriptor?? [ 130.236165][ T5899] usb-storage 4-1:0.0: USB Mass Storage device detected [ 130.267801][ T5899] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 130.436577][ T5820] usb 4-1: USB disconnect, device number 14 [ 130.564587][ T6447] netlink: zone id is out of range [ 130.735524][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'. [ 130.995920][ T5899] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.166329][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 131.186306][ T5899] usb 3-1: config 8 has an invalid interface number: 4 but max is 0 [ 131.194945][ T5899] usb 3-1: config 8 has an invalid descriptor of length 13, skipping remainder of the config [ 131.215468][ T5899] usb 3-1: config 8 has no interface number 0 [ 131.221705][ T5899] usb 3-1: config 8 interface 4 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 131.247845][ T5899] usb 3-1: config 8 interface 4 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 131.265547][ T5899] usb 3-1: config 8 interface 4 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 131.305506][ T5943] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.333581][ T5899] usb 3-1: config 8 interface 4 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 131.354533][ T5899] usb 3-1: New USB device found, idVendor=05c6, idProduct=9625, bcdDevice=d3.78 [ 131.367594][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.380482][ T5899] usb 3-1: Product: syz [ 131.384821][ T5899] usb 3-1: Manufacturer: syz [ 131.390479][ T5899] usb 3-1: SerialNumber: syz [ 131.445962][ T5943] usb 2-1: device descriptor read/64, error -71 [ 131.617199][ T106] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 131.628750][ T5899] usb 3-1: USB disconnect, device number 14 [ 131.685988][ T6000] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 131.705732][ T5943] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 131.788994][ T106] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 131.798923][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.810701][ T106] usb 1-1: config 0 descriptor?? [ 131.845652][ T5943] usb 2-1: device descriptor read/64, error -71 [ 131.857375][ T6000] usb 4-1: not running at top speed; connect to a high speed hub [ 131.867265][ T6000] usb 4-1: config 129 has an invalid interface number: 58 but max is 1 [ 131.876356][ T6000] usb 4-1: config 129 has no interface number 1 [ 131.883424][ T6000] usb 4-1: config 129 interface 0 has no altsetting 0 [ 131.891274][ T6000] usb 4-1: config 129 interface 58 has no altsetting 0 [ 131.902868][ T6000] usb 4-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 131.912206][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.920394][ T6000] usb 4-1: Product: syz [ 131.924712][ T6000] usb 4-1: Manufacturer: syz [ 131.932951][ T6000] usb 4-1: SerialNumber: syz [ 131.956022][ T5943] usb usb2-port1: attempt power cycle [ 132.159160][ T6000] gspca_main: sunplus-2.14.0 probing 08ca:2022 [ 132.170667][ T6000] gspca_sunplus: reg_r err -71 [ 132.175924][ T6000] sunplus 4-1:129.0: probe with driver sunplus failed with error -71 [ 132.216845][ T6000] usb 4-1: USB disconnect, device number 15 [ 132.315653][ T5943] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 132.336956][ T5943] usb 2-1: device descriptor read/8, error -71 [ 132.361965][ T6475] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 132.585738][ T5943] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.606347][ T5943] usb 2-1: device descriptor read/8, error -71 [ 132.655432][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.716253][ T5943] usb usb2-port1: unable to enumerate USB device [ 132.825549][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 132.833297][ T5917] usb 3-1: config 2 has an invalid interface number: 15 but max is 0 [ 132.842087][ T5917] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 132.852904][ T5917] usb 3-1: config 2 has no interface number 1 [ 132.859229][ T5917] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.872605][ T5917] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 132.886136][ T5917] usb 3-1: config 2 interface 0 has no altsetting 0 [ 132.895955][ T5917] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 132.907698][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.916210][ T5917] usb 3-1: Product: syz [ 132.920460][ T5917] usb 3-1: Manufacturer: syz [ 132.925146][ T5917] usb 3-1: SerialNumber: syz [ 132.946224][ T5917] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 133.145599][ T5917] pwc: Failed to set LED on/off time (-71) [ 133.162471][ T5917] pwc: send_video_command error -71 [ 133.170858][ T5917] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 133.179610][ T5917] Philips webcam 3-1:2.0: probe with driver Philips webcam failed with error -71 [ 133.193583][ T5917] usb 3-1: USB disconnect, device number 15 [ 133.256407][ T106] pegasus 1-1:0.0: can't reset MAC [ 133.262931][ T106] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 133.327904][ T106] IPVS: starting estimator thread 0... [ 133.418433][ T6484] IPVS: using max 30 ests per chain, 72000 per kthread [ 134.392573][ T5943] usb 1-1: USB disconnect, device number 18 [ 134.899694][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 134.915512][ T5917] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 135.074900][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 135.094279][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 135.106223][ T5831] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 135.113553][ T6534] kAFS: unable to lookup cell '' [ 135.123027][ T5917] usb 2-1: config 0 has an invalid interface number: 54 but max is 0 [ 135.131600][ T5917] usb 2-1: config 0 has no interface number 0 [ 135.142845][ T5917] usb 2-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=4d.72 [ 135.152507][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.165770][ T5917] usb 2-1: Product: syz [ 135.170180][ T5917] usb 2-1: Manufacturer: syz [ 135.180816][ T5917] usb 2-1: SerialNumber: syz [ 135.201547][ T5917] usb 2-1: config 0 descriptor?? [ 135.222601][ T5917] option 2-1:0.54: GSM modem (1-port) converter detected [ 135.288203][ T6536] netlink: 64 bytes leftover after parsing attributes in process `syz.2.176'. [ 135.288538][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.325429][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.344806][ T5831] usb 4-1: config 1 has no interface number 0 [ 135.355009][ T5831] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.375451][ T5831] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 135.395091][ T5831] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 135.406345][ T5831] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 135.426490][ T5917] usb 2-1: USB disconnect, device number 16 [ 135.435198][ T5917] option 2-1:0.54: device disconnected [ 135.448512][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.464914][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.487295][ T5831] usb 4-1: Product: syz [ 135.491602][ T5831] usb 4-1: Manufacturer: syz [ 135.505641][ T5831] usb 4-1: SerialNumber: syz [ 135.755552][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 135.908826][ T5899] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 135.918095][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.936647][ T5899] usb 3-1: config 0 descriptor?? [ 135.957614][ T5899] pwc: Creative Labs Webcam Pro Ex detected. [ 136.265459][ T5820] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 136.327599][ T5899] pwc: Failed to set LED on/off time (-71) [ 136.344558][ T5899] pwc: send_video_command error -71 [ 136.351173][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 136.360748][ T6524] netlink: 168 bytes leftover after parsing attributes in process `syz.3.172'. [ 136.375945][ T5899] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 136.415936][ T5899] usb 3-1: USB disconnect, device number 16 [ 136.464851][ T5820] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 136.492161][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.514068][ T6549] netlink: 'syz.0.181': attribute type 3 has an invalid length. [ 136.521158][ T5820] usb 2-1: config 0 descriptor?? [ 136.524637][ T6549] netlink: 224 bytes leftover after parsing attributes in process `syz.0.181'. [ 136.605571][ T5831] cdc_ncm 4-1:1.1: bind() failure [ 136.808793][ T5917] usb 4-1: USB disconnect, device number 16 [ 136.877083][ T6556] netlink: 'syz.0.184': attribute type 4 has an invalid length. [ 137.478046][ T5917] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 137.652189][ T5917] usb 1-1: config 12 has an invalid interface number: 5 but max is 0 [ 137.664866][ T5917] usb 1-1: config 12 has no interface number 0 [ 137.699653][ T5917] usb 1-1: config 12 interface 5 altsetting 14 bulk endpoint 0x8A has invalid maxpacket 1024 [ 137.722551][ T5917] usb 1-1: config 12 interface 5 altsetting 14 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 137.734153][ T5917] usb 1-1: config 12 interface 5 has no altsetting 0 [ 137.752545][ T5917] usb 1-1: New USB device found, idVendor=05c6, idProduct=9080, bcdDevice=a4.d9 [ 137.762595][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.771899][ T5917] usb 1-1: Product: syz [ 137.776620][ T5917] usb 1-1: Manufacturer: syz [ 137.781345][ T5917] usb 1-1: SerialNumber: syz [ 137.792016][ T6563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.875559][ T5899] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 137.955467][ T6000] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 137.977455][ T5820] pegasus 2-1:0.0: can't reset MAC [ 137.983441][ T5820] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 138.029624][ T5917] usb 1-1: USB disconnect, device number 19 [ 138.036907][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 138.054659][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.066424][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.081918][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.090746][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.115526][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.129388][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.138944][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.139525][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.159254][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.165494][ T6000] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.172579][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.187645][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.193441][ T6000] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.201537][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.216123][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.221184][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.236128][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.242754][ T6000] usb 3-1: config 0 descriptor?? [ 138.246597][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.262379][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.271428][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.281301][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.292900][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.301222][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.309162][ T6000] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.312734][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.326258][ T6000] dvb-usb: bulk message failed: -22 (3/0) [ 138.343724][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.352077][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.360047][ T6000] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.380883][ T6000] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.388082][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.395687][ T6000] usb 3-1: media controller created [ 138.406704][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.416491][ T5899] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 138.424777][ T6000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.427773][ T5899] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 138.449091][ T5899] usb 4-1: Product: syz [ 138.453432][ T5899] usb 4-1: Manufacturer: syz [ 138.459435][ T5899] usb 4-1: SerialNumber: syz [ 138.476261][ T5899] usb 4-1: config 0 descriptor?? [ 138.489462][ T6000] dvb-usb: bulk message failed: -22 (6/0) [ 138.508235][ T5899] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 138.527085][ T6000] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.549221][ T6000] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 138.588420][ T6000] dvb-usb: schedule remote query interval to 150 msecs. [ 138.606781][ T6000] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.624178][ T6000] usb 3-1: USB disconnect, device number 17 [ 138.690441][ T6000] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 138.710478][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.720290][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.723742][ T5820] usb 4-1: USB disconnect, device number 17 [ 138.728423][ T6565] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 138.794399][ T5820] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 138.929282][ T6581] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 139.076149][ T6000] usb 2-1: USB disconnect, device number 17 [ 139.182426][ T6586] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.194'. [ 139.231734][ T6590] No source specified [ 139.385472][ T5820] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 139.445576][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.485509][ T6000] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 139.558650][ T5820] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 139.567813][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 139.583142][ T5820] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.597573][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.608713][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.608747][ T5820] usb 3-1: Product: syz [ 139.608763][ T5820] usb 3-1: Manufacturer: syz [ 139.608909][ T5820] usb 3-1: SerialNumber: syz [ 139.625784][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.640756][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.643372][ T5820] usb 3-1: config 0 descriptor?? [ 139.662157][ T6000] usb 2-1: Invalid ep0 maxpacket: 64 [ 139.676287][ T5820] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.682948][ T5820] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.697006][ T5899] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.711053][ T5820] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 139.725531][ T5899] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 139.736750][ T5820] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 139.785469][ T5899] usb 4-1: Manufacturer: syz [ 139.791983][ T5820] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 139.805479][ T6000] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 139.808493][ T5899] usb 4-1: config 0 descriptor?? [ 140.021734][ T6000] usb 2-1: Invalid ep0 maxpacket: 64 [ 140.028164][ T6000] usb usb2-port1: attempt power cycle [ 140.177146][ T106] usb 3-1: USB disconnect, device number 18 [ 140.365669][ T6000] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 140.386430][ T6000] usb 2-1: Invalid ep0 maxpacket: 64 [ 140.515473][ T6000] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 140.536196][ T6000] usb 2-1: Invalid ep0 maxpacket: 64 [ 140.541891][ T6000] usb usb2-port1: unable to enumerate USB device [ 140.653342][ T5899] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 140.865244][ T5831] usb 4-1: USB disconnect, device number 18 [ 140.945542][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 141.095578][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 141.107559][ T5899] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 141.116952][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.125060][ T5899] usb 3-1: Product: syz [ 141.129859][ T5899] usb 3-1: Manufacturer: syz [ 141.134519][ T5899] usb 3-1: SerialNumber: syz [ 141.142655][ T5899] usb 3-1: config 0 descriptor?? [ 141.155035][ T5899] gspca_main: sq905-2.14.0 probing 2770:9120 [ 141.452387][ T30] audit: type=1326 audit(1766085677.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65598f749 code=0xffff0000 [ 141.758556][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.772875][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.189682][ T5899] gspca_sq905: bulk read fail (-22) len 0/4 [ 142.196476][ T5899] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 142.466624][ T5899] usb 3-1: USB disconnect, device number 19 [ 142.516734][ T5943] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 142.678069][ T5943] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 142.695541][ T5943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 142.705235][ T5943] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 142.735465][ T5943] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 142.755429][ T5943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 142.765227][ T5943] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 142.787248][ T5943] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 142.797237][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.805678][ T5943] usb 2-1: Product: syz [ 142.810024][ T5943] usb 2-1: Manufacturer: syz [ 142.814654][ T5943] usb 2-1: SerialNumber: syz [ 142.834872][ T5943] usb 2-1: ucan: probing device on interface #0 [ 142.847685][ T5943] usb 2-1: ucan: invalid endpoint configuration [ 142.854005][ T5943] usb 2-1: ucan: probe failed; try to update the device firmware [ 143.039840][ T6000] usb 2-1: USB disconnect, device number 22 [ 143.305572][ T5943] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 143.457863][ T5943] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 143.474699][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.489516][ T5943] usb 3-1: config 0 descriptor?? [ 143.635643][ T5917] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 143.677975][ T6625] overlayfs: failed to resolve './file0': -2 [ 143.797625][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.806267][ T5917] usb 4-1: config 0 has no interface number 0 [ 143.812702][ T5917] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.824626][ T5917] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.837866][ T5917] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 143.847370][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.856313][ T5831] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 143.875931][ T5917] usb 4-1: config 0 descriptor?? [ 143.995564][ T6000] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 144.018518][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.027372][ T5831] usb 1-1: not running at top speed; connect to a high speed hub [ 144.036690][ T5831] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 144.045857][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.058483][ T5831] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 144.074030][ T5831] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 144.085185][ T5831] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 144.098718][ T5831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.107893][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.117140][ T5831] usb 1-1: Product: syz [ 144.122428][ T5831] usb 1-1: Manufacturer: syz [ 144.127616][ T5831] usb 1-1: SerialNumber: syz [ 144.145460][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 144.152897][ T6000] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 144.161333][ T6000] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.174277][ T6000] usb 2-1: config 1 has no interface number 0 [ 144.183331][ T6000] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 144.193227][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.201375][ T6000] usb 2-1: Product: syz [ 144.206098][ T6000] usb 2-1: Manufacturer: syz [ 144.210802][ T6000] usb 2-1: SerialNumber: syz [ 144.235758][ T6000] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 144.303690][ T5917] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 144.319330][ T5917] hid_prodikeys: hid-prodikeys: failed to find output report [ 144.319330][ T5917] [ 144.357183][ T5831] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 144.474006][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.486464][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.504579][ T6000] usb 4-1: USB disconnect, device number 19 [ 144.512213][ T5831] usb 1-1: USB disconnect, device number 21 [ 144.518197][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.519977][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.627512][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.642536][ T5820] usb 2-1: USB disconnect, device number 23 [ 144.646228][ T2121] usb 2-1: Failed to submit usb control message: -71 [ 144.662576][ T2121] usb 2-1: unable to send the bmi data to the device: -71 [ 144.672832][ T2121] usb 2-1: unable to get target info from device [ 144.684570][ T2121] usb 2-1: could not get target info (-71) [ 144.696436][ T2121] usb 2-1: could not probe fw (-71) [ 144.947093][ T5943] pegasus 3-1:0.0: can't reset MAC [ 144.953024][ T5943] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 145.130408][ T5820] IPVS: starting estimator thread 0... [ 145.169463][ T6640] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:19489 [ 145.226021][ T6641] IPVS: using max 26 ests per chain, 62400 per kthread [ 145.435537][ T5820] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 145.443318][ T5831] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 145.520123][ T6652] bond0: entered promiscuous mode [ 145.527221][ T6653] bond0: left promiscuous mode [ 145.532071][ T6653] bond0: entered allmulticast mode [ 145.608477][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.625599][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 145.637484][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.649301][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.668644][ T5820] usb 1-1: config 3 has an invalid interface number: 8 but max is 3 [ 145.677157][ T5820] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 145.692304][ T5831] usb 2-1: string descriptor 0 read error: -22 [ 145.705404][ T5820] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 145.714528][ T5831] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 145.723897][ T5820] usb 1-1: config 3 has no interface number 0 [ 145.735670][ T5820] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.746713][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.761239][ T5831] usb 2-1: config 0 descriptor?? [ 145.776828][ T5820] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.789051][ T5820] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.814043][ T5831] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 145.823365][ T5831] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 145.830916][ T5820] usb 1-1: config 3 interface 8 has no altsetting 0 [ 145.843848][ T5820] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 145.853636][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.862663][ T5820] usb 1-1: Product: syz [ 145.867958][ T5820] usb 1-1: Manufacturer: syz [ 145.872750][ T5820] usb 1-1: SerialNumber: syz [ 146.067527][ T5831] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 146.087090][ T5831] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 146.111921][ T5820] appledisplay 1-1:3.8: Submitting URB failed [ 146.125927][ T5831] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 146.138815][ T5820] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -5 [ 146.150487][ T5831] em28xx 2-1:0.0: No AC97 audio processor [ 146.157400][ T6000] usb 3-1: USB disconnect, device number 20 [ 146.188216][ T5831] usb 2-1: USB disconnect, device number 24 [ 146.232316][ T5820] usb 1-1: USB disconnect, device number 22 [ 146.239494][ T5831] em28xx 2-1:0.0: Disconnecting em28xx [ 146.273330][ T5831] em28xx 2-1:0.0: Freeing device [ 146.469373][ T6675] capability: warning: `syz.3.220' uses deprecated v2 capabilities in a way that may be insecure [ 146.626039][ T6000] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 146.659531][ T5841] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 146.796055][ T6000] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.805291][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.860910][ T6000] usb 3-1: config 0 descriptor?? [ 147.089637][ T6000] usbhid 3-1:0.0: can't add hid device: -71 [ 147.103131][ T6000] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.138185][ T6000] usb 3-1: USB disconnect, device number 21 [ 147.157131][ T5943] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.298552][ T5831] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 147.325508][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 147.337221][ T5943] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 147.350349][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.369192][ T5943] usb 4-1: config 0 descriptor?? [ 147.438038][ T5820] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 147.464015][ T5831] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 147.473382][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.481694][ T5831] usb 1-1: Product: syz [ 147.486213][ T5831] usb 1-1: Manufacturer: syz [ 147.490864][ T5831] usb 1-1: SerialNumber: syz [ 147.502768][ T5831] usb 1-1: config 0 descriptor?? [ 147.520628][ T5831] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 147.579294][ T5943] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 147.591328][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.595928][ T6000] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 147.617699][ T5820] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 147.618666][ T5943] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 147.637165][ T5943] usb 4-1: media controller created [ 147.644969][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.671228][ T5820] usb 2-1: config 0 descriptor?? [ 147.693998][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.789449][ T5943] az6027: usb out operation failed. (-71) [ 147.799578][ T6000] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.816287][ T5943] az6027: usb out operation failed. (-71) [ 147.822190][ T5943] stb0899_attach: Driver disabled by Kconfig [ 147.845457][ T5943] az6027: no front-end attached [ 147.845457][ T5943] [ 147.846386][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.875839][ T5943] az6027: usb out operation failed. (-71) [ 147.887404][ T6000] usb 3-1: config 0 descriptor?? [ 147.889832][ T5943] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.920890][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 147.961186][ T5943] dvb-usb: schedule remote query interval to 400 msecs. [ 147.976538][ T5943] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 148.005289][ T5943] usb 4-1: USB disconnect, device number 20 [ 148.034105][ T6002] udevd[6002]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 148.121704][ T6000] usbhid 3-1:0.0: can't add hid device: -71 [ 148.131680][ T5943] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 148.140260][ T6000] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.151841][ T6000] usb 3-1: USB disconnect, device number 22 [ 148.686053][ T6000] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 148.869318][ T6000] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40 [ 148.879530][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.892678][ T6000] usb 3-1: config 0 descriptor?? [ 148.904412][ T6000] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 149.005645][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.113280][ T5820] pegasus 2-1:0.0: can't reset MAC [ 149.119434][ T5820] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 149.135524][ T5918] usb 4-1: device descriptor read/64, error -71 [ 149.171321][ T5831] gspca_sunplus: reg_r err -71 [ 149.176809][ T5831] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 149.197448][ T5831] usb 1-1: USB disconnect, device number 23 [ 149.375513][ T5918] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.505451][ T5918] usb 4-1: device descriptor read/64, error -71 [ 149.626603][ T5918] usb usb4-port1: attempt power cycle [ 149.727253][ T6000] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 149.772551][ T6728] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 149.788834][ T6727] netlink: 25 bytes leftover after parsing attributes in process `syz.0.230'. [ 149.918334][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 149.919269][ T5943] usb 3-1: USB disconnect, device number 23 [ 149.925153][ C0] gspca_main: Resubmit URB failed with error -19 [ 149.977066][ T5918] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 149.989334][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 150.004626][ T6734] add_ndev_hash(veth0_to_team) on ffff888077e40000 done [ 150.018202][ T5918] usb 4-1: device descriptor read/8, error -71 [ 150.072302][ T6735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.090085][ T6735] Invalid source name [ 150.094285][ T6735] UBIFS error (pid: 6735): cannot open "./file0", error -22 [ 150.207989][ T5831] usb 2-1: USB disconnect, device number 25 [ 150.275518][ T5918] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 150.293057][ T6734] infiniband syz1: set down [ 150.302377][ T6737] netlink: 'syz.1.232': attribute type 4 has an invalid length. [ 150.308617][ T5918] usb 4-1: device descriptor read/8, error -71 [ 150.311599][ T6734] infiniband syz1: added veth0_to_team [ 150.393386][ T6734] RDS/IB: syz1: added [ 150.398416][ T6734] smc: adding ib device syz1 with port count 1 [ 150.405011][ T6734] smc: ib device syz1 port 1 has no pnetid [ 150.427171][ T5918] usb usb4-port1: unable to enumerate USB device [ 150.444104][ T30] audit: type=1400 audit(1766085686.804:6): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6739 comm="syz.1.233" [ 150.466756][ T6741] random: crng reseeded on system resumption [ 150.745504][ T5943] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 150.835420][ T5918] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 150.895474][ T5943] usb 2-1: device descriptor read/64, error -71 [ 151.005424][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 151.013130][ T5918] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 151.024562][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.036994][ T5918] usb 3-1: config 0 has no interface number 0 [ 151.043303][ T5918] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.055824][ T5918] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.067435][ T5918] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.079778][ T5918] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.093446][ T5918] usb 3-1: config 0 interface 52 has no altsetting 0 [ 151.100852][ T5918] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 151.110876][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.124158][ T5918] usb 3-1: config 0 descriptor?? [ 151.135456][ T5943] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 151.285505][ T5943] usb 2-1: device descriptor read/64, error -71 [ 151.350853][ T5918] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input16 [ 151.395980][ T5943] usb usb2-port1: attempt power cycle [ 151.608885][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 151.619203][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 151.632895][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 151.736072][ T5943] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 151.757634][ T5943] usb 2-1: device descriptor read/8, error -71 [ 151.779287][ T6750] loop9: detected capacity change from 0 to 7 [ 151.792400][ T6750] Dev loop9: unable to read RDB block 7 [ 151.807532][ T6750] loop9: unable to read partition table [ 151.813988][ T6750] loop9: partition table beyond EOD, truncated [ 151.834586][ T6750] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 151.923490][ T5843] Dev loop9: unable to read RDB block 7 [ 151.929416][ T5843] loop9: unable to read partition table [ 151.937986][ T5843] loop9: partition table beyond EOD, truncated [ 151.950210][ T6751] Dev loop9: unable to read RDB block 7 [ 151.956552][ T6751] loop9: unable to read partition table [ 151.962576][ T6751] loop9: partition table beyond EOD, truncated [ 151.970602][ T6751] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 152.006635][ T5943] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 152.036172][ T5943] usb 2-1: device descriptor read/8, error -71 [ 152.078034][ T6757] tipc: Enabling of bearer rejected, media not registered [ 152.088576][ T6757] capability: warning: `syz.0.238' uses 32-bit capabilities (legacy support in use) [ 152.146152][ T5943] usb usb2-port1: unable to enumerate USB device [ 152.255673][ T5831] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 152.345474][ T5918] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 152.405463][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 152.413690][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.424974][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.436336][ T5831] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.445692][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.453714][ T5831] usb 4-1: Product: syz [ 152.458151][ T5831] usb 4-1: Manufacturer: syz [ 152.463215][ T5831] usb 4-1: SerialNumber: syz [ 152.507706][ T5918] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 152.516220][ T5918] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 152.524445][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 152.533871][ T5918] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 152.544272][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.553561][ T5918] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 152.562780][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.571320][ T5918] usb 1-1: Product: syz [ 152.575657][ T5918] usb 1-1: Manufacturer: syz [ 152.580335][ T5918] usb 1-1: SerialNumber: syz [ 152.589016][ T5918] usb 1-1: config 0 descriptor?? [ 152.595173][ T6757] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 152.809975][ T5918] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 152.824642][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 152.837010][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 152.847158][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 152.858551][ T5831] usb 4-1: 0:2 : does not exist [ 152.869233][ T5918] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 152.882875][ T5831] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 152.891970][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 152.901230][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 152.916301][ T5918] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 152.937198][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 152.945180][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 152.975871][ T5918] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 152.986854][ T5831] usb 4-1: USB disconnect, device number 25 [ 153.000095][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 153.010219][ T5918] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 153.033267][ T5918] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 153.049604][ T5918] usb 1-1: USB disconnect, device number 24 [ 153.063597][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.088144][ T5918] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 153.107760][ T5918] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 153.124658][ T5918] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 153.143247][ T5918] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 153.154432][ T5918] keyspan 1-1:0.0: device disconnected [ 153.562590][ T6764] netlink: 'syz.1.241': attribute type 4 has an invalid length. [ 153.641750][ T5899] usb 3-1: USB disconnect, device number 24 [ 153.736425][ T5943] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 153.752355][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 153.846638][ T5831] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 153.890999][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 153.908593][ T5943] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 153.920508][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.933573][ T5943] usb 4-1: config 0 descriptor?? [ 154.019037][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 154.030178][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 154.042162][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.067770][ T5831] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.085770][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.093953][ T5831] usb 1-1: Product: syz [ 154.113614][ T5831] usb 1-1: Manufacturer: syz [ 154.123442][ T5831] usb 1-1: SerialNumber: syz [ 154.144660][ T5831] usb 1-1: config 0 descriptor?? [ 154.165631][ T5899] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 154.175098][ T5831] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.194839][ T5831] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 154.330463][ T6788] netlink: 184 bytes leftover after parsing attributes in process `syz.1.249'. [ 154.595632][ T5917] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 154.626349][ T5831] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 154.635609][ T5831] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 154.653417][ T5831] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 154.667986][ T5831] em28xx 1-1:0.0: No AC97 audio processor [ 154.690144][ T5831] usb 1-1: USB disconnect, device number 25 [ 154.717311][ T5831] em28xx 1-1:0.0: Disconnecting em28xx [ 154.747753][ T5831] em28xx 1-1:0.0: Freeing device [ 154.765468][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 154.778644][ T5917] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.788049][ T5917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.799492][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.810211][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.825279][ T5917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.844606][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.854620][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.996386][ T6796] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 155.081737][ T5917] usb 2-1: GET_CAPABILITIES returned 0 [ 155.099877][ T5917] usbtmc 2-1:16.0: can't read capabilities [ 155.383597][ T5943] pegasus 4-1:0.0: can't reset MAC [ 155.389918][ T5943] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 155.394060][ T5918] usb 2-1: USB disconnect, device number 30 [ 155.402967][ T6788] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 155.429691][ T6803] usb 2-1: usbtmc_ioctl_clear_out_halt returned -19 [ 155.485849][ T5917] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 155.635553][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 155.646282][ T5917] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.655973][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.666774][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.678540][ T5917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.687869][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.696174][ T5917] usb 1-1: Product: syz [ 155.700419][ T5917] usb 1-1: Manufacturer: syz [ 155.705076][ T5917] usb 1-1: SerialNumber: syz [ 156.118784][ T5917] usb 1-1: 0:2 : does not exist [ 156.535908][ T5918] usb 4-1: USB disconnect, device number 26 [ 156.951214][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.985713][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 156.993470][ T5899] usb 3-1: can't read configurations, error -71 [ 157.085143][ T5917] usb 1-1: USB disconnect, device number 26 [ 157.248218][ T6808] syz.1.255 (6808): drop_caches: 2 [ 157.366150][ T6830] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 157.445574][ T5899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 157.595451][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 157.603586][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 157.625450][ T5899] usb 3-1: can't read configurations, error -61 [ 157.632623][ T5899] usb usb3-port1: attempt power cycle [ 157.725474][ T5918] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 157.734499][ T6834] netlink: 'syz.0.262': attribute type 30 has an invalid length. [ 157.887495][ T5918] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.919597][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.935540][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.964250][ T5918] usb 2-1: Product: syz [ 157.975755][ T5899] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 157.994507][ T5918] usb 2-1: Manufacturer: syz [ 158.005419][ T5918] usb 2-1: SerialNumber: syz [ 158.021720][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 158.036525][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 158.048264][ T6000] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 158.056072][ T5899] usb 3-1: can't read configurations, error -61 [ 158.185529][ T5899] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 158.212129][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 158.220363][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 158.230606][ T5899] usb 3-1: can't read configurations, error -61 [ 158.235680][ T6000] usb 1-1: Using ep0 maxpacket: 8 [ 158.240459][ T5899] usb usb3-port1: unable to enumerate USB device [ 158.257988][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.288575][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.299004][ T6000] usb 1-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 158.309298][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.318289][ T5831] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 158.327083][ T5918] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 158.333226][ T5918] usb 2-1: 2:1 : invalid channels 0 [ 158.342577][ T6000] usb 1-1: config 0 descriptor?? [ 158.362038][ T6000] iowarrior 1-1:0.0: no interrupt-out endpoint found [ 158.442982][ T5918] usb 2-1: USB disconnect, device number 31 [ 158.495413][ T5831] usb 4-1: Invalid ep0 maxpacket: 64 [ 158.510663][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.625483][ T5831] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 158.776687][ T5831] usb 4-1: Invalid ep0 maxpacket: 64 [ 158.784163][ T5831] usb usb4-port1: attempt power cycle [ 159.095894][ T5917] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 159.145602][ T5831] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 159.196062][ T5831] usb 4-1: Invalid ep0 maxpacket: 64 [ 159.260019][ T5917] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 159.270124][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.285140][ T5917] usb 2-1: config 0 descriptor?? [ 159.335802][ T5831] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 159.356517][ T5831] usb 4-1: Invalid ep0 maxpacket: 64 [ 159.375646][ T5831] usb usb4-port1: unable to enumerate USB device [ 160.239910][ T5841] Bluetooth: Unexpected continuation frame (len 12) [ 160.715463][ T5917] pegasus 2-1:0.0: can't reset MAC [ 160.721406][ T5917] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 160.722129][ T5831] usb 1-1: USB disconnect, device number 27 [ 161.073889][ T30] audit: type=1800 audit(1766085697.434:7): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.267" name="memory.events" dev="tmpfs" ino=313 res=0 errno=0 [ 161.101695][ T30] audit: type=1804 audit(1766085697.434:8): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.267" name="/newroot/56/memory.events" dev="tmpfs" ino=313 res=1 errno=0 [ 161.157523][ T5831] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 161.340607][ T5831] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 161.350719][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.358822][ T5831] usb 1-1: Product: syz [ 161.363243][ T5831] usb 1-1: Manufacturer: syz [ 161.367955][ T5831] usb 1-1: SerialNumber: syz [ 161.445658][ T5917] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 161.595420][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 161.603544][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.617349][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.626831][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.634865][ T5917] usb 4-1: Product: syz [ 161.639396][ T5917] usb 4-1: Manufacturer: syz [ 161.644030][ T5917] usb 4-1: SerialNumber: syz [ 161.651828][ T5917] usb 4-1: config 0 descriptor?? [ 161.667522][ T5917] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.677031][ T5917] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 161.781952][ T5831] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 161.794132][ T5831] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.827073][ T5831] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 161.845979][ T5831] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.876916][ T5831] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.894686][ T5918] usb 2-1: USB disconnect, device number 32 [ 161.904588][ T5831] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 161.950230][ T5831] usb 1-1: USB disconnect, device number 28 [ 162.082264][ T6866] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 162.184716][ T6868] pim6reg1: entered promiscuous mode [ 162.190889][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 162.200744][ T6868] pim6reg1: entered allmulticast mode [ 162.207887][ T6870] add_ndev_hash(veth0_to_team) on ffff888077444000 done [ 162.223057][ T6870] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 162.252491][ T6870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.319404][ T5917] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 162.398888][ T50] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 162.418024][ T50] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 162.435861][ T50] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 162.461674][ T50] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 162.529729][ T6874] mkiss: ax0: crc mode is auto. [ 162.806916][ T5943] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 162.925555][ T6000] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 162.968045][ T5943] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.980118][ T5943] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 162.991391][ T5943] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 163.002676][ T5943] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 163.014202][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.034956][ T6874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.077133][ T6000] usb 1-1: too many configurations: 66, using maximum allowed: 8 [ 163.087262][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.098120][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.110671][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.122778][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.133883][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.145680][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.156065][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.166547][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.188531][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.202529][ T5917] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 163.211627][ T5917] em28xx 4-1:0.0: board has no eeprom [ 163.258525][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.270425][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.281427][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.295636][ T5917] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.306921][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.319460][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.330937][ T5917] em28xx 4-1:0.0: dvb set to bulk mode. [ 163.332851][ T6000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.347541][ T5899] em28xx 4-1:0.0: Binding DVB extension [ 163.359306][ T6000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.374529][ T5917] usb 4-1: USB disconnect, device number 31 [ 163.391925][ T5917] em28xx 4-1:0.0: Disconnecting em28xx [ 163.399723][ T6000] usb 1-1: New USB device found, idVendor=1d6b, idProduct=c2d9, bcdDevice= e.5c [ 163.415639][ T6000] usb 1-1: New USB device strings: Mfr=78, Product=106, SerialNumber=29 [ 163.437472][ T6000] usb 1-1: Product: syz [ 163.441788][ T6000] usb 1-1: Manufacturer: syz [ 163.465951][ T6000] usb 1-1: SerialNumber: syz [ 163.491419][ T5899] em28xx 4-1:0.0: Registering input extension [ 163.500670][ T5917] em28xx 4-1:0.0: Closing input extension [ 163.528328][ T5917] em28xx 4-1:0.0: Freeing device [ 163.535511][ T5918] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 163.705718][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 163.716807][ T6000] usb 1-1: USB disconnect, device number 29 [ 163.733463][ T5918] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 163.748012][ T5918] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 163.758858][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.769457][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.778821][ T5918] usb 3-1: config 0 has no interface number 0 [ 163.785180][ T5918] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 163.800228][ T5918] usb 3-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.833725][ T5918] usb 3-1: config 0 interface 125 has no altsetting 0 [ 163.848818][ T5918] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 163.858736][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.867296][ T5918] usb 3-1: Product: syz [ 163.872732][ T5918] usb 3-1: Manufacturer: syz [ 163.880069][ T5918] usb 3-1: SerialNumber: syz [ 163.893880][ T5918] usb 3-1: config 0 descriptor?? [ 164.110345][ T5918] usb 3-1: USB disconnect, device number 29 [ 164.225474][ T6000] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 164.318642][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 164.331601][ T6891] syz1: rxe_newlink: already configured on veth0_to_team [ 164.352731][ T6891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.385576][ T6000] usb 4-1: Using ep0 maxpacket: 16 [ 164.393694][ T6000] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 164.403673][ T6000] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 164.413641][ T6000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.424069][ T6000] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.433164][ T6000] usb 4-1: config 0 has no interface number 0 [ 164.439580][ T6000] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 164.452688][ T6000] usb 4-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.466575][ T6000] usb 4-1: config 0 interface 125 has no altsetting 0 [ 164.478811][ T6000] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 164.489432][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.497874][ T6000] usb 4-1: Product: syz [ 164.502172][ T6000] usb 4-1: Manufacturer: syz [ 164.508229][ T6000] usb 4-1: SerialNumber: syz [ 164.523946][ T6000] usb 4-1: config 0 descriptor?? [ 164.594330][ T5943] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 164.636293][ T5943] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input17 [ 164.663318][ T6895] netlink: 'syz.0.284': attribute type 39 has an invalid length. [ 164.745680][ T5943] usb 2-1: USB disconnect, device number 33 [ 164.751701][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 164.840438][ T6000] usb 4-1: USB disconnect, device number 32 [ 165.060743][ T6908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.246134][ T5918] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 165.365551][ T6000] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 165.421047][ T5918] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 165.429712][ T5918] usb 3-1: config 7 has no interface number 0 [ 165.436790][ T6912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 165.450450][ T5918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 165.463011][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.471544][ T5918] usb 3-1: Product: syz [ 165.478927][ T5918] usb 3-1: Manufacturer: syz [ 165.483711][ T5918] usb 3-1: SerialNumber: syz [ 165.546134][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 165.553532][ T6000] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 165.562257][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.573137][ T6000] usb 2-1: config 0 has no interface number 0 [ 165.582297][ T6000] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 165.594410][ T6000] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 165.617261][ T6000] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 165.628681][ T6000] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29797, setting to 1024 [ 165.640863][ T6000] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 165.651235][ T6000] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 165.668449][ T6000] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 165.703279][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.714244][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 165.730729][ T5918] as10x_usb: device has been detected [ 165.739887][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 165.766048][ T6000] usb 2-1: config 0 descriptor?? [ 165.771907][ T6910] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.784194][ T6910] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.808630][ T5918] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 165.819864][ T6000] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.944177][ T5918] as10x_usb: error during firmware upload part1 [ 165.970910][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 165.978694][ T5918] Registered device Elgato EyeTV DTT Deluxe [ 165.990272][ T5918] usb 3-1: USB disconnect, device number 30 [ 165.997806][ T6916] add_ndev_hash(veth0_to_team) on ffff888077448000 done [ 166.013822][ T6916] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 166.025916][ T6000] usb 2-1: USB disconnect, device number 34 [ 166.060917][ T6916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.109695][ T5918] Unregistered device Elgato EyeTV DTT Deluxe [ 166.117717][ T5918] as10x_usb: device has been disconnected [ 166.352705][ T6922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.499009][ T5918] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 166.666421][ T6930] tun0: tun_chr_ioctl cmd 21731 [ 166.675662][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 166.683067][ T5918] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 166.692407][ T5918] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 166.703174][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.708275][ T5943] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 166.715485][ T5918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.737685][ T6929] usb usb8: usbfs: process 6929 (syz.1.298) did not claim interface 0 before use [ 166.747316][ T6930] usb usb8: usbfs: process 6930 (syz.1.298) did not claim interface 0 before use [ 166.761566][ T5918] usb 4-1: config 0 has no interface number 0 [ 166.768275][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 166.780601][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 166.791337][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.803230][ T5918] usb 4-1: config 0 interface 125 has no altsetting 0 [ 166.814448][ T5918] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 166.825418][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.833547][ T5918] usb 4-1: Product: syz [ 166.838291][ T5918] usb 4-1: Manufacturer: syz [ 166.842990][ T5918] usb 4-1: SerialNumber: syz [ 166.861073][ T5918] usb 4-1: config 0 descriptor?? [ 166.908153][ T5943] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.927953][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.940038][ T5943] usb 3-1: config 0 descriptor?? [ 166.960887][ T5943] cp210x 3-1:0.0: cp210x converter detected [ 167.076759][ T5899] usb 4-1: USB disconnect, device number 33 [ 167.162411][ T6935] netlink: 'syz.1.300': attribute type 23 has an invalid length. [ 167.173300][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 167.269522][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'. [ 167.288016][ T6937] add_ndev_hash(veth0_to_team) on ffff88802f71c000 done [ 167.299642][ T6937] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 167.318258][ T6937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.334276][ T6937] Invalid source name [ 167.339275][ T6937] UBIFS error (pid: 6937): cannot open "./file0", error -22 [ 167.363061][ T5943] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 167.389280][ T5943] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 167.415568][ T5943] usb 3-1: cp210x converter now attached to ttyUSB0 [ 167.462849][ T5943] usb 3-1: USB disconnect, device number 31 [ 167.483845][ T5943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.511573][ T5943] cp210x 3-1:0.0: device disconnected [ 167.696366][ T5918] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 167.787391][ T6951] Invalid/unusable pipe [ 167.872091][ T5918] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 167.881712][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.889928][ T5918] usb 2-1: Product: syz [ 167.894362][ T5918] usb 2-1: Manufacturer: syz [ 167.899189][ T5918] usb 2-1: SerialNumber: syz [ 167.905454][ T5831] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 167.915713][ T5918] usb 2-1: config 0 descriptor?? [ 168.055757][ T6000] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 168.088682][ T5831] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 168.098337][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.110096][ T5831] usb 4-1: config 0 descriptor?? [ 168.170380][ T6941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.209173][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 168.221466][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 168.237950][ T6000] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 168.247629][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.262499][ T6000] usb 1-1: Product: syz [ 168.266927][ T6000] usb 1-1: Manufacturer: syz [ 168.271879][ T6000] usb 1-1: SerialNumber: syz [ 168.280388][ T6000] usb 1-1: config 0 descriptor?? [ 168.289588][ T6000] hub 1-1:0.0: bad descriptor, ignoring hub [ 168.296814][ T6000] hub 1-1:0.0: probe with driver hub failed with error -5 [ 168.318621][ T6000] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 168.377704][ T5918] usb-storage 2-1:0.0: USB Mass Storage device detected [ 168.477018][ T5918] usb 2-1: USB disconnect, device number 35 [ 168.658025][ T6000] usb 1-1: USB disconnect, device number 30 [ 169.063177][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'. [ 169.078178][ T6972] add_ndev_hash(veth0_to_team) on ffff888032728000 done [ 169.087602][ T6972] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 169.102346][ T6972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.130642][ T6972] Invalid source name [ 169.134721][ T6972] UBIFS error (pid: 6972): cannot open "./file0", error -22 [ 169.283430][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.300820][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.310338][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.321472][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.383338][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 169.392749][ T5943] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 169.545437][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 169.554093][ T5943] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 169.563634][ T5831] pegasus 4-1:0.0: can't reset MAC [ 169.568510][ T5943] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 169.579253][ T5831] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 169.584821][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.597868][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.606933][ T5943] usb 2-1: config 0 has no interface number 0 [ 169.613352][ T5943] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 169.624790][ T5943] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.635219][ T5943] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.646875][ T5899] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 169.654611][ T5943] usb 2-1: config 0 interface 125 has no altsetting 0 [ 169.664907][ T5943] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 169.676314][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.684827][ T5943] usb 2-1: Product: syz [ 169.689218][ T5943] usb 2-1: Manufacturer: syz [ 169.693862][ T5943] usb 2-1: SerialNumber: syz [ 169.701493][ T5943] usb 2-1: config 0 descriptor?? [ 169.805511][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 169.814005][ T5899] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 169.822815][ T5899] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 169.831622][ T5899] usb 3-1: config 166 has no interface number 0 [ 169.838120][ T5899] usb 3-1: config 166 has no interface number 1 [ 169.844488][ T5899] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 169.855919][ T5899] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 169.867221][ T5899] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 169.880657][ T5899] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 169.892571][ T5899] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 169.904098][ T5899] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 169.915652][ T5899] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 169.927175][ T5899] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 169.937529][ T5899] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 169.951216][ T5899] usb 3-1: config 166 interface 177 has no altsetting 0 [ 169.958711][ T5899] usb 3-1: config 166 interface 34 has no altsetting 0 [ 169.968835][ T5943] usb 2-1: USB disconnect, device number 36 [ 169.979003][ T5899] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 169.998596][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.010990][ T5899] usb 3-1: Product: syz [ 170.015239][ T5899] usb 3-1: Manufacturer: syz [ 170.020115][ T5899] usb 3-1: SerialNumber: syz [ 170.241197][ T5899] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 170.324302][ T5899] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 170.408443][ T5899] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 170.420891][ T5899] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 170.429305][ T5899] uvcvideo 3-1:166.34: No valid video chain found. [ 170.449620][ T5899] usb 3-1: USB disconnect, device number 32 [ 170.756532][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 170.778513][ T7007] syz1: rxe_newlink: already configured on veth0_to_team [ 170.810273][ T6000] usb 4-1: USB disconnect, device number 34 [ 170.816830][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 170.834385][ T7007] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.869076][ T7007] Invalid source name [ 170.873240][ T7007] UBIFS error (pid: 7007): cannot open "./file0", error -22 [ 171.006035][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 171.029047][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.325'. [ 171.039549][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 171.049398][ T5899] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 171.060076][ T5899] usb 2-1: config 4 has no interface number 0 [ 171.066685][ T5899] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.078195][ T5899] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.088878][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 171.098114][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.133604][ T5899] hub 2-1:4.128: USB hub found [ 171.316691][ T5899] hub 2-1:4.128: 3 ports detected [ 171.334634][ T5899] hub 2-1:4.128: Using single TT (err -22) [ 171.520281][ T5899] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 171.532520][ T5899] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 171.566885][ T5899] usb 2-1: USB disconnect, device number 37 [ 172.115483][ T5943] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 172.145555][ T5899] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 172.277507][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.291016][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.315675][ T5943] usb 1-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 172.325538][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.336828][ T5899] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 172.350371][ T5943] usb 1-1: config 0 descriptor?? [ 172.361945][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.375077][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.383690][ T5899] usb 4-1: Product: syz [ 172.388058][ T5899] usb 4-1: Manufacturer: syz [ 172.392908][ T5899] usb 4-1: SerialNumber: syz [ 172.412230][ T5899] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.436405][ T5917] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.624165][ T7056] __nla_validate_parse: 4 callbacks suppressed [ 172.624186][ T7056] netlink: 220 bytes leftover after parsing attributes in process `syz.1.337'. [ 172.651045][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.661860][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.671644][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.681279][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.703535][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.712668][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.722796][ T6000] usb 4-1: USB disconnect, device number 35 [ 172.935526][ T5831] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 172.978968][ T7041] hsr0: entered promiscuous mode [ 172.984203][ T7041] hsr0: entered allmulticast mode [ 172.989924][ T5899] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 172.997862][ T7041] hsr_slave_0: entered allmulticast mode [ 173.003581][ T7041] hsr_slave_1: entered allmulticast mode [ 173.071122][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 173.083215][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 173.095865][ T5943] usb 1-1: USB disconnect, device number 31 [ 173.105590][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.119560][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.129988][ T5831] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 173.141083][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.152655][ T5831] usb 2-1: config 0 descriptor?? [ 173.165424][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 173.172607][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.188809][ T5899] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.200862][ T5899] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.214286][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.224330][ T5899] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 173.233560][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.242160][ T5899] usb 3-1: Product: syz [ 173.246660][ T5899] usb 3-1: Manufacturer: syz [ 173.254770][ T5899] usb 3-1: SerialNumber: syz [ 173.264070][ T5899] usb 3-1: config 0 descriptor?? [ 173.277162][ T5899] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 173.474542][ T5899] snd_usb_toneport 3-1:0.0: set_interface failed [ 173.481595][ T5899] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 173.495197][ T5899] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 173.505334][ T5917] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 173.512603][ T5917] ath9k_htc: Failed to initialize the device [ 173.522404][ T6000] usb 4-1: ath9k_htc: USB layer deinitialized [ 173.525969][ T5899] usb 3-1: USB disconnect, device number 33 [ 173.564799][ T5831] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 173.583311][ T5831] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 173.677839][ T7065] netlink: 104 bytes leftover after parsing attributes in process `syz.0.339'. [ 173.763091][ T5831] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0x70 [ 173.776772][ T5841] Bluetooth: hci0: unexpected event 0x0f length: 5 > 4 [ 173.776811][ T5841] Bluetooth: hci0: unexpected event for opcode 0x6876 [ 173.858714][ T6000] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 174.023771][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 174.045503][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 174.054842][ T6000] usb 4-1: Using ep0 maxpacket: 32 [ 174.062365][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 174.074881][ T6000] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 174.096462][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 174.115601][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 174.141498][ T6000] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 174.164451][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.202236][ T6000] usb 4-1: config 0 descriptor?? [ 174.232351][ T6000] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 174.382914][ T7057] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 174.411235][ T7056] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 174.432572][ T30] audit: type=1326 audit(1766085710.794:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.3.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65598f749 code=0x0 [ 174.525572][ T5831] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 174.571507][ T5831] usb 2-1: USB disconnect, device number 38 [ 174.953131][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 175.114370][ T7102] mmap: syz.1.346 (7102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.451220][ T7117] fuse: Bad value for 'fd' [ 175.523392][ T6000] mos7840 4-1:0.0: probe with driver mos7840 failed with error -71 [ 175.565517][ T6000] usb 4-1: USB disconnect, device number 36 [ 175.635621][ T5899] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 175.805770][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 175.829738][ T5899] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 175.847913][ T5899] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.865475][ T5899] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.881830][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.907598][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.932129][ T5899] usb 2-1: config 0 has no interface number 0 [ 175.944930][ T5899] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 175.970130][ T5899] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 175.987979][ T5899] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.000199][ T5899] usb 2-1: config 0 interface 125 has no altsetting 0 [ 176.007609][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.354'. [ 176.019612][ T5899] usb 2-1: config 0 interface 125 has no altsetting 1 [ 176.027050][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 176.036582][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.354'. [ 176.055074][ T5899] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 176.076667][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.084870][ T5899] usb 2-1: Product: syz [ 176.105466][ T5899] usb 2-1: Manufacturer: syz [ 176.110156][ T5899] usb 2-1: SerialNumber: syz [ 176.121963][ T5899] usb 2-1: config 0 descriptor?? [ 176.260676][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.341948][ T5899] usb 2-1: USB disconnect, device number 39 [ 176.833076][ T7150] netlink: 'syz.3.359': attribute type 4 has an invalid length. [ 177.001211][ T7162] ======================================================= [ 177.001211][ T7162] WARNING: The mand mount option has been deprecated and [ 177.001211][ T7162] and is ignored by this kernel. Remove the mand [ 177.001211][ T7162] option from the mount to silence this warning. [ 177.001211][ T7162] ======================================================= [ 177.038253][ T5899] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 177.060359][ T7162] overlayfs: conflicting lowerdir path [ 177.185433][ T5899] usb 3-1: device descriptor read/64, error -71 [ 177.285490][ T5831] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 177.378064][ T7174] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 177.409108][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 177.419261][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 177.432309][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 177.439880][ T5899] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 177.449725][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 177.456034][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 177.471596][ T5831] usb 1-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 177.485593][ T5831] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 177.495039][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.504839][ T5831] usb 1-1: Product: syz [ 177.510203][ T5831] usb 1-1: Manufacturer: syz [ 177.515072][ T5831] usb 1-1: SerialNumber: syz [ 177.524477][ T5831] usb 1-1: config 0 descriptor?? [ 177.536990][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 177.548916][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 177.564645][ T5831] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 177.615559][ T5899] usb 3-1: device descriptor read/64, error -71 [ 177.726045][ T5899] usb usb3-port1: attempt power cycle [ 177.783568][ T5831] usb 1-1: USB disconnect, device number 32 [ 177.807435][ T7180] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 178.075518][ T5899] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 178.099146][ T5899] usb 3-1: device descriptor read/8, error -71 [ 178.305574][ T5943] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 178.325598][ T5917] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 178.345902][ T5899] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 178.368852][ T7189] __nla_validate_parse: 4 callbacks suppressed [ 178.368870][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 178.388907][ T5899] usb 3-1: device descriptor read/8, error -71 [ 178.466285][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 178.480436][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.491551][ T5943] usb 4-1: config 0 has no interfaces? [ 178.502031][ T5899] usb usb3-port1: unable to enumerate USB device [ 178.508630][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 178.516466][ T5917] usb 2-1: too many configurations: 178, using maximum allowed: 8 [ 178.526971][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=80.40 [ 178.537220][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 178.545034][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.554801][ T5917] usb 2-1: can't read configurations, error -61 [ 178.563025][ T5943] usb 4-1: SerialNumber: syz [ 178.572237][ T5943] usb 4-1: config 0 descriptor?? [ 178.696226][ T5917] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 178.855523][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 178.861772][ T5917] usb 2-1: too many configurations: 178, using maximum allowed: 8 [ 178.871818][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 178.875656][ T5831] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 178.881113][ T5917] usb 2-1: can't read configurations, error -61 [ 178.897679][ T5917] usb usb2-port1: attempt power cycle [ 179.047387][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 179.057661][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 179.069919][ T5831] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 179.079427][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.087965][ T5831] usb 1-1: Product: syz [ 179.092181][ T5831] usb 1-1: Manufacturer: syz [ 179.096846][ T5831] usb 1-1: SerialNumber: syz [ 179.104679][ T5831] usb 1-1: config 0 descriptor?? [ 179.111117][ T7196] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.118672][ T7196] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.235563][ T5917] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 179.257171][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 179.263214][ T5917] usb 2-1: too many configurations: 178, using maximum allowed: 8 [ 179.273931][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 179.282434][ T5917] usb 2-1: can't read configurations, error -61 [ 179.333945][ T7196] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.342643][ T7196] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.415670][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 179.436407][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 179.442784][ T5917] usb 2-1: too many configurations: 178, using maximum allowed: 8 [ 179.453199][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 179.462460][ T5917] usb 2-1: can't read configurations, error -61 [ 179.471495][ T5917] usb usb2-port1: unable to enumerate USB device [ 179.755488][ T5831] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 179.850971][ T7198] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 179.859220][ T7198] netlink: 'syz.2.378': attribute type 4 has an invalid length. [ 179.961731][ T5831] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 179.980962][ T5831] usb 1-1: USB disconnect, device number 33 [ 180.651597][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 180.759166][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.385'. [ 180.768348][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 180.778469][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.385'. [ 180.790807][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.385'. [ 180.881133][ T6000] usb 4-1: USB disconnect, device number 37 [ 180.951161][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 181.055565][ T5917] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 181.207691][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 181.218960][ T5917] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 181.233213][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.242384][ T5917] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 181.252747][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.264452][ T5917] usb 3-1: config 0 descriptor?? [ 181.356474][ T6000] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 181.505402][ T5943] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 181.518408][ T6000] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.529676][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.541177][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.551717][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.567777][ T6000] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.585851][ T6000] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.594022][ T6000] usb 4-1: Manufacturer: syz [ 181.602461][ T6000] usb 4-1: config 0 descriptor?? [ 181.657721][ T5943] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 181.667480][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.679298][ T7231] i2c i2c-0: Invalid block write size 47 [ 181.681942][ T7230] Bluetooth: MGMT ver 1.23 [ 181.694853][ T5943] usb 2-1: config 0 descriptor?? [ 181.701687][ T5917] kye 0003:0458:501A.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 181.723637][ T5917] kye 0003:0458:501A.0008: hidraw0: USB HID vf4.f6 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 181.764334][ T5917] kye 0003:0458:501A.0008: tablet-enabling feature report not found [ 181.775756][ T5917] kye 0003:0458:501A.0008: tablet enabling failed [ 181.897726][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 181.913185][ T5917] usb 3-1: USB disconnect, device number 38 [ 182.033553][ T6000] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 182.049371][ T6000] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 182.255617][ T5917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 182.300100][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.309190][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.320841][ T6000] usb 4-1: USB disconnect, device number 38 [ 182.425456][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 182.433487][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 182.445386][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 17407, setting to 1024 [ 182.464360][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.484044][ T5917] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 182.501641][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.522756][ T5917] usb 1-1: config 0 descriptor?? [ 182.538965][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 182.712155][ T7244] overlayfs: failed to resolve 'smackfsdef=lowerdir': -2 [ 182.847798][ T7244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3009641527 (24077132216 ns) > initial count (9213996728 ns). Using initial count to start timer. [ 182.937773][ T5917] hid (null): unknown global tag 0xd [ 182.943416][ T5917] hid (null): invalid report_size 13887 [ 182.951525][ T5917] hid (null): unknown global tag 0x2a [ 182.956323][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 182.959469][ T5917] hid (null): unknown global tag 0x7e [ 182.972152][ T5917] hid (null): report_id 1537379401 is invalid [ 182.983127][ T5917] hid (null): global environment stack overflow [ 183.003384][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.017692][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.024918][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.034326][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.041980][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.050216][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.057958][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.065013][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.073716][ T5917] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 183.088099][ T5917] cougar 0003:060B:500A.000A: unexpected long global item [ 183.098363][ T5917] cougar 0003:060B:500A.000A: parse failed [ 183.104514][ T5917] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 183.143809][ T6000] usb 1-1: USB disconnect, device number 34 [ 183.185251][ T5943] pegasus 2-1:0.0: can't reset MAC [ 183.192074][ T5943] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 183.225535][ T5899] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 183.395472][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 183.404849][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 183.414541][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.423565][ T5899] usb 4-1: Product: syz [ 183.428227][ T5899] usb 4-1: Manufacturer: syz [ 183.433046][ T5899] usb 4-1: SerialNumber: syz [ 183.440707][ T5899] usb 4-1: config 0 descriptor?? [ 183.455601][ T6000] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 183.617804][ T6000] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.629532][ T6000] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 183.642834][ T6000] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.652383][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.661995][ T5899] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 183.673433][ T5899] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 183.675529][ T6000] usb 3-1: Product: syz [ 183.698085][ T5899] usb 4-1: USB disconnect, device number 39 [ 183.705788][ T6000] usb 3-1: Manufacturer: syz [ 183.715377][ T6000] usb 3-1: SerialNumber: syz [ 183.825485][ T7254] __nla_validate_parse: 1 callbacks suppressed [ 183.825508][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 183.840843][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 183.849858][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 183.859395][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 183.944666][ T7250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.427415][ T5899] usb 2-1: USB disconnect, device number 44 [ 184.480594][ T7261] program syz.1.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.535490][ T5831] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 184.558883][ T7250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.682056][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 184.705661][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 184.721842][ T5831] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 184.731111][ T5831] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 184.740385][ T5831] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 184.751277][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.762850][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.777290][ T6000] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 184.785572][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 184.794604][ T5831] usb 4-1: config 0 has no interface number 0 [ 184.801629][ T6000] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 184.814631][ T5831] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 184.835588][ T6000] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 184.845570][ T5831] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 184.858169][ T5831] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.868508][ T5831] usb 4-1: config 0 interface 125 has no altsetting 0 [ 184.875515][ T5831] usb 4-1: config 0 interface 125 has no altsetting 1 [ 184.889071][ T5831] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 184.899461][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.909046][ T5831] usb 4-1: Product: syz [ 184.913327][ T5831] usb 4-1: Manufacturer: syz [ 184.918622][ T5831] usb 4-1: SerialNumber: syz [ 184.930369][ T5831] usb 4-1: config 0 descriptor?? [ 184.971508][ T3567] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 184.982288][ T6000] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 184.999597][ T3567] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 185.024139][ T6000] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 185.065516][ T6000] usb 3-1: USB disconnect, device number 39 [ 185.072975][ T6000] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 185.101210][ T3567] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 start [ 185.114978][ T3567] netdevice_event(NETDEV_UNREGISTER) for ffff888034754000 on ffff888077e40000 end [ 185.157753][ T5831] usb 4-1: USB disconnect, device number 40 [ 185.461168][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 185.479610][ T7287] syz1: rxe_newlink: already configured on veth0_to_team [ 185.490777][ T7287] Invalid source name [ 185.494840][ T7287] UBIFS error (pid: 7287): cannot open "./file0", error -22 [ 185.749539][ T5899] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 185.915489][ T6000] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 185.949255][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.960955][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.975124][ T5899] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 185.990259][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.003292][ T5899] usb 2-1: config 0 descriptor?? [ 186.020418][ T5899] usbhid 2-1:0.0: can't add hid device: -22 [ 186.031420][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 186.055748][ T5831] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 186.071368][ T6000] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 186.081726][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.096246][ T6000] usb 3-1: config 0 descriptor?? [ 186.223362][ T7291] netlink: 140 bytes leftover after parsing attributes in process `syz.1.408'. [ 186.232764][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 186.239987][ T7291] IPVS: set_ctl: invalid protocol: 47 172.20.20.56:20001 [ 186.251018][ T5831] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 186.269571][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.283621][ T5820] usb 2-1: USB disconnect, device number 45 [ 186.311320][ T5831] usb 1-1: config 0 descriptor?? [ 186.341837][ T5831] gspca_main: sq930x-2.14.0 probing 041e:403c [ 187.125611][ T5899] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 187.149044][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.158157][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.277427][ T5899] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 187.291631][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.302356][ T5899] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.311725][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 187.320063][ T5899] usb 2-1: SerialNumber: syz [ 187.536263][ T5899] usb 2-1: 0:2 : does not exist [ 187.541376][ T5899] usb 2-1: unit 5 not found! [ 187.546758][ T6000] pegasus 3-1:0.0: can't reset MAC [ 187.557069][ T6000] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 187.604339][ T5899] usb 2-1: USB disconnect, device number 46 [ 187.606019][ T5831] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 187.616765][ T5831] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 187.630514][ T5831] usb 1-1: USB disconnect, device number 35 [ 187.682020][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.086922][ T7329] Device name not specified. [ 188.086922][ T7329] [ 188.149767][ T7333] program syz.1.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.192251][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 188.203900][ T7335] syz1: rxe_newlink: already configured on veth0_to_team [ 188.218854][ T7335] Invalid source name [ 188.222974][ T7335] UBIFS error (pid: 7335): cannot open "./file0", error -22 [ 188.515444][ T5899] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 188.675398][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 188.689880][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.716246][ T5899] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 188.726418][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.738266][ T5899] usb 1-1: config 0 descriptor?? [ 188.782393][ T5831] usb 3-1: USB disconnect, device number 40 [ 189.161695][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 189.168788][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.178011][ T5831] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 189.188342][ T5899] usb 1-1: USB disconnect, device number 36 [ 189.255733][ T5943] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 189.285500][ T5917] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 189.345531][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 189.353000][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.364311][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.374215][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.383488][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.394252][ T5831] usb 3-1: config 0 descriptor?? [ 189.404259][ T5831] hub 3-1:0.0: USB hub found [ 189.406889][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 189.426943][ T5943] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 189.436759][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 189.444107][ T5943] usb 2-1: config 179 has no interface number 0 [ 189.452098][ T5943] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.464263][ T5917] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 189.473548][ T5917] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 189.482312][ T5943] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 189.494057][ T5917] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 189.502591][ T5943] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.514100][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.524571][ T5943] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 189.539176][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.551748][ T5917] usb 4-1: config 0 has no interface number 0 [ 189.559640][ T5943] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.573655][ T5917] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 189.587428][ T5943] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.597116][ T5917] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 189.607309][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.615513][ T5917] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.623197][ T5831] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 189.637884][ T5917] usb 4-1: config 0 interface 125 has no altsetting 0 [ 189.644759][ T5917] usb 4-1: config 0 interface 125 has no altsetting 1 [ 189.654675][ T7344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 189.694298][ T5917] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 189.704161][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.712684][ T5917] usb 4-1: Product: syz [ 189.718136][ T5917] usb 4-1: Manufacturer: syz [ 189.722983][ T5917] usb 4-1: SerialNumber: syz [ 189.767073][ T5917] usb 4-1: config 0 descriptor?? [ 189.912450][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.935214][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.000888][ T6000] usb 4-1: USB disconnect, device number 41 [ 190.025910][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.035018][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.080268][ T5831] usbhid 3-1:0.0: can't add hid device: -32 [ 190.087373][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 190.120983][ T5831] usb 3-1: USB disconnect, device number 41 [ 190.281285][ T6000] usb 2-1: USB disconnect, device number 47 [ 190.281285][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.281337][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.304674][ C1] ================================================================== [ 190.312812][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 190.320695][ C1] Read of size 4 at addr ffff88807a26705c by task syz-executor/7361 [ 190.328715][ C1] [ 190.331109][ C1] CPU: 1 UID: 0 PID: 7361 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 190.331143][ C1] Tainted: [L]=SOFTLOCKUP [ 190.331152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.331179][ C1] Call Trace: [ 190.331187][ C1] [ 190.331196][ C1] dump_stack_lvl+0x189/0x250 [ 190.331226][ C1] ? __kasan_check_byte+0x12/0x40 [ 190.331252][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.331273][ C1] ? lock_release+0x4b/0x3b0 [ 190.331309][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 190.331337][ C1] print_report+0xca/0x240 [ 190.331362][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 190.331386][ C1] kasan_report+0x118/0x150 [ 190.331410][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 190.331436][ C1] do_raw_spin_lock+0x23d/0x290 [ 190.331460][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 190.331489][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.331516][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 190.331549][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 190.331579][ C1] ? kcov_remote_stop+0x78/0x6f0 [ 190.331633][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 190.331664][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 190.331693][ C1] dummy_timer+0x85f/0x45b0 [ 190.331734][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.331772][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 190.331796][ C1] ? debug_object_deactivate+0x6d/0x360 [ 190.331825][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 190.331849][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 190.331873][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 190.331899][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 190.331940][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 190.331964][ C1] ? read_tsc+0x9/0x20 [ 190.331990][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 190.332025][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 190.332054][ C1] handle_softirqs+0x27d/0x850 [ 190.332108][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 190.332142][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 190.332177][ C1] __irq_exit_rcu+0xca/0x1f0 [ 190.332207][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 190.332243][ C1] irq_exit_rcu+0x9/0x30 [ 190.332272][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 190.332305][ C1] [ 190.332311][ C1] [ 190.332319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 190.332342][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 190.332380][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 f4 66 25 11 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 190.332394][ C1] RSP: 0018:ffffc9000c0177d0 EFLAGS: 00000206 [ 190.332415][ C1] RAX: b0ffaea69b625000 RBX: 0000000000000000 RCX: b0ffaea69b625000 [ 190.332427][ C1] RDX: 00000000cfbdce15 RSI: ffffffff8dc92d88 RDI: ffffffff8be246e0 [ 190.332439][ C1] RBP: ffffffff82619446 R08: ffffffff82619446 R09: ffffffff8e33f860 [ 190.332451][ C1] R10: dffffc0000000000 R11: ffffed1004fdd513 R12: 0000000000000002 [ 190.332461][ C1] R13: ffffffff8e33f860 R14: 0000000000000000 R15: 0000000000000246 [ 190.332473][ C1] ? task_dump_owner+0x76/0x4c0 [ 190.332493][ C1] ? task_dump_owner+0x76/0x4c0 [ 190.332514][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 190.332536][ C1] task_dump_owner+0x97/0x4c0 [ 190.332554][ C1] ? task_dump_owner+0x76/0x4c0 [ 190.332570][ C1] ? task_dump_owner+0x76/0x4c0 [ 190.332589][ C1] proc_pident_instantiate+0x1e6/0x2b0 [ 190.332611][ C1] proc_pident_lookup+0x1b7/0x270 [ 190.332633][ C1] path_openat+0x119c/0x3840 [ 190.332670][ C1] ? __pfx_path_openat+0x10/0x10 [ 190.332699][ C1] do_filp_open+0x1fa/0x410 [ 190.332722][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 190.332747][ C1] ? __pfx_kfree_link+0x10/0x10 [ 190.332768][ C1] ? _raw_spin_unlock+0x28/0x50 [ 190.332788][ C1] ? alloc_fd+0x64c/0x6c0 [ 190.332809][ C1] do_sys_openat2+0x121/0x200 [ 190.332830][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.332850][ C1] ? exc_page_fault+0x82/0x100 [ 190.332876][ C1] __x64_sys_openat+0x138/0x170 [ 190.332896][ C1] do_syscall_64+0xfa/0xf80 [ 190.332911][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.332926][ C1] ? clear_bhb_loop+0x60/0xb0 [ 190.332943][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.332958][ C1] RIP: 0033:0x7f5e1058df90 [ 190.332979][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 190.332992][ C1] RSP: 002b:00007fffcf997770 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 190.333007][ C1] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f5e1058df90 [ 190.333018][ C1] RDX: 0000000000080001 RSI: 00007f5e106158aa RDI: 00000000ffffff9c [ 190.333029][ C1] RBP: 00007f5e106158aa R08: 0000000000000000 R09: 0000000000000000 [ 190.333039][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 190.333048][ C1] R13: 00007fffcf997810 R14: 000000000002e6ce R15: 00007fffcf997d80 [ 190.333065][ C1] [ 190.333070][ C1] [ 190.826277][ C1] Allocated by task 5943: [ 190.830630][ C1] kasan_save_track+0x3e/0x80 [ 190.835425][ C1] __kasan_kmalloc+0x93/0xb0 [ 190.840059][ C1] __kmalloc_cache_noprof+0x3e2/0x700 [ 190.845485][ C1] xpad_probe+0x428/0x1fc0 [ 190.849938][ C1] usb_probe_interface+0x668/0xc90 [ 190.855076][ C1] really_probe+0x26d/0xad0 [ 190.859690][ C1] __driver_probe_device+0x18c/0x320 [ 190.865019][ C1] driver_probe_device+0x4f/0x240 [ 190.870102][ C1] __device_attach_driver+0x279/0x430 [ 190.875528][ C1] bus_for_each_drv+0x251/0x2e0 [ 190.880422][ C1] __device_attach+0x2b8/0x430 [ 190.885238][ C1] device_initial_probe+0xa1/0xd0 [ 190.890412][ C1] bus_probe_device+0x12a/0x220 [ 190.895413][ C1] device_add+0x7b6/0xb80 [ 190.899895][ C1] usb_set_configuration+0x1a87/0x2110 [ 190.905418][ C1] usb_generic_driver_probe+0x8d/0x150 [ 190.911039][ C1] usb_probe_device+0x1c4/0x3c0 [ 190.915953][ C1] really_probe+0x26d/0xad0 [ 190.920637][ C1] __driver_probe_device+0x18c/0x320 [ 190.925997][ C1] driver_probe_device+0x4f/0x240 [ 190.931194][ C1] __device_attach_driver+0x279/0x430 [ 190.936632][ C1] bus_for_each_drv+0x251/0x2e0 [ 190.941763][ C1] __device_attach+0x2b8/0x430 [ 190.946569][ C1] device_initial_probe+0xa1/0xd0 [ 190.951650][ C1] bus_probe_device+0x12a/0x220 [ 190.956796][ C1] device_add+0x7b6/0xb80 [ 190.961256][ C1] usb_new_device+0xa39/0x1720 [ 190.966506][ C1] hub_event+0x29b1/0x4ef0 [ 190.970942][ C1] process_one_work+0x93a/0x15a0 [ 190.976151][ C1] worker_thread+0x9b0/0xee0 [ 190.981095][ C1] kthread+0x711/0x8a0 [ 190.985214][ C1] ret_from_fork+0x599/0xb30 [ 190.989922][ C1] ret_from_fork_asm+0x1a/0x30 [ 190.994728][ C1] [ 190.997078][ C1] Freed by task 6000: [ 191.001093][ C1] kasan_save_track+0x3e/0x80 [ 191.005898][ C1] kasan_save_free_info+0x46/0x50 [ 191.010989][ C1] __kasan_slab_free+0x5c/0x80 [ 191.015782][ C1] kfree+0x1c0/0x660 [ 191.019711][ C1] xpad_disconnect+0x350/0x480 [ 191.024491][ C1] usb_unbind_interface+0x26e/0x910 [ 191.029729][ C1] device_release_driver_internal+0x4d9/0x800 [ 191.035825][ C1] bus_remove_device+0x34d/0x440 [ 191.040799][ C1] device_del+0x511/0x8e0 [ 191.045494][ C1] usb_disable_device+0x3d4/0x8e0 [ 191.050549][ C1] usb_disconnect+0x32f/0x990 [ 191.055252][ C1] hub_event+0x1ca9/0x4ef0 [ 191.059691][ C1] process_one_work+0x93a/0x15a0 [ 191.064745][ C1] worker_thread+0x9b0/0xee0 [ 191.069371][ C1] kthread+0x711/0x8a0 [ 191.073466][ C1] ret_from_fork+0x599/0xb30 [ 191.078084][ C1] ret_from_fork_asm+0x1a/0x30 [ 191.082993][ C1] [ 191.085345][ C1] The buggy address belongs to the object at ffff88807a267000 [ 191.085345][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 191.099854][ C1] The buggy address is located 92 bytes inside of [ 191.099854][ C1] freed 1024-byte region [ffff88807a267000, ffff88807a267400) [ 191.113867][ C1] [ 191.116218][ C1] The buggy address belongs to the physical page: [ 191.122863][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a260 [ 191.131703][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 191.140245][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 191.147830][ C1] page_type: f5(slab) [ 191.151862][ C1] raw: 00fff00000000040 ffff88813fe26dc0 dead000000000122 0000000000000000 [ 191.160461][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 191.169064][ C1] head: 00fff00000000040 ffff88813fe26dc0 dead000000000122 0000000000000000 [ 191.177772][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 191.186487][ C1] head: 00fff00000000003 ffffea0001e89801 00000000ffffffff 00000000ffffffff [ 191.195218][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 191.204098][ C1] page dumped because: kasan: bad access detected [ 191.210564][ C1] page_owner tracks the page as allocated [ 191.216312][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5943, tgid 5943 (kworker/1:7), ts 189635703601, free_ts 188140374414 [ 191.235793][ C1] post_alloc_hook+0x234/0x290 [ 191.240608][ C1] get_page_from_freelist+0x2365/0x2440 [ 191.246278][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 191.252100][ C1] alloc_pages_mpol+0x232/0x4a0 [ 191.256965][ C1] allocate_slab+0x86/0x3b0 [ 191.261494][ C1] ___slab_alloc+0xf2b/0x1960 [ 191.266275][ C1] __slab_alloc+0x65/0x100 [ 191.270712][ C1] __kmalloc_noprof+0x47d/0x800 [ 191.275761][ C1] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 191.281692][ C1] ieee80211_inform_bss+0x147/0x1130 [ 191.287085][ C1] cfg80211_inform_single_bss_data+0xd14/0x1ad0 [ 191.293436][ C1] cfg80211_inform_bss_data+0x203/0x3b40 [ 191.299143][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x710 [ 191.305235][ C1] ieee80211_bss_info_update+0x749/0x9e0 [ 191.310906][ C1] ieee80211_scan_rx+0x593/0xa20 [ 191.315893][ C1] ieee80211_rx_list+0x2485/0x2f90 [ 191.321048][ C1] page last free pid 7331 tgid 7331 stack trace: [ 191.327418][ C1] __free_frozen_pages+0xbc8/0xd30 [ 191.332572][ C1] __put_partials+0x146/0x170 [ 191.337279][ C1] put_cpu_partial+0x1f2/0x2d0 [ 191.342082][ C1] __slab_free+0x288/0x2a0 [ 191.346547][ C1] qlist_free_all+0x97/0x100 [ 191.351178][ C1] kasan_quarantine_reduce+0x148/0x160 [ 191.356940][ C1] __kasan_slab_alloc+0x22/0x80 [ 191.361908][ C1] kmem_cache_alloc_noprof+0x37d/0x710 [ 191.367490][ C1] taskstats_exit+0x14a/0xa30 [ 191.372297][ C1] do_exit+0x830/0x25b0 [ 191.376488][ C1] do_group_exit+0x21c/0x2d0 [ 191.381117][ C1] __x64_sys_exit_group+0x3f/0x40 [ 191.386180][ C1] __pfx_syscall_get_nr+0x0/0x10 [ 191.391153][ C1] do_syscall_64+0xfa/0xf80 [ 191.395692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.401608][ C1] [ 191.403950][ C1] Memory state around the buggy address: [ 191.409784][ C1] ffff88807a266f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.417897][ C1] ffff88807a266f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.426004][ C1] >ffff88807a267000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.434271][ C1] ^ [ 191.441343][ C1] ffff88807a267080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.449442][ C1] ffff88807a267100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.457599][ C1] ================================================================== [ 191.465802][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.473127][ C1] CPU: 1 UID: 0 PID: 7361 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 191.484269][ C1] Tainted: [L]=SOFTLOCKUP [ 191.488620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.498705][ C1] Call Trace: [ 191.502024][ C1] [ 191.504887][ C1] dump_stack_lvl+0x99/0x250 [ 191.509501][ C1] ? __asan_memcpy+0x40/0x70 [ 191.514121][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.519334][ C1] ? __pfx__printk+0x10/0x10 [ 191.524130][ C1] vpanic+0x237/0x6d0 [ 191.528138][ C1] ? __pfx_vpanic+0x10/0x10 [ 191.532755][ C1] panic+0xb9/0xc0 [ 191.536515][ C1] ? __pfx_panic+0x10/0x10 [ 191.540959][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.546880][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 191.552028][ C1] check_panic_on_warn+0x89/0xb0 [ 191.557011][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 191.562082][ C1] end_report+0x6f/0x140 [ 191.566435][ C1] kasan_report+0x129/0x150 [ 191.571492][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 191.576564][ C1] do_raw_spin_lock+0x23d/0x290 [ 191.581440][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 191.586845][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.592251][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 191.597527][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 191.603482][ C1] ? kcov_remote_stop+0x78/0x6f0 [ 191.608500][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 191.613747][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 191.619163][ C1] dummy_timer+0x85f/0x45b0 [ 191.623718][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.629561][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.634529][ C1] ? debug_object_deactivate+0x6d/0x360 [ 191.640105][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.645069][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.650036][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 191.655285][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 191.661337][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 191.667094][ C1] ? read_tsc+0x9/0x20 [ 191.671197][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 191.677056][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 191.682227][ C1] handle_softirqs+0x27d/0x850 [ 191.687043][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 191.691975][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 191.697353][ C1] __irq_exit_rcu+0xca/0x1f0 [ 191.702017][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 191.707388][ C1] irq_exit_rcu+0x9/0x30 [ 191.711773][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 191.717897][ C1] [ 191.721039][ C1] [ 191.724298][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.730471][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 191.735823][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 f4 66 25 11 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 191.755468][ C1] RSP: 0018:ffffc9000c0177d0 EFLAGS: 00000206 [ 191.761581][ C1] RAX: b0ffaea69b625000 RBX: 0000000000000000 RCX: b0ffaea69b625000 [ 191.769666][ C1] RDX: 00000000cfbdce15 RSI: ffffffff8dc92d88 RDI: ffffffff8be246e0 [ 191.777683][ C1] RBP: ffffffff82619446 R08: ffffffff82619446 R09: ffffffff8e33f860 [ 191.785694][ C1] R10: dffffc0000000000 R11: ffffed1004fdd513 R12: 0000000000000002 [ 191.793707][ C1] R13: ffffffff8e33f860 R14: 0000000000000000 R15: 0000000000000246 [ 191.801881][ C1] ? task_dump_owner+0x76/0x4c0 [ 191.806835][ C1] ? task_dump_owner+0x76/0x4c0 [ 191.811729][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 191.816967][ C1] task_dump_owner+0x97/0x4c0 [ 191.821670][ C1] ? task_dump_owner+0x76/0x4c0 [ 191.826566][ C1] ? task_dump_owner+0x76/0x4c0 [ 191.831660][ C1] proc_pident_instantiate+0x1e6/0x2b0 [ 191.837203][ C1] proc_pident_lookup+0x1b7/0x270 [ 191.842312][ C1] path_openat+0x119c/0x3840 [ 191.846980][ C1] ? __pfx_path_openat+0x10/0x10 [ 191.851962][ C1] do_filp_open+0x1fa/0x410 [ 191.856515][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 191.861699][ C1] ? __pfx_kfree_link+0x10/0x10 [ 191.866604][ C1] ? _raw_spin_unlock+0x28/0x50 [ 191.871501][ C1] ? alloc_fd+0x64c/0x6c0 [ 191.875872][ C1] do_sys_openat2+0x121/0x200 [ 191.880582][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.885819][ C1] ? exc_page_fault+0x82/0x100 [ 191.890622][ C1] __x64_sys_openat+0x138/0x170 [ 191.895515][ C1] do_syscall_64+0xfa/0xf80 [ 191.900049][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.906140][ C1] ? clear_bhb_loop+0x60/0xb0 [ 191.910931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.916872][ C1] RIP: 0033:0x7f5e1058df90 [ 191.921341][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 191.941078][ C1] RSP: 002b:00007fffcf997770 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 191.949543][ C1] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f5e1058df90 [ 191.957597][ C1] RDX: 0000000000080001 RSI: 00007f5e106158aa RDI: 00000000ffffff9c [ 191.965628][ C1] RBP: 00007f5e106158aa R08: 0000000000000000 R09: 0000000000000000 [ 191.973644][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 191.981652][ C1] R13: 00007fffcf997810 R14: 000000000002e6ce R15: 00007fffcf997d80 [ 191.989688][ C1] [ 191.993347][ C1] Kernel Offset: disabled [ 191.997684][ C1] Rebooting in 86400 seconds..