last executing test programs: 24.102101211s ago: executing program 3 (id=2852): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) 18.978263267s ago: executing program 3 (id=2869): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2b;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\xd2\a\x11\xa9\xa5^\xff\xf5\x9e\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%\x94F%\x12\x9d\xbcB$\xe9\xf9\xf7\x19N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdn\x00'/140, 0x5) socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 17.395386681s ago: executing program 3 (id=2878): socket(0x20, 0x6, 0x438) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) 15.024638576s ago: executing program 3 (id=2880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0xc, 0x5, "56a6ef201d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.733117205s ago: executing program 3 (id=2895): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) unshare(0x22020600) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 10.445182974s ago: executing program 3 (id=2898): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x1c9000) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000885000000110000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b986c12a850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x63}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x4d, 0x12d5f, 0x3}}, 0x4c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 9.173065963s ago: executing program 0 (id=2907): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.180421833s ago: executing program 0 (id=2910): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1198ab8", 0xc3}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.767408889s ago: executing program 0 (id=2913): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x1f, 0x41, {0x41, 0x21, "6b0bc695aebeb305d2af1adc3f9a91be23ec98006dec2f1ab1155a9bb09e1e27c9f485aca1035ee21facadb0ba79eb75210e0291e580cb1359b733a27849c7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.983535751s ago: executing program 2 (id=2917): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000400)="0f20c035000001000f22c0660f3800ce3ef30f10ea67653e260f796c00b9800000c00f3235008000000f300f47190f20c035200000000f22c0b94c020000b80b000000ba000000000f300f009500000080b8010000000f01c1", 0x59}], 0x1, 0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 5.901226112s ago: executing program 1 (id=2918): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000bda000/0x4000)=nil, 0x4000) syz_open_dev$sndctrl(0x0, 0x400000000000458, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000", 0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setgroups(0x0, 0x0) setuid(0xee00) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x7ffeffff, 0x87, 0xb, 0x7, 0xffffff94}) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, 0x0) syz_clone(0x8020400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) 5.482390809s ago: executing program 0 (id=2919): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c000905020200020200000905820200"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000080)={0x40, 0x7, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.481520858s ago: executing program 4 (id=2920): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.921353477s ago: executing program 4 (id=2921): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptmx(0xffffffffffffff9c, 0x0, 0x531002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.854004958s ago: executing program 1 (id=2922): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) unshare(0x22020600) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 4.582061792s ago: executing program 2 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x0) 4.457717304s ago: executing program 4 (id=2924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 3.32451919s ago: executing program 2 (id=2925): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x442680, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$comedi(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000480), 0x0, 0x0, 0x71008, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0xc6, 0x3) 3.283389961s ago: executing program 1 (id=2926): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xfe, &(0x7f00000003c0)={[], [], 0x2f}) 3.275472741s ago: executing program 4 (id=2927): socket(0x20, 0x6, 0x438) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4800) syz_emit_vhci(0x0, 0x9) 1.869230532s ago: executing program 1 (id=2928): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, 0x0, 0x5, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4040) 1.707722654s ago: executing program 4 (id=2929): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.595192886s ago: executing program 0 (id=2930): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 986.987995ms ago: executing program 2 (id=2931): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x7, 0x31384142, 0x3, @discrete={0x5, 0x3}}) 637.048701ms ago: executing program 2 (id=2932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000400)="0f20c035000001000f22c0660f3800ce3ef30f10ea67653e260f796c00b9800000c00f3235008000000f300f47190f20c035200000000f22c0b94c020000b80b000000ba000000000f300f009500000080b8010000000f01c1", 0x59}], 0x1, 0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 634.00855ms ago: executing program 4 (id=2933): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptmx(0xffffffffffffff9c, 0x0, 0x531002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 520.720842ms ago: executing program 1 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x18000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x2, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xb, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x2, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0x7ff, 0x6, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0x5, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc02, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x62d986b7, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x84, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0x9, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x7a94, 0x7, 0xb, {0x7, 0x2, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x5dc}], 0x1}, 0x804) 80.265738ms ago: executing program 2 (id=2935): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) unshare(0x22020600) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 470.37µs ago: executing program 0 (id=2936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 0s ago: executing program 1 (id=2937): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xfe, &(0x7f00000003c0)={[], [], 0x2f}) kernel console output (not intermixed with test programs): 349] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 601.148328][T11493] misc userio: Invalid payload size [ 601.160219][T11493] misc userio: No port type given on /dev/userio [ 601.172358][T11493] misc userio: The device must be registered before sending interrupts [ 601.181009][T11493] misc userio: The device must be registered before sending interrupts [ 601.241586][ T4323] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 601.305863][ T4349] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 601.325534][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.352396][ T4349] usb 4-1: Product: syz [ 601.357126][ T4349] usb 4-1: Manufacturer: syz [ 601.368299][ T4349] usb 4-1: SerialNumber: syz [ 601.381091][ T4349] usb 4-1: config 0 descriptor?? [ 601.406157][ T4349] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 601.475112][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.496642][ T4323] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 601.521448][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.551771][ T4323] usb 5-1: config 0 descriptor?? [ 601.575918][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 601.595339][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 601.711568][ T4317] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 601.767591][ T4323] usbhid 5-1:0.0: can't add hid device: -71 [ 601.777161][ T4323] usbhid: probe of 5-1:0.0 failed with error -71 [ 601.811107][ T4323] usb 5-1: USB disconnect, device number 50 [ 601.871549][ T4317] usb 1-1: device descriptor read/64, error -71 [ 601.906253][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2351'. [ 601.974156][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 601.990406][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2351'. [ 602.151405][ T4317] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 602.301945][ T4317] usb 1-1: device descriptor read/64, error -71 [ 602.381949][ T4323] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 602.421528][ T4317] usb usb1-port1: attempt power cycle [ 602.564213][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.575892][ T4323] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 602.586154][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.594513][ T6017] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 602.613346][ T4323] usb 5-1: config 0 descriptor?? [ 602.793508][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.805196][ T6017] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 602.814480][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.828322][ T4349] gspca_stk1135: reg_w 0xf err -71 [ 602.835926][ T4317] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 602.845736][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.854960][ T6017] usb 3-1: config 0 descriptor?? [ 602.860321][ T4349] gspca_stk1135: Sensor write failed [ 602.870756][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.877349][ T4349] gspca_stk1135: Sensor write failed [ 602.886015][ T4317] usb 1-1: device descriptor read/8, error -71 [ 602.892427][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.898872][ T4349] gspca_stk1135: Sensor read failed [ 602.905010][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.911493][ T4349] gspca_stk1135: Sensor read failed [ 602.920203][ T4349] gspca_stk1135: Detected sensor type unknown (0x0) [ 602.927339][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.937227][ T4349] gspca_stk1135: Sensor read failed [ 602.944784][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.951180][ T4349] gspca_stk1135: Sensor read failed [ 602.959999][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.968336][ T4349] gspca_stk1135: Sensor write failed [ 602.977366][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 602.986009][ T4349] gspca_stk1135: Sensor write failed [ 602.992597][ T4349] stk1135: probe of 4-1:0.0 failed with error -71 [ 603.002630][ T4349] usb 4-1: USB disconnect, device number 35 [ 603.070101][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 603.076478][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 603.085588][ T6017] usb 3-1: USB disconnect, device number 22 [ 603.171394][ T4317] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 603.202607][ T4317] usb 1-1: device descriptor read/8, error -71 [ 603.321759][ T4317] usb usb1-port1: unable to enumerate USB device [ 603.641466][ T6017] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 603.823227][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.835100][ T6017] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 603.844712][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.855547][ T6017] usb 3-1: config 0 descriptor?? [ 603.881561][ T4825] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 604.061440][ T4825] usb 4-1: device descriptor read/64, error -71 [ 604.086948][ T4323] usbhid 5-1:0.0: can't add hid device: -71 [ 604.099337][ T4323] usbhid: probe of 5-1:0.0 failed with error -71 [ 604.108938][ T4323] usb 5-1: USB disconnect, device number 51 [ 604.287807][T11522] misc userio: Invalid payload size [ 604.294997][T11522] misc userio: No port type given on /dev/userio [ 604.301819][T11522] misc userio: The device must be registered before sending interrupts [ 604.326525][T11522] misc userio: The device must be registered before sending interrupts [ 604.345039][ T4825] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 604.474608][T11526] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.489880][T11526] net_ratelimit: 10 callbacks suppressed [ 604.489976][T11526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 604.513657][T11524] loop4: detected capacity change from 0 to 7 [ 604.521761][ T4825] usb 4-1: device descriptor read/64, error -71 [ 604.537823][T11524] Dev loop4: unable to read RDB block 7 [ 604.546028][T11524] loop4: unable to read partition table [ 604.556559][T11524] loop4: partition table beyond EOD, truncated [ 604.565109][T11524] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 604.651632][ T4825] usb usb4-port1: attempt power cycle [ 604.682615][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.691449][ T6017] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 604.699708][ T6017] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input67 [ 604.701170][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.879387][T11535] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 605.011912][ T26] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 605.059544][ T4323] usb 3-1: USB disconnect, device number 23 [ 605.065617][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 605.091500][ T4825] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 605.132074][ T4825] usb 4-1: device descriptor read/8, error -71 [ 605.211751][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 605.233258][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.252582][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.265799][ T26] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 605.276703][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.298631][ T26] usb 1-1: config 0 descriptor?? [ 605.411625][ T4825] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 605.442434][ T4825] usb 4-1: device descriptor read/8, error -71 [ 605.561661][ T4825] usb usb4-port1: unable to enumerate USB device [ 605.644379][T11550] misc userio: Invalid payload size [ 605.650716][T11550] misc userio: No port type given on /dev/userio [ 605.658469][T11550] misc userio: The device must be registered before sending interrupts [ 605.662424][ T4322] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 605.678071][T11550] misc userio: The device must be registered before sending interrupts [ 605.737783][ T26] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 605.746977][ T26] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 605.760810][ T26] ft260 0003:0403:6030.0014: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 605.791414][ T8008] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 605.861785][ T4322] usb 5-1: Using ep0 maxpacket: 16 [ 605.878129][ T4322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.888538][ T4322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.903762][ T4322] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.918033][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.926799][ T4322] usb 5-1: Product: syz [ 605.931037][ T4322] usb 5-1: Manufacturer: syz [ 605.940386][ T4322] usb 5-1: SerialNumber: syz [ 605.948128][ T8008] usb 2-1: device descriptor read/64, error -71 [ 605.955734][ T26] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 606.163177][ T26] ft260 0003:0403:6030.0014: failed to retrieve system status [ 606.178774][ T4322] usb 5-1: 0:2 : does not exist [ 606.184654][ T26] ft260: probe of 0003:0403:6030.0014 failed with error -5 [ 606.195971][ T4322] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 606.237694][ T4322] usb 5-1: USB disconnect, device number 52 [ 606.243824][ T8008] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 606.375789][ T4349] usb 1-1: USB disconnect, device number 51 [ 606.411549][ T8008] usb 2-1: device descriptor read/64, error -71 [ 606.493579][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.541634][ T8008] usb usb2-port1: attempt power cycle [ 606.961387][ T8008] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 606.990461][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 607.002922][ T8008] usb 2-1: device descriptor read/8, error -71 [ 607.031714][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.060222][T11570] device dummy0 entered promiscuous mode [ 607.082797][T11570] device macsec1 entered promiscuous mode [ 607.092912][T11570] device dummy0 left promiscuous mode [ 607.281354][ T8008] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 607.322148][ T8008] usb 2-1: device descriptor read/8, error -71 [ 607.410959][T11581] misc userio: Invalid payload size [ 607.424630][T11581] misc userio: The device must be registered before sending interrupts [ 607.454072][T11581] misc userio: The device must be registered before sending interrupts [ 607.461842][ T8008] usb usb2-port1: unable to enumerate USB device [ 607.608418][T11584] binder: 11582:11584 ioctl 4018620d 0 returned -22 [ 607.624853][T11586] loop4: detected capacity change from 0 to 7 [ 607.644069][T11586] Dev loop4: unable to read RDB block 7 [ 607.649720][T11586] loop4: unable to read partition table [ 607.676662][T11586] loop4: partition table beyond EOD, truncated [ 607.691512][T11586] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 608.970060][T11611] misc userio: Invalid payload size [ 609.005994][T11611] misc userio: The device must be registered before sending interrupts [ 609.035371][T11611] misc userio: The device must be registered before sending interrupts [ 609.131398][ T4323] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 609.336062][ T4323] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 609.367188][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.429373][ T4323] usb 2-1: Product: syz [ 609.449153][ T4323] usb 2-1: Manufacturer: syz [ 609.470168][ T4323] usb 2-1: SerialNumber: syz [ 609.478397][ T4323] usb 2-1: config 0 descriptor?? [ 609.487867][ T4323] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 609.931369][ T4317] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 610.147374][T11631] binder: 11630:11631 ioctl 4018620d 0 returned -22 [ 610.155959][ T4317] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 610.174586][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.205594][ T4317] usb 4-1: config 0 descriptor?? [ 610.428384][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 610.440758][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 610.449755][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 610.468121][ T4317] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 610.475996][ T4317] [drm] Initialized udl on minor 2 [ 610.483777][ T4317] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.492759][ T4317] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 610.502678][ T4317] usb 4-1: USB disconnect, device number 40 [ 610.512018][ T6017] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 610.521140][ T6017] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 610.530656][ T6017] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 610.681883][ T6017] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 610.691480][ T4322] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 610.841454][ T4322] usb 5-1: device descriptor read/64, error -71 [ 610.865212][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.876790][ T6017] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 610.886842][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.896062][ T4323] gspca_stk1135: reg_w 0xf err -71 [ 610.907129][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 610.922625][ T6017] usb 3-1: config 0 descriptor?? [ 610.928324][ T4323] gspca_stk1135: Sensor write failed [ 610.933943][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 610.945420][ T4323] gspca_stk1135: Sensor write failed [ 610.950937][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 610.958036][ T4323] gspca_stk1135: Sensor read failed [ 610.964005][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 610.970490][ T4323] gspca_stk1135: Sensor read failed [ 610.977590][ T4323] gspca_stk1135: Detected sensor type unknown (0x0) [ 610.985430][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 610.991961][ T4323] gspca_stk1135: Sensor read failed [ 610.997496][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 611.011358][ T4323] gspca_stk1135: Sensor read failed [ 611.034663][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 611.054855][ T4323] gspca_stk1135: Sensor write failed [ 611.060700][ T4323] gspca_stk1135: serial bus timeout: status=0x00 [ 611.077550][ T4323] gspca_stk1135: Sensor write failed [ 611.083359][ T4323] stk1135: probe of 2-1:0.0 failed with error -71 [ 611.103976][ T4323] usb 2-1: USB disconnect, device number 56 [ 611.126791][ T4322] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 611.149787][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 611.156708][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 611.183857][ T6017] usb 3-1: USB disconnect, device number 24 [ 611.327174][ T4322] usb 5-1: device descriptor read/64, error -71 [ 611.461628][ T4322] usb usb5-port1: attempt power cycle [ 611.472296][T11645] misc userio: Invalid payload size [ 611.483693][T11645] misc userio: The device must be registered before sending interrupts [ 611.498911][T11645] misc userio: The device must be registered before sending interrupts [ 611.556197][T11647] device syzkaller0 entered promiscuous mode [ 611.672474][T11649] loop4: detected capacity change from 0 to 7 [ 611.680332][ T4376] Dev loop4: unable to read RDB block 7 [ 611.693018][ T4376] loop4: unable to read partition table [ 611.698883][ T4376] loop4: partition table beyond EOD, truncated [ 611.711741][ T6017] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 611.719648][T11649] Dev loop4: unable to read RDB block 7 [ 611.733404][T11649] loop4: unable to read partition table [ 611.752832][T11649] loop4: partition table beyond EOD, truncated [ 611.778115][T11649] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 611.881383][ T4322] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 611.912453][ T4322] usb 5-1: device descriptor read/8, error -71 [ 611.923598][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.947308][ T6017] usb 3-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 611.959250][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.994842][ T6017] usb 3-1: config 0 descriptor?? [ 612.121569][ T4320] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 612.150101][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 612.160071][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.171686][T11656] device dummy0 entered promiscuous mode [ 612.177485][T11656] device macsec1 entered promiscuous mode [ 612.187003][T11656] device dummy0 left promiscuous mode [ 612.201390][ T4322] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 612.242111][ T4322] usb 5-1: device descriptor read/8, error -71 [ 612.317927][ T4320] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 612.359095][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.369951][ T4322] usb usb5-port1: unable to enumerate USB device [ 612.389242][ T4320] usb 2-1: config 0 descriptor?? [ 612.408969][ T4320] cp210x 2-1:0.0: cp210x converter detected [ 612.691386][ T4323] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 612.810879][ T4320] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 612.841698][ T4320] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 612.849539][ T4320] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 612.865848][ T4320] usb 2-1: cp210x converter now attached to ttyUSB0 [ 612.874748][ T4323] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 612.894090][ T4323] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 612.910532][ T4323] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 612.931481][ T4323] usb 1-1: config 0 interface 0 has no altsetting 0 [ 612.938398][ T4323] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 612.949536][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.961820][ T4323] usb 1-1: config 0 descriptor?? [ 612.968017][T11663] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 613.046511][ T4320] usb 2-1: USB disconnect, device number 57 [ 613.074315][ T4320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 613.105724][ T4320] cp210x 2-1:0.0: device disconnected [ 613.412934][ T4323] steelseries_srws1 0003:1038:1410.0015: unexpected long global item [ 613.442028][ T4323] steelseries_srws1 0003:1038:1410.0015: parse failed [ 613.449092][ T4323] steelseries_srws1: probe of 0003:1038:1410.0015 failed with error -22 [ 613.491525][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 613.502134][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 613.528100][ T6017] usb 3-1: USB disconnect, device number 25 [ 613.628636][T11669] binder: 11668:11669 ioctl 4018620d 0 returned -22 [ 613.652397][ T4320] usb 1-1: USB disconnect, device number 52 [ 614.667529][T11688] loop4: detected capacity change from 0 to 7 [ 614.701809][ T6017] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 614.777669][T11688] Dev loop4: unable to read RDB block 7 [ 614.793760][T11688] loop4: unable to read partition table [ 614.799644][T11688] loop4: partition table beyond EOD, truncated [ 614.822844][T11688] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 614.857032][ T3640] Dev loop4: unable to read RDB block 7 [ 614.873965][ T3640] loop4: unable to read partition table [ 614.879835][ T3640] loop4: partition table beyond EOD, truncated [ 614.891374][ T6017] usb 1-1: Using ep0 maxpacket: 16 [ 614.898484][ T6017] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.937024][ T6017] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.010787][ T6017] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.041752][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.070727][ T6017] usb 1-1: Product: syz [ 615.099273][ T6017] usb 1-1: Manufacturer: syz [ 615.104800][ T6017] usb 1-1: SerialNumber: syz [ 615.205760][T11693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 615.231453][T11693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.275012][T11693] device dummy0 entered promiscuous mode [ 615.280917][T11693] device macsec1 entered promiscuous mode [ 615.324211][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 615.346923][ T6017] usb 1-1: 0:2 : does not exist [ 615.361664][ T6017] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 615.390342][T11693] device dummy0 left promiscuous mode [ 615.438241][ T6017] usb 1-1: USB disconnect, device number 53 [ 615.714681][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.041573][ T6017] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 616.061723][ T4320] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 616.223204][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.242315][ T6017] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 616.255241][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.271786][ T4323] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 616.273836][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 616.291301][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.295813][ T6017] usb 3-1: config 0 descriptor?? [ 616.310191][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.321040][ T4320] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 616.330247][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.344956][ T4320] usb 5-1: config 0 descriptor?? [ 616.461364][ T4323] usb 1-1: device descriptor read/64, error -71 [ 616.543462][ T8008] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 616.563421][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 616.569488][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 616.589087][ T6017] usb 3-1: USB disconnect, device number 26 [ 616.732740][ T4323] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 616.745336][ T8008] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.753985][ T8008] usb 4-1: config 0 has no interface number 0 [ 616.760425][ T8008] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.772564][ T8008] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.784070][ T8008] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.798250][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 616.805713][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 616.815767][ T4320] usb 5-1: USB disconnect, device number 57 [ 616.831557][ T8008] usb 4-1: config 0 interface 1 has no altsetting 0 [ 616.838368][ T8008] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 616.858266][ T8008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.872939][ T8008] usb 4-1: config 0 descriptor?? [ 616.891919][ T4323] usb 1-1: device descriptor read/64, error -71 [ 617.022246][ T4323] usb usb1-port1: attempt power cycle [ 617.127816][T11713] binder: 11712:11713 ioctl c0306201 0 returned -14 [ 617.151965][ T6017] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 617.334165][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.345456][ T6017] usb 3-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 617.355026][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.379674][ T6017] usb 3-1: config 0 descriptor?? [ 617.441412][ T4323] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 617.472464][ T4323] usb 1-1: device descriptor read/8, error -71 [ 617.489953][ T8008] uclogic 0003:145F:0212.0016: pen parameters not found [ 617.498688][ T8008] uclogic 0003:145F:0212.0016: interface is invalid, ignoring [ 617.525869][ T8008] usb 4-1: USB disconnect, device number 41 [ 617.761505][ T4323] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 617.801924][ T4323] usb 1-1: device descriptor read/8, error -71 [ 617.931762][ T4323] usb usb1-port1: unable to enumerate USB device [ 618.391446][ T4320] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 618.581431][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 618.589790][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.600671][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.613990][ T4320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.623728][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.633495][ T4320] usb 4-1: Product: syz [ 618.638992][ T4320] usb 4-1: Manufacturer: syz [ 618.645124][ T4320] usb 4-1: SerialNumber: syz [ 618.878911][ T4320] usb 4-1: 0:2 : does not exist [ 618.901452][ T4320] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 618.919847][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 618.936240][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 618.984484][ T6017] usb 3-1: USB disconnect, device number 27 [ 619.020920][ T4320] usb 4-1: USB disconnect, device number 42 [ 619.323275][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.381616][ T7] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 619.466750][ T6017] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 619.583676][ T7] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 619.593182][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 619.605706][ T7] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 619.616884][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.625490][ T7] usb 2-1: Product: syz [ 619.629854][ T7] usb 2-1: Manufacturer: syz [ 619.634570][ T7] usb 2-1: SerialNumber: syz [ 619.642904][ T7] usb 2-1: config 0 descriptor?? [ 619.672844][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.688108][ T6017] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.700600][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.719747][ T6017] usb 3-1: config 0 descriptor?? [ 619.861477][ T4320] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 619.883156][ T7] mos7840 2-1:0.0: required endpoints missing [ 619.897112][ T7] usb 2-1: USB disconnect, device number 58 [ 619.940608][ T6017] usbhid 3-1:0.0: can't add hid device: -71 [ 619.957447][ T6017] usbhid: probe of 3-1:0.0 failed with error -71 [ 619.966309][ T6017] usb 3-1: USB disconnect, device number 28 [ 620.051338][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 620.058785][ T4320] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 620.075096][ T4320] usb 1-1: config 16 has an invalid interface number: 255 but max is 0 [ 620.091058][ T4320] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 620.111313][ T4320] usb 1-1: config 16 has no interface number 0 [ 620.123984][ T4320] usb 1-1: too many endpoints for config 16 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 620.157468][ T4320] usb 1-1: config 16 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 620.187699][ T4320] usb 1-1: config 16 interface 255 has no altsetting 0 [ 620.201384][ T4320] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.220926][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.533149][ T6017] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 620.710796][T11759] binder: 11758:11759 ioctl c0306201 0 returned -14 [ 620.736081][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.752858][ T6017] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 620.771325][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.792210][ T6017] usb 3-1: config 0 descriptor?? [ 620.960203][T11765] loop4: detected capacity change from 0 to 7 [ 620.969615][T11765] Dev loop4: unable to read RDB block 7 [ 620.983382][T11765] loop4: unable to read partition table [ 620.989321][T11765] loop4: partition table beyond EOD, truncated [ 621.013523][T11765] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 621.402601][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.418459][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.430452][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.441562][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.507228][ T6017] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 622.531406][ T4320] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 622.532749][ T6017] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input68 [ 622.579549][ T6017] usb 3-1: USB disconnect, device number 29 [ 622.579606][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 622.690807][ T4323] usb 1-1: USB disconnect, device number 58 [ 622.731393][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 622.742440][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.793881][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.822884][ T4320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.832310][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.840346][ T4320] usb 4-1: Product: syz [ 622.842521][ T4317] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 622.845962][ T4320] usb 4-1: Manufacturer: syz [ 622.857902][ T4320] usb 4-1: SerialNumber: syz [ 623.021802][ T4317] usb 5-1: device descriptor read/64, error -71 [ 623.087308][ T4320] usb 4-1: 0:2 : does not exist [ 623.104430][ T4320] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 623.181764][ T4323] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 623.214122][ T4320] usb 4-1: USB disconnect, device number 43 [ 623.301531][ T4317] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 623.373544][ T4323] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 623.393132][ T4323] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 623.429558][ T4323] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 623.449227][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.460353][ T4323] usb 1-1: Product: syz [ 623.465738][ T4323] usb 1-1: Manufacturer: syz [ 623.470541][ T4323] usb 1-1: SerialNumber: syz [ 623.475883][ T4317] usb 5-1: device descriptor read/64, error -71 [ 623.495523][ T4323] usb 1-1: config 0 descriptor?? [ 623.612065][ T4317] usb usb5-port1: attempt power cycle [ 623.726396][ T4323] mos7840 1-1:0.0: required endpoints missing [ 623.752163][ T4323] usb 1-1: USB disconnect, device number 59 [ 623.791442][ T8008] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 623.951407][ T4320] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 623.983784][ T8008] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 623.998912][ T8008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.011004][ T8008] usb 2-1: config 0 descriptor?? [ 624.031844][ T4317] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 624.061973][ T4317] usb 5-1: device descriptor read/8, error -71 [ 624.137495][ T4320] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 624.152721][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.170473][ T4320] usb 4-1: Product: syz [ 624.174800][ T4320] usb 4-1: Manufacturer: syz [ 624.179640][ T4320] usb 4-1: SerialNumber: syz [ 624.202364][ T4320] usb 4-1: config 0 descriptor?? [ 624.220046][ T4320] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 624.343412][ T4317] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 624.381058][T11799] binder: 11798:11799 ioctl c0306201 0 returned -14 [ 624.392200][ T4317] usb 5-1: device descriptor read/8, error -71 [ 624.448869][ T8008] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 624.460168][ T8008] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 624.471710][ T8008] [drm:udl_init] *ERROR* Selecting channel failed [ 624.487106][ T8008] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 624.495962][ T8008] [drm] Initialized udl on minor 2 [ 624.502331][ T8008] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 624.510707][ T8008] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 624.521629][ T4317] usb usb5-port1: unable to enumerate USB device [ 624.542654][ T8008] usb 2-1: USB disconnect, device number 59 [ 624.549105][ T4322] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 624.567863][ T4322] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 624.579738][ T4322] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 625.601478][ T4317] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 625.617644][ T4320] gspca_stk1135: reg_w 0xf err -71 [ 625.624994][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.650486][ T4320] gspca_stk1135: Sensor write failed [ 625.662188][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.678871][ T4320] gspca_stk1135: Sensor write failed [ 625.684344][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.715803][ T4320] gspca_stk1135: Sensor read failed [ 625.724788][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.741535][ T4320] gspca_stk1135: Sensor read failed [ 625.751736][ T4320] gspca_stk1135: Detected sensor type unknown (0x0) [ 625.754024][T11814] loop4: detected capacity change from 0 to 7 [ 625.768957][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.786825][ T4320] gspca_stk1135: Sensor read failed [ 625.786836][T11814] Dev loop4: unable to read RDB block 7 [ 625.786925][T11814] loop4: unable to read partition table [ 625.804867][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 625.811519][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.815712][ T4317] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 625.829372][ T4320] gspca_stk1135: Sensor read failed [ 625.837481][T11814] loop4: partition table beyond EOD, truncated [ 625.840593][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.853965][ T4317] usb 1-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 625.859911][ T4320] gspca_stk1135: Sensor write failed [ 625.871964][T11814] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 625.886049][ T4317] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.895239][ T4320] gspca_stk1135: serial bus timeout: status=0x00 [ 625.924458][ T4317] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.941386][ T4320] gspca_stk1135: Sensor write failed [ 625.949871][ T4320] stk1135: probe of 4-1:0.0 failed with error -71 [ 625.964272][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.990454][ T4320] usb 4-1: USB disconnect, device number 44 [ 626.005815][ T4317] usbtmc 1-1:16.0: bulk endpoints not found [ 626.591475][ T4349] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 626.783858][ T4349] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 626.806966][ T4349] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 626.862917][ T4349] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 626.897260][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.923319][ T4349] usb 2-1: Product: syz [ 626.933220][ T4349] usb 2-1: Manufacturer: syz [ 626.942638][ T4349] usb 2-1: SerialNumber: syz [ 626.957353][ T4349] usb 2-1: config 0 descriptor?? [ 627.178019][ T4349] mos7840 2-1:0.0: required endpoints missing [ 627.205744][ T4349] usb 2-1: USB disconnect, device number 60 [ 627.257289][T11844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 627.269321][T11844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.283182][T11844] device dummy0 entered promiscuous mode [ 627.289043][T11844] device macsec1 entered promiscuous mode [ 627.299339][T11844] device dummy0 left promiscuous mode [ 627.302210][ T8008] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 627.411465][ T26] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 627.466756][ T8008] usb 3-1: device descriptor read/64, error -71 [ 627.571385][ T26] usb 5-1: device descriptor read/64, error -71 [ 627.741407][ T8008] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 627.841519][ T26] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 627.866587][T11858] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 627.901423][ T8008] usb 3-1: device descriptor read/64, error -71 [ 627.991764][ T26] usb 5-1: device descriptor read/64, error -71 [ 628.021462][ T8008] usb usb3-port1: attempt power cycle [ 628.061419][ T4322] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 628.111634][ T26] usb usb5-port1: attempt power cycle [ 628.244752][ T4322] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 628.254140][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.262569][ T4322] usb 4-1: Product: syz [ 628.266856][ T4322] usb 4-1: Manufacturer: syz [ 628.271764][ T4322] usb 4-1: SerialNumber: syz [ 628.286552][ T4322] usb 4-1: config 0 descriptor?? [ 628.295045][ T4322] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 628.354640][ T4349] usb 1-1: USB disconnect, device number 60 [ 628.431413][ T8008] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 628.462165][ T8008] usb 3-1: device descriptor read/8, error -71 [ 628.521387][ T26] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 628.552278][ T26] usb 5-1: device descriptor read/8, error -71 [ 628.731596][ T8008] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 628.762112][ T8008] usb 3-1: device descriptor read/8, error -71 [ 628.781738][ T4349] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 628.823541][ T26] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 628.861990][ T26] usb 5-1: device descriptor read/8, error -71 [ 628.892817][ T8008] usb usb3-port1: unable to enumerate USB device [ 628.981638][ T26] usb usb5-port1: unable to enumerate USB device [ 628.982133][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 629.012997][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.031779][ T4349] usb 1-1: config 0 has no interfaces? [ 629.043921][ T4349] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=e8.32 [ 629.053534][ T4349] usb 1-1: New USB device strings: Mfr=218, Product=177, SerialNumber=95 [ 629.062207][ T4349] usb 1-1: Product: syz [ 629.066422][ T4349] usb 1-1: Manufacturer: syz [ 629.071075][ T4349] usb 1-1: SerialNumber: syz [ 629.087217][ T4349] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 629.302763][ T8008] apple-mfi-fastcharge 1-1: USB disconnect, device number 61 [ 629.470171][T11873] tc action pedit offset must be on 32 bit boundaries [ 629.482121][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.488504][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.714033][ T4322] gspca_stk1135: reg_w 0xf err -71 [ 629.724290][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.730767][ T4322] gspca_stk1135: Sensor write failed [ 629.736731][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.744463][ T4322] gspca_stk1135: Sensor write failed [ 629.750007][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.757057][ T4322] gspca_stk1135: Sensor read failed [ 629.763044][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.769501][ T4322] gspca_stk1135: Sensor read failed [ 629.775986][ T4322] gspca_stk1135: Detected sensor type unknown (0x0) [ 629.785162][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.797561][ T4322] gspca_stk1135: Sensor read failed [ 629.805565][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.814058][ T4322] gspca_stk1135: Sensor read failed [ 629.819499][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.826454][ T4322] gspca_stk1135: Sensor write failed [ 629.832303][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.838771][ T4322] gspca_stk1135: Sensor write failed [ 629.844650][ T4322] stk1135: probe of 4-1:0.0 failed with error -71 [ 629.862401][ T4322] usb 4-1: USB disconnect, device number 45 [ 630.411732][ T4825] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 630.702868][ T4825] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 630.841410][ T4825] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 630.898343][ T4825] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 630.969425][ T4825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.991397][ T4825] usb 1-1: Product: syz [ 630.995650][ T4825] usb 1-1: Manufacturer: syz [ 631.031774][ T4825] usb 1-1: SerialNumber: syz [ 631.067666][ T4825] usb 1-1: config 0 descriptor?? [ 631.150594][T11897] ======================================================= [ 631.150594][T11897] WARNING: The mand mount option has been deprecated and [ 631.150594][T11897] and is ignored by this kernel. Remove the mand [ 631.150594][T11897] option from the mount to silence this warning. [ 631.150594][T11897] ======================================================= [ 631.221550][ T4349] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 631.305051][ T4825] mos7840 1-1:0.0: required endpoints missing [ 631.340499][ T4825] usb 1-1: USB disconnect, device number 62 [ 631.346876][ T4322] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 631.423261][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 631.430579][ T4349] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 631.451891][ T4349] usb 5-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 631.462889][ T4349] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.476550][ T4349] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.486428][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.527637][ T4349] usbtmc 5-1:16.0: bulk endpoints not found [ 631.545687][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.559042][ T4322] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 631.569816][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.593951][ T4322] usb 3-1: config 0 descriptor?? [ 631.819419][ T4322] usbhid 3-1:0.0: can't add hid device: -71 [ 631.833854][ T4322] usbhid: probe of 3-1:0.0 failed with error -71 [ 631.850484][ T4322] usb 3-1: USB disconnect, device number 34 [ 632.166087][T11928] CUSE: unknown device info "n|zQC*" [ 632.173129][T11928] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 632.191811][T11928] CUSE: unknown device info "" [ 632.201484][T11928] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 632.224956][T11928] CUSE: DEVNAME unspecified [ 632.241463][ T8008] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 632.391347][ T4322] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 632.432372][ T8008] usb 2-1: no configurations [ 632.437124][ T8008] usb 2-1: can't read configurations, error -22 [ 632.589802][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.601027][ T8008] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 632.616680][ T4322] usb 3-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 632.639875][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.676293][ T4322] usb 3-1: config 0 descriptor?? [ 632.792051][ T8008] usb 2-1: no configurations [ 632.797353][ T8008] usb 2-1: can't read configurations, error -22 [ 632.825171][ T8008] usb usb2-port1: attempt power cycle [ 633.251423][ T8008] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 633.292801][ T8008] usb 2-1: no configurations [ 633.297997][ T8008] usb 2-1: can't read configurations, error -22 [ 633.411393][ T26] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 633.461572][ T8008] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 633.502761][ T8008] usb 2-1: no configurations [ 633.507459][ T8008] usb 2-1: can't read configurations, error -22 [ 633.525334][ T8008] usb usb2-port1: unable to enumerate USB device [ 633.605920][ T26] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 633.622974][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.647913][ T26] usb 4-1: Product: syz [ 633.654001][ T26] usb 4-1: Manufacturer: syz [ 633.689591][ T26] usb 4-1: SerialNumber: syz [ 633.697936][ T26] usb 4-1: config 0 descriptor?? [ 633.714691][ T26] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 633.934178][ T8008] usb 5-1: USB disconnect, device number 66 [ 633.979975][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 633.996939][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.008608][T11943] device dummy0 entered promiscuous mode [ 634.036616][T11943] device macsec1 entered promiscuous mode [ 634.056287][T11943] device dummy0 left promiscuous mode [ 634.154721][ T4322] usbhid 3-1:0.0: can't add hid device: -71 [ 634.160919][ T4322] usbhid: probe of 3-1:0.0 failed with error -71 [ 634.193137][ T4322] usb 3-1: USB disconnect, device number 35 [ 634.471371][ T8008] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 634.571540][ T4323] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 634.611564][ T4322] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 634.651425][ T8008] usb 5-1: Using ep0 maxpacket: 16 [ 634.659784][ T8008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.671089][ T8008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.680995][ T8008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.695740][ T8008] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.706072][ T8008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.716971][ T8008] usb 5-1: config 0 descriptor?? [ 634.764403][ T4323] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 634.779160][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.790599][ T4323] usb 1-1: config 0 descriptor?? [ 634.795116][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 634.805011][ T4322] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 634.815195][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.827497][ T4322] usb 3-1: config 0 descriptor?? [ 634.840311][ T4322] gspca_main: sunplus-2.14.0 probing 041e:400b [ 635.126074][ T26] gspca_stk1135: reg_w 0xf err -71 [ 635.207903][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.252528][ T26] gspca_stk1135: Sensor write failed [ 635.258672][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.258779][ T4323] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 635.292550][ T26] gspca_stk1135: Sensor write failed [ 635.322737][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.329357][ T26] gspca_stk1135: Sensor read failed [ 635.364756][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.409162][ T8008] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input69 [ 635.421908][ T26] gspca_stk1135: Sensor read failed [ 635.427314][ T26] gspca_stk1135: Detected sensor type unknown (0x0) [ 635.428604][ T4323] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 635.437007][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.456038][ T26] gspca_stk1135: Sensor read failed [ 635.464495][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.471055][ T26] gspca_stk1135: Sensor read failed [ 635.481124][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.490749][ T26] gspca_stk1135: Sensor write failed [ 635.497392][ T4323] [drm:udl_init] *ERROR* Selecting channel failed [ 635.498842][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 635.512158][ T26] gspca_stk1135: Sensor write failed [ 635.518086][ T26] stk1135: probe of 4-1:0.0 failed with error -71 [ 635.584667][ T8008] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 635.598061][ T26] usb 4-1: USB disconnect, device number 46 [ 635.664685][ T8008] usb 5-1: USB disconnect, device number 67 [ 635.907600][ T4323] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 635.975930][ T4323] [drm] Initialized udl on minor 2 [ 635.988842][ T4323] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 636.018100][ T4323] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 636.039435][ T4322] gspca_sunplus: reg_w_riv err -110 [ 636.050865][ T4323] usb 1-1: USB disconnect, device number 63 [ 636.058567][ T4322] sunplus: probe of 3-1:0.0 failed with error -110 [ 636.111612][ T4317] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 636.146019][ T4317] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 636.185547][ T4317] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 636.299360][ T4349] usb 3-1: USB disconnect, device number 36 [ 636.389521][T11954] fido_id[11954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 636.391229][T11961] fuse: Unknown parameter 'user_i00000000000000000000' [ 636.581455][ T4323] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 636.749137][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 636.773862][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.795611][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 636.828209][ T4323] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.864047][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.898659][ T4323] usb 1-1: config 0 descriptor?? [ 637.152574][ T4323] usbhid 1-1:0.0: can't add hid device: -71 [ 637.159516][ T4323] usbhid: probe of 1-1:0.0 failed with error -71 [ 637.187870][ T4323] usb 1-1: USB disconnect, device number 64 [ 637.692051][ T27] audit: type=1326 audit(1782458254.124:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 637.741382][ T4323] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 637.801524][ T27] audit: type=1326 audit(1782458254.124:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 637.820347][ T26] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 637.849470][ T27] audit: type=1326 audit(1782458254.124:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 637.901412][ T8008] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 637.918736][ T27] audit: type=1326 audit(1782458254.124:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 637.948458][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.963925][T11987] kvm: emulating exchange as write [ 637.970433][ T4323] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.995797][ T27] audit: type=1326 audit(1782458254.124:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.020101][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.026659][ T4323] usb 1-1: config 0 descriptor?? [ 638.039166][ T27] audit: type=1326 audit(1782458254.124:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.066875][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 638.074587][ T27] audit: type=1326 audit(1782458254.124:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.115529][ T26] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 638.131895][ T27] audit: type=1326 audit(1782458254.124:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.157048][ T27] audit: type=1326 audit(1782458254.124:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.181748][ T26] usb 5-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 638.194203][ T8008] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 638.226810][ T27] audit: type=1326 audit(1782458254.124:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.2.2525" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f56e239ce59 code=0x7ffc0000 [ 638.254102][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.262613][ T26] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.279621][ T8008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.282472][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.300463][ T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.309766][ T8008] usb 2-1: config 0 descriptor?? [ 638.324309][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.365808][ T26] usbtmc 5-1:16.0: bulk endpoints not found [ 638.570609][T11992] fuse: Unknown parameter 'user_i00000000000000000000' [ 638.746009][ T8008] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 638.760517][ T8008] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 638.780002][ T8008] [drm:udl_init] *ERROR* Selecting channel failed [ 638.811645][ T8008] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 638.826245][ T8008] [drm] Initialized udl on minor 2 [ 638.838203][ T8008] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 638.851551][ T8008] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 638.872974][ T8008] usb 2-1: USB disconnect, device number 65 [ 638.879687][ T4825] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 638.894686][ T4825] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 638.906975][ T4825] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 639.398190][ T4323] usbhid 1-1:0.0: can't add hid device: -71 [ 639.409153][ T4323] usbhid: probe of 1-1:0.0 failed with error -71 [ 639.456725][ T4323] usb 1-1: USB disconnect, device number 65 [ 639.712070][T12009] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2536'. [ 640.482334][T12017] fuse: Unknown parameter 'user_i00000000000000000000' [ 640.609264][ T4825] usb 5-1: USB disconnect, device number 68 [ 640.631626][ T4349] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 640.959525][ T4349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.976357][ T4349] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.985660][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.104028][ T4349] usb 2-1: config 0 descriptor?? [ 641.442552][ T4349] usbhid 2-1:0.0: can't add hid device: -71 [ 641.448660][ T4349] usbhid: probe of 2-1:0.0 failed with error -71 [ 641.498009][ T4349] usb 2-1: USB disconnect, device number 66 [ 641.578759][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.634367][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.681123][T12030] device dummy0 entered promiscuous mode [ 641.693336][T12030] device macsec1 entered promiscuous mode [ 641.775780][T12030] device dummy0 left promiscuous mode [ 642.081474][ T4349] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 642.332627][ T4349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.346039][ T4349] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 642.378632][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.409385][ T4349] usb 2-1: config 0 descriptor?? [ 643.042100][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.050753][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.073910][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.208689][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.301190][T12053] fuse: Unknown parameter 'user_id00000000000000000000' [ 645.037591][ T4349] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 645.063944][ T4349] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 645.124411][ T4349] usb 2-1: USB disconnect, device number 67 [ 645.130431][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 645.155860][T12069] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 645.681336][ T4349] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 645.726076][ T4322] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 645.927899][ T4349] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 645.971457][ T4322] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 645.972718][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.980621][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.041513][ T4322] usb 1-1: config 0 descriptor?? [ 646.211704][ T4349] usb 2-1: Product: syz [ 646.215955][ T4349] usb 2-1: Manufacturer: syz [ 646.220606][ T4349] usb 2-1: SerialNumber: syz [ 646.260619][ T4349] usb 2-1: config 0 descriptor?? [ 646.499995][ T4322] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 646.509801][ T4322] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 646.519175][ T4322] [drm:udl_init] *ERROR* Selecting channel failed [ 646.582086][ T4322] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 646.590225][ T4322] [drm] Initialized udl on minor 2 [ 646.597434][ T4322] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 646.605447][ T4349] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 646.606169][ T4322] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 646.652426][ T26] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 646.682308][ T4322] usb 1-1: USB disconnect, device number 66 [ 646.688670][ T26] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 646.841550][ T26] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 647.008028][T12015] Set syz1 is full, maxelem 65536 reached [ 648.016606][ T4349] gspca_stk1135: reg_w 0xf err -71 [ 648.047370][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.146411][ T4349] gspca_stk1135: Sensor write failed [ 648.165307][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.192986][ T4349] gspca_stk1135: Sensor write failed [ 648.216699][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.235631][ T4349] gspca_stk1135: Sensor read failed [ 648.241006][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.266557][ T4349] gspca_stk1135: Sensor read failed [ 648.278410][ T4349] gspca_stk1135: Detected sensor type unknown (0x0) [ 648.285618][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.292508][ T4349] gspca_stk1135: Sensor read failed [ 648.298906][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.306091][ T4349] gspca_stk1135: Sensor read failed [ 648.314912][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.328387][ T4349] gspca_stk1135: Sensor write failed [ 648.341552][ T4349] gspca_stk1135: serial bus timeout: status=0x00 [ 648.362509][ T4349] gspca_stk1135: Sensor write failed [ 648.371144][ T4349] stk1135: probe of 2-1:0.0 failed with error -71 [ 648.382590][ T4349] usb 2-1: USB disconnect, device number 68 [ 651.993783][ T8008] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 652.246170][ T8008] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 652.270470][ T8008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.302881][ T8008] usb 5-1: config 0 descriptor?? [ 652.341583][ T22] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 652.542411][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 652.555047][ T22] usb 2-1: config 0 has no interface number 0 [ 652.566055][ T22] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 652.580215][ T22] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 652.595251][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 652.607355][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.638167][ T22] usb 2-1: config 0 descriptor?? [ 652.646110][T12153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 652.710693][ T22] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 652.776518][ T8008] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 652.802740][ T8008] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 652.817127][ T8008] [drm:udl_init] *ERROR* Selecting channel failed [ 652.892131][ T8008] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 652.900354][ T8008] [drm] Initialized udl on minor 2 [ 652.916150][ T8008] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.928223][ T8008] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 652.963068][ T8008] usb 5-1: USB disconnect, device number 69 [ 652.977201][ T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 652.997391][ T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 653.011989][ T22] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 653.090000][ T6017] usb 2-1: USB disconnect, device number 69 [ 654.030396][T12179] nvme_fabrics: missing parameter 'transport=%s' [ 654.062917][T12179] nvme_fabrics: missing parameter 'nqn=%s' [ 655.107268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 657.114468][T12216] kvm: pic: non byte read [ 657.119214][T12216] kvm: pic: non byte write [ 657.128443][T12222] overlayfs: failed to resolve './file1': -2 [ 657.270838][T12216] kvm: pic: non byte read [ 657.280810][T12216] kvm: pic: non byte write [ 657.312295][T12216] kvm: pic: non byte read [ 657.372255][T12216] kvm: pic: non byte write [ 657.377656][T12216] kvm: pic: non byte read [ 657.394055][T12216] kvm: pic: non byte write [ 657.398757][T12216] kvm: pic: non byte read [ 657.786434][T12216] kvm: pic: non byte write [ 660.584661][ T7] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 660.751877][ T7] usb 4-1: device descriptor read/64, error -71 [ 661.041463][ T7] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 661.214917][ T7] usb 4-1: device descriptor read/64, error -71 [ 661.351709][ T7] usb usb4-port1: attempt power cycle [ 661.781729][ T7] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 661.832078][ T7] usb 4-1: device descriptor read/8, error -71 [ 662.112830][ T7] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 662.162437][ T7] usb 4-1: device descriptor read/8, error -71 [ 662.235586][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 662.248570][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.261144][T12233] device dummy0 entered promiscuous mode [ 662.267729][T12233] device macsec1 entered promiscuous mode [ 662.278934][T12233] device dummy0 left promiscuous mode [ 662.291533][ T7] usb usb4-port1: unable to enumerate USB device [ 663.866706][T12197] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 663.874568][ T7] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 664.099052][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.112737][T12197] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 664.123161][T12197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.134719][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 664.144529][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 664.153572][ T7] usb 5-1: Product: syz [ 664.158929][T12197] usb 3-1: config 0 descriptor?? [ 664.166718][ T7] usb 5-1: Manufacturer: syz [ 664.173746][T12197] cp210x 3-1:0.0: cp210x converter detected [ 664.180811][ T7] usb 5-1: SerialNumber: syz [ 664.277313][ T4322] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 664.397717][T12297] Set syz1 is full, maxelem 65536 reached [ 664.412937][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 664.477012][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 664.485736][ T4322] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 664.516674][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.544329][ T4322] usb 1-1: config 0 descriptor?? [ 664.563563][ T4322] gspca_main: sunplus-2.14.0 probing 041e:400b [ 664.592948][T12197] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 664.606524][T12197] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 664.628224][T12197] usb 3-1: cp210x converter now attached to ttyUSB0 [ 664.809122][ T7] usb 3-1: USB disconnect, device number 37 [ 664.838004][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 664.857106][ T7] cp210x 3-1:0.0: device disconnected [ 665.527842][ T4322] gspca_sunplus: reg_w_riv err -71 [ 665.533345][ T4322] sunplus: probe of 1-1:0.0 failed with error -71 [ 665.563964][ T4322] usb 1-1: USB disconnect, device number 67 [ 665.695416][ T7] usb 5-1: USB disconnect, device number 70 [ 665.722455][ T7] usblp0: removed [ 666.626478][T12355] autofs4:pid:12355:autofs_fill_super: called with bogus options [ 668.294439][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 668.384010][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.395262][T12364] device dummy0 entered promiscuous mode [ 668.401009][T12364] device macsec1 entered promiscuous mode [ 668.408858][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 668.450778][T12364] device dummy0 left promiscuous mode [ 668.649796][T12380] fuse: Bad value for 'fd' [ 668.725468][ T22] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 668.741590][ T26] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 668.917872][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.937475][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 668.944726][ T26] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 668.967432][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.989798][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 669.009474][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 669.017779][ T26] usb 1-1: config 0 has no interface number 0 [ 669.031344][ T26] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 669.042291][ T22] usb 5-1: Product: syz [ 669.046529][ T22] usb 5-1: Manufacturer: syz [ 669.051171][ T22] usb 5-1: SerialNumber: syz [ 669.061321][ T26] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.103338][ T26] usb 1-1: config 0 interface 12 has no altsetting 0 [ 669.123645][ T26] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 669.141360][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.159798][ T26] usb 1-1: Product: syz [ 669.164183][ T26] usb 1-1: Manufacturer: syz [ 669.168865][ T26] usb 1-1: SerialNumber: syz [ 669.192308][ T26] usb 1-1: config 0 descriptor?? [ 669.215813][ T26] f81534 1-1:0.12: required endpoints missing [ 669.290968][ T22] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 669.552435][ T26] usb 5-1: USB disconnect, device number 71 [ 669.570379][T12371] usblp0: removed [ 670.801993][T12414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.901559][ T22] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 671.051378][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 671.084016][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.113837][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 671.131311][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 671.139486][ T22] usb 4-1: Product: syz [ 671.151280][ T22] usb 4-1: Manufacturer: syz [ 671.155933][ T22] usb 4-1: SerialNumber: syz [ 671.233739][ T7] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 671.247553][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.266899][ T7] usb 3-1: config 0 descriptor?? [ 671.387894][ T22] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 671.489158][ T7] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 671.505047][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 671.558597][ T22] usb 1-1: USB disconnect, device number 68 [ 671.660015][T12197] usb 4-1: USB disconnect, device number 51 [ 671.681006][T12418] usblp0: removed [ 671.699235][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 671.740543][ T7] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 671.760433][ T7] [drm] Initialized udl on minor 2 [ 671.788525][ T7] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 672.270618][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 672.313684][ T7] usb 3-1: USB disconnect, device number 38 [ 672.330249][T12197] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 672.346171][T12197] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 672.369723][T12197] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 673.842531][T12197] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 673.977438][ T7] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 674.041678][T12197] usb 4-1: Using ep0 maxpacket: 32 [ 674.049963][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 674.050052][ T27] audit: type=1804 audit(1782458290.474:52): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2677" name="/newroot/522/file1" dev="fuse" ino=1 res=1 errno=0 [ 674.082398][T12197] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 674.108558][T12197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.112306][ T27] audit: type=1800 audit(1782458290.514:53): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2677" name="/" dev="fuse" ino=1 res=0 errno=0 [ 674.143587][T12197] usb 4-1: config 0 descriptor?? [ 674.153783][T12197] gspca_main: sunplus-2.14.0 probing 041e:400b [ 674.174288][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.184010][ T27] audit: type=1804 audit(1782458290.524:54): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2677" name="/newroot/522/file1" dev="fuse" ino=1 res=1 errno=0 [ 674.217169][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 674.242818][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 674.252964][ T7] usb 2-1: Product: syz [ 674.257851][ T7] usb 2-1: Manufacturer: syz [ 674.263133][ T7] usb 2-1: SerialNumber: syz [ 674.274023][ T27] audit: type=1800 audit(1782458290.524:55): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2677" name="/" dev="fuse" ino=1 res=0 errno=0 [ 674.478049][ T7] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 675.523154][T12197] gspca_sunplus: reg_w_riv err -110 [ 675.693425][T12197] sunplus: probe of 4-1:0.0 failed with error -110 [ 676.084404][ T7] usb 2-1: USB disconnect, device number 70 [ 676.108907][ T7] usblp0: removed [ 676.431714][T12197] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 676.492634][ T22] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 676.624139][T12197] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 676.634255][T12197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.657127][T12197] usb 5-1: config 0 descriptor?? [ 677.213690][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.230822][T12197] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 677.247243][T12197] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 677.266127][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 677.310737][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 677.349812][ T22] usb 1-1: Product: syz [ 677.364407][ T22] usb 1-1: Manufacturer: syz [ 677.387222][ T22] usb 1-1: SerialNumber: syz [ 677.429998][T12197] [drm:udl_init] *ERROR* Selecting channel failed [ 677.479386][T12197] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 677.503117][T12197] [drm] Initialized udl on minor 2 [ 677.518350][T12197] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 677.539991][T12197] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 677.570475][T12197] usb 5-1: USB disconnect, device number 72 [ 677.588856][ T7] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 677.605715][ T7] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 677.628054][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 677.643450][ T7] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 677.672901][ T22] usb 4-1: USB disconnect, device number 52 [ 677.885313][ T127] usb 1-1: USB disconnect, device number 69 [ 677.940072][T12485] usblp0: removed [ 678.436936][T12511] device syzkaller0 entered promiscuous mode [ 678.831739][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 679.027072][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 679.038336][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 679.112495][ T7] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 679.146271][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.201379][ T127] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 679.404806][ T127] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.469991][ T127] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 679.534725][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 679.604294][ T127] usb 4-1: Product: syz [ 679.632780][ T127] usb 4-1: Manufacturer: syz [ 679.664411][ T127] usb 4-1: SerialNumber: syz [ 679.972818][ T127] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 679.989269][ T7] usb 3-1: Product: syz [ 679.993596][ T7] usb 3-1: Manufacturer: syz [ 679.998478][ T7] usb 3-1: SerialNumber: syz [ 680.219441][ T7] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 680.248039][ T127] usb 4-1: USB disconnect, device number 53 [ 680.267363][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 680.278548][T12523] usblp0: removed [ 680.309866][ T7] usb_set_interface error [ 680.317960][ T7] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 680.359682][ T7] usb 3-1: USB disconnect, device number 39 [ 680.592354][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.003933][T12548] ip6t_srh: unknown srh invflags 4000 [ 681.581351][ T4825] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 681.783168][ T4825] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 681.814185][ T4825] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 681.845696][ T4825] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 681.884577][ T4825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.920428][ T4825] usb 4-1: Product: syz [ 681.940363][ T4825] usb 4-1: Manufacturer: syz [ 681.959079][ T4825] usb 4-1: SerialNumber: syz [ 681.989053][ T4825] usb 4-1: config 0 descriptor?? [ 682.320300][ T4825] mos7840 4-1:0.0: required endpoints missing [ 682.331876][ T6017] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 682.782787][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.830222][ T6017] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 682.917526][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.065185][ T6017] usb 1-1: config 0 descriptor?? [ 683.279085][ T4825] usb 4-1: USB disconnect, device number 54 [ 683.374988][ T6017] usbhid 1-1:0.0: can't add hid device: -71 [ 683.381006][ T6017] usbhid: probe of 1-1:0.0 failed with error -71 [ 683.480743][ T6017] usb 1-1: USB disconnect, device number 70 [ 683.599242][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 683.616638][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 683.961404][ T6017] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 684.210464][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.286873][ T6017] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 684.330178][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.380243][ T6017] usb 1-1: config 0 descriptor?? [ 684.753262][T12610] capability: warning: `syz.1.2722' uses 32-bit capabilities (legacy support in use) [ 685.224055][ T6017] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 685.288250][ T6017] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input71 [ 685.654260][ T6017] usb 1-1: USB disconnect, device number 71 [ 685.660260][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 685.972092][ T7] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 685.981409][ T127] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 686.172348][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 686.177601][ T127] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 686.189085][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.197223][ T127] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 686.231090][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.232422][ T127] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 686.260047][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.269433][ T127] usb 5-1: Product: syz [ 686.280563][ T127] usb 5-1: Manufacturer: syz [ 686.286685][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.291673][ T127] usb 5-1: SerialNumber: syz [ 686.317272][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.318137][ T127] usb 5-1: config 0 descriptor?? [ 686.336944][ T7] usb 4-1: Product: syz [ 686.351616][ T7] usb 4-1: Manufacturer: syz [ 686.356289][ T7] usb 4-1: SerialNumber: syz [ 686.566199][ T127] mos7840 5-1:0.0: required endpoints missing [ 686.586176][ T7] usb 4-1: 0:2 : does not exist [ 686.608726][ T127] usb 5-1: USB disconnect, device number 73 [ 686.618943][ T7] usb 4-1: USB disconnect, device number 55 [ 686.801328][ T4349] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 686.865232][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.986879][ T8008] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 686.992506][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 687.007178][ T4349] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 687.017216][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.037355][ T4349] usb 1-1: config 0 descriptor?? [ 687.047584][ T4349] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 687.171338][ T8008] usb 3-1: Using ep0 maxpacket: 32 [ 687.178783][ T8008] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 687.206942][ T8008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.235284][ T8008] usb 3-1: config 0 descriptor?? [ 687.255003][ T8008] gspca_main: sunplus-2.14.0 probing 041e:400b [ 687.453374][ T4349] gspca_sonixj: reg_r err -32 [ 687.542906][ T4349] sonixj: probe of 1-1:0.0 failed with error -32 [ 688.132405][ T8008] gspca_sunplus: reg_w_riv err -110 [ 688.138136][ T8008] sunplus: probe of 3-1:0.0 failed with error -110 [ 688.257387][T12650] autofs4:pid:12650:autofs_fill_super: called with bogus options [ 688.962421][ T8008] usb 3-1: USB disconnect, device number 40 [ 689.869735][T12665] usb 1-1: USB disconnect, device number 72 [ 690.341384][T12665] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 690.451826][ T8008] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 690.565956][T12665] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 690.666614][T12665] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 690.709517][ T8008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.731422][ T8008] usb 5-1: config 0 has no interfaces? [ 690.737445][ T8008] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 690.747695][ T8008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.799576][ T8008] usb 5-1: config 0 descriptor?? [ 690.916104][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.922750][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.973661][T12665] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 691.101771][T12665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.345326][T12665] usb 1-1: Product: syz [ 691.370246][T12665] usb 1-1: Manufacturer: syz [ 691.648669][T12687] overlayfs: overlapping lowerdir path [ 691.679502][T12665] usb 1-1: SerialNumber: syz [ 691.703493][T12665] usb 1-1: config 0 descriptor?? [ 691.954111][T12665] mos7840 1-1:0.0: required endpoints missing [ 692.001851][T12665] usb 1-1: USB disconnect, device number 73 [ 692.123944][ T1179] usb 5-1: USB disconnect, device number 74 [ 692.512305][T12701] autofs4:pid:12701:autofs_fill_super: called with bogus options [ 694.020120][T12717] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 694.361612][ T6017] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 694.385124][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 694.551343][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 694.558372][ T6017] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 694.594563][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.623161][ T6017] usb 5-1: config 0 descriptor?? [ 694.642526][ T6017] gspca_main: sunplus-2.14.0 probing 041e:400b [ 694.691442][ T1179] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 694.903584][ T1179] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 694.915087][T12197] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 694.978194][ T1179] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 694.989629][ T1179] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 694.999188][ T1179] usb 3-1: Manufacturer: syz [ 695.004352][ T1179] usb 3-1: SerialNumber: syz [ 695.158474][T12197] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 695.352703][ T6017] gspca_sunplus: reg_w_riv err -110 [ 695.369833][ T6017] sunplus: probe of 5-1:0.0 failed with error -110 [ 695.397382][ T1179] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 695.424497][T12197] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 695.670364][ T1179] usb 3-1: USB disconnect, device number 41 [ 695.683485][T12197] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 695.734382][T12197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.770872][T12197] usb 1-1: Product: syz [ 695.787197][T12197] usb 1-1: Manufacturer: syz [ 695.807007][T12197] usb 1-1: SerialNumber: syz [ 695.828216][T12197] usb 1-1: config 0 descriptor?? [ 695.945058][ T8008] usb 5-1: USB disconnect, device number 75 [ 696.068330][T12197] mos7840 1-1:0.0: required endpoints missing [ 696.081671][T12197] usb 1-1: USB disconnect, device number 74 [ 696.227724][T12753] binder: BINDER_SET_CONTEXT_MGR already set [ 696.247103][T12753] binder: 12746:12753 ioctl 4018620d 200000004a80 returned -16 [ 696.291552][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 696.390602][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 696.705020][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 696.725560][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 696.763801][T12777] overlayfs: failed to resolve './file1': -2 [ 697.042742][ T8008] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 697.301769][ T8008] usb 1-1: Using ep0 maxpacket: 8 [ 697.427805][ T8008] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 697.851995][ T8008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.886141][ T8008] usb 1-1: Product: syz [ 697.905785][ T8008] usb 1-1: Manufacturer: syz [ 697.929232][ T8008] usb 1-1: SerialNumber: syz [ 697.998274][ T8008] usb 1-1: config 0 descriptor?? [ 698.248148][ T8008] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 698.406846][ T6013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.511631][ T6017] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 698.624917][ T6013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.719254][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 698.750692][T12801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.769941][T12801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.779436][T12801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.789894][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.806254][T12801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.814835][T12801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 698.824194][T12801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.906921][ T6017] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 699.038155][ T6017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.102893][ T6017] usb 2-1: config 0 descriptor?? [ 699.120347][ T6013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.293221][ T6013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.377040][T12808] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 699.519317][ T6017] usbhid 2-1:0.0: can't add hid device: -71 [ 699.539279][ T6017] usbhid: probe of 2-1:0.0 failed with error -71 [ 699.558723][ T6017] usb 2-1: USB disconnect, device number 71 [ 699.631395][T12197] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 699.721757][T12800] chnl_net:caif_netlink_parms(): no params data found [ 699.849070][T12197] usb 5-1: Using ep0 maxpacket: 8 [ 699.859197][T12197] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 699.888035][T12197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 19114, setting to 1024 [ 699.888307][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.901173][T12197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 699.917205][T12197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 699.928943][T12197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 699.939956][T12197] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.958018][T12197] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.959450][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.981326][ T8065] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 699.981792][T12197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.001391][T12800] device bridge_slave_0 entered promiscuous mode [ 700.053055][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.074173][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.096119][ T8008] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.113720][ T8008] dvbdev: DVB: registering new adapter (Terratec H7) [ 700.125345][T12800] device bridge_slave_1 entered promiscuous mode [ 700.142869][ T8008] usb 1-1: media controller created [ 700.192227][ T8065] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 700.211343][ T8065] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 700.229664][T12197] usb 5-1: usb_control_msg returned -32 [ 700.237868][T12197] usbtmc 5-1:16.0: can't read capabilities [ 700.254719][T12827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 700.274461][ T8065] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 700.282489][T12197] usb 5-1: USB disconnect, device number 76 [ 700.294016][T12827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.305805][ T8008] usb read operation failed. (-71) [ 700.325988][ T8008] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 700.335838][T12827] device dummy0 entered promiscuous mode [ 700.338625][ T8065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.362589][ T8008] usb 1-1: USB disconnect, device number 75 [ 700.380367][ T8065] usb 4-1: Product: syz [ 700.385701][ T8065] usb 4-1: Manufacturer: syz [ 700.386952][T12827] device macsec1 entered promiscuous mode [ 700.390336][ T8065] usb 4-1: SerialNumber: syz [ 700.404811][ T8065] usb 4-1: config 0 descriptor?? [ 700.428253][T12827] device dummy0 left promiscuous mode [ 700.533599][T12800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.557343][T12800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.623426][T12800] team0: Port device team_slave_0 added [ 700.639310][ T8065] mos7840 4-1:0.0: required endpoints missing [ 700.684764][ T8065] usb 4-1: USB disconnect, device number 56 [ 700.717524][T12800] team0: Port device team_slave_1 added [ 700.764302][T12800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.779416][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.816262][T12800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.879163][T12800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.889266][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.919569][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 700.972168][T12800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.048049][T12836] binder: BINDER_SET_CONTEXT_MGR already set [ 701.063981][T12800] device hsr_slave_0 entered promiscuous mode [ 701.084071][T12836] binder: 12834:12836 ioctl 4018620d 200000004a80 returned -16 [ 701.092615][T12800] device hsr_slave_1 entered promiscuous mode [ 701.126512][T12800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.151373][T12800] Cannot create hsr debugfs directory [ 701.311460][ T4319] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 701.484105][ T4319] usb 1-1: device descriptor read/64, error -71 [ 701.535914][T12851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 701.785419][ T4319] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 701.941400][ T4319] usb 1-1: device descriptor read/64, error -71 [ 702.061655][ T4319] usb usb1-port1: attempt power cycle [ 702.481379][ T4319] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 702.595473][ T4319] usb 1-1: device descriptor read/8, error -71 [ 702.872215][ T6013] device hsr_slave_0 left promiscuous mode [ 702.883439][ T6013] device hsr_slave_1 left promiscuous mode [ 702.921704][ T6013] batman_adv: batadv0: Interface deactivated: dummy0 [ 702.936235][ T6013] batman_adv: batadv0: Removing interface: dummy0 [ 702.954136][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.974953][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.982381][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 702.990936][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.998551][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.013529][ T6013] device bridge_slave_1 left promiscuous mode [ 703.022368][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.031881][ T4319] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 703.043351][ T6013] device bridge_slave_0 left promiscuous mode [ 703.053335][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.066567][ T4319] usb 1-1: device descriptor read/8, error -71 [ 703.118473][ T6013] device veth1_macvtap left promiscuous mode [ 703.126041][ T6013] device veth0_macvtap left promiscuous mode [ 703.133164][ T6013] device veth0_vlan left promiscuous mode [ 703.151519][ T26] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 703.195727][ T4319] usb usb1-port1: unable to enumerate USB device [ 703.342155][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 703.350507][ T26] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 703.373743][ T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 19114, setting to 1024 [ 703.385482][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 703.396084][ T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 703.411647][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 703.424991][ T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.438356][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 703.451341][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.689343][ T26] usb 4-1: usb_control_msg returned -32 [ 703.709199][ T26] usbtmc 4-1:16.0: can't read capabilities [ 703.732927][ T26] usb 4-1: USB disconnect, device number 57 [ 704.218448][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 704.338075][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 704.410694][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.480009][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.641456][ T8008] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 704.834209][ T8008] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 704.847107][ T8008] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 704.853616][ T6013] bond0 (unregistering): Released all slaves [ 704.869976][ T8008] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 704.895572][ T8008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.908685][ T8008] usb 4-1: Product: syz [ 704.916551][ T8008] usb 4-1: Manufacturer: syz [ 704.924592][ T8008] usb 4-1: SerialNumber: syz [ 704.936079][ T8008] usb 4-1: config 0 descriptor?? [ 704.997647][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 705.061553][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 705.160639][ T8008] mos7840 4-1:0.0: required endpoints missing [ 705.197527][ T8008] usb 4-1: USB disconnect, device number 58 [ 705.436545][T12904] binder: BINDER_SET_CONTEXT_MGR already set [ 705.443420][T12904] binder: 12897:12904 ioctl 4018620d 200000004a80 returned -16 [ 706.009410][T12800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 706.061121][T12800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 706.102900][T12800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 706.138256][T12800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 706.181303][T12665] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 706.358631][T12665] usb 1-1: device descriptor read/64, error -71 [ 706.388561][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.404294][ T7019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.475628][ T7019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.483074][ T8008] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 706.527030][T12800] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.566416][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 706.587024][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.610295][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.617513][ T4867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.644037][T12665] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 706.686999][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.699381][ T8008] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 706.709721][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 706.745912][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 706.752364][ T8008] usb 5-1: config 1 interface 0 has no altsetting 0 [ 706.771758][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.778921][ T4867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.787067][ T8008] usb 5-1: string descriptor 0 read error: -22 [ 706.813799][ T8008] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 706.817332][T12665] usb 1-1: device descriptor read/64, error -71 [ 706.842356][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 706.851462][ T8008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.868477][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 706.903986][T12926] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 706.919237][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.946991][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.961078][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.976792][T12665] usb usb1-port1: attempt power cycle [ 706.984967][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 707.006522][T12800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.130989][T12800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.141521][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 707.222532][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 707.231126][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 707.272463][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 707.313105][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 707.332492][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 707.353134][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 707.411942][T12665] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 707.462743][T12665] usb 1-1: device descriptor read/8, error -71 [ 707.741605][T12665] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 707.792820][T12665] usb 1-1: device descriptor read/8, error -71 [ 707.911945][T12665] usb usb1-port1: unable to enumerate USB device [ 709.904013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.925336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.949823][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.078655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.129035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.139036][ T8008] usbhid 5-1:1.0: can't add hid device: -71 [ 710.147976][ T8008] usbhid: probe of 5-1:1.0 failed with error -71 [ 710.197607][ T8008] usb 5-1: USB disconnect, device number 77 [ 710.249363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 710.275555][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 710.305664][T12800] device veth0_vlan entered promiscuous mode [ 710.316223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 710.346174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 710.388625][T12800] device veth1_vlan entered promiscuous mode [ 710.488687][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.509839][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.554922][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.578269][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 710.596728][T12800] device veth0_macvtap entered promiscuous mode [ 710.615240][T12800] device veth1_macvtap entered promiscuous mode [ 710.689269][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.751275][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.825844][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.838907][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.866227][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.967996][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.816759][T12800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.041570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.059744][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 713.140926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.151747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.165001][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.180338][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.215126][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.295605][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.335145][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.377953][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.418183][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.471343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.496962][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 714.016961][T12800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.649829][T12800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.756721][T12800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.837132][T12800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.447874][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.521270][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.685465][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 716.730791][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.769125][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.779528][ T27] audit: type=1804 audit(1782458333.204:56): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2836" name="/newroot/551/file1" dev="fuse" ino=1 res=1 errno=0 [ 716.835086][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.301312][T13041] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 717.548338][ T27] audit: type=1800 audit(1782458333.974:57): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2836" name="/" dev="fuse" ino=1 res=0 errno=0 [ 717.612360][T13041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.384686][T13041] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 718.394548][T13041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.405442][T13041] usb 3-1: config 0 descriptor?? [ 718.620761][T13041] usbhid 3-1:0.0: can't add hid device: -71 [ 718.648386][T13041] usbhid: probe of 3-1:0.0 failed with error -71 [ 718.699441][T13041] usb 3-1: USB disconnect, device number 42 [ 718.926511][T13082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.191759][T13041] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 719.387300][T13041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.441453][T13041] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 719.450705][T13041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.592793][T13041] usb 3-1: config 0 descriptor?? [ 720.434986][T13041] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 720.550251][T13041] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 720.891318][ T26] usb 3-1: USB disconnect, device number 43 [ 720.891458][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 720.943730][T13041] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 720.982778][ T4320] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 721.173387][T13041] usb 2-1: no configurations [ 721.188629][T13041] usb 2-1: can't read configurations, error -22 [ 721.211358][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 721.452067][T13041] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 721.704792][T13041] usb 2-1: no configurations [ 721.724144][T13041] usb 2-1: can't read configurations, error -22 [ 721.825085][T13041] usb usb2-port1: attempt power cycle [ 721.927613][ T4320] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 721.937017][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.945286][ T4320] usb 4-1: Product: syz [ 721.949670][ T4320] usb 4-1: Manufacturer: syz [ 721.954422][ T4320] usb 4-1: SerialNumber: syz [ 721.970271][ T4320] usb 4-1: config 0 descriptor?? [ 722.186214][ T4320] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 722.354897][T13041] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 722.412859][T13041] usb 2-1: no configurations [ 722.417542][T13041] usb 2-1: can't read configurations, error -22 [ 722.601443][T13041] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 722.642642][T13041] usb 2-1: no configurations [ 722.647410][T13041] usb 2-1: can't read configurations, error -22 [ 722.673340][T13041] usb usb2-port1: unable to enumerate USB device [ 722.929362][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.058638][ T4320] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 724.139767][ T4320] dvbdev: DVB: registering new adapter (Terratec H7) [ 724.154326][ T4320] usb 4-1: media controller created [ 724.237451][ T4320] usb read operation failed. (-71) [ 724.246738][ T4320] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 724.309236][ T4320] usb 4-1: USB disconnect, device number 59 [ 726.021326][ T8065] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 726.041310][ T4321] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 726.227718][ T8065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.241268][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 726.248315][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.277228][ T8065] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 726.293794][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.311325][ T8065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.323991][ T4321] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.350261][ T8065] usb 3-1: config 0 descriptor?? [ 726.370014][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.399294][ T4321] usb 4-1: Product: syz [ 726.404120][ T4321] usb 4-1: Manufacturer: syz [ 726.408823][ T4321] usb 4-1: SerialNumber: syz [ 726.575048][ T4320] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 726.590052][ T8065] usbhid 3-1:0.0: can't add hid device: -71 [ 726.597633][ T8065] usbhid: probe of 3-1:0.0 failed with error -71 [ 726.633034][ T8065] usb 3-1: USB disconnect, device number 44 [ 726.647100][ T4321] usb 4-1: 0:2 : does not exist [ 726.652311][ T4321] usb 4-1: unit 6 not found! [ 726.718716][ T4321] usb 4-1: USB disconnect, device number 60 [ 726.782252][ T4320] usb 5-1: no configurations [ 726.787171][ T4320] usb 5-1: can't read configurations, error -22 [ 726.961549][ T4320] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 726.971561][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.152182][ T4320] usb 5-1: no configurations [ 727.156977][ T4320] usb 5-1: can't read configurations, error -22 [ 727.171318][ T8065] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 727.196097][ T4320] usb usb5-port1: attempt power cycle [ 727.393043][ T8065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.439125][ T8065] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 727.479017][ T8065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.548062][ T8065] usb 3-1: config 0 descriptor?? [ 727.641493][ T4320] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 727.750506][ T4320] usb 5-1: no configurations [ 727.819257][ T4320] usb 5-1: can't read configurations, error -22 [ 728.102109][ T4320] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 728.179887][ T4320] usb 5-1: no configurations [ 728.291951][ T4320] usb 5-1: can't read configurations, error -22 [ 728.403445][ T4320] usb usb5-port1: unable to enumerate USB device [ 728.443241][ T8065] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 728.616759][ T8065] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input73 [ 729.358828][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 729.377037][ T8065] usb 3-1: USB disconnect, device number 45 [ 730.291329][T12665] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 730.462211][ T4320] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 730.775046][ T4320] usb 5-1: no configurations [ 730.843713][ T4320] usb 5-1: can't read configurations, error -22 [ 730.981720][T12665] usb 4-1: Using ep0 maxpacket: 32 [ 730.989305][T12665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.011346][ T4320] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 731.050488][T12665] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.111330][T12665] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 731.144997][T12665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.184878][T12665] usb 4-1: config 0 descriptor?? [ 731.192033][T13277] overlayfs: missing 'lowerdir' [ 731.215530][T12665] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 731.224184][ T4320] usb 5-1: no configurations [ 731.228833][ T4320] usb 5-1: can't read configurations, error -22 [ 731.251896][ T4320] usb usb5-port1: attempt power cycle [ 731.682611][ T4320] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 731.723284][ T4320] usb 5-1: no configurations [ 731.728049][ T4320] usb 5-1: can't read configurations, error -22 [ 731.891547][ T4320] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 731.922680][ T4320] usb 5-1: no configurations [ 731.927458][ T4320] usb 5-1: can't read configurations, error -22 [ 731.963230][ T4320] usb usb5-port1: unable to enumerate USB device [ 732.441527][ T4320] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 732.633893][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.657199][ T4320] usb 2-1: config 0 has no interfaces? [ 732.685054][ T4320] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 732.715295][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.746404][ T4320] usb 2-1: Product: syz [ 732.750660][ T4320] usb 2-1: Manufacturer: syz [ 732.779251][ T4320] usb 2-1: SerialNumber: syz [ 732.832778][ T4320] usb 2-1: config 0 descriptor?? [ 732.885812][T12197] usb 4-1: USB disconnect, device number 61 [ 734.545366][T13327] overlayfs: missing 'lowerdir' [ 734.681661][T12197] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 734.883380][T12197] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 734.901923][T12197] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 734.934850][T12197] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.967097][T12197] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 734.990559][T12197] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 735.013410][T12197] usb 4-1: Product: syz [ 735.051464][T12197] usb 4-1: Manufacturer: syz [ 735.068555][T12197] usb 4-1: SerialNumber: syz [ 735.106022][T12197] usb 4-1: config 0 descriptor?? [ 735.138189][T12197] hub 4-1:0.0: bad descriptor, ignoring hub [ 735.159233][T12197] hub: probe of 4-1:0.0 failed with error -5 [ 735.197780][T12197] usb 4-1: selecting invalid altsetting 0 [ 735.317278][ T8065] usb 2-1: USB disconnect, device number 76 [ 736.127003][T13357] autofs4:pid:13357:autofs_fill_super: called with bogus options [ 736.152095][T12665] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 737.275017][T13363] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 737.292048][T12665] usb 5-1: Using ep0 maxpacket: 32 [ 737.300300][T12665] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.331952][T12665] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.363320][T12665] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 737.373148][T12665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.385518][T12665] usb 5-1: config 0 descriptor?? [ 737.398621][T12665] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 737.765805][ T8065] usb 4-1: USB disconnect, device number 62 [ 737.929546][T13375] device syzkaller0 entered promiscuous mode [ 738.172300][T13381] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 738.180270][T13381] netlink: 'syz.2.2914': attribute type 2 has an invalid length. [ 739.159707][T12197] usb 5-1: USB disconnect, device number 86 [ 739.920898][ T8065] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 740.031407][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 740.141355][ T8065] usb 1-1: Using ep0 maxpacket: 32 [ 740.947947][T13410] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 740.966283][ T8065] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 740.974638][ T8065] usb 1-1: config 0 has no interface number 0 [ 740.980784][ T8065] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.991705][ T8065] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 741.006938][ T8065] usb 1-1: config 0 interface 12 has no altsetting 0 [ 741.026114][ T8065] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 741.035435][ T8065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.041010][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 741.043554][ T8065] usb 1-1: Product: syz [ 741.043575][ T8065] usb 1-1: Manufacturer: syz [ 741.043593][ T8065] usb 1-1: SerialNumber: syz [ 741.077656][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.087060][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 741.097314][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 741.106207][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 741.114535][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 741.122821][ T8065] usb 1-1: config 0 descriptor?? [ 741.130329][ T8065] f81534 1-1:0.12: unsupported endpoint max packet size [ 741.593941][T13426] overlayfs: missing 'lowerdir' [ 742.910323][ T8008] usb 1-1: USB disconnect, device number 84 [ 743.061211][ C0] sched: RT throttling activated [ 743.221434][T12801] Bluetooth: hci2: command 0x0409 tx timeout [ 743.345488][T13407] chnl_net:caif_netlink_parms(): no params data found [ 744.324717][T13458] device syzkaller0 entered promiscuous mode [ 744.455393][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.468096][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.505398][T13407] device bridge_slave_0 entered promiscuous mode [ 744.556052][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.600932][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.664949][T13407] device bridge_slave_1 entered promiscuous mode [ 744.894094][T13464] ================================================================== [ 744.902384][T13464] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 744.909729][T13464] Read of size 8 at addr ffff8881401a9818 by task syz.2.2935/13464 [ 744.917680][T13464] [ 744.920119][T13464] CPU: 0 PID: 13464 Comm: syz.2.2935 Not tainted syzkaller #0 [ 744.927664][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.937767][T13464] Call Trace: [ 744.941141][T13464] [ 744.944168][T13464] dump_stack_lvl+0x188/0x24e [ 744.948977][T13464] ? read_lock_is_recursive+0x10/0x10 [ 744.954452][T13464] ? show_regs_print_info+0x12/0x12 [ 744.959691][T13464] ? load_image+0x410/0x410 [ 744.964261][T13464] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 744.969825][T13464] ? __virt_addr_valid+0x188/0x540 [ 744.975079][T13464] ? __virt_addr_valid+0x467/0x540 [ 744.980299][T13464] ? dvb_device_open+0xc5/0x360 [ 744.985202][T13464] print_report+0xa8/0x210 [ 744.989758][T13464] kasan_report+0x10b/0x140 [ 744.994431][T13464] ? dvb_device_open+0xc5/0x360 [ 744.999324][T13464] dvb_device_open+0xc5/0x360 [ 745.004050][T13464] chrdev_open+0x585/0x5f0 [ 745.008583][T13464] ? cd_forget+0x160/0x160 [ 745.013053][T13464] ? fsnotify_perm+0x39b/0x550 [ 745.018019][T13464] ? cd_forget+0x160/0x160 [ 745.022477][T13464] do_dentry_open+0x7dd/0x10b0 [ 745.027355][T13464] path_openat+0x2674/0x2f10 [ 745.032014][T13464] ? verify_lock_unused+0x140/0x140 [ 745.037271][T13464] ? do_sys_openat2+0xdd/0x4f0 [ 745.042099][T13464] ? do_filp_open+0x420/0x420 [ 745.046825][T13464] do_filp_open+0x1ee/0x420 [ 745.051380][T13464] ? vfs_tmpfile+0x470/0x470 [ 745.056021][T13464] ? _raw_spin_unlock+0x24/0x40 [ 745.060945][T13464] ? alloc_fd+0x590/0x640 [ 745.065411][T13464] do_sys_openat2+0x14b/0x4f0 [ 745.070150][T13464] ? do_sys_open+0xe0/0xe0 [ 745.074626][T13464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 745.080665][T13464] ? lock_chain_count+0x20/0x20 [ 745.085572][T13464] __x64_sys_openat+0x135/0x160 [ 745.090483][T13464] do_syscall_64+0x4c/0xa0 [ 745.094945][T13464] ? clear_bhb_loop+0x60/0xb0 [ 745.099816][T13464] ? clear_bhb_loop+0x60/0xb0 [ 745.104537][T13464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.110495][T13464] RIP: 0033:0x7f8541b5d68e [ 745.115063][T13464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.134784][T13464] RSP: 002b:00007f853fdb3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.143330][T13464] RAX: ffffffffffffffda RBX: 00007f853fdb46c0 RCX: 00007f8541b5d68e [ 745.151340][T13464] RDX: 0000000000040002 RSI: 00007f853fdb3c00 RDI: ffffffffffffff9c [ 745.159356][T13464] RBP: 00007f853fdb3c00 R08: 0000000000000000 R09: 0000000000000000 [ 745.167379][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 745.175394][T13464] R13: 00007f8541e16218 R14: 00007f8541e16180 R15: 00007fff305fba58 [ 745.183441][T13464] [ 745.186614][T13464] [ 745.188964][T13464] Allocated by task 1: [ 745.193091][T13464] kasan_set_track+0x4b/0x70 [ 745.197736][T13464] __kasan_kmalloc+0x8e/0xa0 [ 745.202374][T13464] dvb_register_device+0x305/0x1dc0 [ 745.207618][T13464] dvb_register_frontend+0x629/0x900 [ 745.212952][T13464] vidtv_bridge_probe+0x9cf/0xf50 [ 745.218105][T13464] platform_probe+0x137/0x1c0 [ 745.222896][T13464] really_probe+0x24a/0xb40 [ 745.227481][T13464] __driver_probe_device+0x1f5/0x390 [ 745.232810][T13464] driver_probe_device+0x4f/0x420 [ 745.237966][T13464] __driver_attach+0x43d/0x6c0 [ 745.242777][T13464] bus_for_each_dev+0x182/0x1f0 [ 745.247673][T13464] bus_add_driver+0x324/0x5d0 [ 745.252399][T13464] driver_register+0x32d/0x430 [ 745.257218][T13464] vidtv_bridge_init+0x39/0x67 [ 745.262165][T13464] do_one_initcall+0x257/0x800 [ 745.266993][T13464] do_initcall_level+0x13d/0x1ed [ 745.272017][T13464] do_initcalls+0x4b/0x8a [ 745.276390][T13464] kernel_init_freeable+0x401/0x5ab [ 745.281713][T13464] kernel_init+0x19/0x1b0 [ 745.286094][T13464] ret_from_fork+0x1f/0x30 [ 745.290565][T13464] [ 745.292922][T13464] Freed by task 13410: [ 745.297022][T13464] kasan_set_track+0x4b/0x70 [ 745.301658][T13464] kasan_save_free_info+0x27/0x40 [ 745.302956][T12801] Bluetooth: hci2: command 0x041b tx timeout [ 745.306704][T13464] ____kasan_slab_free+0x126/0x1f0 [ 745.317900][T13464] slab_free_freelist_hook+0x133/0x1b0 [ 745.323423][T13464] __kmem_cache_free+0xb6/0x200 [ 745.328330][T13464] dvb_device_open+0x2d2/0x360 [ 745.333164][T13464] chrdev_open+0x585/0x5f0 [ 745.337640][T13464] do_dentry_open+0x7dd/0x10b0 [ 745.342467][T13464] path_openat+0x2674/0x2f10 [ 745.347117][T13464] do_filp_open+0x1ee/0x420 [ 745.351693][T13464] do_sys_openat2+0x14b/0x4f0 [ 745.356420][T13464] __x64_sys_openat+0x135/0x160 [ 745.361322][T13464] do_syscall_64+0x4c/0xa0 [ 745.365792][T13464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.371737][T13464] [ 745.374095][T13464] The buggy address belongs to the object at ffff8881401a9800 [ 745.374095][T13464] which belongs to the cache kmalloc-256 of size 256 [ 745.388304][T13464] The buggy address is located 24 bytes inside of [ 745.388304][T13464] 256-byte region [ffff8881401a9800, ffff8881401a9900) [ 745.401620][T13464] [ 745.403981][T13464] The buggy address belongs to the physical page: [ 745.410504][T13464] page:ffffea0005006a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1401a8 [ 745.420789][T13464] head:ffffea0005006a00 order:1 compound_mapcount:0 compound_pincount:0 [ 745.429147][T13464] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 745.437270][T13464] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 745.445915][T13464] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 745.454530][T13464] page dumped because: kasan: bad access detected [ 745.460990][T13464] page_owner tracks the page as allocated [ 745.466748][T13464] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19213060687, free_ts 0 [ 745.486495][T13464] post_alloc_hook+0x173/0x1a0 [ 745.491437][T13464] get_page_from_freelist+0x206b/0x2180 [ 745.497016][T13464] __alloc_pages+0x1ec/0x4f0 [ 745.501793][T13464] alloc_page_interleave+0x24/0x1e0 [ 745.507022][T13464] alloc_slab_page+0x5d/0x180 [ 745.511707][T13464] new_slab+0x87/0x2d0 [ 745.515786][T13464] ___slab_alloc+0xbc5/0x1240 [ 745.520486][T13464] __kmem_cache_alloc_node+0x126/0x270 [ 745.525976][T13464] kmalloc_trace+0x26/0xe0 [ 745.530486][T13464] bus_add_driver+0xdc/0x5d0 [ 745.535086][T13464] driver_register+0x32d/0x430 [ 745.539865][T13464] usb_register_driver+0x201/0x3c0 [ 745.545040][T13464] do_one_initcall+0x257/0x800 [ 745.549815][T13464] do_initcall_level+0x13d/0x1ed [ 745.554759][T13464] do_initcalls+0x4b/0x8a [ 745.559092][T13464] kernel_init_freeable+0x401/0x5ab [ 745.564305][T13464] page_owner free stack trace missing [ 745.569673][T13464] [ 745.571998][T13464] Memory state around the buggy address: [ 745.577678][T13464] ffff8881401a9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 745.585747][T13464] ffff8881401a9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 745.593881][T13464] >ffff8881401a9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 745.601945][T13464] ^ [ 745.606819][T13464] ffff8881401a9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 745.614904][T13464] ffff8881401a9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 745.622966][T13464] ================================================================== [ 745.676765][T13464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 745.684023][T13464] CPU: 0 PID: 13464 Comm: syz.2.2935 Not tainted syzkaller #0 [ 745.691516][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.701603][T13464] Call Trace: [ 745.704918][T13464] [ 745.707881][T13464] dump_stack_lvl+0x188/0x24e [ 745.712606][T13464] ? memcpy+0x3c/0x60 [ 745.716644][T13464] ? show_regs_print_info+0x12/0x12 [ 745.721880][T13464] ? load_image+0x410/0x410 [ 745.726439][T13464] panic+0x2d3/0x710 [ 745.730382][T13464] ? bpf_jit_dump+0xd0/0xd0 [ 745.735020][T13464] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 745.741050][T13464] ? _raw_spin_unlock+0x40/0x40 [ 745.745949][T13464] check_panic_on_warn+0x80/0xa0 [ 745.751020][T13464] ? dvb_device_open+0xc5/0x360 [ 745.755905][T13464] end_report+0x66/0x110 [ 745.760195][T13464] kasan_report+0x118/0x140 [ 745.764744][T13464] ? dvb_device_open+0xc5/0x360 [ 745.769644][T13464] dvb_device_open+0xc5/0x360 [ 745.774359][T13464] chrdev_open+0x585/0x5f0 [ 745.778820][T13464] ? cd_forget+0x160/0x160 [ 745.783274][T13464] ? fsnotify_perm+0x39b/0x550 [ 745.788087][T13464] ? cd_forget+0x160/0x160 [ 745.792543][T13464] do_dentry_open+0x7dd/0x10b0 [ 745.797359][T13464] path_openat+0x2674/0x2f10 [ 745.801998][T13464] ? verify_lock_unused+0x140/0x140 [ 745.807263][T13464] ? do_sys_openat2+0xdd/0x4f0 [ 745.812074][T13464] ? do_filp_open+0x420/0x420 [ 745.816799][T13464] do_filp_open+0x1ee/0x420 [ 745.821340][T13464] ? vfs_tmpfile+0x470/0x470 [ 745.825979][T13464] ? _raw_spin_unlock+0x24/0x40 [ 745.830872][T13464] ? alloc_fd+0x590/0x640 [ 745.835258][T13464] do_sys_openat2+0x14b/0x4f0 [ 745.839987][T13464] ? do_sys_open+0xe0/0xe0 [ 745.844483][T13464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 745.850516][T13464] ? lock_chain_count+0x20/0x20 [ 745.855411][T13464] __x64_sys_openat+0x135/0x160 [ 745.860331][T13464] do_syscall_64+0x4c/0xa0 [ 745.864794][T13464] ? clear_bhb_loop+0x60/0xb0 [ 745.869502][T13464] ? clear_bhb_loop+0x60/0xb0 [ 745.874212][T13464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.880151][T13464] RIP: 0033:0x7f8541b5d68e [ 745.884618][T13464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.904263][T13464] RSP: 002b:00007f853fdb3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.912726][T13464] RAX: ffffffffffffffda RBX: 00007f853fdb46c0 RCX: 00007f8541b5d68e [ 745.920774][T13464] RDX: 0000000000040002 RSI: 00007f853fdb3c00 RDI: ffffffffffffff9c [ 745.928799][T13464] RBP: 00007f853fdb3c00 R08: 0000000000000000 R09: 0000000000000000 [ 745.936826][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 745.944869][T13464] R13: 00007f8541e16218 R14: 00007f8541e16180 R15: 00007fff305fba58 [ 745.952935][T13464] [ 745.956584][T13464] Kernel Offset: disabled [ 745.960927][T13464] Rebooting in 86400 seconds..