last executing test programs: 10.411365326s ago: executing program 4 (id=528): syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x1, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000003c40)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40008000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x49baed2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) lsm_list_modules(0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 10.17629212s ago: executing program 4 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="6400000010003904fcffd4b05e53acecc6dd0000", @ANYRES32=r2, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f00000108000d007f00000008002300020000001400140076657468300000000000000000000000080004"], 0x64}, 0x1, 0x3000000, 0x0, 0x4000}, 0x844) 9.879563301s ago: executing program 4 (id=533): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000030001"], 0x30}, 0x0) 9.810995559s ago: executing program 4 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x8, 0x80000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r5, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) 7.887179648s ago: executing program 3 (id=543): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 7.689390204s ago: executing program 2 (id=544): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xc, 0x3, 0x0, 0x8, 0xfc, 0x6, 0xd0, 0x9, 0x9, [0x4d6, 0x9, 0x5, 0x5, 0x6, 0x7, 0x20cb, 0x9], [0x0, 0x42f0]}}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x400005) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r3, &(0x7f000000a240)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000001840)=[{0x10, 0x29, 0xffffe3c1}, {0x10, 0x11}, {0x10, 0x10e, 0x3}], 0x30}}, {{&(0x7f00000005c0)=@phonet={0x23, 0x8, 0xf8, 0x81}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x94ffffff) 7.559537109s ago: executing program 3 (id=545): syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000f00010000010200000904010101010200000b240202900b08000236df09"], 0x0) 6.657810732s ago: executing program 2 (id=548): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x4010) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xfe, 0x0, 0x0, 0x0}) 6.509038052s ago: executing program 2 (id=549): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 6.375619495s ago: executing program 2 (id=550): syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x1000004, 0x1ab}, &(0x7f0000000040), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x1000004, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "d46cb260252bdf38"}}}}, &(0x7f0000000100)={0x2, 0x4, [0xfdd, 0x327, 0xc0e, 0xca6]}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000001500)="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", 0xffe}, {&(0x7f0000000140)="ecc59c", 0x3}], 0x2, 0x8, 0x1, {0x2}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="38229c3e805b773f7b2a6567510357313c7a3ec289dd1bb9d25bab716af69a45f293ee71857b5f6326582bbe0ff2fdafac0c0cc6f6c3f1dbbc1944977fd93040ac57d80a42e89618c13480f05cb51b356877acb10ccf4f5922257e351cb30a7e9ce247aa8ed55d24139f86ae92caec9cb1d1bad499a14973b9616e84e9b3420a5f36a3fc3e9848fa911e6194", 0x8c) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="38229c3e805b773f7b2a6567510357313c7a3ec289dd1bb9d25bab716af69a45f293ee71857b5f6326582bbe0ff2fdafac0c0cc6f6c3f1dbbc1944977fd93040ac57d80a42e89618c13480f05cb51b356877acb10ccf4f5922257e351cb30a7e9ce247aa8ed55d24139f86ae92caec9cb1d1bad499a14973b9616e84e9b3420a5f36a3fc3e9848fa911e6194", 0x8c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xfc, 0xe7, &(0x7f0000000340)="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", &(0x7f0000000440)=""/231, 0x900, 0x0, 0x1000, 0xfd, &(0x7f0000002500)="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", &(0x7f0000000600)="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", 0x6, 0x0, 0x2}, 0x50) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x8, 0x3a1000) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x8, 0x3a1000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000700)=""/86) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000700)=""/86) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 6.083403146s ago: executing program 3 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x209, 0xffffffffffffff5c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0x3}}}, 0x7) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x70, 0x8, &(0x7f0000000080)={0x10, "34e7ea6ca7e281034aff71328cfa511a8d8765647764932868b7855947e830d648"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r5, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000000)=""/7, 0x7) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x13) 6.082070151s ago: executing program 2 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) r8 = getpid() sched_setparam(r8, &(0x7f0000000040)=0x8) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 5.151876595s ago: executing program 4 (id=553): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022110000005669c70b4550182195f57584"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r10, 0x40184810, &(0x7f0000000040)={0x3, 0x200, 0x0, 0x310b, 0x5, 0x1}) ioctl$HIDIOCGUSAGE(r10, 0xc018480b, &(0x7f00000000c0)={0x2, 0xfffffefe, 0xfffffff9, 0x3, 0x30b, 0x7}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 4.630839419s ago: executing program 0 (id=555): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 4.451134539s ago: executing program 3 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r2, 0x6, 0x1, 0xfffffff9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r2, r0, 0x36, 0x1d, r1, @void, @value=r0, @void, @void, r5}, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x42ef5ea}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x45) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="53df2b456239aaaaaaaaaa0200004500001c000000000088907800000000ffffffff110090780000"], 0x0) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000440)={0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000480)={r9}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b040000000000007a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000100000600090000000000"], 0x48}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 4.450672979s ago: executing program 1 (id=557): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 4.325758443s ago: executing program 0 (id=558): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0xffffffbc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$HIDIOCSFLAG(r8, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) r9 = socket$key(0xf, 0x3, 0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r10, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$key(r9, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x2, 0x43, 0xfc, 0x7, 0x3a, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x1, 0x8000, 0x7, 0x9, 0xbea}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb3, 0x261, {0x6, 0xff, 0x7, 0xfd, 0x0, 0x9, 0x0, @in=@multicast2, @in=@broadcast}}, @sadb_x_sec_ctx={0x1f, 0x18, 0x2, 0x2, 0xef, "bc92585e6bc3487a07ac39a38bbef0cba63700e152240eb6ff52cbba17f07a8d41842fc39261983b2522c0e0cb26a21ab1fc13b4db4c7e00cf4f413557f8a52876b4b84039e0377b647990eb6af3bde7ad005bea366302818c3700aa98cfd8e47cdc06a69e1a8663ba52bceda500f3aeb88186b29408fada7361e4d997bf8c96afe3645b89eace72102e0ce2f708b848b8c0cee374b8c2e934b2c5d25a64a1081ecceaaded5c130fe33c08a82b02edff8fff87a6616903c5e0bd6de7994aab2f9f700bff9b31049e3002a820f2d481df6ad40c740f5acc3e181dbf000471e2b4c76cc513d9b5b3c1bcdfca377ea6b7"}, @sadb_lifetime={0x4, 0x3, 0x4, 0x6, 0x5, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0x10001}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@local, 0x29, 0x4, 0x10}]}, 0x1d0}}, 0x4020810) r11 = dup(r5) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 4.123599316s ago: executing program 1 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea0800", @ANYRES32=r0, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000004a00010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="46eb000014000100fe8000"], 0x30}, 0x1, 0x0, 0x0, 0xb4}, 0x4040) 3.571416198s ago: executing program 1 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xffffffff, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 3.538815111s ago: executing program 1 (id=561): syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x30, 0x6, 0x0, @private0, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "cf7509", 0x8001, 0x2f, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}}}}}}}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x57, 0xc9, 0x6e, 0x20, 0x4b4, 0x6830, 0x20d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0xb8, 0xd6, 0x1e}}]}}]}}, 0x0) 2.913679696s ago: executing program 1 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="400f010080009c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="40038119969c"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_emit_ethernet(0xa2, &(0x7f00000006c0)={@link_local, @broadcast, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "c4", "a0d00c", 0x2be, "f2cf38087253e6d35262a594dc8619c274c81b94067b76224ff26732753fb9bac1e8a5a86a5bace75bc16f7ecd1d07d67e3f07def94ab11ff1a7cca9fb8a9ce86e6646d8ae0f744802949d5e80823e484cf263d334813e2ed8f1b9d354b8d8a96af11ecb22f87ae8a8b90a556051a38024cdc1e051dcbd24721d96e7b18a4750459da07221513c9ea8d3e944"}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x2aa, 0xfa3, 0xdad, 0xc62]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000004200000000e0a05000000000000000000070000090900010073797a300000000014000000110001000000000000000000"], 0x84}}, 0x0) 2.751112935s ago: executing program 4 (id=563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x8, 0x80000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r5, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) 2.357134131s ago: executing program 2 (id=564): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_set_self_attr(0x64, 0x0, 0x23, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911031000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x3, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) socket(0x1f, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000009024dff0101000000090400000207010500090501024000100000090582022000050008"], 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0x5, 0x3ff) 1.944234496s ago: executing program 1 (id=565): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 1.339226962s ago: executing program 3 (id=566): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4010) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xfffb, 0x0, 0x0, 0x0}) 1.159258045s ago: executing program 3 (id=567): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x1, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500d60505000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 382.460721ms ago: executing program 0 (id=568): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 198.045257ms ago: executing program 0 (id=569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000006c00000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 51.300979ms ago: executing program 0 (id=570): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x30, 0x107, 0x4, "d34870cfcd7b91cc89b74c4eca5ade575d6edeafff7a4aec46bffe3b01"}], 0x30}, 0x40004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 0s ago: executing program 0 (id=571): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRES64, @ANYRESOCT=0x0, @ANYBLOB="18bb5c0e142f64661c356ba56bb89d1af1193220664ff91ae69a1e4bbd13c51ffbb569296454d3f2fc9bbb909021def52053419436f6e2ab2cb1b9a10619d7299f7984016a128fdae7238dffe26fc8e90b935e6d4b813d6f93cd8fe046a9d139207d6a7caa82898756b0f324a6f776e7e9d872be8ee02d16383370560488883521c2e801e7ed041e17e8c75c70be4d90d69a6f9bf97076c9541468620718defde33759b9586aa4a3f2b910e5466d3e10fb01d14adf4bba7b373caab296435ea60776180963fed515fa3bd51d0264dae855773f849fbde807"], 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x20800) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x22000) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x5, 0x0, 0x10002}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x2, 0x101, 0x9, 0x7f, 0x3, 0x400, '&O'}}, 0x11a) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000001780)={0xa, {0x9, 0x1, 0x4}}, 0xa) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r9, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r3, r1, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000440)="05ca08d18ee44ae0eba0aad893da90577025afcc74aaeb6439f7c0203e51fb3b9cb52ea8cb1e2cbf3480352ed641d9bf17c61f08f2687d478599bd4e9d875bc66d6a99170ccd8d5a7a2d52f5ec0f2fbeda22cfd46e328fc8b88bfaba8ed5767024b72477073156bc2a112f4bd818870905c5e8b84333ba6914d3cdaec114144f6a1fb7bf182bf9e685efbe7135bdd190569a37049d0f53465c0d5d177c4835eb9374ae7d779277d07018d5d2df484160c4ba9347ba73677d5311bb512817ac") r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) ioctl$TIOCGISO7816(r10, 0x80285442, &(0x7f0000000340)) kernel console output (not intermixed with test programs): 42.057315][ T5933] usb 4-1: Product: syz [ 142.072065][ T5933] usb 4-1: Manufacturer: syz [ 142.096186][ T5933] usb 4-1: SerialNumber: syz [ 142.153828][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.173911][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.251046][ T5933] usb 4-1: config 0 descriptor?? [ 142.332400][ T5933] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 142.454127][ T5933] em28xx 4-1:0.132: Video interface 132 found: [ 142.732958][ T5933] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 142.947008][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.968890][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.127951][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.308207][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 143.346191][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.349269][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.378563][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.391264][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.418083][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.439426][ T978] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 143.457541][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.476804][ T978] usb 3-1: config 0 descriptor?? [ 143.878233][ T5933] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 143.896116][ T978] koneplus 0003:1E7D:2E22.0006: item fetching failed at offset 0/2 [ 143.898178][ T5933] em28xx 4-1:0.132: board has no eeprom [ 143.920035][ T978] koneplus 0003:1E7D:2E22.0006: parse failed [ 143.926429][ T978] koneplus 0003:1E7D:2E22.0006: probe with driver koneplus failed with error -22 [ 143.968542][ T5904] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.008170][ T5933] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 144.016674][ T5933] em28xx 4-1:0.132: analog set to bulk mode. [ 144.026579][ T5902] em28xx 4-1:0.132: Registering V4L2 extension [ 144.178005][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 144.186745][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.186769][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.186783][ T5904] usb 1-1: Product: syz [ 144.186794][ T5904] usb 1-1: Manufacturer: syz [ 144.186805][ T5904] usb 1-1: SerialNumber: syz [ 144.196533][ T5904] usb 1-1: config 0 descriptor?? [ 144.248473][ T5902] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 144.266553][ T5902] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 144.266969][ T5902] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 144.267325][ T5902] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 144.376975][ T978] usb 4-1: USB disconnect, device number 8 [ 144.387728][ T978] em28xx 4-1:0.132: Disconnecting em28xx [ 144.425480][ T5904] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.554644][ T5902] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 144.554704][ T5902] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 144.554718][ T5902] em28xx 4-1:0.132: No AC97 audio processor [ 144.565123][ T5902] usb 4-1: Decoder not found [ 144.619807][ T5902] em28xx 4-1:0.132: failed to create media graph [ 144.631497][ T5902] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 144.647716][ T5902] em28xx 4-1:0.132: Remote control support is not available for this card. [ 144.657517][ T978] em28xx 4-1:0.132: Closing input extension [ 144.871969][ T978] em28xx 4-1:0.132: Freeing device [ 145.135969][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 145.156954][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 145.175966][ T6411] FAULT_INJECTION: forcing a failure. [ 145.175966][ T6411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.192446][ T6409] netlink: 'syz.3.152': attribute type 14 has an invalid length. [ 145.205467][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.1.154 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 145.205491][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.205500][ T6411] Call Trace: [ 145.205506][ T6411] [ 145.205512][ T6411] dump_stack_lvl+0x189/0x250 [ 145.205548][ T6411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.205571][ T6411] ? __pfx__printk+0x10/0x10 [ 145.205595][ T6411] should_fail_ex+0x414/0x560 [ 145.205619][ T6411] _copy_to_user+0x31/0xb0 [ 145.205638][ T6411] simple_read_from_buffer+0xe1/0x170 [ 145.205660][ T6411] proc_fail_nth_read+0x1df/0x250 [ 145.205685][ T6411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.205708][ T6411] ? rw_verify_area+0x258/0x650 [ 145.205725][ T6411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.205747][ T6411] vfs_read+0x1fd/0x980 [ 145.205768][ T6411] ? __pfx___mutex_lock+0x10/0x10 [ 145.205790][ T6411] ? __pfx_vfs_read+0x10/0x10 [ 145.205808][ T6411] ? __fget_files+0x2a/0x420 [ 145.205831][ T6411] ? __fget_files+0x3a0/0x420 [ 145.205849][ T6411] ? __fget_files+0x2a/0x420 [ 145.205875][ T6411] ksys_read+0x145/0x250 [ 145.205891][ T6411] ? __fget_files+0x2a/0x420 [ 145.205911][ T6411] ? __pfx_ksys_read+0x10/0x10 [ 145.205930][ T6411] ? do_syscall_64+0xba/0x210 [ 145.205953][ T6411] do_syscall_64+0xf6/0x210 [ 145.205973][ T6411] ? clear_bhb_loop+0x45/0xa0 [ 145.205991][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.206005][ T6411] RIP: 0033:0x7f5d43d8d37c [ 145.206018][ T6411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.206030][ T6411] RSP: 002b:00007f5d44cb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.206045][ T6411] RAX: ffffffffffffffda RBX: 00007f5d43fb5fa0 RCX: 00007f5d43d8d37c [ 145.206055][ T6411] RDX: 000000000000000f RSI: 00007f5d44cb70a0 RDI: 0000000000000005 [ 145.206064][ T6411] RBP: 00007f5d44cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.206072][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.206080][ T6411] R13: 0000000000000000 R14: 00007f5d43fb5fa0 R15: 00007f5d440dfa28 [ 145.206102][ T6411] [ 145.778901][ T6354] syz.4.135 (6354): drop_caches: 3 [ 145.869165][ T978] usb 3-1: USB disconnect, device number 12 [ 145.876918][ T5904] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.928390][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 145.956445][ T5904] usb 1-1: USB disconnect, device number 11 [ 146.090256][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 146.105153][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 147.134694][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 147.876080][ T6439] netlink: 'syz.0.164': attribute type 13 has an invalid length. [ 148.169769][ T6440] fuse: Unknown parameter '@' [ 148.187979][ T5900] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.204793][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.215910][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.367460][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 148.380587][ T5900] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.407872][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.420111][ T5900] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 148.438903][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.466662][ T5900] usb 3-1: config 0 descriptor?? [ 148.917068][ T5900] uclogic 0003:5543:0003.0007: collection stack underflow [ 148.947437][ T5900] uclogic 0003:5543:0003.0007: item 0 0 0 12 parsing failed [ 148.976389][ T5900] uclogic 0003:5543:0003.0007: parse failed [ 148.976896][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.993790][ T5900] uclogic 0003:5543:0003.0007: probe with driver uclogic failed with error -22 [ 149.128146][ T5900] usb 3-1: USB disconnect, device number 13 [ 149.194492][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.205613][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.298098][ T5933] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.408945][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.752531][ T5933] usb 5-1: config 0 has no interfaces? [ 149.846378][ T5933] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 149.857176][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.890181][ T5933] usb 5-1: Product: syz [ 149.977923][ T5902] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.990503][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 150.007100][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 150.033787][ T6439] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.045713][ T5933] usb 5-1: Manufacturer: syz [ 150.053765][ T6466] netlink: 'syz.2.169': attribute type 14 has an invalid length. [ 150.062323][ T6439] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.068013][ T5933] usb 5-1: SerialNumber: syz [ 150.077919][ T6439] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.102977][ T5933] usb 5-1: config 0 descriptor?? [ 150.116444][ T6439] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.128191][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 150.171965][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.184743][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.231945][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.284421][ T5902] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 150.376578][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.389564][ T5902] usb 4-1: config 0 descriptor?? [ 150.842513][ T5902] koneplus 0003:1E7D:2E22.0008: item fetching failed at offset 0/2 [ 150.884640][ T5902] koneplus 0003:1E7D:2E22.0008: parse failed [ 150.984481][ T5902] koneplus 0003:1E7D:2E22.0008: probe with driver koneplus failed with error -22 [ 151.480476][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.545050][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 151.660011][ T5902] usb 1-1: config 0 has no interfaces? [ 151.670572][ T5902] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.715603][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.742527][ T5902] usb 1-1: Product: syz [ 151.758108][ T5902] usb 1-1: Manufacturer: syz [ 151.772158][ T5902] usb 1-1: SerialNumber: syz [ 151.790061][ T5902] usb 1-1: config 0 descriptor?? [ 151.948901][ T978] usb 4-1: USB disconnect, device number 9 [ 152.250600][ T6485] netlink: 372 bytes leftover after parsing attributes in process `syz.1.177'. [ 152.273824][ T978] usb 5-1: USB disconnect, device number 10 [ 152.611184][ T6492] netlink: 'syz.3.180': attribute type 13 has an invalid length. [ 152.614490][ T6488] fuse: Unknown parameter '@' [ 152.899464][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.907483][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.122693][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 153.133376][ T6511] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 153.145692][ T6511] netlink: 'syz.1.186': attribute type 8 has an invalid length. [ 153.153921][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 153.217776][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.236420][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.351544][ T6492] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.361533][ T6492] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.370744][ T6492] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.382734][ T6492] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.452201][ T6504] dummy0: entered promiscuous mode [ 153.459378][ T6504] vlan2: entered promiscuous mode [ 154.130944][ T6518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 154.205522][ T5906] usb 1-1: USB disconnect, device number 12 [ 154.509116][ T5933] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.682385][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 154.711890][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.754771][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.793829][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.838848][ T5933] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 154.906062][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.936189][ T5933] usb 4-1: config 0 descriptor?? [ 155.308446][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.379040][ T5933] koneplus 0003:1E7D:2E22.0009: item fetching failed at offset 0/2 [ 155.529588][ T5933] koneplus 0003:1E7D:2E22.0009: parse failed [ 155.537744][ T24] usb 5-1: config 0 has no interfaces? [ 155.556332][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.558297][ T5933] koneplus 0003:1E7D:2E22.0009: probe with driver koneplus failed with error -22 [ 155.585334][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.608224][ T24] usb 5-1: Product: syz [ 155.612482][ T24] usb 5-1: Manufacturer: syz [ 155.666316][ T24] usb 5-1: SerialNumber: syz [ 155.698570][ T24] usb 5-1: config 0 descriptor?? [ 155.711142][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 155.941573][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.951693][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.976205][ T6553] fuse: Unknown parameter '@' [ 155.986223][ T6557] netlink: 'syz.2.200': attribute type 13 has an invalid length. [ 156.274151][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.282493][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.427215][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.474392][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.489413][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.589072][ T6557] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.599027][ T6557] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.613667][ T6557] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.623128][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.674627][ T6557] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.901969][ T5904] usb 4-1: USB disconnect, device number 10 [ 157.074228][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 157.098413][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 157.113039][ T6569] netlink: 'syz.0.203': attribute type 14 has an invalid length. [ 157.657903][ T5933] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 157.688015][ T978] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.900134][ T5902] usb 5-1: USB disconnect, device number 11 [ 157.923100][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.953106][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.977016][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 157.991106][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 158.032631][ T978] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.055528][ T978] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.091948][ T978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.104002][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.122318][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.132054][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.150492][ T5933] usb 1-1: Product: syz [ 158.167442][ T5933] usb 1-1: Manufacturer: syz [ 158.191887][ T5933] usb 1-1: SerialNumber: syz [ 158.210126][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.262613][ T6576] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 158.339457][ T978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.476546][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.485376][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.603350][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 158.619851][ T978] usb 4-1: USB disconnect, device number 11 [ 158.867558][ T6590] input: syz1 as /devices/virtual/input/input7 [ 159.188025][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.188410][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.213670][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.383098][ T5906] usb 5-1: config index 0 descriptor too short (expected 25710, got 77) [ 159.431945][ T5906] usb 5-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 159.472291][ T5933] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.497065][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.553474][ T5933] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 159.594645][ T5906] usb 5-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 159.694400][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.817715][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.835362][ T5906] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 159.863717][ T5906] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.919933][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.930111][ T5906] usb 5-1: Product: syz [ 159.934435][ T5906] usb 5-1: Manufacturer: syz [ 159.943991][ T5906] usb 5-1: SerialNumber: syz [ 159.987551][ T5933] usb 1-1: USB disconnect, device number 13 [ 160.040643][ T5933] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 160.217937][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.513727][ T5902] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 160.535946][ T5902] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.583509][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.611911][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.656278][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.708069][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.746522][ T5902] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 160.757724][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.915421][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.926077][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.964864][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.981361][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.200428][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.375448][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.504950][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.621821][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 161.686292][ T6616] netlink: 'syz.0.214': attribute type 13 has an invalid length. [ 161.706441][ T6613] netlink: 'syz.3.215': attribute type 7 has an invalid length. [ 161.752165][ T6613] netlink: 'syz.3.215': attribute type 8 has an invalid length. [ 161.850206][ T6622] input: syz0 as /devices/virtual/input/input8 [ 161.856924][ T6622] input: failed to attach handler leds to device input8, error: -6 [ 161.935099][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 162.811868][ T978] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 163.044048][ T978] usb 4-1: config 0 has no interfaces? [ 163.055906][ T978] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.065962][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.117542][ T978] usb 4-1: Product: syz [ 163.148519][ T978] usb 4-1: Manufacturer: syz [ 163.168043][ T978] usb 4-1: SerialNumber: syz [ 163.214357][ T978] usb 4-1: config 0 descriptor?? [ 163.851379][ T24] usb 3-1: USB disconnect, device number 14 [ 165.159727][ T5933] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.234415][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.245727][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.495346][ T5901] usb 5-1: USB disconnect, device number 12 [ 165.795078][ T5933] usb 1-1: config 0 has no interfaces? [ 165.811944][ T5933] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.908115][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.136189][ T5933] usb 1-1: Product: syz [ 166.170417][ T5933] usb 1-1: Manufacturer: syz [ 166.259651][ T5933] usb 1-1: SerialNumber: syz [ 166.282594][ T5933] usb 1-1: config 0 descriptor?? [ 166.417941][ T5901] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.492835][ T5933] usb 4-1: USB disconnect, device number 12 [ 166.568946][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 166.576783][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 166.591012][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 166.604295][ T5901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.616255][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.648615][ T5901] usb 5-1: config 0 descriptor?? [ 166.656202][ T6671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 167.070504][ T6671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.386317][ T6689] input: syz0 as /devices/virtual/input/input9 [ 168.542434][ T6691] FAULT_INJECTION: forcing a failure. [ 168.542434][ T6691] name failslab, interval 1, probability 0, space 0, times 0 [ 168.594209][ T24] usb 1-1: USB disconnect, device number 14 [ 168.620113][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.1.231 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 168.620137][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.620145][ T6691] Call Trace: [ 168.620151][ T6691] [ 168.620158][ T6691] dump_stack_lvl+0x189/0x250 [ 168.620188][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.620215][ T6691] ? __pfx__printk+0x10/0x10 [ 168.620236][ T6691] ? __pfx___might_resched+0x10/0x10 [ 168.620250][ T6691] ? fs_reclaim_acquire+0x7d/0x100 [ 168.620277][ T6691] should_fail_ex+0x414/0x560 [ 168.620301][ T6691] should_failslab+0xa8/0x100 [ 168.620323][ T6691] __kmalloc_noprof+0xcb/0x4f0 [ 168.620341][ T6691] ? kfree+0x4d/0x440 [ 168.620356][ T6691] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.620380][ T6691] tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.620399][ T6691] ? tomoyo_domain+0xda/0x130 [ 168.620421][ T6691] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 168.620435][ T6691] tomoyo_path_number_perm+0x1e8/0x5a0 [ 168.620451][ T6691] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.620570][ T6691] ? __lock_acquire+0xaac/0xd20 [ 168.620609][ T6691] ? __fget_files+0x2a/0x420 [ 168.620633][ T6691] ? __fget_files+0x3a0/0x420 [ 168.620652][ T6691] ? __fget_files+0x2a/0x420 [ 168.620675][ T6691] security_file_ioctl+0xcb/0x2d0 [ 168.620703][ T6691] __se_sys_ioctl+0x47/0x170 [ 168.620722][ T6691] do_syscall_64+0xf6/0x210 [ 168.620743][ T6691] ? clear_bhb_loop+0x45/0xa0 [ 168.620762][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.620776][ T6691] RIP: 0033:0x7f5d43d8e969 [ 168.620791][ T6691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.620803][ T6691] RSP: 002b:00007f5d44cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.620819][ T6691] RAX: ffffffffffffffda RBX: 00007f5d43fb5fa0 RCX: 00007f5d43d8e969 [ 168.620829][ T6691] RDX: 00002000000001c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 168.620838][ T6691] RBP: 00007f5d44cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.620847][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.620855][ T6691] R13: 0000000000000000 R14: 00007f5d43fb5fa0 R15: 00007f5d440dfa28 [ 168.620876][ T6691] [ 168.620910][ T6691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.004581][ T6698] loop6: detected capacity change from 0 to 524287999 [ 169.023851][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.045282][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.075579][ T6701] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 169.077243][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.136528][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.170083][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.185932][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 169.201863][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.210856][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.219098][ T5904] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 169.231203][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.240623][ T6698] ldm_validate_partition_table(): Disk read failed. [ 169.248660][ T6698] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.258168][ T6698] Dev loop6: unable to read RDB block 0 [ 169.264645][ T6698] loop6: unable to read partition table [ 169.273265][ T6698] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 169.338417][ T5213] ldm_validate_partition_table(): Disk read failed. [ 169.346801][ T5213] Dev loop6: unable to read RDB block 0 [ 169.356825][ T5213] loop6: unable to read partition table [ 169.382087][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.394584][ T5904] usb 1-1: config 0 has no interfaces? [ 169.422397][ T5904] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 169.442310][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.467237][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 169.479488][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.519104][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.534793][ T5901] usb 5-1: USB disconnect, device number 13 [ 169.554580][ T5904] usb 1-1: Product: syz [ 169.566109][ T5904] usb 1-1: Manufacturer: syz [ 169.606915][ T5904] usb 1-1: SerialNumber: syz [ 169.635456][ T5904] usb 1-1: config 0 descriptor?? [ 169.648332][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 169.675872][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.705817][ T5906] usb 4-1: config 5 interface 0 has no altsetting 0 [ 169.739560][ T5906] usb 4-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=6b.5b [ 169.756378][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.767670][ T5906] usb 4-1: Product: syz [ 169.776956][ T5906] usb 4-1: Manufacturer: syz [ 169.782913][ T5906] usb 4-1: SerialNumber: syz [ 169.837937][ T5933] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 170.011282][ T6720] vlan0: entered promiscuous mode [ 170.012793][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.029178][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.079498][ T5906] snd_usb_podhd 4-1:5.0: Line 6 POD HD500X found [ 170.085919][ T5906] usb 4-1: selecting invalid altsetting 1 [ 170.099711][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.108769][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.191307][ T5906] snd_usb_podhd 4-1:5.0: set_interface failed [ 170.210077][ T5906] snd_usb_podhd 4-1:5.0: Line 6 POD HD500X now disconnected [ 170.230841][ T5906] snd_usb_podhd 4-1:5.0: probe with driver snd_usb_podhd failed with error -22 [ 170.265201][ T5906] usb 4-1: USB disconnect, device number 13 [ 170.683990][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.249'. [ 170.950380][ T5904] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 171.012592][ T6744] ptrace attach of "./syz-executor exec"[5866] was attempted by ""[6744] [ 171.179663][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 171.192318][ T5904] usb 4-1: config 0 has no interface number 0 [ 171.205882][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.231835][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.243205][ T5904] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 171.255581][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.270259][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf1fc00: rx timeout, send abort [ 171.289896][ T5904] usb 4-1: config 0 descriptor?? [ 171.528057][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 171.708172][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 171.726272][ T5900] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 171.746558][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.763181][ T5900] usb 3-1: Product: syz [ 171.771416][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb1b800: rx timeout, send abort [ 171.779996][ T5900] usb 3-1: Manufacturer: syz [ 171.780073][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf1fc00: abort rx timeout. Force session deactivation [ 171.784793][ T5900] usb 3-1: SerialNumber: syz [ 171.789285][ T5900] usb 3-1: config 0 descriptor?? [ 171.836199][ T5900] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 171.870045][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 171.881594][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.899910][ T5900] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 171.942197][ T5900] usb 3-1: media controller created [ 172.020905][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.253'. [ 172.035199][ T5904] usbhid 4-1:0.1: can't add hid device: -71 [ 172.040787][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.067154][ T5933] usb 1-1: USB disconnect, device number 15 [ 172.074324][ T5904] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 172.136142][ T5904] usb 4-1: USB disconnect, device number 14 [ 172.154885][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 172.174373][ T5900] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 172.244682][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 172.279908][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb1b800: abort rx timeout. Force session deactivation [ 172.350616][ T5900] dvb-usb: schedule remote query interval to 50 msecs. [ 172.383223][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 172.390355][ T5900] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 172.414808][ T5900] usb 3-1: USB disconnect, device number 16 [ 172.493711][ T5900] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 172.558365][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 172.628064][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 172.717901][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 172.784531][ T5933] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 172.800296][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.820225][ T5933] usb 5-1: config 0 has no interface number 0 [ 172.831435][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 172.860627][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.880296][ T5901] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 172.993066][ T5933] usb 5-1: Product: syz [ 173.004280][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.014849][ T5933] usb 5-1: Manufacturer: syz [ 173.022668][ T5933] usb 5-1: SerialNumber: syz [ 173.047856][ T5901] usb 1-1: Product: syz [ 173.109518][ T5901] usb 1-1: Manufacturer: syz [ 173.115140][ T5933] usb 5-1: config 0 descriptor?? [ 173.123973][ T5901] usb 1-1: SerialNumber: syz [ 173.193498][ T5933] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 173.224797][ T5901] usb 1-1: config 0 descriptor?? [ 173.285189][ T5933] usb 5-1: No valid video chain found. [ 173.291043][ T5904] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 173.408063][ T6756] atomic_op ffff88802957b998 conn xmit_atomic 0000000000000000 [ 173.603472][ T5904] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.631033][ T6772] bridge_slave_0: left allmulticast mode [ 173.645197][ T6772] bridge_slave_0: left promiscuous mode [ 173.652799][ T5904] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.660409][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.740099][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.759819][ T6772] bridge_slave_1: left allmulticast mode [ 173.798171][ T6772] bridge_slave_1: left promiscuous mode [ 173.814152][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.828082][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.847180][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.910779][ T5904] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 173.962300][ T6772] bond0: (slave bond_slave_0): Releasing backup interface [ 174.063504][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.073788][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.100779][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.147474][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.159100][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.173396][ T6772] bond0: (slave bond_slave_1): Releasing backup interface [ 174.358040][ T5904] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.376528][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.388181][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.456387][ T6772] team0: Port device team_slave_0 removed [ 174.476490][ T6772] team0: Port device team_slave_1 removed [ 174.488555][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.502457][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.536816][ T5901] usb 1-1: Firmware version (0.0) predates our first public release. [ 174.554776][ T5901] usb 1-1: Please update to version 0.2 or newer [ 174.679691][ T5904] usb 3-1: config 0 has no interfaces? [ 174.715500][ T5904] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.825215][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.833925][ T5904] usb 3-1: Product: syz [ 174.859037][ T5901] usb 1-1: USB disconnect, device number 16 [ 174.897870][ T5904] usb 3-1: Manufacturer: syz [ 174.916356][ T5904] usb 3-1: SerialNumber: syz [ 174.948363][ T5904] usb 3-1: config 0 descriptor?? [ 175.273959][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.404995][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.545143][ T5901] usb 5-1: USB disconnect, device number 14 [ 175.870656][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 175.964290][ T5906] usb 4-1: USB disconnect, device number 15 [ 176.004954][ T5904] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 176.206423][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.217517][ T5904] usb 1-1: config 0 has no interfaces? [ 176.231559][ T5904] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 176.243297][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.256670][ T5904] usb 1-1: Product: syz [ 176.264750][ T5904] usb 1-1: Manufacturer: syz [ 176.332743][ T6802] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 176.341016][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.268'. [ 176.356895][ T6802] batman_adv: batadv0: Adding interface: virt_wifi0 [ 176.368117][ T6802] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.394407][ T6802] batman_adv: batadv0: Interface activated: virt_wifi0 [ 176.456708][ T5904] usb 1-1: SerialNumber: syz [ 176.487666][ T5904] usb 1-1: config 0 descriptor?? [ 176.559602][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 176.573272][ T6804] netlink: 'syz.3.270': attribute type 7 has an invalid length. [ 176.581783][ T6804] netlink: 'syz.3.270': attribute type 8 has an invalid length. [ 176.634444][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 176.967648][ T24] usb 3-1: USB disconnect, device number 17 [ 178.791043][ T6832] loop2: detected capacity change from 0 to 7 [ 178.820771][ T6832] Dev loop2: unable to read RDB block 7 [ 178.826501][ T6832] loop2: unable to read partition table [ 178.832777][ T6832] loop2: partition table beyond EOD, truncated [ 178.839284][ T6832] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 178.915212][ T5213] Dev loop2: unable to read RDB block 7 [ 178.921185][ T5213] loop2: unable to read partition table [ 178.923880][ T5906] usb 1-1: USB disconnect, device number 17 [ 178.936499][ T5213] loop2: partition table beyond EOD, truncated [ 179.480946][ T5213] Dev loop2: unable to read RDB block 7 [ 179.487373][ T5213] loop2: unable to read partition table [ 179.514488][ T5213] loop2: partition table beyond EOD, truncated [ 179.575163][ T6847] syz_tun (unregistering): left promiscuous mode [ 180.184445][ T6867] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.184950][ T6868] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.538988][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.628062][ T24] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 180.658039][ T5906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.769944][ T6886] netlink: 'syz.4.298': attribute type 4 has an invalid length. [ 180.783466][ T6886] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.298'. [ 180.820910][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 180.832662][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.848211][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.863971][ T24] usb 1-1: config 0 has no interfaces? [ 180.870208][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.885009][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 180.894691][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.905340][ T24] usb 1-1: Product: syz [ 180.911324][ T5906] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.925598][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.935024][ T24] usb 1-1: Manufacturer: syz [ 180.941482][ T24] usb 1-1: SerialNumber: syz [ 180.946480][ T5906] usb 3-1: Product: syz [ 180.961339][ T5906] usb 3-1: Manufacturer: syz [ 180.966490][ T5906] usb 3-1: SerialNumber: syz [ 180.978387][ T24] usb 1-1: config 0 descriptor?? [ 180.988881][ T5906] usb 3-1: config 0 descriptor?? [ 181.015291][ T5906] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.038209][ T5904] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.060153][ T5906] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 181.202763][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.229684][ T5904] usb 5-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 181.269436][ T5904] usb 5-1: config 66 interface 0 has no altsetting 0 [ 181.288918][ T5904] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 181.300811][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.326648][ T5904] usb 5-1: Product: syz [ 181.345860][ T5904] usb 5-1: Manufacturer: syz [ 181.364306][ T5904] usb 5-1: SerialNumber: syz [ 181.439967][ T6886] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 181.599378][ T5906] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 181.606904][ T5906] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 181.696719][ T5904] ati_remote2 5-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 181.753810][ T5904] usb 5-1: USB disconnect, device number 15 [ 182.226759][ T5906] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 182.237122][ T5906] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 182.434402][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 182.448012][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 182.587032][ T6906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.647412][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 182.691358][ T5906] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 182.700876][ T6909] netlink: 10 bytes leftover after parsing attributes in process `syz.1.304'. [ 182.712796][ T30] audit: type=1326 audit(1745578647.147:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 182.740779][ T5906] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 182.747320][ T30] audit: type=1326 audit(1745578647.167:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 182.784499][ T5906] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 182.853778][ T5906] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 182.869206][ T6911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.304'. [ 182.880989][ T30] audit: type=1326 audit(1745578647.167:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 182.911370][ T5906] usb 3-1: USB disconnect, device number 18 [ 182.929722][ T30] audit: type=1326 audit(1745578647.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 182.997438][ T30] audit: type=1326 audit(1745578647.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.033229][ T30] audit: type=1326 audit(1745578647.167:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.126817][ T30] audit: type=1326 audit(1745578647.177:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.166671][ T30] audit: type=1326 audit(1745578647.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.205938][ T30] audit: type=1326 audit(1745578647.177:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.229385][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.254827][ T30] audit: type=1326 audit(1745578647.177:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43d8e969 code=0x7ffc0000 [ 183.277169][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.369121][ T5904] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.449236][ T5900] usb 1-1: USB disconnect, device number 18 [ 183.530841][ T5904] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 183.567911][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.695940][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.709537][ T5904] usb 5-1: config 1 has no interface number 0 [ 183.715919][ T5904] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 183.778884][ T5904] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 183.818082][ T5901] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 183.869980][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.894693][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.904727][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.918393][ T5904] usb 5-1: Product: syz [ 183.922865][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.947953][ T5904] usb 5-1: Manufacturer: syz [ 183.957924][ T5904] usb 5-1: SerialNumber: syz [ 184.026752][ T6923] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 184.106814][ T5901] usb 3-1: config 0 has no interfaces? [ 184.133954][ T5901] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.148069][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.156325][ T5901] usb 3-1: Product: syz [ 184.164821][ T5901] usb 3-1: Manufacturer: syz [ 184.170190][ T5901] usb 3-1: SerialNumber: syz [ 184.190682][ T5901] usb 3-1: config 0 descriptor?? [ 184.336177][ T6923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.371184][ T6934] syz.0.310 (6934): drop_caches: 3 [ 184.483217][ T5901] usb 5-1: USB disconnect, device number 16 [ 185.227129][ T6944] fuse: Unknown parameter 'grF̕goup_kd' [ 185.598365][ T5933] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 185.787926][ T5906] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.812246][ T5933] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 185.839550][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.865718][ T5933] usb 4-1: Product: syz [ 185.876374][ T5933] usb 4-1: Manufacturer: syz [ 185.883026][ T5933] usb 4-1: SerialNumber: syz [ 185.897895][ T5933] usb 4-1: config 0 descriptor?? [ 185.951739][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 185.959822][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 185.980364][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.015212][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.026585][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.045709][ T5906] usb 5-1: Product: syz [ 186.051365][ T5906] usb 5-1: Manufacturer: syz [ 186.056172][ T5906] usb 5-1: SerialNumber: syz [ 186.069924][ T5906] usb 5-1: config 0 descriptor?? [ 186.084218][ T5906] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.096592][ T5906] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 186.162343][ T6959] fuse: Unknown parameter '@' [ 186.417998][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 186.447260][ T5933] usb 4-1: Firmware version (0.0) predates our first public release. [ 186.462304][ T5933] usb 4-1: Please update to version 0.2 or newer [ 186.528614][ T5933] usb 4-1: USB disconnect, device number 16 [ 186.558077][ T24] usb 1-1: device descriptor read/64, error -71 [ 186.606445][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.616393][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.688338][ T5906] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 186.699015][ T5906] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 186.720176][ T978] usb 3-1: USB disconnect, device number 19 [ 186.807974][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 186.960034][ T24] usb 1-1: device descriptor read/64, error -71 [ 187.054953][ T6980] trusted_key: encrypted_key: insufficient parameters specified [ 187.062368][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 187.069919][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.081077][ T24] usb usb1-port1: attempt power cycle [ 187.092211][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 187.103628][ T6978] vhci_hcd vhci_hcd.0: port 0 already used [ 187.319554][ T5906] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 187.337131][ T5906] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 187.376155][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.385782][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.399958][ T6989] atomic_op ffff88807c080198 conn xmit_atomic 0000000000000000 [ 187.438143][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 187.445507][ T5933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 187.446114][ T978] usb 40-1: SetAddress Request (2) to port 0 [ 187.463650][ T978] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 187.530750][ T24] usb 1-1: device descriptor read/8, error -71 [ 187.612719][ T5933] usb 3-1: config 0 has no interfaces? [ 187.637690][ T5933] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.658686][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.677632][ T5933] usb 3-1: Product: syz [ 187.689191][ T5933] usb 3-1: Manufacturer: syz [ 187.702179][ T5933] usb 3-1: SerialNumber: syz [ 187.766074][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 187.774924][ T5933] usb 3-1: config 0 descriptor?? [ 187.814081][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 187.846999][ T5906] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 187.858151][ T24] usb 1-1: device descriptor read/8, error -71 [ 187.881391][ T5906] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 187.902955][ T5906] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 187.916724][ T5906] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 187.944481][ T5906] usb 5-1: USB disconnect, device number 17 [ 188.008955][ T24] usb usb1-port1: unable to enumerate USB device [ 189.138020][ T5906] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.297929][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 189.305831][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.323072][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 189.344706][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.414091][ T5906] usb 5-1: config 0 descriptor?? [ 189.497960][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 189.671706][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.330'. [ 189.685168][ T6997] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 189.704311][ T5198] bcm5974 5-1:0.0: could not read from device [ 189.721907][ T5198] bcm5974 5-1:0.0: could not read from device [ 189.734930][ T5198] bcm5974 5-1:0.0: could not read from device [ 189.746554][ T5906] usb 5-1: USB disconnect, device number 18 [ 189.760598][ T5198] bcm5974 5-1:0.0: could not read from device [ 190.106146][ T6979] vhci_hcd: connection reset by peer [ 190.124064][ T3516] vhci_hcd: stop threads [ 190.157609][ T5906] usb 3-1: USB disconnect, device number 20 [ 190.192203][ T3516] vhci_hcd: release socket [ 190.239856][ T3516] vhci_hcd: disconnect device [ 190.674242][ T7016] vlan2: entered promiscuous mode [ 190.698026][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 190.891455][ T24] usb 3-1: config 0 has no interfaces? [ 190.920442][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.022855][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.041445][ T24] usb 3-1: Product: syz [ 191.050043][ T24] usb 3-1: Manufacturer: syz [ 191.059434][ T24] usb 3-1: SerialNumber: syz [ 191.142807][ T24] usb 3-1: config 0 descriptor?? [ 191.167995][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 191.331911][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 191.365830][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.388744][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.410195][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.423639][ T5904] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 191.487712][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.530240][ T5904] usb 1-1: config 0 descriptor?? [ 191.764047][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.821581][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.959187][ T5904] koneplus 0003:1E7D:2E22.000A: item fetching failed at offset 0/2 [ 191.968688][ T5904] koneplus 0003:1E7D:2E22.000A: parse failed [ 191.982990][ T5904] koneplus 0003:1E7D:2E22.000A: probe with driver koneplus failed with error -22 [ 192.152604][ T7036] fuse: Unknown parameter '@' [ 192.348015][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.549536][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 192.580173][ T5904] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.588679][ T5904] usb 5-1: config 0 has no interface number 0 [ 192.598180][ T978] usb 40-1: device descriptor read/8, error -110 [ 192.613867][ T5904] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 192.626038][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.645200][ T5904] usb 5-1: Product: syz [ 192.652348][ T5904] usb 5-1: Manufacturer: syz [ 192.663863][ T5904] usb 5-1: SerialNumber: syz [ 192.677496][ T5904] usb 5-1: config 0 descriptor?? [ 192.701348][ T5904] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 192.715201][ T5904] usb 5-1: selecting invalid altsetting 1 [ 192.732462][ T5904] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 192.751608][ T5904] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.768206][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 192.783699][ T5904] usb 5-1: media controller created [ 192.871192][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.915570][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.924889][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.937549][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.948241][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.973592][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.992424][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.014205][ T978] usb usb40-port1: attempt power cycle [ 193.034587][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.093592][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.108213][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.118661][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.132428][ T5901] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 193.141719][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.170809][ T5901] usb 4-1: config 0 descriptor?? [ 193.274654][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.286632][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.304584][ T5904] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 193.319313][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 193.335625][ T5904] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 193.436823][ T5904] usb 5-1: USB disconnect, device number 19 [ 193.499444][ T5933] usb 1-1: USB disconnect, device number 23 [ 193.586271][ T5902] usb 3-1: USB disconnect, device number 21 [ 193.589572][ T978] usb usb40-port1: unable to enumerate USB device [ 193.635456][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 193.648015][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 193.688444][ T5901] usb 4-1: USB disconnect, device number 17 [ 193.777591][ T7044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.187919][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.347887][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 194.361870][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.378040][ T24] usb 5-1: config 0 has no interface number 0 [ 194.384407][ T24] usb 5-1: config 0 interface 1 has no altsetting 0 [ 194.420587][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 194.441616][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.443139][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450367][ T24] usb 5-1: Product: syz [ 194.460876][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477374][ T24] usb 5-1: Manufacturer: syz [ 194.488556][ T24] usb 5-1: SerialNumber: syz [ 194.496710][ T24] usb 5-1: config 0 descriptor?? [ 194.598263][ T7057] mmap: syz.3.349 (7057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.767366][ T24] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 194.790848][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 194.802561][ T7060] netlink: 'syz.1.350': attribute type 7 has an invalid length. [ 194.810667][ T7060] netlink: 'syz.1.350': attribute type 8 has an invalid length. [ 194.824932][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 194.974671][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.986376][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.016806][ T978] usb 5-1: USB disconnect, device number 20 [ 195.481099][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 195.614768][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.624118][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.713084][ T7078] input: syz1 as /devices/virtual/input/input12 [ 195.799278][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 195.825643][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.885841][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.108079][ T5901] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 196.198564][ T24] usb 3-1: config 0 descriptor?? [ 196.265776][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 196.288592][ T5901] usb 1-1: config index 0 descriptor too short (expected 25710, got 77) [ 196.303208][ T5901] usb 1-1: config 114 has too many interfaces: 101, using maximum allowed: 32 [ 196.336239][ T5901] usb 1-1: config 114 has an invalid descriptor of length 97, skipping remainder of the config [ 196.358518][ T5902] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.374839][ T5901] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 101 [ 196.495373][ T5901] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.519028][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.556096][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 196.561392][ T5901] usb 1-1: Product: syz [ 196.565600][ T5901] usb 1-1: Manufacturer: syz [ 196.579799][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.630351][ T5901] usb 1-1: SerialNumber: syz [ 196.635085][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.671165][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.700291][ T5902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 196.804330][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.833645][ T5902] usb 5-1: config 0 descriptor?? [ 196.972445][ T5903] usb 3-1: USB disconnect, device number 22 [ 197.266857][ T5902] koneplus 0003:1E7D:2E22.000B: item fetching failed at offset 0/2 [ 197.333411][ T5902] koneplus 0003:1E7D:2E22.000B: parse failed [ 197.349387][ T5902] koneplus 0003:1E7D:2E22.000B: probe with driver koneplus failed with error -22 [ 197.952427][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 198.574590][ T24] usb 5-1: USB disconnect, device number 21 [ 198.942925][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.973993][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.234227][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 199.294287][ T7112] netlink: 80 bytes leftover after parsing attributes in process `syz.3.365'. [ 199.323551][ T7112] loop6: detected capacity change from 0 to 524287999 [ 199.333787][ T5951] buffer_io_error: 24 callbacks suppressed [ 199.333806][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.334077][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 199.340544][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.379488][ T7113] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 199.390556][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.400935][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.410329][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.420257][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.428277][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 199.438630][ T7111] netlink: 'syz.4.366': attribute type 14 has an invalid length. [ 199.468174][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.477050][ T24] usb 3-1: config 0 has no interfaces? [ 199.493865][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 199.509104][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.517759][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.544321][ T5901] usb 1-1: USB disconnect, device number 24 [ 199.585353][ T24] usb 3-1: Product: syz [ 199.590858][ T5951] ldm_validate_partition_table(): Disk read failed. [ 199.597723][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.624753][ T24] usb 3-1: Manufacturer: syz [ 199.656304][ T24] usb 3-1: SerialNumber: syz [ 199.682944][ T7115] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 199.704829][ T5951] Dev loop6: unable to read RDB block 0 [ 199.730155][ T24] usb 3-1: config 0 descriptor?? [ 199.748362][ T5951] loop6: unable to read partition table [ 199.756410][ T7112] ldm_validate_partition_table(): Disk read failed. [ 199.774683][ T7112] Dev loop6: unable to read RDB block 0 [ 199.840006][ T7112] loop6: unable to read partition table [ 199.851836][ T7112] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 200.174578][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.323898][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.337982][ T978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 200.357244][ T7137] netlink: 788 bytes leftover after parsing attributes in process `syz.2.363'. [ 200.380390][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.391132][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 200.503713][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.524713][ T24] usb 5-1: Product: syz [ 200.545711][ T24] usb 5-1: Manufacturer: syz [ 200.557926][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 200.577029][ T978] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 200.592320][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.599067][ T7140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 200.606759][ T24] usb 5-1: SerialNumber: syz [ 200.617619][ T978] usb 4-1: Product: syz [ 200.632285][ T7141] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 200.642693][ T24] usb 5-1: config 0 descriptor?? [ 200.648006][ T978] usb 4-1: Manufacturer: syz [ 200.651619][ T7140] netlink: 'syz.0.374': attribute type 7 has an invalid length. [ 200.671939][ T978] usb 4-1: SerialNumber: syz [ 200.685912][ T7140] netlink: 'syz.0.374': attribute type 8 has an invalid length. [ 200.698853][ T978] usb 4-1: config 0 descriptor?? [ 200.724880][ T978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 200.743927][ T978] usb 4-1: setting power ON [ 200.751449][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 200.767667][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.777731][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 200.779263][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.788463][ T978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 200.804681][ T978] usb 4-1: media controller created [ 200.826636][ T7141] team0: entered promiscuous mode [ 200.870053][ T7141] team_slave_0: entered promiscuous mode [ 200.883450][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.917486][ T7141] team_slave_1: entered promiscuous mode [ 200.983888][ T7141] bond0: (slave team0): Enslaving as an active interface with an up link [ 200.994552][ T978] usb 4-1: selecting invalid altsetting 6 [ 201.006904][ T978] usb 4-1: digital interface selection failed (-22) [ 201.014114][ T978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 201.035999][ T7123] dvb-usb: bulk message failed: -22 (3/0) [ 201.042169][ T7123] usb 4-1: gpio_write failed. [ 201.047155][ T7123] dvb-usb: bulk message failed: -22 (4/0) [ 201.053791][ T7123] cxusb: i2c read failed [ 201.060681][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.079666][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.122261][ T978] usb 4-1: setting power OFF [ 201.127493][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 201.156778][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 201.197540][ T978] (NULL device *): no alternate interface [ 201.243429][ T24] usb 5-1: Firmware version (0.0) predates our first public release. [ 201.276588][ T24] usb 5-1: Please update to version 0.2 or newer [ 201.333495][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 201.394954][ T24] usb 5-1: USB disconnect, device number 22 [ 201.410078][ T978] usb 4-1: USB disconnect, device number 18 [ 201.524077][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.533493][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.551059][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.560333][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.670558][ T7156] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 201.756757][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 201.984098][ T7156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.071047][ T7166] ip6t_srh: unknown srh match flags 5040 [ 202.344017][ T978] usb 3-1: USB disconnect, device number 23 [ 202.457481][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 202.470172][ T7174] netlink: 'syz.0.381': attribute type 7 has an invalid length. [ 202.481908][ T7174] netlink: 'syz.0.381': attribute type 8 has an invalid length. [ 202.524379][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 202.855192][ T7186] loop6: detected capacity change from 0 to 524287999 [ 202.877752][ T5855] ldm_validate_partition_table(): Disk read failed. [ 202.901830][ T5855] Dev loop6: unable to read RDB block 0 [ 202.928148][ T5903] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.945828][ T5855] loop6: unable to read partition table [ 202.959755][ T7186] ldm_validate_partition_table(): Disk read failed. [ 202.967492][ T7186] Dev loop6: unable to read RDB block 0 [ 202.977519][ T7186] loop6: unable to read partition table [ 202.986429][ T7186] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 203.023448][ T5213] ldm_validate_partition_table(): Disk read failed. [ 203.040033][ T5213] Dev loop6: unable to read RDB block 0 [ 203.053078][ T5213] loop6: unable to read partition table [ 203.122814][ T5903] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.153599][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.201429][ T5903] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.215671][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.252214][ T5903] usb 4-1: Product: syz [ 203.277254][ T5903] usb 4-1: Manufacturer: syz [ 203.300536][ T5903] usb 4-1: SerialNumber: syz [ 203.337669][ T5903] usb 4-1: config 0 descriptor?? [ 203.368675][ T5903] usb 4-1: selecting invalid altsetting 0 [ 203.581459][ T7194] fuse: Unknown parameter '@' [ 203.677998][ T978] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 203.705196][ T5903] usb 4-1: USB disconnect, device number 19 [ 203.846559][ T978] usb 5-1: config 0 has no interfaces? [ 203.862609][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.876157][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.901962][ T978] usb 5-1: Product: syz [ 203.918760][ T978] usb 5-1: Manufacturer: syz [ 203.956390][ T978] usb 5-1: SerialNumber: syz [ 203.980363][ T978] usb 5-1: config 0 descriptor?? [ 204.058933][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 204.068982][ T7199] batadv_slave_1: entered promiscuous mode [ 204.076156][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 204.426042][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.739036][ T7204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.898979][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 205.908857][ T7218] netlink: 'syz.1.398': attribute type 7 has an invalid length. [ 205.918811][ T5903] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.947955][ T7218] netlink: 'syz.1.398': attribute type 8 has an invalid length. [ 205.979965][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 206.108185][ T5903] usb 4-1: device descriptor read/64, error -71 [ 206.480417][ T5903] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.569174][ T5902] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 206.649931][ T5903] usb 4-1: device descriptor read/64, error -71 [ 206.747953][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 206.758070][ T5902] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 206.767413][ T5903] usb usb4-port1: attempt power cycle [ 206.782974][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.835316][ T5902] usb 3-1: config 0 has no interface number 0 [ 206.877373][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 206.911798][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.931735][ T5901] usb 5-1: USB disconnect, device number 23 [ 206.941217][ T5902] usb 3-1: Product: syz [ 206.963991][ T5902] usb 3-1: Manufacturer: syz [ 206.989943][ T5902] usb 3-1: SerialNumber: syz [ 207.013423][ T5902] usb 3-1: config 0 descriptor?? [ 207.058159][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 207.068609][ T5902] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 207.075133][ T5902] usb 3-1: No valid video chain found. [ 207.084654][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 207.107273][ T7232] netlink: 'syz.4.404': attribute type 14 has an invalid length. [ 207.127898][ T5903] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 207.158653][ T5903] usb 4-1: device descriptor read/8, error -71 [ 207.262665][ T7225] atomic_op ffff888031371998 conn xmit_atomic 0000000000000000 [ 207.398200][ T5903] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.441060][ T5903] usb 4-1: device descriptor read/8, error -71 [ 207.484019][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 207.568418][ T7241] fuse: Unknown parameter '@' [ 207.568733][ T5903] usb usb4-port1: unable to enumerate USB device [ 207.660452][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.711974][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.730526][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.761836][ T5901] usb 5-1: Product: syz [ 207.783553][ T5901] usb 5-1: Manufacturer: syz [ 207.801519][ T5901] usb 5-1: SerialNumber: syz [ 207.928167][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 208.038890][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.050773][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.148659][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 208.172962][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.197492][ T24] usb 1-1: Product: syz [ 208.208029][ T24] usb 1-1: Manufacturer: syz [ 208.219887][ T24] usb 1-1: SerialNumber: syz [ 208.241643][ T24] usb 1-1: config 0 descriptor?? [ 208.767190][ T24] usb 1-1: Firmware version (0.0) predates our first public release. [ 208.790350][ T24] usb 1-1: Please update to version 0.2 or newer [ 208.894024][ T24] usb 1-1: USB disconnect, device number 25 [ 208.988626][ T5901] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 209.014689][ T7247] fuse: Unknown parameter '@' [ 209.177670][ T5901] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 209.234408][ T5901] usb 5-1: USB disconnect, device number 24 [ 209.252948][ T5901] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 209.425408][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 209.667283][ T7264] vlan2: entered promiscuous mode [ 209.947118][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 210.020921][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 210.036287][ T5902] usb 3-1: USB disconnect, device number 24 [ 210.096786][ T7272] netlink: 'syz.4.415': attribute type 14 has an invalid length. [ 210.278447][ T7276] tipc: Started in network mode [ 210.317901][ T7276] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 210.378960][ T7276] tipc: Enabled bearer , priority 10 [ 210.385024][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'. [ 210.587903][ T5901] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 210.799778][ T5901] usb 3-1: config 252 has an invalid interface number: 101 but max is 0 [ 210.829801][ T5901] usb 3-1: config 252 has no interface number 0 [ 210.855585][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 210.893245][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.904762][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.949275][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 210.956524][ T5901] pvrusb2: ********** [ 210.968181][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.996045][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.017181][ T5901] pvrusb2: Important functionality might not be entirely working. [ 211.027125][ T5903] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 211.027199][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.042106][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.069551][ T5901] pvrusb2: ********** [ 211.091379][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.163857][ T2343] pvrusb2: Invalid write control endpoint [ 211.213216][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 211.226076][ T5903] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 211.245986][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.255900][ T5903] usb 5-1: Product: syz [ 211.263807][ T5903] usb 5-1: Manufacturer: syz [ 211.271860][ T5903] usb 5-1: SerialNumber: syz [ 211.292347][ T5903] usb 5-1: config 0 descriptor?? [ 211.334535][ T978] tipc: Node number set to 11578026 [ 211.335040][ T2343] pvrusb2: Invalid write control endpoint [ 211.351644][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 211.374209][ T5901] usb 3-1: USB disconnect, device number 25 [ 211.394918][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.406362][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.423114][ T2343] pvrusb2: Device being rendered inoperable [ 211.431603][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 211.442516][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 211.458007][ T2343] pvrusb2: Attached sub-driver cx25840 [ 211.463950][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.489603][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 211.862098][ T5903] usb 5-1: Firmware version (0.0) predates our first public release. [ 211.871060][ T5903] usb 5-1: Please update to version 0.2 or newer [ 211.997953][ T5903] usb 5-1: USB disconnect, device number 25 [ 212.039500][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 212.110264][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.134958][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.144797][ T7316] atomic_op ffff888059a5d998 conn xmit_atomic 0000000000000000 [ 212.252246][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 212.329143][ T5901] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 212.377250][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.386914][ T5901] usb 1-1: Product: syz [ 212.487428][ T5901] usb 1-1: Manufacturer: syz [ 212.504463][ T5901] usb 1-1: SerialNumber: syz [ 212.573952][ T5901] usb 1-1: config 0 descriptor?? [ 212.592764][ T5901] gspca_main: sq930x-2.14.0 probing 2770:930c [ 212.609908][ T7327] bridge0: port 3(macvlan0) entered blocking state [ 212.662465][ T7327] bridge0: port 3(macvlan0) entered disabled state [ 212.707220][ T7327] macvlan0: entered allmulticast mode [ 212.718558][ T7327] veth1_vlan: entered allmulticast mode [ 212.772069][ T7327] macvlan0: entered promiscuous mode [ 212.792712][ T7327] bridge0: port 3(macvlan0) entered blocking state [ 212.799745][ T7327] bridge0: port 3(macvlan0) entered forwarding state [ 212.928228][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.088056][ T5904] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 213.098147][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 213.109497][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.121590][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.151987][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.178141][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.218033][ T7336] input: syz0 as /devices/virtual/input/input13 [ 213.228467][ T5901] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 213.234940][ T5901] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 213.245289][ T24] usb 3-1: Product: syz [ 213.253503][ T5901] usb 1-1: USB disconnect, device number 26 [ 213.268105][ T5904] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 213.284161][ T5904] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.395458][ T24] usb 3-1: Manufacturer: syz [ 213.403788][ T24] usb 3-1: SerialNumber: syz [ 213.428160][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.443110][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.450639][ T24] usb 3-1: config 0 descriptor?? [ 213.467967][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.507204][ T5904] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 213.551832][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.602923][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.636294][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 213.718302][ T5933] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 213.764115][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.783764][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.938758][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 213.945257][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 213.968518][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.011781][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.023714][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.041047][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.108904][ T5933] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 214.110430][ T7341] loop6: detected capacity change from 0 to 524287999 [ 214.141159][ T5951] buffer_io_error: 74 callbacks suppressed [ 214.141179][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.155471][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.158105][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.168825][ T7342] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 214.173180][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.180625][ T5933] usb 5-1: Product: syz [ 214.223143][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 214.243073][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 214.267311][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.278332][ T5933] usb 5-1: Manufacturer: syz [ 214.292332][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.297839][ T5933] usb 5-1: SerialNumber: syz [ 214.350661][ T5933] usb 5-1: config 0 descriptor?? [ 214.392905][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.437629][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.545684][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.576754][ T5951] ldm_validate_partition_table(): Disk read failed. [ 214.596883][ T5951] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.627653][ T5951] Dev loop6: unable to read RDB block 0 [ 214.661183][ T5951] loop6: unable to read partition table [ 214.684155][ T7341] ldm_validate_partition_table(): Disk read failed. [ 214.713904][ T7341] Dev loop6: unable to read RDB block 0 [ 214.722181][ T7341] loop6: unable to read partition table [ 214.732645][ T7341] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 214.876893][ T24] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 214.890103][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 215.373820][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 215.391695][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 215.398852][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 215.408320][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 215.445089][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 215.465259][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.480377][ T24] usb 3-1: USB disconnect, device number 26 [ 215.501170][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.691031][ T5900] usb 4-1: USB disconnect, device number 24 [ 216.127937][ T5900] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 216.197615][ T978] usb 5-1: USB disconnect, device number 26 [ 216.288077][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 216.303576][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 216.333114][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.336024][ T5900] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.336060][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.336082][ T5900] usb 4-1: Product: syz [ 216.336099][ T5900] usb 4-1: Manufacturer: syz [ 216.336115][ T5900] usb 4-1: SerialNumber: syz [ 216.340831][ T5900] usb 4-1: config 0 descriptor?? [ 216.344996][ T5900] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.345023][ T5900] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 216.641516][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.651206][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.948168][ T5900] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 216.958938][ T5900] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 217.001890][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 217.005726][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 217.014380][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 217.015799][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 217.020661][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 217.178643][ T5900] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 217.201564][ T5900] em28xx 4-1:0.0: No AC97 audio processor [ 217.243250][ T7372] netlink: 80 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.277391][ T7372] sctp: [Deprecated]: syz.0.450 (pid 7372) Use of int in maxseg socket option. [ 217.277391][ T7372] Use struct sctp_assoc_value instead [ 217.361073][ T7372] netlink: 80 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.728006][ T5900] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 218.137330][ T5900] usb 5-1: config index 0 descriptor too short (expected 12147, got 77) [ 218.147882][ T5900] usb 5-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 218.297183][ T5900] usb 5-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 218.335181][ T5900] usb 5-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 218.407714][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.417637][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.426649][ T5900] usb 5-1: Product: syz [ 218.431580][ T5900] usb 5-1: Manufacturer: syz [ 218.436304][ T5900] usb 5-1: SerialNumber: syz [ 218.487970][ T5933] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 218.683327][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 218.736641][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.756475][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.779531][ T5933] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 218.830311][ T5933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.844240][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.864829][ T5933] usb 3-1: Product: syz [ 218.881654][ T5933] usb 3-1: Manufacturer: syz [ 218.926189][ T5933] usb 3-1: SerialNumber: syz [ 218.943373][ T24] usb 4-1: USB disconnect, device number 25 [ 218.969457][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 219.003100][ T24] em28xx 4-1:0.0: Freeing device [ 219.126294][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 219.137985][ T7397] netlink: 'syz.3.457': attribute type 7 has an invalid length. [ 219.145729][ T7397] netlink: 'syz.3.457': attribute type 8 has an invalid length. [ 219.162431][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 219.191384][ T7397] team0: entered promiscuous mode [ 219.197309][ T7397] team_slave_0: entered promiscuous mode [ 219.210210][ T5933] usb 3-1: 0:2 : does not exist [ 219.216940][ T7397] team_slave_1: entered promiscuous mode [ 219.223718][ T5933] usb 3-1: 0:8 : does not exist [ 219.235465][ T7397] ip6gretap0: entered promiscuous mode [ 219.245713][ T7397] team0: left promiscuous mode [ 219.253688][ T7397] team_slave_0: left promiscuous mode [ 219.264476][ T7397] team_slave_1: left promiscuous mode [ 219.302231][ T7397] ip6gretap0: left promiscuous mode [ 219.323589][ T5933] usb 3-1: USB disconnect, device number 27 [ 219.638656][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.790828][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 219.807730][ T7399] netlink: 'syz.3.458': attribute type 7 has an invalid length. [ 219.833007][ T7399] netlink: 'syz.3.458': attribute type 8 has an invalid length. [ 219.977018][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 220.472522][ T7409] fuse: Unknown parameter '@' [ 220.779555][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.932433][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.094434][ T5900] usb 5-1: USB disconnect, device number 27 [ 221.106899][ T7414] FAULT_INJECTION: forcing a failure. [ 221.106899][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 221.130885][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.1.463 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 221.130915][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.130928][ T7414] Call Trace: [ 221.130936][ T7414] [ 221.130944][ T7414] dump_stack_lvl+0x189/0x250 [ 221.130985][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.131015][ T7414] ? __pfx__printk+0x10/0x10 [ 221.131040][ T7414] ? __pfx___might_resched+0x10/0x10 [ 221.131065][ T7414] should_fail_ex+0x414/0x560 [ 221.131097][ T7414] should_failslab+0xa8/0x100 [ 221.131128][ T7414] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 221.131154][ T7414] ? __alloc_skb+0x112/0x2d0 [ 221.131186][ T7414] __alloc_skb+0x112/0x2d0 [ 221.131227][ T7414] netlink_sendmsg+0x5c6/0xb30 [ 221.131261][ T7414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.131291][ T7414] ? aa_sock_msg_perm+0x94/0x160 [ 221.131314][ T7414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.131338][ T7414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.131365][ T7414] __sock_sendmsg+0x219/0x270 [ 221.131393][ T7414] ____sys_sendmsg+0x505/0x830 [ 221.131429][ T7414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.131469][ T7414] ? import_iovec+0x74/0xa0 [ 221.131497][ T7414] ___sys_sendmsg+0x21f/0x2a0 [ 221.131530][ T7414] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.131595][ T7414] ? __fget_files+0x2a/0x420 [ 221.131621][ T7414] ? __fget_files+0x3a0/0x420 [ 221.131658][ T7414] __x64_sys_sendmsg+0x19b/0x260 [ 221.131690][ T7414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.131737][ T7414] ? do_syscall_64+0xba/0x210 [ 221.131768][ T7414] do_syscall_64+0xf6/0x210 [ 221.131796][ T7414] ? clear_bhb_loop+0x45/0xa0 [ 221.131820][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.131839][ T7414] RIP: 0033:0x7f5d43d8e969 [ 221.131856][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.131873][ T7414] RSP: 002b:00007f5d44cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.131895][ T7414] RAX: ffffffffffffffda RBX: 00007f5d43fb5fa0 RCX: 00007f5d43d8e969 [ 221.131909][ T7414] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 221.131921][ T7414] RBP: 00007f5d44cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.131933][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.131945][ T7414] R13: 0000000000000000 R14: 00007f5d43fb5fa0 R15: 00007f5d440dfa28 [ 221.131975][ T7414] [ 221.380323][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.783381][ T7423] netlink: 'syz.2.467': attribute type 11 has an invalid length. [ 222.049342][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 222.066156][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 222.097984][ T7430] netlink: 'syz.3.469': attribute type 14 has an invalid length. [ 222.136431][ T7432] vlan0: entered promiscuous mode [ 222.688144][ T5906] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 222.710190][ T7453] fuse: Unknown parameter '@' [ 222.857929][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 222.872902][ T5906] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 222.891732][ T5906] usb 3-1: config 11 has no interface number 0 [ 222.911353][ T5906] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.933936][ T5906] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.950238][ T5900] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 222.977958][ T5906] usb 3-1: config 11 interface 95 has no altsetting 0 [ 223.018877][ T5906] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 223.043043][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.057923][ T5906] usb 3-1: Product: syz [ 223.068805][ T5906] usb 3-1: Manufacturer: syz [ 223.087720][ T5906] usb 3-1: SerialNumber: syz [ 223.135023][ T5900] usb 4-1: device descriptor read/64, error -71 [ 223.314409][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 223.322017][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.338447][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.373941][ T5906] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 223.387897][ T5900] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 223.396500][ T7465] netlink: 'syz.0.483': attribute type 7 has an invalid length. [ 223.414539][ T7465] netlink: 'syz.0.483': attribute type 8 has an invalid length. [ 223.423210][ T5906] usb 3-1: USB disconnect, device number 28 [ 223.438334][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 223.529653][ T5900] usb 4-1: device descriptor read/64, error -71 [ 223.673724][ T5900] usb usb4-port1: attempt power cycle [ 224.007407][ T7483] vlan0: entered promiscuous mode [ 224.057937][ T5900] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 224.382846][ T5900] usb 4-1: device descriptor read/8, error -71 [ 224.629443][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 224.661438][ T5900] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 224.709312][ T5900] usb 4-1: device descriptor read/8, error -71 [ 224.748540][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.757299][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.827995][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 224.846270][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 224.858430][ T5900] usb usb4-port1: unable to enumerate USB device [ 224.866019][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 224.881782][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.898272][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 224.932950][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 224.944132][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.975224][ T24] usb 1-1: Product: syz [ 224.985393][ T24] usb 1-1: Manufacturer: syz [ 225.002227][ T24] usb 1-1: SerialNumber: syz [ 225.023148][ T24] usb 1-1: config 0 descriptor?? [ 225.040225][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 225.046243][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 225.104601][ T7494] fuse: Unknown parameter '@' [ 225.262559][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.307382][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.418200][ T24] usb 1-1: USB disconnect, device number 27 [ 225.560282][ T7496] netlink: 14 bytes leftover after parsing attributes in process `syz.1.494'. [ 225.791253][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.808264][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.877991][ T5900] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 226.031763][ T5900] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.048304][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.078969][ T5900] usb 3-1: Product: syz [ 226.083215][ T5900] usb 3-1: Manufacturer: syz [ 226.111430][ T7507] netlink: 'syz.3.497': attribute type 13 has an invalid length. [ 226.253681][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 226.282385][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.291822][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.313478][ T5900] usb 3-1: SerialNumber: syz [ 226.321360][ T5900] usb 3-1: config 0 descriptor?? [ 226.354567][ T7507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.569500][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 226.766524][ T5904] usb 4-1: config 0 has no interfaces? [ 226.830169][ T5904] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 226.858238][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.900511][ T5904] usb 4-1: Product: syz [ 226.916174][ T5900] usb 3-1: Firmware version (0.0) predates our first public release. [ 226.935470][ T5900] usb 3-1: Please update to version 0.2 or newer [ 226.944548][ T5904] usb 4-1: Manufacturer: syz [ 226.952546][ T5904] usb 4-1: SerialNumber: syz [ 226.993656][ T5904] usb 4-1: config 0 descriptor?? [ 227.140291][ T5900] usb 3-1: USB disconnect, device number 29 [ 227.837918][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 228.006087][ T5904] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 228.025051][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.127989][ T5933] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 228.140296][ T5904] usb 5-1: config 0 has no interface number 0 [ 228.177257][ T5904] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 228.206274][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.227224][ T5904] usb 5-1: Product: syz [ 228.236465][ T5904] usb 5-1: Manufacturer: syz [ 228.246820][ T5904] usb 5-1: SerialNumber: syz [ 228.278307][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 228.295305][ T5933] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 55, changing to 7 [ 228.308727][ T5904] usb 5-1: config 0 descriptor?? [ 228.326605][ T5933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.337102][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.349433][ T5904] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 228.356101][ T5904] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 228.365504][ T5933] usb 3-1: Product: ఁ [ 228.377879][ T5933] usb 3-1: Manufacturer: 芪鵋厎瘥ࢵ㊶읒⢟ⴷ纆㿻穬薳欲䜿╊쫡堋䨦봥걷ด锽骭씼紪﵆ﮁ퟿鏸䵒쇫험䥬ዼ闖╩붵Ⳉ烼켿옜쇮埈圿熬梢颁뒈펯絸圥졄衕鯫邝㹪톢ࣽ㨠ếत㑋庿痍ꈷ㗢ꊏ奞֜즘뿩ᆈ吺啤띯枹㸲Ꚗ渶氉쭠꬛ꔂ杺⽊썢馉੅ꯑ [ 228.419510][ T5933] usb 3-1: SerialNumber: ꁲⲮ텬鐂鋰ᰞ튤딭Ꜷ匰₏㋠벘폟⠺ᐯ籢룈뾓侈̺ꁄ촚Ꮹ✵쭟詤⿁戯䠎뭳㔆ӓꤓῳࣖ⢪였틯헗争1锈皃轣볞蘇霿୾粅 蕙゙╖嗘眝稯灉ꎉꇕ✮鞵﯅䶣홾낐㪜嵶崃烬჌ԗ垨簌冩緃ᨻꋠㄇﳸ幟ሟ䯏㞎佳칖쒕↢쀨耢 [ 228.550759][ T5904] usb 5-1: USB disconnect, device number 28 [ 228.955520][ T7507] syz.3.497 (7507) used greatest stack depth: 19160 bytes left [ 229.201518][ T5933] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 229.228897][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'. [ 229.260751][ T7536] netlink: 'syz.1.504': attribute type 7 has an invalid length. [ 229.320101][ T7536] netlink: 'syz.1.504': attribute type 8 has an invalid length. [ 229.333260][ T24] usb 4-1: USB disconnect, device number 30 [ 229.337891][ T5933] usb 3-1: USB disconnect, device number 30 [ 229.386755][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 229.450726][ T7541] loop6: detected capacity change from 0 to 524287999 [ 229.484797][ T7541] buffer_io_error: 24 callbacks suppressed [ 229.484817][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.505358][ T7540] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 229.522151][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.539886][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.548777][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.566078][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.586957][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.596226][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.615659][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.624035][ T7541] ldm_validate_partition_table(): Disk read failed. [ 229.631484][ T7541] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.653308][ T7541] Dev loop6: unable to read RDB block 0 [ 229.656604][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.677375][ T7541] loop6: unable to read partition table [ 229.692555][ T7541] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 229.763450][ T5213] ldm_validate_partition_table(): Disk read failed. [ 229.814960][ T5213] Dev loop6: unable to read RDB block 0 [ 229.826384][ T5213] loop6: unable to read partition table [ 230.035215][ T7560] tmpfs: Unknown parameter '0x0000000000000003' [ 230.407898][ T5933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 230.611269][ T5933] usb 5-1: config 0 has no interfaces? [ 230.623836][ T5933] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 230.634032][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.642352][ T5933] usb 5-1: Product: syz [ 230.647238][ T5933] usb 5-1: Manufacturer: syz [ 230.654952][ T5933] usb 5-1: SerialNumber: syz [ 230.685763][ T5933] usb 5-1: config 0 descriptor?? [ 230.925573][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 231.093311][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.172598][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.226814][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.298317][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.320444][ T7573] fuse: Unknown parameter '@' [ 231.366142][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.422435][ T5904] usb 3-1: config 0 descriptor?? [ 231.887732][ T5904] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 231.953770][ T5904] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 232.134165][ T7575] openvswitch: netlink: IP tunnel TTL not specified. [ 232.897965][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 233.016464][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 233.053480][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 233.062911][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.106486][ T24] usb 4-1: config 0 descriptor?? [ 233.131407][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 233.531938][ T5906] usb 5-1: USB disconnect, device number 29 [ 233.542162][ T7583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 233.542162][ T7583] program syz.3.519 not setting count and/or reply_len properly [ 233.632422][ T7591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.522'. [ 233.735602][ T7598] sg_write: data in/out 65504/17 bytes for SCSI command 0x1-- guessing data in; [ 233.735602][ T7598] program syz.4.523 not setting count and/or reply_len properly [ 233.763109][ T7598] loop6: detected capacity change from 0 to 524287999 [ 233.776050][ T7598] ldm_validate_partition_table(): Disk read failed. [ 233.783862][ T7598] Dev loop6: unable to read RDB block 0 [ 233.795201][ T7598] loop6: unable to read partition table [ 233.801278][ T7598] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 233.927943][ T5906] usb 3-1: USB disconnect, device number 31 [ 234.163567][ T7609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.283455][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 234.308868][ T7611] netlink: 'syz.4.528': attribute type 7 has an invalid length. [ 234.317140][ T7611] netlink: 'syz.4.528': attribute type 8 has an invalid length. [ 234.325522][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 234.368267][ T5906] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 234.541801][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.556871][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.569810][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.597889][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.606088][ T5906] usb 3-1: Product: syz [ 234.616244][ T5906] usb 3-1: Manufacturer: syz [ 234.616714][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.626403][ T5906] usb 3-1: SerialNumber: syz [ 234.641836][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.669871][ T7617] syzkaller0: entered promiscuous mode [ 234.675559][ T7617] syzkaller0: entered allmulticast mode [ 234.876444][ T5906] usb 3-1: 0:2 : does not exist [ 234.907289][ T5906] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 234.975637][ T5906] usb 3-1: USB disconnect, device number 32 [ 235.293096][ T5904] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 235.329381][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.458427][ T5904] usb 5-1: config 0 has no interfaces? [ 235.473859][ T5904] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.483532][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.497491][ T5904] usb 5-1: Product: syz [ 235.525509][ T5904] usb 5-1: Manufacturer: syz [ 235.531208][ T5904] usb 5-1: SerialNumber: syz [ 235.561324][ T5904] usb 5-1: config 0 descriptor?? [ 235.654711][ T24] gspca_stv06xx: I2C: Read error writing address: -71 [ 235.723825][ T24] usb 4-1: USB disconnect, device number 31 [ 235.828823][ T5904] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 235.856747][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 235.992186][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 236.007469][ T5904] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 236.024592][ T5904] usb 3-1: config 0 has no interface number 0 [ 236.063041][ T5904] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 236.115690][ T5904] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 236.194847][ T5904] usb 3-1: config 0 interface 41 has no altsetting 0 [ 236.229921][ T5904] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 236.247813][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.258384][ T5904] usb 3-1: Product: syz [ 236.273823][ T5904] usb 3-1: Manufacturer: syz [ 236.290151][ T5904] usb 3-1: SerialNumber: syz [ 236.307013][ T5904] usb 3-1: config 0 descriptor?? [ 236.333231][ T7630] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 236.346834][ T7630] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 236.588641][ T7631] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 236.601223][ T7631] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 236.670232][ T7645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.858434][ T5904] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 236.930753][ T5904] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 236.954126][ T5904] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 236.992898][ T5904] usb 3-1: USB disconnect, device number 33 [ 237.428899][ T5906] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 237.593991][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 237.601718][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.615713][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.637476][ T5906] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 237.672146][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.683853][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.694513][ T5906] usb 4-1: Product: syz [ 237.702485][ T5906] usb 4-1: Manufacturer: syz [ 237.707359][ T5906] usb 4-1: SerialNumber: syz [ 237.795781][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 237.982967][ T5906] usb 4-1: 0:2 : does not exist [ 237.998987][ T5906] usb 4-1: 0:8 : does not exist [ 238.035134][ T5906] usb 4-1: USB disconnect, device number 32 [ 238.232556][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.806284][ T24] usb 5-1: USB disconnect, device number 30 [ 238.843266][ T5906] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 239.014475][ T5904] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 239.078751][ T5906] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.098083][ T5906] usb 4-1: config 0 has no interface number 0 [ 239.104283][ T5906] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 239.147837][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.161818][ T5906] usb 4-1: config 0 descriptor?? [ 239.171431][ T5906] usb 4-1: selecting invalid altsetting 1 [ 239.189066][ T5906] dvb_ttusb_budget: ttusb_init_controller: error [ 239.196115][ T5906] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 239.208459][ T5904] usb 3-1: config 0 has no interfaces? [ 239.227331][ T5904] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.248844][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.257009][ T5904] usb 3-1: Product: syz [ 239.263135][ T5906] DVB: Unable to find symbol cx22700_attach() [ 239.312981][ T5904] usb 3-1: Manufacturer: syz [ 239.316898][ T5906] DVB: Unable to find symbol tda10046_attach() [ 239.354495][ T5906] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 239.365885][ T5904] usb 3-1: SerialNumber: syz [ 239.475600][ T5904] usb 3-1: config 0 descriptor?? [ 239.601292][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 240.118204][ T5906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 240.126983][ T5904] usb 4-1: USB disconnect, device number 33 [ 240.270174][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.300309][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.331685][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.371385][ T7691] vlan2: entered promiscuous mode [ 240.376785][ T5906] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.393324][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.437652][ T5906] usb 5-1: config 0 descriptor?? [ 240.846044][ T7698] netlink: 272 bytes leftover after parsing attributes in process `syz.1.559'. [ 240.928465][ T5904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 240.974912][ T5906] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.992678][ T5906] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 241.070912][ T5906] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 241.089816][ T5901] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 241.097600][ T5904] usb 4-1: device descriptor read/64, error -71 [ 241.173593][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.193704][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.208467][ T5906] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 241.249769][ T5906] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.252611][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.276864][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.295125][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.346009][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.354359][ T5906] usb 5-1: USB disconnect, device number 31 [ 241.359856][ T5904] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 241.389300][ T5901] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.414366][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.476346][ T5901] usb 1-1: config 0 descriptor?? [ 241.507997][ T5904] usb 4-1: device descriptor read/64, error -71 [ 241.619281][ T5904] usb usb4-port1: attempt power cycle [ 241.808086][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.817093][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.854538][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 241.987153][ T5904] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 242.024365][ T5901] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 242.035407][ T5904] usb 4-1: device descriptor read/8, error -71 [ 242.047340][ T5901] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 242.267262][ T978] usb 3-1: USB disconnect, device number 34 [ 242.358031][ T5904] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 242.378058][ T5906] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 242.388545][ T5904] usb 4-1: device descriptor read/8, error -71 [ 242.509725][ T5904] usb usb4-port1: unable to enumerate USB device [ 242.615053][ T5906] usb 5-1: config 0 has no interfaces? [ 242.679393][ T5906] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.690294][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.705077][ T5906] usb 5-1: Product: syz [ 242.712357][ T5906] usb 5-1: Manufacturer: syz [ 242.717498][ T5906] usb 5-1: SerialNumber: syz [ 242.727602][ T5906] usb 5-1: config 0 descriptor?? [ 242.936053][ T7715] syzkaller0: entered promiscuous mode [ 242.977224][ T7715] syzkaller0: entered allmulticast mode [ 243.275097][ T7711] netlink: 220 bytes leftover after parsing attributes in process `syz.2.564'. [ 243.569300][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 243.579014][ T7722] netlink: 'syz.3.567': attribute type 7 has an invalid length. [ 243.586931][ T7722] netlink: 'syz.3.567': attribute type 8 has an invalid length. [ 243.595454][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 243.617996][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 243.739336][ T5904] usb 3-1: device descriptor read/64, error -71 [ 243.890559][ T5901] usb 1-1: USB disconnect, device number 28 [ 243.978706][ T5904] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 244.129692][ T5904] usb 3-1: device descriptor read/64, error -71 [ 244.258204][ T5904] usb usb3-port1: attempt power cycle [ 244.648295][ T5904] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 244.678776][ T5904] usb 3-1: device descriptor read/8, error -71 [ 244.938396][ T5904] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 244.959902][ T5900] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 244.971197][ T5904] usb 3-1: device descriptor read/8, error -71 [ 245.082208][ T5904] usb usb3-port1: unable to enumerate USB device [ 245.132226][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 245.145402][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 245.156514][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 245.179752][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 245.193760][ T5900] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 245.203226][ T5900] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 245.212663][ T5900] usb 1-1: Manufacturer: syz [ 245.228415][ T5900] usb 1-1: config 0 descriptor?? [ 245.238573][ T7730] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 245.249818][ T5900] smsusb:smsusb_probe: board id=9, interface number 0 [ 245.274557][ T5900] smsusb:siano_media_device_register: media controller created [ 245.311676][ T5900] ------------[ cut here ]------------ [ 245.317406][ T5900] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 245.325150][ T5900] WARNING: CPU: 1 PID: 5900 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc37/0x1870 [ 245.335452][ T5900] Modules linked in: [ 245.340457][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: kworker/1:4 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 245.352606][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.362861][ T5900] Workqueue: usb_hub_wq hub_event [ 245.368026][ T5900] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 245.373720][ T5900] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 e0 4c 32 8c 4c 89 f6 4c 89 fa e8 2a 82 70 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 ae dc 8e e8 90 [ 245.393535][ T5900] RSP: 0018:ffffc900048beb70 EFLAGS: 00010246 [ 245.400195][ T5900] RAX: f958c9b1d9c98400 RBX: ffff88802962aa00 RCX: 0000000000100000 [ 245.408403][ T5900] RDX: ffffc90018bcb000 RSI: 000000000002da61 RDI: 000000000002da62 [ 245.416426][ T5900] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 245.424648][ T5900] R10: dffffc0000000000 R11: fffffbfff1bfa4b4 R12: ffffffff8c324acc [ 245.433227][ T5900] R13: dffffc0000000000 R14: ffffffff8c32b5c0 R15: ffff8880292e8f40 [ 245.441605][ T5900] FS: 0000000000000000(0000) GS:ffff888125da3000(0000) knlGS:0000000000000000 [ 245.450695][ T5900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.457343][ T5900] CR2: 00007fc85a971da0 CR3: 000000005deca000 CR4: 00000000003526f0 [ 245.465522][ T5900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.473577][ T5900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.481813][ T5900] Call Trace: [ 245.485211][ T5900] [ 245.488435][ T5900] smsusb_start_streaming+0x22/0x340 [ 245.493812][ T5900] smsusb_probe+0x18f6/0x2060 [ 245.498608][ T5900] ? __pfx_smsusb_probe+0x10/0x10 [ 245.503695][ T5900] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 245.509474][ T5900] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 245.515669][ T5900] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 245.522130][ T5900] ? __pm_runtime_set_status+0x785/0xa50 [ 245.527963][ T5900] usb_probe_interface+0x641/0xbc0 [ 245.533103][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 245.539244][ T5900] really_probe+0x26a/0x9a0 [ 245.543786][ T5900] __driver_probe_device+0x18c/0x2f0 [ 245.549617][ T5900] driver_probe_device+0x4f/0x430 [ 245.554725][ T5900] __device_attach_driver+0x2ce/0x530 [ 245.560194][ T5900] bus_for_each_drv+0x24e/0x2e0 [ 245.565080][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 245.571128][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 245.576533][ T5900] __device_attach+0x2b8/0x400 [ 245.581377][ T5900] ? __pfx___device_attach+0x10/0x10 [ 245.586699][ T5900] ? do_raw_spin_unlock+0x122/0x240 [ 245.592161][ T5900] bus_probe_device+0x185/0x260 [ 245.597046][ T5900] device_add+0x7b6/0xb50 [ 245.601450][ T5900] usb_set_configuration+0x1a87/0x20e0 [ 245.607038][ T5900] usb_generic_driver_probe+0x8d/0x150 [ 245.612603][ T5900] usb_probe_device+0x1c1/0x390 [ 245.617596][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 245.623052][ T5900] really_probe+0x26a/0x9a0 [ 245.627610][ T5900] __driver_probe_device+0x18c/0x2f0 [ 245.633049][ T5900] driver_probe_device+0x4f/0x430 [ 245.639157][ T5900] __device_attach_driver+0x2ce/0x530 [ 245.644588][ T5900] bus_for_each_drv+0x24e/0x2e0 [ 245.650146][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 245.656224][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 245.661894][ T5900] __device_attach+0x2b8/0x400 [ 245.666783][ T5900] ? __pfx___device_attach+0x10/0x10 [ 245.672157][ T5900] ? do_raw_spin_unlock+0x122/0x240 [ 245.677436][ T5900] bus_probe_device+0x185/0x260 [ 245.682412][ T5900] device_add+0x7b6/0xb50 [ 245.686808][ T5900] usb_new_device+0xa39/0x16c0 [ 245.691848][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 245.697077][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.702322][ T5900] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.707985][ T5900] hub_event+0x2941/0x4a00 [ 245.712500][ T5900] ? __pfx_hub_event+0x10/0x10 [ 245.717309][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 245.723164][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.728611][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 245.734382][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 245.740542][ T5900] process_scheduled_works+0xadb/0x17a0 [ 245.746156][ T5900] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.752777][ T5900] worker_thread+0x8a0/0xda0 [ 245.757486][ T5900] kthread+0x70e/0x8a0 [ 245.761686][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 245.766914][ T5900] ? __pfx_kthread+0x10/0x10 [ 245.771762][ T5900] ? __pfx_kthread+0x10/0x10 [ 245.776461][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.781751][ T5900] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.786987][ T5900] ? __pfx_kthread+0x10/0x10 [ 245.791813][ T5900] ret_from_fork+0x4b/0x80 [ 245.796276][ T5900] ? __pfx_kthread+0x10/0x10 [ 245.800975][ T5900] ret_from_fork_asm+0x1a/0x30 [ 245.805803][ T5900] [ 245.809028][ T5900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.816382][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: kworker/1:4 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 245.828472][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.838570][ T5900] Workqueue: usb_hub_wq hub_event [ 245.843665][ T5900] Call Trace: [ 245.847048][ T5900] [ 245.849995][ T5900] dump_stack_lvl+0x99/0x250 [ 245.854631][ T5900] ? __asan_memcpy+0x40/0x70 [ 245.859238][ T5900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.864454][ T5900] ? __pfx__printk+0x10/0x10 [ 245.869074][ T5900] panic+0x2db/0x790 [ 245.872992][ T5900] ? __pfx_panic+0x10/0x10 [ 245.877470][ T5900] ? ret_from_fork_asm+0x1a/0x30 [ 245.882465][ T5900] __warn+0x31b/0x4b0 [ 245.886684][ T5900] ? usb_submit_urb+0xc37/0x1870 [ 245.891768][ T5900] ? usb_submit_urb+0xc37/0x1870 [ 245.896841][ T5900] report_bug+0x2be/0x4f0 [ 245.901224][ T5900] ? usb_submit_urb+0xc37/0x1870 [ 245.906191][ T5900] ? usb_submit_urb+0xc37/0x1870 [ 245.911248][ T5900] ? usb_submit_urb+0xc39/0x1870 [ 245.916256][ T5900] handle_bug+0x84/0x160 [ 245.920534][ T5900] exc_invalid_op+0x1a/0x50 [ 245.925075][ T5900] asm_exc_invalid_op+0x1a/0x20 [ 245.930047][ T5900] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 245.935676][ T5900] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 e0 4c 32 8c 4c 89 f6 4c 89 fa e8 2a 82 70 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 ae dc 8e e8 90 [ 245.955493][ T5900] RSP: 0018:ffffc900048beb70 EFLAGS: 00010246 [ 245.961809][ T5900] RAX: f958c9b1d9c98400 RBX: ffff88802962aa00 RCX: 0000000000100000 [ 245.969816][ T5900] RDX: ffffc90018bcb000 RSI: 000000000002da61 RDI: 000000000002da62 [ 245.977861][ T5900] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 245.985888][ T5900] R10: dffffc0000000000 R11: fffffbfff1bfa4b4 R12: ffffffff8c324acc [ 245.993996][ T5900] R13: dffffc0000000000 R14: ffffffff8c32b5c0 R15: ffff8880292e8f40 [ 246.002112][ T5900] smsusb_start_streaming+0x22/0x340 [ 246.007576][ T5900] smsusb_probe+0x18f6/0x2060 [ 246.012306][ T5900] ? __pfx_smsusb_probe+0x10/0x10 [ 246.017399][ T5900] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 246.023010][ T5900] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 246.028929][ T5900] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.035305][ T5900] ? __pm_runtime_set_status+0x785/0xa50 [ 246.040972][ T5900] usb_probe_interface+0x641/0xbc0 [ 246.046211][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 246.051889][ T5900] really_probe+0x26a/0x9a0 [ 246.056531][ T5900] __driver_probe_device+0x18c/0x2f0 [ 246.061860][ T5900] driver_probe_device+0x4f/0x430 [ 246.066994][ T5900] __device_attach_driver+0x2ce/0x530 [ 246.072691][ T5900] bus_for_each_drv+0x24e/0x2e0 [ 246.077581][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 246.083491][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 246.088911][ T5900] __device_attach+0x2b8/0x400 [ 246.093696][ T5900] ? __pfx___device_attach+0x10/0x10 [ 246.099008][ T5900] ? do_raw_spin_unlock+0x122/0x240 [ 246.104243][ T5900] bus_probe_device+0x185/0x260 [ 246.109112][ T5900] device_add+0x7b6/0xb50 [ 246.113486][ T5900] usb_set_configuration+0x1a87/0x20e0 [ 246.118977][ T5900] usb_generic_driver_probe+0x8d/0x150 [ 246.124452][ T5900] usb_probe_device+0x1c1/0x390 [ 246.129317][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 246.134698][ T5900] really_probe+0x26a/0x9a0 [ 246.139224][ T5900] __driver_probe_device+0x18c/0x2f0 [ 246.144535][ T5900] driver_probe_device+0x4f/0x430 [ 246.149595][ T5900] __device_attach_driver+0x2ce/0x530 [ 246.155008][ T5900] bus_for_each_drv+0x24e/0x2e0 [ 246.159880][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 246.165794][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 246.171187][ T5900] __device_attach+0x2b8/0x400 [ 246.176220][ T5900] ? __pfx___device_attach+0x10/0x10 [ 246.181549][ T5900] ? do_raw_spin_unlock+0x122/0x240 [ 246.186795][ T5900] bus_probe_device+0x185/0x260 [ 246.191773][ T5900] device_add+0x7b6/0xb50 [ 246.196158][ T5900] usb_new_device+0xa39/0x16c0 [ 246.200991][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 246.206238][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.211497][ T5900] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.216732][ T5900] hub_event+0x2941/0x4a00 [ 246.221217][ T5900] ? __pfx_hub_event+0x10/0x10 [ 246.226019][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 246.231779][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.237022][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 246.242857][ T5900] ? process_scheduled_works+0x9ec/0x17a0 [ 246.248617][ T5900] process_scheduled_works+0xadb/0x17a0 [ 246.254324][ T5900] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.260341][ T5900] worker_thread+0x8a0/0xda0 [ 246.265052][ T5900] kthread+0x70e/0x8a0 [ 246.269137][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 246.274690][ T5900] ? __pfx_kthread+0x10/0x10 [ 246.279390][ T5900] ? __pfx_kthread+0x10/0x10 [ 246.284046][ T5900] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.289364][ T5900] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.294659][ T5900] ? __pfx_kthread+0x10/0x10 [ 246.299270][ T5900] ret_from_fork+0x4b/0x80 [ 246.303841][ T5900] ? __pfx_kthread+0x10/0x10 [ 246.308474][ T5900] ret_from_fork_asm+0x1a/0x30 [ 246.313263][ T5900] [ 246.316625][ T5900] Kernel Offset: disabled [ 246.320980][ T5900] Rebooting in 86400 seconds..