last executing test programs: 4.953259935s ago: executing program 3 (id=5829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX], 0xfb, 0x28a, &(0x7f0000000700)="$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") openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x12042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000290000003600000001000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00972357c069e13f26be638a629b556e7575808332a677a8"], 0x40}, 0x40) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000200)={{0x0, 0x2, 0x213}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x1, 0x2, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002df44ea231414aa00000000000000001400020002000000e000000200000000000000000d0001005f0a703a73"], 0x54}}, 0x0) 4.40161803s ago: executing program 2 (id=5837): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) truncate(0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x1, 0x1061d, &(0x7f0000010640)="$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") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r5, 0x79f, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000002080)=0x64, 0x23b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 2.848636027s ago: executing program 3 (id=5839): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x1, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setuid(0xee01) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.576501149s ago: executing program 3 (id=5840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x0) 2.524794723s ago: executing program 3 (id=5842): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfc, 0xc53, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 2.215376039s ago: executing program 3 (id=5843): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ocfs2(&(0x7f0000000380), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4436, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 1.889159045s ago: executing program 0 (id=5844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000001000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202021e0008004b00060099"], 0x40}}, 0x4000800) 1.725226059s ago: executing program 0 (id=5845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r1, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) 1.556493472s ago: executing program 1 (id=5846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="28003300d0799bb4c5e55fcedf0108021100000050505050505000"], 0x44}}, 0x0) 1.450523151s ago: executing program 1 (id=5847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) 1.420436323s ago: executing program 0 (id=5848): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) unshare(0x2a020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.312549763s ago: executing program 3 (id=5849): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.305078983s ago: executing program 1 (id=5850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX], 0xfb, 0x28a, &(0x7f0000000700)="$eJzs3T9v004cx/HPOWmT369Vcf8gJMRUqMSE2rIgliKUgZ2FCQFNkCqiIkERf6bAjGBn5ynwABiZEDMSGxMPIJvRnc/ESe04RE2dhPdLSuTU97W/F597901VRQD+WTcbPz5e/WkfRqqoIum6FEiqS1VJZ3Wu/uzw6OCo3WoOO1DFRdiHURxpjrXZP2xlhdo4F+GF9lVVy+mfYTLq39V5f+PW87LzQLnc3Z8hkGr+7nT766ee2WR0yk6gZKarrl5opew8AADl8vN/4Of5Zb9+DwJpy0/7/fP/jE+g3bITmLDPBftT87+rsiJjr+8Zt6tX77kSzu4PkipxnFwWFY+svgWmKaoqXS7Bfw8P2q0r+4/bzUBvtOct9JptuOdmPHQTLttavP36+KE3M2rTIcbv+5Lrw4Ltw246/1ST9ZM9YzHzxXw1d02oD2r+Wf9VI2Mvk7tS4cCVivPfzj+i6+WiXKucXq66k5z3Z/CG9rKinIpEyYhaVf8HBGFRni5qbSAq7t1OQdR6ZtRuQdTGYFRvNOdHTpp5Z+6YTf3SJzVS6//AvttbGuXOtG1cSz8yhvan6lqGbj7xd13nQmbLYNweIUcURVHevrd6oGtaefry1aP77Xbrydxu2DtxCtKYqo1kEExLPnO7Yd/kUs6ezDvjH+c0fkGhbL2L/peB/G1mXth1l4nrv1S9su0Wa/Yp7F+n19KxucuLROqIOzm1wZp7/j+jgsuqDYz76GEpv4Ibtea6eFm6NMoZY6HPc/rsjRNkGvqme3z+DwAAAAAAAAAAAAAAAAAAMGtO7l8O6srbVXYfAQAAAAAAAAAAAAAAAAAAAACYdVP3/b+3Fb/i+3+BifsdAAD//8lweo0=") openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x12042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000290000003600000001000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00972357c069e13f26be638a629b556e7575808332a677a8"], 0x40}, 0x40) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000200)={{0x0, 0x2, 0x213}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x1, 0x2, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002df44ea231414aa00000000000000001400020002000000e000000200000000000000000d0001005f0a703a73"], 0x54}}, 0x0) 1.257263327s ago: executing program 0 (id=5851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xe}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x488c0) 1.044513154s ago: executing program 2 (id=5852): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.044353425s ago: executing program 0 (id=5853): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 974.20096ms ago: executing program 0 (id=5854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="33dab61d4602a9ff64ab83c0a56b99ae2475939439000000000000000035e4da56652065bcfcb730ff3aae4961105e188f682e6878bfa798c27e68ebf0bcb632d22660a8bac484a4fcd5b358dc774deb387bc0eb2c4d5f748d8f6d3fd62f7e4cfb6aff2d3450d0bb4441981ba2baed4bdcf3ac984153dc3581ca95b60d2502c68c1988b7c5f3f2a6da9c59a4fd26219c2c8e14fba122838bda60c988a2e4ea372f6f1407e64058013faba8db62cb3cddbe8ba1b7318afa1a3575508f49", 0xbd, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="080102008000000000"]) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20004891) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x4b8528, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, 0x0, 0x0) 962.279361ms ago: executing program 2 (id=5855): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x7ff, 0x7fd, 0xff9, 0xfff7, 0x0, "a8dff370f0fff7fd"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) 268.933828ms ago: executing program 1 (id=5856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 172.398006ms ago: executing program 2 (id=5857): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) close(r0) 153.889977ms ago: executing program 1 (id=5858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000000000000fcffffff01"]) 125.349029ms ago: executing program 2 (id=5859): capset(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0xff, 0x7ff, 0x3, 0x1, 0x83, 0x3}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x53, 0x0) 256.66µs ago: executing program 2 (id=5860): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) 0s ago: executing program 1 (id=5861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r1, 0xd66771a5e8224ded, 0x0, 0x1, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffff65, 0x52}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): ][T24690] trusted_key: encrypted_key: insufficient parameters specified [ 2664.554000][T24723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4629'. [ 2664.577017][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 2664.704264][T24728] tmpfs: Bad value for 'uid' [ 2665.191580][T24740] trusted_key: encrypted_key: insufficient parameters specified [ 2666.163836][T24748] trusted_key: encrypted_key: insufficient parameters specified [ 2666.710878][T24759] Cannot find del_set index 0 as target [ 2670.880319][T24809] trusted_key: encrypted_key: insufficient parameters specified [ 2671.136370][T24820] trusted_key: encrypted_key: insufficient parameters specified [ 2671.445132][T19673] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2671.631347][T19673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2671.643644][T19673] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2671.653433][T19673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.668576][T19673] usb 2-1: config 0 descriptor?? [ 2672.099891][T19673] itetech 0003:258A:6A88.0005: unbalanced collection at end of report description [ 2672.118414][T19673] itetech: probe of 0003:258A:6A88.0005 failed with error -22 [ 2672.324386][T18261] usb 2-1: USB disconnect, device number 27 [ 2673.130679][T24840] (null): rxe_set_mtu: Set mtu to 256 [ 2673.142160][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.150503][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.158077][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.270212][T24840] infiniband syz2: set down [ 2673.277736][T18261] vxcan1 speed is unknown, defaulting to 1000 [ 2673.285173][T24840] infiniband syz2: added vxcan1 [ 2673.323946][T24840] RDS/IB: syz2: added [ 2673.330948][T24840] smc: adding ib device syz2 with port count 1 [ 2673.337760][T24840] smc: ib device syz2 port 1 has pnetid [ 2673.348255][T18261] vxcan1 speed is unknown, defaulting to 1000 [ 2673.360826][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.464106][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.570631][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2673.670396][T24840] vxcan1 speed is unknown, defaulting to 1000 [ 2674.805350][T22053] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2675.046040][T18261] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2675.185593][T22053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2675.245685][T22053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2675.365586][T18261] usb 2-1: Using ep0 maxpacket: 16 [ 2675.369005][T22053] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2675.375874][T18261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2675.420041][T22053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.420887][T18261] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2675.475793][T18261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.499791][T18261] usb 2-1: Product: syz [ 2675.503097][T22053] usb 4-1: config 0 descriptor?? [ 2675.505025][T18261] usb 2-1: Manufacturer: syz [ 2675.519519][T18261] usb 2-1: SerialNumber: syz [ 2675.557759][T18261] usb 2-1: config 0 descriptor?? [ 2675.601277][T18261] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2675.891083][T18261] usb 2-1: USB disconnect, device number 28 [ 2676.131210][T22053] kone 0003:1E7D:2CED.0006: item fetching failed at offset 0/5 [ 2676.141145][T22053] kone 0003:1E7D:2CED.0006: parse failed [ 2676.146980][T22053] kone: probe of 0003:1E7D:2CED.0006 failed with error -22 [ 2676.190265][T24879] trusted_key: encrypted_key: insufficient parameters specified [ 2676.215160][ T5821] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2676.284575][T22053] usb 4-1: USB disconnect, device number 23 [ 2676.395374][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 2676.404313][ T5821] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2676.412552][ T5821] usb 3-1: config 0 has no interface number 0 [ 2676.427200][ T5821] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2676.440635][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.452291][ T5821] usb 3-1: Product: syz [ 2676.457178][ T5821] usb 3-1: Manufacturer: syz [ 2676.462008][ T5821] usb 3-1: SerialNumber: syz [ 2676.473778][ T5821] usb 3-1: config 0 descriptor?? [ 2676.552958][ T5821] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2676.568040][ T5821] usb 3-1: selecting invalid altsetting 1 [ 2676.573813][ T5821] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2676.607096][ T5821] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2676.624425][ T5821] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2676.633220][ T5821] usb 3-1: media controller created [ 2676.664005][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2677.797247][ T5821] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2677.807492][ T5821] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2677.815327][T24871] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 2677.935461][ T5821] usb 3-1: USB disconnect, device number 23 [ 2678.265247][T18261] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2678.455458][T18261] usb 4-1: Using ep0 maxpacket: 16 [ 2678.474709][T18261] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2678.494679][T18261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2678.510662][T18261] usb 4-1: Product: syz [ 2678.523486][T18261] usb 4-1: Manufacturer: syz [ 2678.536411][T18261] usb 4-1: SerialNumber: syz [ 2678.547816][T18261] usb 4-1: config 0 descriptor?? [ 2678.575458][T18261] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 2679.338457][T18261] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 2679.747549][T19673] usb 4-1: USB disconnect, device number 24 [ 2679.863754][T19673] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 2679.896860][T19673] visor 4-1:0.0: device disconnected [ 2681.595176][T22053] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2681.814255][T22053] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2681.833462][T22053] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2681.853680][T22053] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2681.882792][T22053] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2681.893505][T22053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.902938][T22053] usb 3-1: Product: syz [ 2681.911752][T22053] usb 3-1: Manufacturer: syz [ 2681.917352][T22053] usb 3-1: SerialNumber: syz [ 2681.930322][T24942] trusted_key: encrypted_key: insufficient parameters specified [ 2681.931055][T22053] hub 3-1:1.0: bad descriptor, ignoring hub [ 2681.956130][T22053] hub: probe of 3-1:1.0 failed with error -5 [ 2682.036296][T19673] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2682.172465][T22053] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2682.596216][T19673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2682.624217][T19673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2682.638772][T19673] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 2682.648279][T19673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2682.660375][T19673] usb 1-1: config 0 descriptor?? [ 2682.797114][T22053] usb 3-1: USB disconnect, device number 24 [ 2682.871338][T22053] usblp0: removed [ 2683.483898][T19673] semitek 0003:1EA7:0907.0007: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.0-1/input0 [ 2683.640649][T19673] usb 1-1: USB disconnect, device number 16 [ 2687.599298][T25002] trusted_key: encrypted_key: insufficient parameters specified [ 2690.683928][T25029] netlink: 'syz.2.4732': attribute type 2 has an invalid length. [ 2691.135526][T25035] trusted_key: encrypted_key: insufficient parameters specified [ 2695.871289][T25064] trusted_key: encrypted_key: insufficient parameters specified [ 2697.835629][T25087] trusted_key: encrypted_key: insufficient parameters specified [ 2698.736681][T25102] tmpfs: Cannot change global quota limit on remount [ 2699.541007][T25111] trusted_key: encrypted_key: insufficient parameters specified [ 2701.111118][T25132] netlink: 'syz.2.4767': attribute type 4 has an invalid length. [ 2702.176060][T18261] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2702.241860][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2702.489580][T18261] usb 3-1: device descriptor read/64, error -32 [ 2703.586368][T18261] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2703.845640][T18261] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2703.854530][T18261] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2703.865899][T18261] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2703.878249][T18261] usb 3-1: config 220 has no interface number 2 [ 2703.885531][T18261] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2703.898941][T18261] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2703.906029][T18261] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2703.913142][T18261] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2703.930604][T18261] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2703.940205][T18261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.949181][T18261] usb 3-1: Product: syz [ 2703.959237][T18261] usb 3-1: Manufacturer: syz [ 2703.964192][T18261] usb 3-1: SerialNumber: syz [ 2704.357289][T18261] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 2704.393064][T18261] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2704.415358][T18261] usb 3-1: No valid video chain found. [ 2704.420996][T18261] usb 3-1: selecting invalid altsetting 0 [ 2704.468682][T18261] usb 3-1: selecting invalid altsetting 0 [ 2704.474572][T18261] usbtest: probe of 3-1:220.1 failed with error -22 [ 2704.485675][T18261] usb 3-1: USB disconnect, device number 26 [ 2704.751319][T25180] trusted_key: encrypted_key: insufficient parameters specified [ 2708.559234][T25210] trusted_key: encrypted_key: insufficient parameters specified [ 2713.409123][ T5821] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2713.571034][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.580652][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.680807][ T5821] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2713.761407][ T5821] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2713.798964][ T5821] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.840354][ T5821] usb 2-1: config 220 has no interface number 2 [ 2713.877261][ T5821] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2713.916241][ T5821] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2713.945177][ T5821] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2713.958936][ T5821] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2713.979821][ T5821] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2714.005082][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.021353][ T5821] usb 2-1: Product: syz [ 2714.034669][ T5821] usb 2-1: Manufacturer: syz [ 2714.045071][ T5821] usb 2-1: SerialNumber: syz [ 2714.355689][ T5821] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 2714.364927][ T5821] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2714.623048][ T5821] usb 2-1: No valid video chain found. [ 2714.623395][ T5821] usb 2-1: selecting invalid altsetting 0 [ 2714.957980][ T5821] usb 2-1: selecting invalid altsetting 0 [ 2714.963775][ T5821] usbtest: probe of 2-1:220.1 failed with error -22 [ 2715.019837][ T5821] usb 2-1: USB disconnect, device number 29 [ 2717.245244][ T5821] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 2717.539732][ T5821] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 2717.695900][ T5821] usb 3-1: config 0 has no interface number 0 [ 2717.733724][ T5821] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 2717.784727][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.117429][ T5821] usb 3-1: Product: syz [ 2718.145119][ T5821] usb 3-1: Manufacturer: syz [ 2718.149779][ T5821] usb 3-1: SerialNumber: syz [ 2718.161913][ T5821] usb 3-1: config 0 descriptor?? [ 2718.177542][ T5821] cdc_acm 3-1:0.123: More than one union descriptor, skipping ... [ 2718.438184][T14604] usb 3-1: USB disconnect, device number 27 [ 2718.765077][ T5821] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 2718.947347][ T5821] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2719.301622][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2719.378199][ T5821] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 2719.536475][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.571104][ T5821] usb 4-1: config 0 descriptor?? [ 2720.265635][ T5821] microsoft 0003:045E:009D.0008: hidraw0: USB HID v8.00 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 2720.386739][ T5821] microsoft 0003:045E:009D.0008: no inputs found [ 2720.393132][ T5821] microsoft 0003:045E:009D.0008: could not initialize ff, continuing anyway [ 2720.478459][ T5821] usb 4-1: USB disconnect, device number 25 [ 2723.815338][T14604] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2724.005185][T14604] usb 1-1: Using ep0 maxpacket: 32 [ 2724.139272][T14604] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2724.148952][T14604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2725.277314][T14604] usb 1-1: config 0 descriptor?? [ 2725.382740][T14604] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2726.084822][T24851] usb 1-1: USB disconnect, device number 17 [ 2727.285255][T24851] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2727.465283][T24851] usb 1-1: Using ep0 maxpacket: 8 [ 2727.479186][T24851] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2727.496234][T24851] usb 1-1: config 1 has no interface number 1 [ 2727.516905][T24851] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2727.558252][T24851] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2727.581008][T24851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.126327][T24851] usb 1-1: Product: syz [ 2729.130648][T24851] usb 1-1: Manufacturer: syz [ 2729.141202][T24851] usb 1-1: SerialNumber: syz [ 2729.865432][T25429] trusted_key: encrypted_key: insufficient parameters specified [ 2729.966771][T24851] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 2729.974208][T24851] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 2729.995016][T24851] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2730.001142][T24851] usb 1-1: 2:1 : invalid channels 0 [ 2730.092481][T24851] usb 1-1: USB disconnect, device number 18 [ 2730.638289][T25243] udevd[25243]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2730.738161][ T5821] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2730.933556][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2730.956970][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2730.967391][ T5821] usb 2-1: config 1 has no interface number 0 [ 2730.973537][ T5821] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2730.985422][ T5821] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2730.998239][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2731.007742][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.027669][ T5821] usb 2-1: Product: syz [ 2731.034905][ T5821] usb 2-1: Manufacturer: syz [ 2731.041453][ T5821] usb 2-1: SerialNumber: syz [ 2733.877016][ T5821] cdc_ncm 2-1:1.1: bind() failure [ 2734.006021][ T5821] usb 2-1: USB disconnect, device number 30 [ 2736.046042][T14604] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 2736.055338][T25486] trusted_key: encrypted_key: insufficient parameters specified [ 2738.658119][T14604] usb 1-1: device descriptor read/all, error -71 [ 2739.768982][T14604] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2739.776973][T23905] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2739.966225][T23905] usb 3-1: Using ep0 maxpacket: 16 [ 2739.986627][T14604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2740.006768][T23905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2740.019072][T14604] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 2740.028525][T23905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2740.038846][T14604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2740.047451][T23905] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2740.071885][T23905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2740.088250][T14604] usb 1-1: config 0 descriptor?? [ 2740.151712][T23905] usb 3-1: config 0 descriptor?? [ 2740.762761][T14604] hid_mf 0003:0079:1846.000A: item fetching failed at offset 5/7 [ 2740.774488][T23905] waltop 0003:172F:0034.0009: item fetching failed at offset 0/2 [ 2740.783291][T14604] hid_mf 0003:0079:1846.000A: HID parse failed. [ 2740.790459][T23905] waltop: probe of 0003:172F:0034.0009 failed with error -22 [ 2740.798024][T14604] hid_mf: probe of 0003:0079:1846.000A failed with error -22 [ 2740.855201][T24851] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 2740.870218][T25520] usb usb8: usbfs: process 25520 (syz.1.4903) did not claim interface 0 before use [ 2740.986607][ T5821] usb 3-1: USB disconnect, device number 28 [ 2740.992143][T14604] usb 1-1: USB disconnect, device number 20 [ 2741.048827][T24851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2741.060099][T24851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2741.069976][T24851] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 2741.079092][T24851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.089110][T24851] usb 4-1: config 0 descriptor?? [ 2741.520000][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.530901][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.541204][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.549856][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.557349][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.564251][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.571564][T24851] wacom 0003:056A:0317.000B: unknown main item tag 0x0 [ 2741.580599][T24851] wacom 0003:056A:0317.000B: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 2741.612277][T24851] wacom 0003:056A:0317.000B: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 2741.846578][T24851] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.000B/input/input95 [ 2741.873301][T25527] trusted_key: encrypted_key: insufficient parameters specified [ 2742.618075][T24851] usb 4-1: USB disconnect, device number 26 [ 2744.132125][T25281] udevd[25281]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2745.067519][T23905] hid-generic 0000:0D17:0000.000C: unknown main item tag 0x0 [ 2745.076508][T23905] hid-generic 0000:0D17:0000.000C: unknown main item tag 0x0 [ 2745.103004][T23905] hid-generic 0000:0D17:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2745.325852][T25550] fido_id[25550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2745.369632][T25559] binder: 25558:25559 ioctl 400c620e 0 returned -14 [ 2745.465150][T23905] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2745.672426][T23905] usb 2-1: Using ep0 maxpacket: 8 [ 2745.728226][T23905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2745.754296][T23905] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 2745.777419][T23905] usb 2-1: config 4 interface 0 has no altsetting 0 [ 2745.824723][T23905] usb 2-1: string descriptor 0 read error: -22 [ 2745.833898][T23905] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2745.860903][T23905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.015903][T23905] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2746.121549][T22053] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2746.137799][T23905] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2746.148794][T23905] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2746.156905][T23905] usb 2-1: media controller created [ 2746.177322][T23905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2746.195489][ T5821] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2746.199524][T23905] zl10353_read_register: readreg error (reg=127, ret==0) [ 2746.305121][T22053] usb 1-1: Using ep0 maxpacket: 16 [ 2746.310785][T23905] usb 2-1: USB disconnect, device number 31 [ 2746.331996][T22053] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2746.345268][T22053] usb 1-1: config 0 has no interface number 0 [ 2746.351439][T22053] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2746.371965][T22053] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2746.401111][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 2746.514283][T22053] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2746.586675][ T5821] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2746.597116][T22053] usb 1-1: Product: syz [ 2746.642115][T22053] usb 1-1: SerialNumber: syz [ 2746.682114][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.744819][ T5821] usb 3-1: Product: syz [ 2746.751960][T22053] usb 1-1: config 0 descriptor?? [ 2746.778158][ T5821] usb 3-1: Manufacturer: syz [ 2746.813391][ T5821] usb 3-1: SerialNumber: syz [ 2746.841457][T22053] cm109 1-1:0.8: invalid payload size 88, expected 4 [ 2746.883676][ T5821] usb 3-1: config 0 descriptor?? [ 2746.946871][T22053] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input98 [ 2747.132164][ T5821] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 2747.145119][ T5821] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2747.168805][T25569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2747.175362][T25569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2747.191891][T25569] vhci_hcd vhci_hcd.0: Device attached [ 2747.210324][T25570] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2747.218048][T15569] vhci_hcd: stop threads [ 2747.222435][T15569] vhci_hcd: release socket [ 2747.229647][T15569] vhci_hcd: disconnect device [ 2747.331965][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2747.339395][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.346527][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.353634][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.360796][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.367950][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.375079][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.382348][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.389521][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.397936][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.405055][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2747.414074][ T5821] usb 1-1: USB disconnect, device number 21 [ 2747.420072][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2747.454648][T14604] usb 3-1: USB disconnect, device number 29 [ 2747.478223][ T5821] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2748.737362][T25584] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 2748.756306][T25583] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 2749.115062][T22053] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2750.077053][T22053] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2750.086997][T22053] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2750.096979][T22053] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2750.187281][ T5821] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2750.197094][T22053] usb 4-1: config 220 has no interface number 2 [ 2750.203973][T22053] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2750.217224][T22053] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2750.224018][T22053] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2750.230961][T22053] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2750.241899][T22053] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2750.253053][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2750.261178][T22053] usb 4-1: Product: syz [ 2750.265419][T22053] usb 4-1: Manufacturer: syz [ 2750.270042][T22053] usb 4-1: SerialNumber: syz [ 2750.405725][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 2750.417136][ T5821] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2750.426618][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2750.434671][ T5821] usb 3-1: Product: syz [ 2750.441777][ T5821] usb 3-1: Manufacturer: syz [ 2750.446920][ T5821] usb 3-1: SerialNumber: syz [ 2750.457411][ T5821] usb 3-1: config 0 descriptor?? [ 2750.468055][ T5821] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2750.498553][T22053] usb 4-1: selecting invalid altsetting 0 [ 2750.504870][T22053] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2750.512023][T22053] usb 4-1: No valid video chain found. [ 2750.518793][T23905] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2750.526919][T22053] usb 4-1: selecting invalid altsetting 0 [ 2750.532898][T22053] usbtest: probe of 4-1:220.1 failed with error -22 [ 2750.544569][T22053] usb 4-1: USB disconnect, device number 27 [ 2750.645355][T14604] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 2750.706208][T23905] usb 2-1: Using ep0 maxpacket: 32 [ 2750.713350][T23905] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2750.722639][T23905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.733544][T23905] usb 2-1: config 0 descriptor?? [ 2750.742208][T23905] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2750.827137][T14604] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2750.835539][T14604] usb 1-1: config 0 has no interface number 0 [ 2750.841750][T14604] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2750.850961][T14604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.861899][T14604] usb 1-1: config 0 descriptor?? [ 2750.880258][T14604] usb 1-1: selecting invalid altsetting 1 [ 2750.888276][T14604] dvb_ttusb_budget: ttusb_init_controller: error [ 2750.894881][T14604] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2750.963469][T14604] DVB: Unable to find symbol cx22700_attach() [ 2751.013561][T14604] DVB: Unable to find symbol tda10046_attach() [ 2751.019980][T14604] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2751.092652][ T5821] radio-usb-si4713: probe of 3-1:0.0 failed with error -71 [ 2751.115877][T22053] usb 1-1: USB disconnect, device number 22 [ 2751.122770][ T5821] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2751.144538][ T5821] usb 3-1: USB disconnect, device number 30 [ 2751.361872][T23905] gspca_nw80x: reg_w err -71 [ 2751.377388][T23905] nw80x: probe of 2-1:0.0 failed with error -71 [ 2751.398158][T23905] usb 2-1: USB disconnect, device number 32 [ 2752.003844][T25612] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4934'. [ 2752.275239][T23905] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2752.426107][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2752.433862][T14604] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2752.478731][T23905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2752.489430][T23905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2752.499766][T23905] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2752.510192][T23905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.537042][T23905] usb 1-1: config 0 descriptor?? [ 2752.630364][ T23] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2752.642748][ T23] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2752.654889][T14604] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 2752.665511][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.673905][T14604] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2752.692990][ T23] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2752.703135][T14604] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2752.726829][T14604] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 2752.740677][T14604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2752.758257][T14604] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 2752.774874][T14604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.784167][T14604] usb 4-1: Product: syz [ 2752.792621][T14604] usb 4-1: Manufacturer: syz [ 2752.798116][T14604] usb 4-1: SerialNumber: syz [ 2752.817589][T14604] usb 4-1: config 0 descriptor?? [ 2752.827679][T25620] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2753.059981][T14604] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 2753.081998][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 2753.096868][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 2753.107000][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 2753.125877][T14604] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2753.152076][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 2753.163867][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 2753.179571][T23905] Bluetooth: Can't get version to change to load ram patch err [ 2753.196118][T14604] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2753.217191][T23905] Bluetooth: Loading sysconfig file failed [ 2753.224881][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 2753.238466][T23905] ath3k: probe of 1-1:0.0 failed with error -71 [ 2753.247227][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 2753.269628][T23905] usb 1-1: USB disconnect, device number 23 [ 2753.288147][T14604] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2753.334741][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 2753.359547][T14604] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 2753.383638][T14604] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2753.410020][T14604] usb 4-1: USB disconnect, device number 28 [ 2753.424283][T14604] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2753.440890][T14604] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2753.456645][T14604] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2753.472970][T14604] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2753.499188][T14604] keyspan 4-1:0.0: device disconnected [ 2753.797241][ T23] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 2754.005937][ T23] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2754.039514][ T23] stv0680 3-1:4.0: last error: 0, command = 0x56 [ 2754.551767][T25639] trusted_key: encrypted_key: insufficient parameters specified [ 2754.815121][ T23] usb 3-1: USB disconnect, device number 31 [ 2756.095324][ T23] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 2756.310587][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2756.325015][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 2756.352698][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 2756.374344][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.398019][ T23] usb 1-1: config 0 descriptor?? [ 2756.404061][T25656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2758.131226][ T23] wacom 0003:056A:00B0.000D: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 2758.153463][ T23] wacom 0003:056A:00B0.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.0-1/input0 [ 2758.302390][ T23] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B0.000D/input/input99 [ 2760.089352][ T23] usb 1-1: USB disconnect, device number 24 [ 2763.245283][T22053] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2763.436954][T22053] usb 3-1: Using ep0 maxpacket: 8 [ 2763.450208][T22053] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 2763.465996][T22053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.489926][T22053] usb 3-1: Product: syz [ 2763.494137][T22053] usb 3-1: Manufacturer: syz [ 2763.509820][T22053] usb 3-1: SerialNumber: syz [ 2763.585186][ T5821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2763.775081][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 2763.789004][ T5821] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2763.810166][ T5821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2763.835077][ T5821] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2763.856706][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2763.887733][ T5821] usb 1-1: config 0 descriptor?? [ 2763.963108][T22053] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 2763.981544][T22053] mxuport: probe of 3-1:254.0 failed with error -5 [ 2764.408792][ T5821] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 2764.421085][T22053] usb 3-1: USB disconnect, device number 32 [ 2764.808597][ T5821] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 2764.903733][ T5821] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 2764.922939][ T5821] razer 0003:1532:011B.000E: unknown main item tag 0x0 [ 2764.934680][ T5821] razer 0003:1532:011B.000E: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 2765.074454][ T5821] usb 1-1: USB disconnect, device number 25 [ 2765.559978][T25718] fido_id[25718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2766.235260][T23905] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2766.427193][T23905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2766.458260][T23905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2766.475310][T23905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2766.510895][T23905] usb 2-1: New USB device found, idVendor=056a, idProduct=7c27, bcdDevice=4f.64 [ 2766.535545][T23905] usb 2-1: New USB device strings: Mfr=223, Product=0, SerialNumber=0 [ 2766.544160][T23905] usb 2-1: Manufacturer: syz [ 2766.571726][T23905] usb 2-1: config 0 descriptor?? [ 2767.054907][T23905] wacom 0003:056A:7C27.000F: unbalanced delimiter at end of report description [ 2767.091419][T23905] wacom 0003:056A:7C27.000F: parse failed [ 2767.115703][T23905] wacom: probe of 0003:056A:7C27.000F failed with error -22 [ 2767.257179][T23905] usb 2-1: USB disconnect, device number 33 [ 2770.589840][T23905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2770.946696][T23905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2770.958006][T23905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2770.972764][T23905] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2770.985159][T23905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.025032][T23905] usb 3-1: config 0 descriptor?? [ 2771.580076][T23905] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 2771.603595][T23905] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2771.685276][T23905] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 2771.695556][T23905] hid-steam 0003:28DE:1142.0010: No HID_FEATURE_REPORT submitted - nothing to read [ 2771.788729][T23905] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0 [ 2771.822338][T23905] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2771.958674][T23905] usb 3-1: USB disconnect, device number 33 [ 2772.033481][T23905] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 2772.216436][T25792] fido_id[25792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2772.754040][T25809] can0: slcan on ptm0. [ 2773.096789][T25808] can0 (unregistered): slcan off ptm0. [ 2774.458882][T25838] netlink: 'syz.0.5019': attribute type 1 has an invalid length. [ 2774.705172][T14604] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2774.845244][ T5821] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2774.906557][T14604] usb 4-1: Using ep0 maxpacket: 8 [ 2774.920067][T14604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2774.934289][T14604] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2774.947809][T14604] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2774.958656][T14604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2774.966979][T14604] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 2774.976468][T14604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2774.994634][T14604] usb 4-1: config 0 descriptor?? [ 2775.006262][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.012692][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.035136][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 2775.042855][ T5821] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2775.064688][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2775.106385][ T5821] usb 1-1: config 0 descriptor?? [ 2775.132623][ T5821] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2775.505757][T14604] hid-alps 0003:044E:1215.0012: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 2775.539369][ T5821] gspca_sunplus: reg_w_riv err -71 [ 2775.546033][ T5821] sunplus: probe of 1-1:0.0 failed with error -71 [ 2775.594369][ T5821] usb 1-1: USB disconnect, device number 26 [ 2775.759962][T14604] usb 4-1: USB disconnect, device number 29 [ 2779.579402][ T5821] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 2780.087954][ T5821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2780.102013][ T5821] usb 1-1: not running at top speed; connect to a high speed hub [ 2780.120360][ T5821] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 2780.133044][ T5821] usb 1-1: config 1 has no interface number 0 [ 2780.146796][ T5821] usb 1-1: config 1 interface 138 has no altsetting 0 [ 2780.166436][ T5821] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 2780.184582][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.208355][ T5821] usb 1-1: Product: syz [ 2780.334455][ T5821] usb 1-1: Manufacturer: syz [ 2780.349472][ T5821] usb 1-1: SerialNumber: syz [ 2781.924007][T25941] genirq: Flags mismatch irq 5. 00000000 (aio_iiro_16) vs. 00000000 (pcl812) [ 2782.151792][ T5821] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2782.675988][ T5821] usb 1-1: USB disconnect, device number 27 [ 2782.790372][T25952] udevd[25952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2788.015306][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2790.251010][ T23] usb 3-1: config 7 has an invalid interface number: 209 but max is 1 [ 2790.259552][ T23] usb 3-1: config 7 has an invalid interface number: 61 but max is 1 [ 2790.267942][ T23] usb 3-1: config 7 has no interface number 0 [ 2790.274314][ T23] usb 3-1: config 7 has no interface number 1 [ 2790.282556][ T23] usb 3-1: config 7 interface 61 altsetting 1 endpoint 0x9 has invalid maxpacket 1983, setting to 1024 [ 2790.294007][ T23] usb 3-1: config 7 interface 61 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 2790.315465][ T23] usb 3-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2790.373180][ T23] usb 3-1: config 7 interface 209 has no altsetting 0 [ 2790.407627][ T23] usb 3-1: config 7 interface 61 has no altsetting 0 [ 2790.438840][ T23] usb 3-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=7f.6e [ 2790.448570][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.456877][ T23] usb 3-1: Product: syz [ 2790.461287][ T23] usb 3-1: Manufacturer: syz [ 2790.466501][ T23] usb 3-1: SerialNumber: syz [ 2792.282402][ T23] hub 3-1:7.209: Invalid hub with more than one config or interface [ 2792.297349][ T23] hub: probe of 3-1:7.209 failed with error -22 [ 2792.335208][ T23] hub 3-1:7.61: Invalid hub with more than one config or interface [ 2792.343384][ T23] hub: probe of 3-1:7.61 failed with error -22 [ 2792.380269][ T23] usb 3-1: USB disconnect, device number 34 [ 2792.433837][T26015] sp0: Synchronizing with TNC [ 2797.415049][T24851] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2797.597859][T24851] usb 3-1: Using ep0 maxpacket: 16 [ 2797.607641][T24851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2797.625323][T24851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2797.665232][T24851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2797.706732][T24851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2797.728888][T24851] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2797.779185][T24851] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2797.798774][T24851] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2797.829143][T24851] usb 3-1: Manufacturer: syz [ 2797.917572][T24851] usb 3-1: config 0 descriptor?? [ 2798.315105][T24851] rc_core: IR keymap rc-hauppauge not found [ 2798.321060][T24851] Registered IR keymap rc-empty [ 2798.350596][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.605214][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.616791][T26071] trusted_key: encrypted_key: insufficient parameters specified [ 2798.639446][T24851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2798.666975][T24851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input102 [ 2798.728306][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.787237][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.827018][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.855337][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.886490][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.925145][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2798.955203][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2799.094692][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2799.206364][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2799.246707][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2800.215050][T24851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2800.534152][T24851] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 4e [ 2800.556351][T24851] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2800.751440][T24851] usb 3-1: USB disconnect, device number 35 [ 2804.030407][T14604] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 2804.038250][ T23] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2804.133118][T26114] trusted_key: encrypted_key: insufficient parameters specified [ 2804.239639][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.251528][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2804.261376][T14604] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 2804.271276][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.280568][T14604] usb 3-1: config 0 has no interface number 0 [ 2804.291076][T14604] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2804.302210][ T23] usb 1-1: config 0 descriptor?? [ 2804.307387][T14604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2804.316124][T14604] usb 3-1: Product: syz [ 2804.320538][T14604] usb 3-1: Manufacturer: syz [ 2804.328389][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 2804.334776][T14604] usb 3-1: SerialNumber: syz [ 2804.343212][T14604] usb 3-1: config 0 descriptor?? [ 2804.797035][T14604] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 2804.806562][ T23] pwc: send_video_command error -71 [ 2804.829003][ T23] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2804.887233][ T23] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 2804.936045][T14604] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 2804.997508][T14604] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 2805.029673][ T23] usb 1-1: USB disconnect, device number 28 [ 2805.090543][T14604] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 2805.180139][T14604] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2805.195341][T14604] usb 3-1: USB disconnect, device number 36 [ 2805.220323][T14604] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2805.241246][T14604] keyspan 3-1:0.133: device disconnected [ 2809.605116][T24851] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2809.948102][T24851] usb 4-1: Using ep0 maxpacket: 8 [ 2809.982096][T24851] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 2810.292712][T24851] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2810.303373][T24851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 2810.328542][T24851] usb 4-1: Product: syz [ 2810.332816][T24851] usb 4-1: Manufacturer: syz [ 2810.342583][T24851] usb 4-1: SerialNumber: syz [ 2810.352146][ T28] audit: type=1326 audit(2000000114.080:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.377313][T24851] usb 4-1: config 0 descriptor?? [ 2810.378424][ T28] audit: type=1326 audit(2000000114.080:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.390540][T24851] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2810.417337][T24851] usb 4-1: setting power ON [ 2810.422642][T24851] dvb-usb: bulk message failed: -22 (2/0) [ 2810.445631][T24851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2810.457520][ T28] audit: type=1326 audit(2000000114.140:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.481017][T24851] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2810.492210][T24851] usb 4-1: media controller created [ 2810.506520][ T28] audit: type=1326 audit(2000000114.150:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.558029][T24851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2810.585092][ T28] audit: type=1326 audit(2000000114.150:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.635483][T24851] usb 4-1: selecting invalid altsetting 6 [ 2810.642020][T24851] usb 4-1: digital interface selection failed (-22) [ 2810.659199][ T28] audit: type=1326 audit(2000000114.150:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.682988][T24851] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2810.685382][T26151] dvb-usb: bulk message failed: -22 (3/0) [ 2810.691694][ T28] audit: type=1326 audit(2000000114.150:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.2.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44478eb69 code=0x7ffc0000 [ 2810.721639][T24851] usb 4-1: setting power OFF [ 2810.750577][T26151] cxusb: i2c rd: len=205 is too big! [ 2810.750577][T26151] [ 2810.751304][T24851] dvb-usb: bulk message failed: -22 (2/0) [ 2810.855684][T23905] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2810.942566][T24851] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2810.993747][T24851] (NULL device *): no alternate interface [ 2811.122689][T23905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2811.139055][T23905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2811.199081][T23905] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2811.212893][T23905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2811.222760][T23905] usb 1-1: SerialNumber: syz [ 2811.473358][T23905] usb 1-1: 0:2 : does not exist [ 2811.507064][T24851] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2811.639565][T24851] usb 4-1: USB disconnect, device number 30 [ 2811.664220][T23905] usb 1-1: USB disconnect, device number 29 [ 2812.333860][T26178] udevd[26178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2814.366474][T14604] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2814.585667][T14604] usb 2-1: Using ep0 maxpacket: 32 [ 2814.650757][T14604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2814.662372][T14604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2814.672777][T14604] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2814.682316][T14604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2814.728629][T14604] usb 2-1: config 0 descriptor?? [ 2815.430572][T14604] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 2815.590485][T14604] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 2815.608502][T14604] ft260: probe of 0003:0403:6030.0013 failed with error -71 [ 2815.639441][T14604] usb 2-1: USB disconnect, device number 34 [ 2816.325052][T22053] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2816.553796][T22053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2816.587766][T22053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2816.653191][T22053] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2816.721393][T22053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2816.971453][T22053] usb 3-1: config 0 descriptor?? [ 2819.517114][T22053] hid-led: probe of 0003:27B8:01ED.0014 failed with error -71 [ 2819.691779][T22053] usb 3-1: USB disconnect, device number 37 [ 2820.504243][T26234] trusted_key: encrypted_key: insufficient parameters specified [ 2820.674770][T26237] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5155'. [ 2833.066696][T22053] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2833.718542][T22053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2833.735143][T22053] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 2833.748281][T22053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.766437][T22053] usb 1-1: config 0 descriptor?? [ 2834.468438][T22053] uclogic 0003:2179:0053.0015: interface is invalid, ignoring [ 2834.671858][T22053] usb 1-1: USB disconnect, device number 30 [ 2835.805085][T22053] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2836.495531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.502378][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.757933][T22053] usb 4-1: not running at top speed; connect to a high speed hub [ 2836.768889][T22053] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2836.897352][T22053] usb 4-1: config 1 has no interface number 1 [ 2836.947007][T22053] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2837.257310][T22053] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2837.275112][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2837.365117][T22053] usb 4-1: Product: syz [ 2837.398101][T22053] usb 4-1: Manufacturer: syz [ 2837.436124][T22053] usb 4-1: SerialNumber: syz [ 2838.647183][T22053] usb 4-1: failed to enable PITCH for EP 0x82 [ 2839.818276][T22053] usb 4-1: USB disconnect, device number 31 [ 2841.280346][T26381] udevd[26381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2848.288911][T26415] trusted_key: encrypted_key: insufficient parameters specified [ 2852.780750][T26451] trusted_key: encrypted_key: insufficient parameters specified [ 2860.647054][T26504] trusted_key: encrypted_key: insufficient parameters specified [ 2862.680253][T26515] trusted_key: encrypted_key: insufficient parameters specified [ 2862.691275][T26515] fuse: Bad value for 'fd' [ 2867.202484][T26550] trusted_key: encrypted_key: insufficient parameters specified [ 2867.511491][T26555] trusted_key: encrypted_key: insufficient parameters specified [ 2867.522835][T26555] fuse: Bad value for 'fd' [ 2867.900163][T26559] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5258'. [ 2874.427315][T26614] trusted_key: encrypted_key: insufficient parameters specified [ 2877.488753][T22053] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2878.072188][T22053] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2878.088537][T22053] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2878.284616][T22053] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2878.334688][T22053] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2878.537727][T22053] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2878.588165][T22053] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2878.598483][T22053] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2878.616471][T22053] usb 3-1: Product: syz [ 2878.626985][T22053] usb 3-1: Manufacturer: syz [ 2878.638343][T22053] cdc_wdm 3-1:1.0: skipping garbage [ 2878.643738][T22053] cdc_wdm 3-1:1.0: skipping garbage [ 2878.668259][T22053] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2878.674242][T22053] cdc_wdm 3-1:1.0: Unknown control protocol [ 2878.712513][T26649] use of bytesused == 0 is deprecated and will be removed in the future, [ 2878.722719][T26649] use the actual size instead. [ 2879.203549][T26658] trusted_key: encrypted_key: insufficient parameters specified [ 2881.379775][T23905] usb 3-1: USB disconnect, device number 38 [ 2881.875266][T26672] trusted_key: encrypted_key: insufficient parameters specified [ 2884.546262][T26692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2884.552828][T26692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2884.661206][T26692] vhci_hcd vhci_hcd.0: Device attached [ 2884.670803][T26694] vhci_hcd: connection closed [ 2884.671056][ T77] vhci_hcd: stop threads [ 2884.705640][ T77] vhci_hcd: release socket [ 2884.710111][ T77] vhci_hcd: disconnect device [ 2888.514388][T26735] trusted_key: encrypted_key: insufficient parameters specified [ 2896.142504][T26777] trusted_key: encrypted_key: insufficient parameters specified [ 2897.879998][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.880165][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2901.681276][T26809] trusted_key: encrypted_key: insufficient parameters specified [ 2902.935911][T23905] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2903.155059][T23905] usb 4-1: Using ep0 maxpacket: 16 [ 2903.178679][T23905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2903.190174][T23905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2903.206367][T23905] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2903.216425][T23905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2903.276548][T23905] usb 4-1: config 0 descriptor?? [ 2903.944174][ T786] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2904.265844][T23905] waltop 0003:172F:0034.0016: item fetching failed at offset 0/2 [ 2904.274779][T23905] waltop: probe of 0003:172F:0034.0016 failed with error -22 [ 2904.299745][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2904.312690][ T786] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 2904.322341][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2904.336478][ T786] usb 3-1: config 0 descriptor?? [ 2904.518972][T23905] usb 4-1: USB disconnect, device number 32 [ 2904.576572][T26831] trusted_key: encrypted_key: insufficient parameters specified [ 2904.665238][T18261] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2904.756762][ T786] hid_mf 0003:0079:1846.0017: item fetching failed at offset 5/7 [ 2904.766655][ T786] hid_mf 0003:0079:1846.0017: HID parse failed. [ 2904.773076][ T786] hid_mf: probe of 0003:0079:1846.0017 failed with error -22 [ 2904.845519][T18261] usb 1-1: Using ep0 maxpacket: 16 [ 2904.855061][T18261] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2904.864235][T18261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2904.873567][T18261] usb 1-1: Product: syz [ 2904.877854][T18261] usb 1-1: Manufacturer: syz [ 2904.882533][T18261] usb 1-1: SerialNumber: syz [ 2904.889522][T18261] usb 1-1: config 0 descriptor?? [ 2904.973114][T23905] usb 3-1: USB disconnect, device number 39 [ 2905.318340][T18261] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 2905.327138][T18261] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2905.859528][T22053] usb 1-1: USB disconnect, device number 31 [ 2906.955204][T22053] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2907.482793][T22053] usb 3-1: Using ep0 maxpacket: 32 [ 2907.488363][T26856] trusted_key: encrypted_key: insufficient parameters specified [ 2907.496634][T22053] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2907.514645][T22053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2907.613696][T22053] usb 3-1: config 0 descriptor?? [ 2908.027009][T22053] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2908.608363][T22053] gspca_nw80x: reg_w err -71 [ 2908.613076][T22053] nw80x: probe of 3-1:0.0 failed with error -71 [ 2908.650249][T22053] usb 3-1: USB disconnect, device number 40 [ 2909.256332][T26866] trusted_key: encrypted_key: insufficient parameters specified [ 2912.845766][T18261] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2913.197237][T18261] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 2913.207205][T18261] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 2913.216152][T18261] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2913.227007][T18261] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 2913.238547][T18261] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2913.251911][T18261] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 2913.262608][T18261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2913.284680][T18261] usb 3-1: Product: syz [ 2913.292763][T18261] usb 3-1: Manufacturer: syz [ 2913.299326][T18261] usb 3-1: SerialNumber: syz [ 2913.327595][T18261] usb 3-1: config 0 descriptor?? [ 2913.338766][T26883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2913.855779][T18261] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 2913.870138][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 2913.892448][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 2914.889507][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 2914.961956][T18261] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2914.979059][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 2914.992645][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 2915.129380][T18261] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2915.144874][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 2915.164666][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 2915.186062][T18261] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2915.216656][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 2915.422543][T18261] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 2915.432766][T18261] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2915.446324][T18261] usb 3-1: USB disconnect, device number 41 [ 2915.456479][T18261] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2915.469389][T18261] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2915.488250][T18261] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2915.498587][T26911] trusted_key: encrypted_key: insufficient parameters specified [ 2915.512996][T18261] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2915.525308][ T786] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2915.536134][T18261] keyspan 3-1:0.0: device disconnected [ 2915.715299][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 2915.722780][ T786] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2915.746306][ T786] usb 2-1: config 0 has no interface number 0 [ 2915.752470][ T786] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2915.788000][ T786] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2915.807409][ T786] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2915.827115][ T786] usb 2-1: Product: syz [ 2915.831333][ T786] usb 2-1: SerialNumber: syz [ 2915.847584][ T786] usb 2-1: config 0 descriptor?? [ 2915.860374][ T786] cm109 2-1:0.8: invalid payload size 88, expected 4 [ 2916.074110][ T786] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input103 [ 2916.744638][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2916.745503][T18261] usb 2-1: USB disconnect, device number 35 [ 2916.751620][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 2916.820883][T18261] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2917.455568][ T28] audit: type=1326 audit(2000000221.150:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2917.535178][ T28] audit: type=1326 audit(2000000221.150:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2917.604023][ T28] audit: type=1326 audit(2000000221.150:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2918.087453][ T28] audit: type=1326 audit(2000000221.150:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2918.114819][ T28] audit: type=1326 audit(2000000221.150:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2918.256121][ T28] audit: type=1326 audit(2000000221.160:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2918.285078][ T28] audit: type=1326 audit(2000000221.160:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26924 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a78eb69 code=0x7ffc0000 [ 2920.575300][T18261] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2920.785956][T18261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2920.847680][T18261] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2920.954670][T18261] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2921.066828][T18261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2922.815908][T18261] usb 4-1: config 0 descriptor?? [ 2923.115298][T22053] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2923.328505][T22053] usb 1-1: Using ep0 maxpacket: 16 [ 2923.375002][T22053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2923.388209][T22053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2923.442072][T22053] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2923.500130][T22053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2923.559038][T18261] Bluetooth: Can't get version to change to load ram patch err [ 2923.594414][T18261] Bluetooth: Loading sysconfig file failed [ 2923.615708][T18261] ath3k: probe of 4-1:0.0 failed with error -71 [ 2923.638614][T18261] usb 4-1: USB disconnect, device number 33 [ 2923.643396][T22053] usb 1-1: config 0 descriptor?? [ 2924.287063][T22053] waltop 0003:172F:0034.0018: item fetching failed at offset 0/2 [ 2924.296366][T22053] waltop: probe of 0003:172F:0034.0018 failed with error -22 [ 2924.641791][T18261] usb 1-1: USB disconnect, device number 32 [ 2925.390520][T22053] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2925.595089][T22053] usb 2-1: Using ep0 maxpacket: 8 [ 2925.621665][T22053] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 2925.645199][T22053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.653247][T22053] usb 2-1: Product: syz [ 2925.663735][T22053] usb 2-1: Manufacturer: syz [ 2925.669673][T22053] usb 2-1: SerialNumber: syz [ 2926.481262][T22053] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 2926.500981][T22053] mxuport: probe of 2-1:254.0 failed with error -5 [ 2926.740226][T22053] usb 2-1: USB disconnect, device number 36 [ 2928.346789][T14604] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2928.566537][T14604] usb 2-1: Using ep0 maxpacket: 16 [ 2928.584273][T14604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2928.625241][T14604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2928.653820][T14604] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2928.686927][T14604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.726602][T14604] usb 2-1: config 0 descriptor?? [ 2928.878618][T27031] usb usb8: usbfs: process 27031 (syz.3.5416) did not claim interface 0 before use [ 2929.207869][T14604] waltop 0003:172F:0034.0019: item fetching failed at offset 0/2 [ 2929.230216][T14604] waltop: probe of 0003:172F:0034.0019 failed with error -22 [ 2929.355280][ T23] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2929.441410][T14604] usb 2-1: USB disconnect, device number 37 [ 2929.551235][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2929.568275][ T23] usb 4-1: config 0 has no interface number 0 [ 2929.586506][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2929.605001][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2929.626427][ T23] usb 4-1: config 0 descriptor?? [ 2929.650569][ T23] usb 4-1: selecting invalid altsetting 1 [ 2929.667060][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 2929.689641][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2929.848163][ T23] DVB: Unable to find symbol cx22700_attach() [ 2929.950811][ T23] DVB: Unable to find symbol tda10046_attach() [ 2929.965118][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2930.008052][ T23] usb 4-1: USB disconnect, device number 34 [ 2931.448174][T27054] trusted_key: encrypted_key: insufficient parameters specified [ 2935.985083][T24851] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2936.165064][T24851] usb 1-1: Using ep0 maxpacket: 16 [ 2936.175701][T24851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2936.193511][T24851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2936.218916][T24851] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2936.246666][T24851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.271533][T24851] usb 1-1: config 0 descriptor?? [ 2936.355231][T14604] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2936.557322][T14604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2936.577939][T14604] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2936.605070][T14604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.624824][T14604] usb 2-1: config 0 descriptor?? [ 2936.649741][T14604] pwc: Askey VC010 type 2 USB webcam detected. [ 2936.708515][T24851] waltop 0003:172F:0034.001A: item fetching failed at offset 0/2 [ 2936.731326][T24851] waltop: probe of 0003:172F:0034.001A failed with error -22 [ 2936.867912][T14604] pwc: send_video_command error -71 [ 2936.873250][T14604] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2936.899308][T14604] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 2936.926144][T14604] usb 2-1: USB disconnect, device number 38 [ 2936.951033][T24851] usb 1-1: USB disconnect, device number 33 [ 2937.326020][ T23] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2937.518485][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2937.527881][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2937.538624][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2937.547903][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2937.559592][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2938.814460][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2938.921743][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2938.921768][ T23] usb 4-1: Product: syz [ 2938.921781][ T23] usb 4-1: Manufacturer: syz [ 2938.931047][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 2938.931069][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 2938.933655][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2938.933675][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 2939.884012][T22053] usb 4-1: USB disconnect, device number 35 [ 2940.565374][ T23] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2940.776216][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2940.782292][ T23] usb 1-1: too many configurations: 120, using maximum allowed: 8 [ 2940.826139][ T23] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2940.845025][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 2940.853304][ T23] usb 1-1: Product: syz [ 2940.865041][ T23] usb 1-1: Manufacturer: syz [ 2940.869789][ T23] usb 1-1: SerialNumber: syz [ 2940.887482][ T23] usb 1-1: config 0 descriptor?? [ 2940.907348][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2940.935080][ T23] usb 1-1: setting power ON [ 2940.939736][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 2940.962065][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2940.972927][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2940.981736][ T23] usb 1-1: media controller created [ 2941.005685][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2941.135598][T27145] dvb-usb: bulk message failed: -22 (3/0) [ 2941.154366][T27145] cxusb: i2c rd: len=205 is too big! [ 2941.154366][T27145] [ 2941.499624][ T23] usb 1-1: selecting invalid altsetting 6 [ 2941.515517][ T23] usb 1-1: digital interface selection failed (-22) [ 2941.522289][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2941.545484][ T23] usb 1-1: setting power OFF [ 2941.551862][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 2941.561990][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2941.585023][ T23] (NULL device *): no alternate interface [ 2941.642685][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2941.692138][ T23] usb 1-1: USB disconnect, device number 34 [ 2942.125539][T18261] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2942.252204][T27159] pim6reg: entered allmulticast mode [ 2942.337282][T18261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2942.375014][T18261] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2942.406615][T18261] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2942.431583][T18261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2942.466414][T18261] usb 3-1: SerialNumber: syz [ 2942.727157][T18261] usb 3-1: 0:2 : does not exist [ 2942.777939][T18261] usb 3-1: USB disconnect, device number 42 [ 2943.187354][T26819] udevd[26819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2945.685064][T18261] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2946.537175][T18261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2946.555287][T18261] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2946.575644][T18261] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2946.584875][T18261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2946.616311][T18261] usb 2-1: config 0 descriptor?? [ 2947.248893][T18261] Bluetooth: Can't get version to change to load ram patch err [ 2947.266477][T18261] Bluetooth: Loading sysconfig file failed [ 2947.272449][T18261] ath3k: probe of 2-1:0.0 failed with error -71 [ 2947.297961][T18261] usb 2-1: USB disconnect, device number 39 [ 2949.815425][T18261] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2950.065244][T18261] usb 4-1: Using ep0 maxpacket: 16 [ 2950.128383][T18261] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 2950.253169][T18261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2950.302231][T18261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2950.338811][T18261] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 2950.387363][T18261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.418747][T18261] usb 4-1: config 0 descriptor?? [ 2950.868935][T18261] samsung 0003:0419:0001.001B: unknown main item tag 0x0 [ 2950.888947][T18261] samsung 0003:0419:0001.001B: unknown main item tag 0x0 [ 2950.905266][T18261] samsung 0003:0419:0001.001B: unknown main item tag 0x0 [ 2950.919737][T18261] samsung 0003:0419:0001.001B: unknown main item tag 0x0 [ 2950.948229][T18261] samsung 0003:0419:0001.001B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 2951.071856][T18261] usb 4-1: USB disconnect, device number 36 [ 2951.205119][T24851] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2951.385137][T24851] usb 1-1: Using ep0 maxpacket: 32 [ 2951.392498][T24851] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2951.405663][T24851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.424685][T24851] usb 1-1: config 0 descriptor?? [ 2951.435407][T24851] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2951.995258][T23905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2952.055510][T24851] gspca_vc032x: reg_w err -71 [ 2952.060341][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.070972][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.076881][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.082196][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.094370][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.100227][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.107204][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.112678][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.119176][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.124646][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.131832][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.139420][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.144883][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.152838][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.158751][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.164204][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.171425][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.186300][T24851] gspca_vc032x: I2c Bus Busy Wait 00 [ 2952.196376][T24851] gspca_vc032x: Unknown sensor... [ 2952.201507][T24851] vc032x: probe of 1-1:0.0 failed with error -22 [ 2952.234374][T24851] usb 1-1: USB disconnect, device number 35 [ 2953.055753][T23905] usb 4-1: Using ep0 maxpacket: 32 [ 2953.072714][T23905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2953.097624][T23905] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2953.115112][T23905] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2953.123446][T23905] usb 4-1: Product: syz [ 2953.135030][T23905] usb 4-1: Manufacturer: syz [ 2953.145205][T23905] usb 4-1: SerialNumber: syz [ 2953.157581][T23905] usb 4-1: config 0 descriptor?? [ 2953.174016][T27252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2953.194460][T23905] hub 4-1:0.0: bad descriptor, ignoring hub [ 2953.205209][T23905] hub: probe of 4-1:0.0 failed with error -5 [ 2953.525455][T22053] usb 4-1: USB disconnect, device number 37 [ 2953.875401][T22053] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2954.075177][T22053] usb 4-1: Using ep0 maxpacket: 32 [ 2954.087227][T22053] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2954.112915][T22053] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2954.132749][T22053] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2954.145516][T22053] usb 4-1: Product: syz [ 2954.341823][T22053] usb 4-1: config 0 descriptor?? [ 2954.359596][T27252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2954.368764][T22053] hub 4-1:0.0: bad descriptor, ignoring hub [ 2954.374734][T22053] hub: probe of 4-1:0.0 failed with error -5 [ 2955.116987][T22053] usb 4-1: USB disconnect, device number 38 [ 2955.615085][T24851] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2955.817021][T24851] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 2955.845229][T24851] usb 3-1: config 0 has no interface number 0 [ 2955.851398][T24851] usb 3-1: config 0 interface 98 has no altsetting 0 [ 2955.870575][T24851] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 2955.880105][T24851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.896571][T24851] usb 3-1: Product: syz [ 2955.905058][T24851] usb 3-1: Manufacturer: syz [ 2955.909703][T24851] usb 3-1: SerialNumber: syz [ 2955.936965][T24851] usb 3-1: config 0 descriptor?? [ 2957.656557][T24851] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 2958.195063][T24851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 2958.408697][T24851] usb 3-1: device descriptor read/all, error -71 [ 2959.055268][T23905] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 2959.165477][T22053] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2959.247031][T23905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2959.258380][T23905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2959.268321][T23905] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2959.278155][T18261] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2959.286417][T23905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.296452][T23905] usb 1-1: config 0 descriptor?? [ 2959.325132][T24851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 2959.329047][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.341203][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.345514][T22053] usb 4-1: Using ep0 maxpacket: 8 [ 2959.355879][T22053] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 2959.390069][T22053] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2959.399514][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 2959.425060][T22053] usb 4-1: Product: syz [ 2959.429261][T22053] usb 4-1: Manufacturer: syz [ 2959.433858][T22053] usb 4-1: SerialNumber: syz [ 2959.447391][T22053] usb 4-1: config 0 descriptor?? [ 2959.466991][T22053] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2959.485054][T22053] usb 4-1: setting power ON [ 2959.489599][T22053] dvb-usb: bulk message failed: -22 (2/0) [ 2959.498561][T18261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2959.516577][T22053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2959.528354][T18261] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2959.535926][T24851] usb 3-1: device firmware changed [ 2959.544429][T18261] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2959.554917][T18261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.555619][T22053] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2959.563743][T22053] usb 4-1: media controller created [ 2959.565058][T24851] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 2959.585732][T27322] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2959.600477][T18261] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2959.621127][T22053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2959.629704][T24851] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 2959.639062][ T5821] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 2959.668784][T24851] usb 3-1: USB disconnect, device number 43 [ 2959.685064][ T5821] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 2959.732245][T22053] usb 4-1: selecting invalid altsetting 6 [ 2959.746827][T22053] usb 4-1: digital interface selection failed (-22) [ 2959.766803][T22053] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2959.771673][T23905] wacom 0003:056A:00D0.001C: unknown main item tag 0x0 [ 2959.799111][T22053] usb 4-1: setting power OFF [ 2959.803758][T22053] dvb-usb: bulk message failed: -22 (2/0) [ 2959.813224][T23905] wacom 0003:056A:00D0.001C: unknown main item tag 0x0 [ 2959.825102][T22053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2959.836205][T23905] wacom 0003:056A:00D0.001C: unknown main item tag 0x0 [ 2959.851788][T23905] wacom 0003:056A:00D0.001C: unknown main item tag 0x0 [ 2959.859538][T23905] wacom 0003:056A:00D0.001C: unknown main item tag 0x0 [ 2959.865059][T24851] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2959.868062][T23905] wacom 0003:056A:00D0.001C: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 2959.878769][T22053] (NULL device *): no alternate interface [ 2959.925528][T23905] wacom 0003:056A:00D0.001C: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 2959.967257][T23905] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.001C/input/input104 [ 2960.028939][T18261] usb 2-1: USB disconnect, device number 40 [ 2960.080605][T24851] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2960.089958][T24851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.118847][T24851] usb 3-1: config 0 descriptor?? [ 2960.157225][T22053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2960.170400][T24851] cp210x 3-1:0.0: cp210x converter detected [ 2960.195481][T22053] usb 4-1: USB disconnect, device number 39 [ 2960.214509][T23905] usb 1-1: USB disconnect, device number 36 [ 2960.435637][T24851] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2960.680802][T24851] usb 3-1: USB disconnect, device number 44 [ 2960.709492][T24851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2960.734165][T24851] cp210x 3-1:0.0: device disconnected [ 2961.795568][T22053] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 2961.845471][T24851] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2961.988801][T22053] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2962.005174][T22053] usb 1-1: config 0 has no interface number 0 [ 2962.021760][T22053] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2962.031042][T24851] usb 3-1: Using ep0 maxpacket: 8 [ 2962.046139][T22053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.065433][T24851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2962.088347][T24851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2962.106102][T24851] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 2962.118648][T24851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.137937][T24851] usb 3-1: config 0 descriptor?? [ 2962.144146][T22053] usb 1-1: config 0 descriptor?? [ 2962.169230][T22053] usb 1-1: selecting invalid altsetting 1 [ 2962.209167][T22053] dvb_ttusb_budget: ttusb_init_controller: error [ 2962.228884][T22053] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2962.448918][T22053] DVB: Unable to find symbol cx22700_attach() [ 2962.574569][T22053] DVB: Unable to find symbol tda10046_attach() [ 2962.592792][T22053] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2962.613422][T24851] logitech-hidpp-device 0003:046D:C343.001D: unbalanced delimiter at end of report description [ 2962.641037][T22053] usb 1-1: USB disconnect, device number 37 [ 2962.663352][T24851] logitech-hidpp-device 0003:046D:C343.001D: hidpp_probe:parse failed [ 2962.691445][T24851] logitech-hidpp-device: probe of 0003:046D:C343.001D failed with error -22 [ 2962.814120][T24851] usb 3-1: USB disconnect, device number 45 [ 2962.945645][T23905] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2963.157179][T23905] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2963.186215][T23905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.198991][T23905] usb 2-1: config 0 descriptor?? [ 2963.208047][T23905] cp210x 2-1:0.0: cp210x converter detected [ 2963.430029][T23905] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2963.650721][T23905] usb 2-1: USB disconnect, device number 41 [ 2963.670204][T23905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2963.696253][T23905] cp210x 2-1:0.0: device disconnected [ 2964.025861][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2964.055209][T24851] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2964.206175][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 2964.213784][ T23] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2964.229833][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.241266][ T23] usb 3-1: config 0 descriptor?? [ 2964.259513][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2964.267057][T24851] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2964.280428][T24851] usb 4-1: config 0 has no interface number 0 [ 2964.287165][T24851] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2964.312939][T24851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.325242][T24851] usb 4-1: config 0 descriptor?? [ 2964.341882][T24851] usb 4-1: selecting invalid altsetting 1 [ 2964.350886][T24851] dvb_ttusb_budget: ttusb_init_controller: error [ 2964.357875][T24851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2964.461501][T24851] DVB: Unable to find symbol cx22700_attach() [ 2964.531701][T24851] DVB: Unable to find symbol tda10046_attach() [ 2964.547808][T24851] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2964.564611][T24851] usb 4-1: USB disconnect, device number 40 [ 2964.884491][ T23] gspca_vc032x: reg_w err -71 [ 2964.891723][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.906321][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.918051][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.937047][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.942540][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.950934][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.956534][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.962179][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.969371][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.975131][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.980615][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2964.994584][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.100646][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.149786][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.227167][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.290214][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.342572][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.400251][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 2965.484133][ T23] gspca_vc032x: Unknown sensor... [ 2965.676777][ T23] vc032x: probe of 3-1:0.0 failed with error -22 [ 2965.692684][ T23] usb 3-1: USB disconnect, device number 46 [ 2966.217515][T27406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5567'. [ 2969.696141][T27445] trusted_key: encrypted_key: insufficient parameters specified [ 2969.708669][T27445] fuse: Unknown parameter 'grou00000000000000000000' [ 2973.185290][T24851] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2973.532407][T27492] trusted_key: encrypted_key: insufficient parameters specified [ 2973.543896][T27492] fuse: Unknown parameter 'grou00000000000000000000' [ 2974.216651][T24851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2974.229054][T24851] usb 3-1: config 0 has no interface number 0 [ 2974.237998][T24851] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2974.248476][T24851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2974.263903][T24851] usb 3-1: config 0 descriptor?? [ 2974.272610][T24851] usb 3-1: selecting invalid altsetting 1 [ 2974.284584][T24851] dvb_ttusb_budget: ttusb_init_controller: error [ 2974.300456][T24851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2974.396006][T24851] DVB: Unable to find symbol cx22700_attach() [ 2974.502713][T24851] DVB: Unable to find symbol tda10046_attach() [ 2974.514167][T24851] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2974.531325][T24851] usb 3-1: USB disconnect, device number 47 [ 2974.827138][T27518] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5608'. [ 2975.975408][T18261] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2975.995513][T23905] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 2976.188468][T18261] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2976.198381][T23905] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2976.216173][T18261] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2976.231271][T23905] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 2976.250254][T23905] usb 1-1: config 0 has no interface number 0 [ 2976.265156][T18261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2976.285170][T23905] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2976.303864][T18261] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 2976.326083][T23905] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2976.345032][T18261] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 2976.358302][T23905] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2976.378941][T18261] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2976.397247][T23905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2976.406384][T18261] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2976.414546][T18261] usb 4-1: Product: syz [ 2976.432696][T23905] usb 1-1: config 0 descriptor?? [ 2976.456289][T18261] usb 4-1: Manufacturer: syz [ 2976.493586][T18261] cdc_wdm 4-1:1.0: skipping garbage [ 2976.512577][T18261] cdc_wdm 4-1:1.0: skipping garbage [ 2976.541804][T18261] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2976.560307][T18261] cdc_wdm 4-1:1.0: Unknown control protocol [ 2976.707408][T18261] usb 4-1: USB disconnect, device number 41 [ 2977.622022][T23905] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input107 [ 2977.833277][T23905] input: failed to attach handler kbd to device input107, error: -5 [ 2977.861380][T23905] usb 1-1: USB disconnect, device number 38 [ 2978.005170][T22053] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2978.215537][T22053] usb 4-1: Using ep0 maxpacket: 8 [ 2978.292024][T22053] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2978.350319][ T786] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2978.394114][T22053] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2978.417293][T22053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.435661][T22053] usb 4-1: Product: syz [ 2978.440126][T22053] usb 4-1: Manufacturer: syz [ 2978.446787][T22053] usb 4-1: SerialNumber: syz [ 2978.569699][T22053] usb 4-1: config 0 descriptor?? [ 2978.605192][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 2978.658579][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2978.673209][T22053] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2978.684753][T22053] usb 4-1: setting power ON [ 2978.689490][ T786] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2978.699934][T22053] dvb-usb: bulk message failed: -22 (2/0) [ 2978.707649][ T786] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2978.799344][T22053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2978.813042][T22053] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2978.822501][ T786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2978.831775][T22053] usb 4-1: media controller created [ 2978.839826][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2978.865041][ T786] usb 3-1: SerialNumber: syz [ 2978.870948][T27548] dvb-usb: bulk message failed: -22 (3/0) [ 2978.872898][T27552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2978.885780][T27548] dvb-usb: bulk message failed: -22 (37/0) [ 2978.894570][T22053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2978.906224][T27548] dvb-usb: bulk message failed: -22 (3/0) [ 2978.934476][T22053] usb 4-1: selecting invalid altsetting 6 [ 2978.940866][T22053] usb 4-1: digital interface selection failed (-22) [ 2978.947896][T22053] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2978.957271][T22053] usb 4-1: setting power OFF [ 2978.961972][T22053] dvb-usb: bulk message failed: -22 (2/0) [ 2978.968048][T22053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2978.982491][T22053] (NULL device *): no alternate interface [ 2979.057715][T22053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2979.096660][T22053] usb 4-1: USB disconnect, device number 42 [ 2979.167958][ T786] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2979.195860][ T786] usb 3-1: USB disconnect, device number 48 [ 2979.955165][T23905] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2980.145224][T23905] usb 2-1: Using ep0 maxpacket: 32 [ 2980.163493][T23905] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 2980.185162][T23905] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2980.225189][T23905] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2980.267841][T23905] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2980.305369][T23905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2980.344316][T23905] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2980.374454][T23905] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2980.405012][T23905] usb 2-1: Product: syz [ 2980.416332][T23905] usb 2-1: Manufacturer: syz [ 2980.427607][T23905] usb 2-1: SerialNumber: syz [ 2980.486737][T23905] usb 2-1: config 0 descriptor?? [ 2980.510606][T23905] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2980.551237][T23905] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2981.029123][T22053] usb 2-1: USB disconnect, device number 42 [ 2981.043014][T22053] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2982.735774][ T786] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2982.945479][ T786] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2982.963979][ T786] usb 1-1: config 0 has no interface number 0 [ 2982.985291][ T786] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2982.994473][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.017759][ T786] usb 1-1: config 0 descriptor?? [ 2983.037924][ T786] usb 1-1: selecting invalid altsetting 1 [ 2983.044089][ T786] dvb_ttusb_budget: ttusb_init_controller: error [ 2983.065038][ T786] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2983.138488][ T786] DVB: Unable to find symbol cx22700_attach() [ 2983.226899][ T786] DVB: Unable to find symbol tda10046_attach() [ 2983.233119][ T786] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2983.262816][ T786] usb 1-1: USB disconnect, device number 39 [ 2984.172249][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'. [ 2984.375202][T18261] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2984.425125][ T786] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2984.515138][T22053] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2984.555173][T18261] usb 4-1: Using ep0 maxpacket: 8 [ 2984.561697][T18261] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2984.573357][T18261] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2984.583746][T18261] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2984.594124][T18261] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2984.607818][T18261] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2984.616505][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 2984.617580][T18261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.625770][ T786] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2984.642584][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2984.815597][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2984.826392][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2984.837157][ T786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2984.850245][ T786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2984.859598][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.871632][T22053] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2984.881041][T18261] usb 4-1: GET_CAPABILITIES returned 0 [ 2984.883178][T22053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.891159][T18261] usbtmc 4-1:16.0: can't read capabilities [ 2984.896793][T22053] usb 1-1: Product: syz [ 2984.905060][T27622] trusted_key: encrypted_key: insufficient parameters specified [ 2984.913051][T22053] usb 1-1: Manufacturer: syz [ 2984.919258][T22053] usb 1-1: SerialNumber: syz [ 2984.926384][T27622] fuse: Unknown parameter 'group_i00000000000000000000' [ 2984.955121][T22053] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2984.998668][T15776] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2985.093518][T27611] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2985.102997][T18261] usb 4-1: USB disconnect, device number 43 [ 2985.118169][ T786] usb 3-1: GET_CAPABILITIES returned 0 [ 2985.129603][ T786] usbtmc 3-1:16.0: can't read capabilities [ 2985.353451][T18261] usb 3-1: USB disconnect, device number 49 [ 2985.866204][ T786] usb 1-1: USB disconnect, device number 40 [ 2986.515662][T15776] usb 1-1: Service connection timeout for: 257 [ 2986.531267][T27658] block device autoloading is deprecated and will be removed. [ 2986.546327][T15776] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2986.557832][ T5787] block device autoloading is deprecated and will be removed. [ 2986.589302][T15776] ath9k_htc: Failed to initialize the device [ 2986.613683][ T786] usb 1-1: ath9k_htc: USB layer deinitialized [ 2986.654204][T27658] syz.1.5663: attempt to access beyond end of device [ 2986.654204][T27658] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2986.716727][T27658] FAT-fs (loop3): unable to read boot sector [ 2989.580966][T27703] loop3: detected capacity change from 0 to 64 [ 2990.935562][T15776] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2991.135177][T15776] usb 3-1: Using ep0 maxpacket: 16 [ 2991.142606][T15776] usb 3-1: config 0 has no interfaces? [ 2991.150516][T15776] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2991.175089][T15776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2991.192633][T15776] usb 3-1: config 0 descriptor?? [ 2991.275156][T14604] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2991.435132][T27713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2991.443871][T27713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.463486][T23905] usb 3-1: USB disconnect, device number 50 [ 2991.478601][T14604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2991.622490][T14604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2991.801586][T14604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2991.860422][T14604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2991.899401][T14604] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2992.062338][T14604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.072769][T14604] usb 4-1: Product: syz [ 2992.080791][T14604] usb 4-1: Manufacturer: syz [ 2992.088899][T14604] usb 4-1: SerialNumber: syz [ 2992.200427][T23905] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2992.209727][T14604] usb 4-1: config 0 descriptor?? [ 2992.397535][T23905] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2992.417575][T23905] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2992.455079][T23905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2992.461917][T23905] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 2992.472734][T14604] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2992.493512][T23905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2992.523256][T23905] usb 3-1: config 0 descriptor?? [ 2992.540548][T23905] yurex 3-1:0.0: Could not submitting URB [ 2992.562931][T23905] yurex: probe of 3-1:0.0 failed with error -5 [ 2992.686566][T15776] usb 4-1: USB disconnect, device number 44 [ 2992.758509][T23905] usbhid 3-1:0.0: can't add hid device: -71 [ 2992.764877][T23905] usbhid: probe of 3-1:0.0 failed with error -71 [ 2992.783242][T23905] usb 3-1: USB disconnect, device number 51 [ 2993.314924][T27774] loop3: detected capacity change from 0 to 2048 [ 2994.046497][T27778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2994.428029][T27778] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2994.492141][T27778] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2994.578415][T27778] Remounting filesystem read-only [ 2994.589707][ T77] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2994.610566][ T77] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 2994.621510][T27793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5711'. [ 2994.631273][ T77] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 2994.645321][ T77] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2994.663469][ T77] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2994.683390][ T77] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 2994.703638][ T77] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 2994.721838][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2994.741558][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2994.767266][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2995.854891][ T77] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2995.865464][ T77] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2995.872973][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.275995][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.284781][T15776] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2996.292435][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.303185][ T77] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 2996.310651][ T77] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 2996.319648][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.329195][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.340055][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.349761][ T77] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2996.359795][ T77] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2996.485937][ T77] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2996.493379][ T77] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2996.503344][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.512821][ T77] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2996.520603][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.529820][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.539010][ T77] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2996.698880][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.757123][ T77] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 2996.774325][ T77] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 2996.784450][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.804723][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2996.827269][ T77] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2997.077122][T15776] usb 2-1: Using ep0 maxpacket: 8 [ 2997.086408][T15776] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 2997.094789][T15776] usb 2-1: config 0 has no interface number 0 [ 2997.108628][T15776] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 2997.119837][ T5787] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 2997.129690][T15776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.141896][T15776] usb 2-1: config 0 descriptor?? [ 2997.170399][T27810] trusted_key: encrypted_key: insufficient parameters specified [ 2997.192592][T15776] ftdi_sio 2-1:0.130: FTDI USB Serial Device converter detected [ 2997.222817][T15776] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 2998.021739][T15776] usb 2-1: USB disconnect, device number 43 [ 2998.051650][T15776] ftdi_sio 2-1:0.130: device disconnected [ 2998.327982][T27830] netlink: 'syz.1.5724': attribute type 14 has an invalid length. [ 3000.625085][T24851] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3000.935071][T24851] usb 4-1: Using ep0 maxpacket: 16 [ 3000.948198][T24851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3000.981100][T24851] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 3001.014121][T24851] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3001.036014][T24851] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3001.081782][T24851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3001.101242][T24851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3001.120450][T24851] usb 4-1: Product: syz [ 3001.124670][T24851] usb 4-1: Manufacturer: syz [ 3001.139706][T24851] usb 4-1: SerialNumber: syz [ 3001.847749][T24851] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3001.872364][T24851] usb 4-1: USB disconnect, device number 45 [ 3002.130853][T27594] udevd[27594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3002.867378][T27869] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 3004.331435][T27879] loop3: detected capacity change from 0 to 32768 [ 3004.387862][T27897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5749'. [ 3004.409815][T27879] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 3004.437306][T27879] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 3005.644029][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 3009.157061][T27959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5771'. [ 3009.166502][T27959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5771'. [ 3009.175707][T27959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5771'. [ 3009.192226][T27959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5771'. [ 3009.355354][T23905] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3009.557732][T27973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5777'. [ 3009.567729][T23905] usb 2-1: Using ep0 maxpacket: 32 [ 3009.575712][T23905] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 3009.584693][T23905] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3009.605392][T23905] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3009.625043][T23905] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3009.649404][T23905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3009.662078][T23905] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3009.682179][T23905] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3009.695301][T23905] usb 2-1: Product: syz [ 3009.699581][T23905] usb 2-1: Manufacturer: syz [ 3009.736860][T23905] usb 2-1: SerialNumber: syz [ 3009.766416][T23905] usb 2-1: config 0 descriptor?? [ 3009.792658][T23905] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3010.027224][T23905] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3010.508522][ T786] usb 2-1: USB disconnect, device number 44 [ 3010.508645][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 3010.528608][ T786] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 3010.660251][T27984] hsr0: entered allmulticast mode [ 3011.392340][T28013] trusted_key: encrypted_key: insufficient parameters specified [ 3011.403422][T28013] fuse: Bad value for 'fd' [ 3011.482743][T28017] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 3012.099400][ T28] audit: type=1326 audit(2000000315.830:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28033 comm="syz.0.5803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f269fb8eb69 code=0x0 [ 3013.268717][T27995] loop3: detected capacity change from 0 to 131072 [ 3013.311156][T27995] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 3013.326296][T27995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3013.344743][T27995] F2FS-fs (loop3): invalid crc value [ 3013.378298][T27995] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3013.426658][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5813'. [ 3013.503569][T27995] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3013.511360][T27995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3013.545467][T23905] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3013.712690][T18261] hid-generic 0005:0004:A9D3.001E: unknown main item tag 0x0 [ 3013.726610][T18261] hid-generic 0005:0004:A9D3.001E: unknown main item tag 0x0 [ 3013.734450][T18261] hid-generic 0005:0004:A9D3.001E: unknown main item tag 0x0 [ 3013.752154][T18261] hid-generic 0005:0004:A9D3.001E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 3013.762291][T23905] usb 3-1: Using ep0 maxpacket: 32 [ 3013.782046][T23905] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3013.801769][T23905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.821000][T23905] usb 3-1: config 0 descriptor?? [ 3013.856598][T28075] fido_id[28075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3014.223623][T23905] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3014.233903][T23905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3014.244621][T23905] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3014.252280][T23905] usb 3-1: media controller created [ 3014.986559][T23905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3015.017396][T23905] az6027: usb out operation failed. (-71) [ 3015.025674][T23905] az6027: usb out operation failed. (-71) [ 3015.031535][T23905] stb0899_attach: Driver disabled by Kconfig [ 3015.038026][T23905] az6027: no front-end attached [ 3015.038026][T23905] [ 3015.047032][T23905] az6027: usb out operation failed. (-71) [ 3015.053008][T23905] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3015.075600][T23905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input108 [ 3015.136242][T23905] dvb-usb: schedule remote query interval to 400 msecs. [ 3015.160642][T23905] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3015.208559][T23905] usb 3-1: USB disconnect, device number 52 [ 3015.254150][T28097] netlink: 'syz.1.5822': attribute type 1 has an invalid length. [ 3015.346247][T23905] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3015.504460][T28105] netlink: 'syz.0.5825': attribute type 2 has an invalid length. [ 3015.952306][T28114] trusted_key: encrypted_key: insufficient parameters specified [ 3015.963557][T28114] fuse: Bad value for 'fd' [ 3016.355173][T23905] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3016.635360][T23905] usb 2-1: Using ep0 maxpacket: 8 [ 3016.646690][T23905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3016.665238][T23905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3016.689483][T23905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3016.715322][T23905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3016.745288][T23905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3016.754650][T23905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3016.935197][T24851] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3017.120384][T24851] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3017.135159][T24851] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3017.138128][T23905] usb 2-1: GET_CAPABILITIES returned 0 [ 3017.151749][T23905] usbtmc 2-1:16.0: can't read capabilities [ 3017.166192][T24851] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3017.185141][T24851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3017.204570][ T786] usb 2-1: USB disconnect, device number 45 [ 3017.286395][T28134] loop3: detected capacity change from 0 to 64 [ 3017.564781][T24851] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3017.744787][T24851] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3017.753573][T24851] usb 1-1: Product: syz [ 3017.758796][T24851] usb 1-1: Manufacturer: syz [ 3017.777997][T24851] cdc_wdm 1-1:1.0: skipping garbage [ 3017.783687][T24851] cdc_wdm 1-1:1.0: skipping garbage [ 3017.814374][T24851] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3017.854589][T24851] cdc_wdm 1-1:1.0: Unknown control protocol [ 3018.023465][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 3018.030417][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 3018.039564][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 3018.046205][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 3018.053541][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 3018.060167][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 3018.066806][ T786] usb 1-1: USB disconnect, device number 41 [ 3018.072873][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 3018.072896][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 3018.072912][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3018.274804][T28144] loop3: detected capacity change from 0 to 2048 [ 3018.390460][T28144] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3018.462169][ T28] audit: type=1800 audit(2000000322.190:831): pid=28144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5842" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 3018.497290][T28145] trusted_key: encrypted_key: insufficient parameters specified [ 3018.919117][T28149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5844'. [ 3018.986397][T28147] loop3: detected capacity change from 0 to 32768 [ 3019.119524][T28147] JBD2: Ignoring recovery information on journal [ 3019.250310][T28147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 3019.374577][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 3019.765384][T14604] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3019.981924][T14604] usb 4-1: Using ep0 maxpacket: 32 [ 3020.064026][T14604] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3020.121717][T14604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.335582][T14604] usb 4-1: config 0 descriptor?? [ 3020.543835][T14604] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3020.601474][T28178] trusted_key: encrypted_key: insufficient parameters specified [ 3020.756076][ T5821] ------------[ cut here ]------------ [ 3020.762403][ T5821] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 3020.771008][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.785043][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.786866][ T5821] WARNING: CPU: 0 PID: 5821 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 3020.800967][ T5821] Modules linked in: [ 3020.804897][ T5821] CPU: 0 PID: 5821 Comm: kworker/0:3 Not tainted 6.6.101-syzkaller #0 [ 3020.813236][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3020.823757][ T5821] Workqueue: events request_firmware_work_func [ 3020.830043][ T5821] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 3020.835939][ T5821] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 3020.855805][ T5821] RSP: 0018:ffffc9000481f800 EFLAGS: 00010246 [ 3020.861904][ T5821] RAX: df02a3d8a92b2f00 RBX: ffffffff8b214ea0 RCX: ffff8880476a8000 [ 3020.870151][ T5821] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3020.878259][ T5821] RBP: dffffc0000000000 R08: ffffc9000481f407 R09: 1ffff92000903e80 [ 3020.886310][ T5821] R10: dffffc0000000000 R11: fffff52000903e81 R12: 1ffffffff16429d8 [ 3020.894313][ T5821] R13: 0000000000000001 R14: ffff88807e5328b8 R15: ffff88807e8b3008 [ 3020.902449][ T5821] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3020.911473][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3020.918158][ T5821] CR2: 00007fa89a725d70 CR3: 0000000030bd4000 CR4: 00000000003506f0 [ 3020.926230][ T5821] Call Trace: [ 3020.929527][ T5821] [ 3020.932487][ T5821] ? sysfs_unmerge_group+0x10d/0x130 [ 3020.937885][ T5821] device_del+0x251/0x900 [ 3020.942286][ T5821] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3020.948345][ T5821] ? kill_device+0x160/0x160 [ 3020.952971][ T5821] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3020.958965][ T5821] ? _raw_spin_unlock+0x40/0x40 [ 3020.963850][ T5821] ? complete_all+0x2d/0x1d0 [ 3020.968517][ T5821] ? __fw_load_abort+0x8b/0x1a0 [ 3020.973420][ T5821] firmware_fallback_sysfs+0x682/0x940 [ 3020.979036][ T5821] _request_firmware+0xed9/0x1510 [ 3020.984113][ T5821] ? request_firmware+0x50/0x50 [ 3020.989088][ T5821] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3020.995161][ T5821] ? read_lock_is_recursive+0x20/0x20 [ 3021.000559][ T5821] request_firmware_work_func+0xb0/0x1b0 [ 3021.006446][ T5821] ? process_scheduled_works+0x957/0x15b0 [ 3021.012198][ T5821] process_scheduled_works+0xa45/0x15b0 [ 3021.015236][T18261] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 3021.017845][ T5821] ? assign_work+0x400/0x400 [ 3021.030063][ T5821] ? assign_work+0x39e/0x400 [ 3021.034683][ T5821] worker_thread+0xa55/0xfc0 [ 3021.039586][ T5821] kthread+0x2fa/0x390 [ 3021.043692][ T5821] ? pr_cont_work+0x560/0x560 [ 3021.048504][ T5821] ? kthread_blkcg+0xd0/0xd0 [ 3021.053190][ T5821] ret_from_fork+0x48/0x80 [ 3021.057757][ T5821] ? kthread_blkcg+0xd0/0xd0 [ 3021.062377][ T5821] ret_from_fork_asm+0x11/0x20 [ 3021.067276][ T5821] [ 3021.070320][ T5821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3021.077773][ T5821] CPU: 0 PID: 5821 Comm: kworker/0:3 Not tainted 6.6.101-syzkaller #0 [ 3021.086026][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3021.096078][ T5821] Workqueue: events request_firmware_work_func [ 3021.102279][ T5821] Call Trace: [ 3021.105571][ T5821] [ 3021.108506][ T5821] dump_stack_lvl+0x16c/0x230 [ 3021.113212][ T5821] ? show_regs_print_info+0x20/0x20 [ 3021.118435][ T5821] ? load_image+0x3b0/0x3b0 [ 3021.122962][ T5821] panic+0x2c0/0x710 [ 3021.126863][ T5821] ? bpf_jit_dump+0xd0/0xd0 [ 3021.131379][ T5821] ? ret_from_fork_asm+0x11/0x20 [ 3021.136325][ T5821] __warn+0x2e0/0x470 [ 3021.140299][ T5821] ? sysfs_remove_group+0x178/0x2a0 [ 3021.145488][ T5821] ? sysfs_remove_group+0x178/0x2a0 [ 3021.150680][ T5821] report_bug+0x2be/0x4f0 [ 3021.155002][ T5821] ? sysfs_remove_group+0x178/0x2a0 [ 3021.160191][ T5821] ? sysfs_remove_group+0x178/0x2a0 [ 3021.165376][ T5821] ? sysfs_remove_group+0x17a/0x2a0 [ 3021.170568][ T5821] handle_bug+0xcf/0x120 [ 3021.174806][ T5821] exc_invalid_op+0x1a/0x50 [ 3021.179308][ T5821] asm_exc_invalid_op+0x1a/0x20 [ 3021.184160][ T5821] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 3021.189967][ T5821] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 3021.209565][ T5821] RSP: 0018:ffffc9000481f800 EFLAGS: 00010246 [ 3021.215629][ T5821] RAX: df02a3d8a92b2f00 RBX: ffffffff8b214ea0 RCX: ffff8880476a8000 [ 3021.223591][ T5821] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3021.231642][ T5821] RBP: dffffc0000000000 R08: ffffc9000481f407 R09: 1ffff92000903e80 [ 3021.239604][ T5821] R10: dffffc0000000000 R11: fffff52000903e81 R12: 1ffffffff16429d8 [ 3021.247569][ T5821] R13: 0000000000000001 R14: ffff88807e5328b8 R15: ffff88807e8b3008 [ 3021.255549][ T5821] ? sysfs_unmerge_group+0x10d/0x130 [ 3021.260833][ T5821] device_del+0x251/0x900 [ 3021.265168][ T5821] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3021.271144][ T5821] ? kill_device+0x160/0x160 [ 3021.275744][ T5821] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3021.281632][ T5821] ? _raw_spin_unlock+0x40/0x40 [ 3021.286573][ T5821] ? complete_all+0x2d/0x1d0 [ 3021.291158][ T5821] ? __fw_load_abort+0x8b/0x1a0 [ 3021.296060][ T5821] firmware_fallback_sysfs+0x682/0x940 [ 3021.301527][ T5821] _request_firmware+0xed9/0x1510 [ 3021.306559][ T5821] ? request_firmware+0x50/0x50 [ 3021.311413][ T5821] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3021.317388][ T5821] ? read_lock_is_recursive+0x20/0x20 [ 3021.322756][ T5821] request_firmware_work_func+0xb0/0x1b0 [ 3021.328390][ T5821] ? process_scheduled_works+0x957/0x15b0 [ 3021.334121][ T5821] process_scheduled_works+0xa45/0x15b0 [ 3021.339689][ T5821] ? assign_work+0x400/0x400 [ 3021.344277][ T5821] ? assign_work+0x39e/0x400 [ 3021.348861][ T5821] worker_thread+0xa55/0xfc0 [ 3021.353476][ T5821] kthread+0x2fa/0x390 [ 3021.357542][ T5821] ? pr_cont_work+0x560/0x560 [ 3021.362210][ T5821] ? kthread_blkcg+0xd0/0xd0 [ 3021.366795][ T5821] ret_from_fork+0x48/0x80 [ 3021.371209][ T5821] ? kthread_blkcg+0xd0/0xd0 [ 3021.375879][ T5821] ret_from_fork_asm+0x11/0x20 [ 3021.380648][ T5821] [ 3021.383870][ T5821] Kernel Offset: disabled [ 3021.388293][ T5821] Rebooting in 86400 seconds..