last executing test programs: 8.39994037s ago: executing program 1 (id=720): syz_emit_ethernet(0x8e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x14, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @sack={0x5, 0xa, [0x555, 0x81]}, @generic={0x13, 0xc, "cb3a56eab60e2fc4f949"}, @generic={0x27, 0xa, "a716a4f02df14295"}, @mptcp=@capable={0x1e, 0x14, 0x4, 0x8, 0x2, 0x3, [0x3]}, @timestamp={0x8, 0xa, 0x5, 0x1ff}]}}}}}}}}, 0x0) 8.27171899s ago: executing program 1 (id=721): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x400, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @empty, 0x100}, 0x1c) (fail_nth: 2) 6.883331136s ago: executing program 1 (id=731): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) 5.968987845s ago: executing program 1 (id=737): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) pread64(r0, &(0x7f0000000240)=""/156, 0x9c, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='ns/time_for_children\x00', r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c) sendto$inet(r0, &(0x7f0000000180)="103b184c8a9577b922420f3de636f867d9799f143993db33cb31f16d98445da60f40fc429b4d51e3f44962d6673836db96965b82f62d8025f3db29ead61f7e8cdad288e323827e9df57b5ca6f7dc20a8ec", 0x51, 0x1, &(0x7f0000000200)={0x2, 0x4e02, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ab", 0x1, 0x11, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 5.710514712s ago: executing program 4 (id=741): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) 4.959688527s ago: executing program 1 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000400)="b942") 4.901051628s ago: executing program 2 (id=743): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x10}, [], {0x4, 0x1}}, 0x24, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x15}}, 0x1c) 4.842007902s ago: executing program 0 (id=744): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x406, r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) stat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) chown(&(0x7f00000001c0)='./file0\x00', r6, r7) setresuid(0x0, 0x0, r6) lchown(&(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x240008c0, 0x0, 0x2f) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)={r9, 0x7, 0x1, "1c"}, 0x9) fsopen(&(0x7f00000000c0)='erofs\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) 4.701806204s ago: executing program 4 (id=745): unshare(0x60600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) pwrite64(r0, 0x0, 0x0, 0xeb) pipe(&(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xe3, 0x4, 0x9, 0x200, 0x8001, 0x1, "b1fa4d17de73806f54ae2852c1d09b282ade75e871949ca6e4bf49aba39f2ef7d46056a6eb6820bc332ca171390bd20efde3ac661b8cb633c7e1dd3346f47150e58d47ce7391516c9511358d2b0e74d1bc702049fbf161a64552f9bc4e821691a62f1e9dc1f3ca39cf07e88b917544816a3b09a6263b0b3e3466e077f7bfdf84262c3474d57b7edb8c764f340617231b133c2e757b7f5b9715900f268de5f9c655d97d344adcbc435c20c49e9115cfad26ce4ef3e9ae11feed8ea8fc31a161091a27d3e0ea6c4ba789bab0fe11aba1b4324e8c3a2afa23ef8d85e2b26e95aea35e9360"}}, 0x1fb) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x14804) syz_usb_connect(0x2, 0x9f, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x0, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}]}}, {{0x9, 0x4, 0xcd, 0x3, 0x4, 0x58, 0x5a, 0x87, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4d, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3c, 0x40, 0x0, [@generic={0x13, 0x22, "b220c3b729cb730124ffd3a7ac2ef43bf1"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfb}]}}, {{0x9, 0x5, 0xe17bebb0bfe4c045, 0x1, 0x200, 0x80, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @generic={0xe, 0x22, "2e72c3a0da930c726ae4ebd6"}]}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 4.701205139s ago: executing program 2 (id=746): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000007005a7da32917"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.287203578s ago: executing program 4 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xdae6, &(0x7f0000000200)=0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80240, 0x0) io_submit(r1, 0x1, &(0x7f0000001000)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xcf8, r2, 0x0, 0x0, 0x1, 0x0, 0x2}]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x242e02, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x23e042, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = memfd_create(0x0, 0x7) sendfile(r6, r2, &(0x7f00000001c0), 0x7fa) chdir(0x0) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x2b8c0000, 0x20a02) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, 0x0) chown(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000014000000020a0104000000000000000007000007140000001000010000000000000000000084000a23f4cdaec0075e97b619e5938b460bfc72c214cba3e6b4ab72bfc8f383f4711c4718027378a9952596"], 0x5c}}, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) syz_pidfd_open(0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="91aeaeeff458125cf546ad2257441fd8d3e4c8663c096ad3129d79e6b8920d80e8d726c943771caa2e1cfebdf0974667c7737bc8014e05c53333f54baf6aa5931c20ca1636ac76ada1d15e9260f57a34d3a608b2ae5935e44df8c6190e6dfa21377bf4e1f0f8a4f4af57199f8d5cfddc19d0cb9aa6ca53dbde53e0f3f667fbda14b8dff4fbce3787d2a8a8edfa435e0700000000000000e7d2176853d1a781042dce505ff6c8b1c036840ab207abaa699fe3bf144f4d2e455ce933dbdf8f0e02787192f6b06f55ed93cb13a68d9c1b20cbdc311af04e7d8e", 0xd8}], 0x2000000000000152) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000001000000040060809c0a01"], 0xab4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6004000010902120001000000000904"], 0x0) 3.27479383s ago: executing program 0 (id=758): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 3.126973891s ago: executing program 3 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') lseek(r1, 0x7, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') statx(r2, &(0x7f0000000040)='.\x00', 0x0, 0x5c00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000240)=0x9, 0x4) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40208c0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) move_mount(r1, &(0x7f00000001c0)='\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x20) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x162, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha384-avx\x00'}}) 2.931577271s ago: executing program 2 (id=750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) readv(r3, &(0x7f0000000880)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = syz_open_dev$video4linux(&(0x7f0000001d80), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300f}) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.354436656s ago: executing program 0 (id=751): r0 = socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r0], 0x20) 2.160631899s ago: executing program 3 (id=752): socket$inet6_udp(0xa, 0x2, 0x0) 2.095583747s ago: executing program 0 (id=753): syz_usb_connect(0x0, 0x2d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xb9, 0x10, 0x1235, 0x10, 0xa738, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x2b, 0xff, 0xea}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xad, 0x63}}]}}]}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6) ioctl$TIOCGPGRP(r7, 0x4c07, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000005c0)={r5}, &(0x7f00000002c0)=0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r9 = openat$udambuf(0xffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x4000, 0x642d416e2597292f}) getdents(r8, 0x0, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xffff, 0x3d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4bff508e9019f1dd8bd4278100a768c9f5c395c851c43e69"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c015a03", @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000700000008000300", @ANYRES32=r10, @ANYBLOB="0400cc00080005000a0000001400040073797a6b616c6c657231000000000000"], 0x3c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.072678275s ago: executing program 1 (id=754): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8400, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x10001}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x18, &(0x7f0000000000)={0x40, 0x2, 0x1c, {0x1c, 0x0, "34d0175e76997660b220609f3570e12f1813aadbd54a9fd22bbe"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) chdir(0x0) socket(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3700000001"], 0x20) socket$kcm(0x11, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 1.877527445s ago: executing program 3 (id=755): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000001a00)=""/177, 0xb1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0xdc, 0x18}}) r1 = socket$packet(0x11, 0x2, 0x300) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x80001e1b, &(0x7f0000000200)={0x0, 0xfbe8, 0x10100, 0x0, 0x1}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001080)=""/107, 0x6b}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0xffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x296, 0xd, 0x7, 0x5c1}, {0x4, 0x6, 0x7, 0x5}, {0x2841, 0x1, 0x0, 0x6}, {0x5, 0x8c, 0x2, 0x9}, {0x3d8b, 0x7f, 0x2, 0x1ff}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000140)=[{0x8000, 0xa0, 0x9, 0x9}]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x401, 0x0, 0x3, 0x8, 0x0, 0xfffd}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='bond_slave_1\x00', 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcea, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r9, @ANYBLOB="05"], 0x0) 1.691744393s ago: executing program 2 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xdae6, &(0x7f0000000200)=0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80240, 0x0) io_submit(r1, 0x1, &(0x7f0000001000)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xcf8, r2, 0x0, 0x0, 0x1, 0x0, 0x2}]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x23e042, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000ec0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x7) sendfile(r5, r2, &(0x7f00000001c0), 0x7fa) chdir(0x0) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x2b8c0000, 0x20a02) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) chown(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000014000000020a0104000000000000000007000007140000001000010000000000000000000084000a23f4cdaec0075e97b619e5938b460bfc72c214cba3e6b4ab72bfc8f383f4711c4718027378a9952596"], 0x5c}}, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) syz_pidfd_open(0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="91aeaeeff458125cf546ad2257441fd8d3e4c8663c096ad3129d79e6b8920d80e8d726c943771caa2e1cfebdf0974667c7737bc8014e05c53333f54baf6aa5931c20ca1636ac76ada1d15e9260f57a34d3a608b2ae5935e44df8c6190e6dfa21377bf4e1f0f8a4f4af57199f8d5cfddc19d0cb9aa6ca53dbde53e0f3f667fbda14b8dff4fbce3787d2a8a8edfa435e0700000000000000e7d2176853d1a781042dce505ff6c8b1c036840ab207abaa699fe3bf144f4d2e455ce933dbdf8f0e02787192f6b06f55ed93cb13a68d9c1b20cbdc311af04e7d8e", 0xd8}], 0x2000000000000152) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000001000000040060809c0a01"], 0xab4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6004000010902120001000000000904"], 0x0) 860.982117ms ago: executing program 4 (id=757): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c00000019000d0400000000000000001d"], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') socket$packet(0x11, 0x2, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1]) 595.7314ms ago: executing program 4 (id=759): r0 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 576.293604ms ago: executing program 4 (id=760): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) 356.698943ms ago: executing program 3 (id=761): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef", 0x3e5}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)}}], 0x2, 0x40000100, 0x0) 247.658962ms ago: executing program 3 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80258\x00'}]}, 0x20}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xff, 0xfffff010}, {0x6, 0x5, 0x5, 0x100000}]}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff47) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000d40)=0xfdfdffff) 218.968385ms ago: executing program 2 (id=763): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x446300) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=[{'IMIX', @val={' \'', 'Synth Capture'}}, {'IMIX', @val={' \'', 'Synth'}}], 0x4c) close_range(r0, 0xffffffffffffffff, 0x0) 161.88621ms ago: executing program 0 (id=764): r0 = socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r0], 0x20) 113.595621ms ago: executing program 3 (id=765): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0xda5c}, [@btf_id={0x18, 0x12, 0x3, 0x0, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xc, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x4, 0x3, 0xa, 0x1}, {0x0, 0x81, 0xc}, {0x3, 0x5, 0x9}, {0x2, 0x4, 0xe, 0xa}, {0x4, 0x2, 0x3, 0x9}, {0x0, 0x4, 0x0, 0x9}, {0x1, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast1, 0x7, 0x7, 0x5, 0x400, 0x8, 0x200000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @can, @llc={0x1a, 0x337, 0x5, 0x8, 0x2, 0xf, @link_local}, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0xfb, 0x4}) r6 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r6, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0xff, 0x0, 0x4}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000010006fb640002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 11.523803ms ago: executing program 2 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xdae6, &(0x7f0000000200)=0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80240, 0x0) io_submit(r1, 0x1, &(0x7f0000001000)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xcf8, r2, 0x0, 0x0, 0x1, 0x0, 0x2}]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x242e02, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x23e042, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000ec0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x7) sendfile(r6, r2, &(0x7f00000001c0), 0x7fa) chdir(0x0) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x2b8c0000, 0x20a02) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, 0x0) chown(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000014000000020a0104000000000000000007000007140000001000010000000000000000000084000a23f4cdaec0075e97"], 0x5c}}, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) syz_pidfd_open(0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="91aeaeeff458125cf546ad2257441fd8d3e4c8663c096ad3129d79e6b8920d80e8d726c943771caa2e1cfebdf0974667c7737bc8014e05c53333f54baf6aa5931c20ca1636ac76ada1d15e9260f57a34d3a608b2ae5935e44df8c6190e6dfa21377bf4e1f0f8a4f4af57199f8d5cfddc19d0cb9aa6ca53dbde53e0f3f667fbda14b8dff4fbce3787d2a8a8edfa435e0700000000000000e7d2176853d1a781042dce505ff6c8b1c036840ab207abaa699fe3bf144f4d2e455ce933dbdf8f0e02787192f6b06f55ed93cb13a68d9c1b20cbdc311af04e7d8e", 0xd8}], 0x2000000000000152) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000001000000040060809c0a01"], 0xab4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6004000010902120001000000000904"], 0x0) 0s ago: executing program 0 (id=767): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x200009, @empty, 0xfe}, 0x1c) kernel console output (not intermixed with test programs): 7][ T3078] usb 2-1: config 129 has an invalid interface number: 135 but max is 1 [ 184.072747][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.081312][ T5887] usb 3-1: Product: syz [ 184.093373][ T5887] usb 3-1: Manufacturer: syz [ 184.098047][ T5887] usb 3-1: SerialNumber: syz [ 184.126639][ T5887] usb 3-1: config 0 descriptor?? [ 184.142038][ T3078] usb 2-1: config 129 has no interface number 1 [ 184.152025][ T3078] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 184.172199][ T3078] usb 2-1: config 129 interface 135 has no altsetting 0 [ 184.179202][ T3078] usb 2-1: config 129 interface 0 has no altsetting 0 [ 184.188342][ T3078] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 184.202000][ T3078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.211888][ T3078] usb 2-1: Product: syz [ 184.216161][ T3078] usb 2-1: Manufacturer: syz [ 184.221142][ T3078] usb 2-1: SerialNumber: syz [ 184.559609][ T5887] usb 3-1: Firmware version (0.0) predates our first public release. [ 184.577037][ T5887] usb 3-1: Please update to version 0.2 or newer [ 184.607953][ T5887] usb 3-1: USB disconnect, device number 38 [ 184.687914][ T5883] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 184.822154][ T46] ov519 1-1:1.13: Can't determine sensor slave IDs [ 184.830760][ T5886] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 184.831429][ T46] ov519 1-1:1.13: OV519 Config failed [ 184.839361][ T5886] em28xx 5-1:0.89: board has no eeprom [ 184.845769][ T46] ov519 1-1:1.13: probe with driver ov519 failed with error -22 [ 184.869334][ T46] usb 1-1: USB disconnect, device number 37 [ 184.875437][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 184.891656][ T5883] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.906999][ T5883] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.921661][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.923003][ T5886] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 184.937013][ T5883] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 184.939319][ T5886] em28xx 5-1:0.89: analog set to bulk mode. [ 184.955526][ T5885] em28xx 5-1:0.89: Registering V4L2 extension [ 184.966354][ T5883] usb 4-1: Product: syz [ 184.980978][ T5883] usb 4-1: Manufacturer: syz [ 184.984507][ T5886] usb 5-1: USB disconnect, device number 39 [ 184.999376][ T5883] hub 4-1:4.0: USB hub found [ 185.005261][ T5886] em28xx 5-1:0.89: Disconnecting em28xx [ 185.025696][ T5885] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 185.037608][ T3078] au0828: au0828: Device initialization failed. [ 185.055151][ T5885] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 185.062008][ T3078] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 185.077623][ T5885] em28xx 5-1:0.89: No AC97 audio processor [ 185.089314][ T3078] usb 2-1: USB disconnect, device number 45 [ 185.114868][ T5885] usb 5-1: Decoder not found [ 185.130809][ T5885] em28xx 5-1:0.89: failed to create media graph [ 185.138898][ T5885] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 185.150352][ T5885] em28xx 5-1:0.89: Registering snapshot button... [ 185.167549][ T5885] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input22 [ 185.195479][ T5885] em28xx 5-1:0.89: Remote control support is not available for this card. [ 185.212042][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 185.216184][ T5886] em28xx 5-1:0.89: Closing input extension [ 185.225119][ T5883] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 185.226810][ T5886] em28xx 5-1:0.89: Deregistering snapshot button [ 185.263999][ T5883] usb 4-1: USB disconnect, device number 41 [ 185.291459][ T5886] em28xx 5-1:0.89: Freeing device [ 185.424899][ T46] usb 1-1: device descriptor read/all, error -71 [ 185.572222][ T3078] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 185.596718][ T7355] pimreg0: tun_chr_ioctl cmd 1074025677 [ 185.602578][ T7355] pimreg0: linktype set to 65534 [ 185.762092][ T3078] usb 2-1: Using ep0 maxpacket: 32 [ 185.776958][ T3078] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 185.785653][ T3078] usb 2-1: config 0 has no interface number 0 [ 185.791918][ T3078] usb 2-1: config 0 interface 89 has no altsetting 0 [ 185.792642][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 185.812914][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 185.826398][ T3078] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 185.838212][ T3078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.848138][ T3078] usb 2-1: Product: syz [ 185.852702][ T3078] usb 2-1: Manufacturer: syz [ 185.857410][ T3078] usb 2-1: SerialNumber: syz [ 185.872690][ T3078] usb 2-1: config 0 descriptor?? [ 185.884128][ T3078] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 185.893800][ T3078] em28xx 2-1:0.89: Video interface 89 found: bulk [ 185.955961][ T7358] pimreg0: tun_chr_ioctl cmd 1074025677 [ 185.961914][ T7358] pimreg0: linktype set to 65534 [ 186.022187][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 186.027496][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 186.036732][ T46] usb 1-1: config 0 has an invalid interface number: 181 but max is 1 [ 186.046445][ T46] usb 1-1: config 0 has no interface number 1 [ 186.055071][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.066237][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 186.077398][ T46] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 186.090922][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.099546][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.108868][ T46] usb 1-1: Product: syz [ 186.114711][ T25] usb 3-1: config 0 descriptor?? [ 186.121619][ T46] usb 1-1: Manufacturer: syz [ 186.128819][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 186.135244][ T46] usb 1-1: SerialNumber: syz [ 186.143922][ T46] usb 1-1: config 0 descriptor?? [ 186.153088][ T46] usb 1-1: selecting invalid altsetting 1 [ 186.159911][ T46] snd-usb-audio 1-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 186.172601][ T46] usb 1-1: selecting invalid altsetting 1 [ 186.191512][ T46] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 186.228912][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.377631][ T7350] loop6: detected capacity change from 0 to 524287999 [ 186.389700][ C1] blk_print_req_error: 43 callbacks suppressed [ 186.389713][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.405180][ C1] buffer_io_error: 42 callbacks suppressed [ 186.405195][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.419081][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.428382][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.436591][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.445932][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.454413][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.463815][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.472861][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.482097][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.512541][ T3078] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 186.522632][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.531889][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.542161][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.551429][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.564535][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.573818][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.581734][ T7350] ldm_validate_partition_table(): Disk read failed. [ 186.612652][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.622022][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.630311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.639541][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.658887][ T7350] Dev loop6: unable to read RDB block 0 [ 186.670178][ T7350] loop6: unable to read partition table [ 186.684971][ T7350] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 186.698261][ T7359] ldm_validate_partition_table(): Disk read failed. [ 186.705938][ T7359] Dev loop6: unable to read RDB block 0 [ 186.759182][ T7359] loop6: unable to read partition table [ 186.770340][ T7359] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 186.822382][ T5886] usb 1-1: USB disconnect, device number 39 [ 186.895672][ T7363] net_ratelimit: 46 callbacks suppressed [ 186.895687][ T7363] netlink: zone id is out of range [ 186.908183][ T7363] netlink: zone id is out of range [ 186.940039][ T25] gspca_vc032x: reg_w err -71 [ 186.942264][ T7363] netlink: zone id is out of range [ 186.947303][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 186.968244][ T25] usb 3-1: USB disconnect, device number 39 [ 186.991699][ T7363] netlink: zone id is out of range [ 186.997978][ T7363] netlink: zone id is out of range [ 187.004061][ T7363] netlink: zone id is out of range [ 187.009326][ T7363] netlink: zone id is out of range [ 187.014925][ T7363] netlink: zone id is out of range [ 187.021170][ T7363] netlink: zone id is out of range [ 187.028618][ T7363] netlink: zone id is out of range [ 187.125990][ T5886] IPVS: starting estimator thread 0... [ 187.133449][ T3078] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 187.147819][ T3078] em28xx 2-1:0.89: board has no eeprom [ 187.232285][ T7367] IPVS: using max 23 ests per chain, 55200 per kthread [ 187.322101][ T5883] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 187.393380][ T3078] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 187.400830][ T3078] em28xx 2-1:0.89: analog set to bulk mode. [ 187.408047][ T5888] em28xx 2-1:0.89: Registering V4L2 extension [ 187.459259][ T3078] usb 2-1: USB disconnect, device number 46 [ 187.465401][ T5888] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 187.479623][ T5883] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 187.490030][ T3078] em28xx 2-1:0.89: Disconnecting em28xx [ 187.496038][ T5888] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 187.496071][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 187.512901][ T5888] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 187.521687][ T5888] em28xx 2-1:0.89: No AC97 audio processor [ 187.529662][ T25] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 187.555106][ T5883] usb 5-1: Product: syz [ 187.559720][ T5888] usb 2-1: Decoder not found [ 187.567360][ T5888] em28xx 2-1:0.89: failed to create media graph [ 187.576644][ T5888] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 187.584057][ T5883] usb 5-1: config 0 descriptor?? [ 187.594859][ T5883] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 187.606140][ T5888] em28xx 2-1:0.89: Registering snapshot button... [ 187.615842][ T5883] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 187.637743][ T5888] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input23 [ 187.709678][ T5888] em28xx 2-1:0.89: Remote control support is not available for this card. [ 187.729980][ T25] usb 4-1: config 0 has an invalid interface number: 46 but max is 8 [ 187.748695][ T3078] em28xx 2-1:0.89: Closing input extension [ 187.765268][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.776115][ T5888] hid (null): unknown global tag 0xe [ 187.783255][ T3078] em28xx 2-1:0.89: Deregistering snapshot button [ 187.791871][ T5888] hid-generic 0004:0009:0200.001D: collection stack underflow [ 187.801356][ T25] usb 4-1: config 0 has no interface number 0 [ 187.811340][ T25] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 187.824076][ T5888] hid-generic 0004:0009:0200.001D: item 0 1 0 12 parsing failed [ 187.832603][ T3078] em28xx 2-1:0.89: Freeing device [ 187.840934][ T5888] hid-generic 0004:0009:0200.001D: probe with driver hid-generic failed with error -22 [ 187.855679][ T25] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.868614][ T25] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 187.880012][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.888499][ T25] usb 4-1: Product: syz [ 187.893419][ T25] usb 4-1: Manufacturer: syz [ 187.898140][ T25] usb 4-1: SerialNumber: syz [ 187.905694][ T25] usb 4-1: config 0 descriptor?? [ 187.914828][ T7369] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 187.931798][ T25] ums-karma 4-1:0.46: USB Mass Storage device detected [ 187.994845][ T25] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 188.058309][ T5883] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 188.187608][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 188.205644][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.219773][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.230990][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.240238][ T5883] usb 3-1: not running at top speed; connect to a high speed hub [ 188.261442][ T5883] usb 3-1: config 129 has an invalid interface number: 135 but max is 1 [ 188.280796][ T5883] usb 3-1: config 129 has no interface number 1 [ 188.297253][ T5883] usb 3-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.320215][ T3078] usb 4-1: USB disconnect, device number 42 [ 188.346548][ T5883] usb 3-1: config 129 interface 135 has no altsetting 0 [ 188.354794][ T5883] usb 3-1: config 129 interface 0 has no altsetting 0 [ 188.364779][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 188.378609][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.387307][ T5883] usb 3-1: Product: syz [ 188.391789][ T5883] usb 3-1: Manufacturer: syz [ 188.400986][ T5883] usb 3-1: SerialNumber: syz [ 188.422212][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 188.586475][ T25] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 188.595731][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.610366][ T25] usb 2-1: Product: syz [ 188.617450][ T25] usb 2-1: Manufacturer: syz [ 188.622465][ T25] usb 2-1: SerialNumber: syz [ 188.634004][ T25] usb 2-1: config 0 descriptor?? [ 188.682149][ T3078] usb 5-1: USB disconnect, device number 40 [ 188.688804][ T3078] ftdi_sio 5-1:0.0: device disconnected [ 189.052100][ T25] usb 2-1: Firmware version (0.0) predates our first public release. [ 189.064636][ T25] usb 2-1: Please update to version 0.2 or newer [ 189.118108][ T25] usb 2-1: USB disconnect, device number 47 [ 189.156572][ T5883] au0828: au0828: Device initialization failed. [ 189.167490][ T3078] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 189.177339][ T5883] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 189.196447][ T5883] usb 3-1: USB disconnect, device number 40 [ 189.301142][ T7387] vivid-000: disconnect [ 189.356832][ T3078] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.372383][ T3078] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.387727][ T3078] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.397300][ T3078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.405907][ T3078] usb 4-1: SerialNumber: syz [ 189.670652][ T3078] usb 4-1: 0:2 : does not exist [ 189.681809][ T3078] usb 4-1: unit 5: unexpected type 0x0b [ 189.752075][ T5887] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 189.768589][ T7394] loop6: detected capacity change from 0 to 524287999 [ 189.819073][ T7394] ldm_validate_partition_table(): Disk read failed. [ 189.846957][ T3078] usb 4-1: USB disconnect, device number 43 [ 189.850972][ T7394] Dev loop6: unable to read RDB block 0 [ 189.917459][ T7394] loop6: unable to read partition table [ 189.925733][ T5887] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 189.984794][ T7394] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 190.005238][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 190.061636][ T7386] vivid-000: reconnect [ 190.066256][ T5887] usb 5-1: Product: syz [ 190.076086][ T5887] usb 5-1: config 0 descriptor?? [ 190.082824][ T5887] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 190.090939][ T5887] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 190.133934][ T7397] ldm_validate_partition_table(): Disk read failed. [ 190.148619][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.177594][ T7397] Dev loop6: unable to read RDB block 0 [ 190.207387][ T7397] loop6: unable to read partition table [ 190.318326][ T7397] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 190.461813][ T5837] Bluetooth: hci3: unexpected event for opcode 0x040b [ 190.922130][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 190.972758][ T3078] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 191.104988][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 191.115602][ T25] usb 4-1: config 0 has an invalid interface number: 181 but max is 1 [ 191.136558][ T25] usb 4-1: config 0 has no interface number 1 [ 191.162156][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 191.177992][ T25] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 191.208173][ T3078] usb 1-1: config 0 has an invalid interface number: 181 but max is 1 [ 191.246217][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.261348][ T3078] usb 1-1: config 0 has no interface number 1 [ 191.276686][ T25] usb 4-1: Product: syz [ 191.288470][ T3078] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 191.309514][ T25] usb 4-1: Manufacturer: syz [ 191.320848][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.336546][ T25] usb 4-1: SerialNumber: syz [ 191.391843][ T25] usb 4-1: config 0 descriptor?? [ 191.401038][ T3078] usb 1-1: Product: syz [ 191.407052][ T46] usb 5-1: USB disconnect, device number 41 [ 191.414373][ T3078] usb 1-1: Manufacturer: syz [ 191.421377][ T3078] usb 1-1: SerialNumber: syz [ 191.427872][ T25] usb 4-1: selecting invalid altsetting 1 [ 191.437007][ T46] ftdi_sio 5-1:0.0: device disconnected [ 191.443754][ T25] snd-usb-audio 4-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 191.459950][ T3078] usb 1-1: config 0 descriptor?? [ 191.471615][ T3078] usb 1-1: selecting invalid altsetting 1 [ 191.479135][ T25] usb 4-1: selecting invalid altsetting 1 [ 191.490830][ T3078] snd-usb-audio 1-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 191.522775][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 191.523910][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 191.532448][ T3078] usb 1-1: selecting invalid altsetting 1 [ 191.538635][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 191.549827][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 191.549840][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 191.612647][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.661863][ T7406] loop6: detected capacity change from 0 to 524287999 [ 191.674461][ C0] blk_print_req_error: 58 callbacks suppressed [ 191.674479][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.690021][ C0] buffer_io_error: 58 callbacks suppressed [ 191.690034][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.700719][ T3078] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 191.704443][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.722243][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.746536][ T5887] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 191.754484][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.754567][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.776900][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.786101][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.843119][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.852401][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.871999][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.881360][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.890337][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.896946][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.899505][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.931979][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.941152][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.949279][ T7406] ldm_validate_partition_table(): Disk read failed. [ 191.984054][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.993307][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.002021][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.011221][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.023311][ T7406] Dev loop6: unable to read RDB block 0 [ 192.043163][ T7406] loop6: unable to read partition table [ 192.057213][ T5887] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 192.070005][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 192.088394][ T7406] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 192.113215][ T7410] ldm_validate_partition_table(): Disk read failed. [ 192.146894][ T5887] usb 3-1: Product: syz [ 192.165292][ T5887] usb 3-1: config 0 descriptor?? [ 192.173339][ T5887] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 192.178871][ T7410] Dev loop6: unable to read RDB block 0 [ 192.181809][ T5887] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 192.239134][ T7410] loop6: unable to read partition table [ 192.282819][ T7418] ldm_validate_partition_table(): Disk read failed. [ 192.299096][ T7418] Dev loop6: unable to read RDB block 0 [ 192.326384][ T7418] loop6: unable to read partition table [ 192.338305][ T7418] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 192.350572][ T3078] usb 1-1: USB disconnect, device number 40 [ 192.350638][ T5207] ldm_validate_partition_table(): Disk read failed. [ 192.388225][ T5207] Dev loop6: unable to read RDB block 0 [ 192.396739][ T5207] loop6: unable to read partition table [ 192.416542][ T5885] usb 4-1: USB disconnect, device number 44 [ 192.664047][ T5885] usb 3-1: USB disconnect, device number 41 [ 192.672497][ T5885] ftdi_sio 3-1:0.0: device disconnected [ 193.172423][ T5885] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 193.314030][ T3078] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 193.362153][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 193.373899][ T5885] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 193.394288][ T5885] usb 1-1: config 0 has no interface number 0 [ 193.412900][ T5885] usb 1-1: config 0 interface 89 has no altsetting 0 [ 193.426244][ T5885] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 193.435853][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.444917][ T5885] usb 1-1: Product: syz [ 193.450683][ T5885] usb 1-1: Manufacturer: syz [ 193.455835][ T5885] usb 1-1: SerialNumber: syz [ 193.470019][ T5885] usb 1-1: config 0 descriptor?? [ 193.473598][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.481414][ T5885] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 193.498188][ T5885] em28xx 1-1:0.89: Video interface 89 found: bulk [ 193.505426][ T3078] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.532056][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.543961][ T3078] usb 2-1: config 0 descriptor?? [ 193.770435][ T3078] usbhid 2-1:0.0: can't add hid device: -71 [ 193.782112][ T3078] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.800352][ T3078] usb 2-1: USB disconnect, device number 48 [ 193.930519][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 194.086916][ T5885] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 194.127996][ T7457] net_ratelimit: 65 callbacks suppressed [ 194.128014][ T7457] vlan0: mtu greater than device maximum [ 194.214168][ T3078] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 194.357270][ T7459] netlink: zone id is out of range [ 194.362847][ T7459] netlink: zone id is out of range [ 194.368797][ T7459] netlink: zone id is out of range [ 194.376007][ T7459] netlink: zone id is out of range [ 194.381760][ T7459] netlink: zone id is out of range [ 194.394090][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.409115][ T7459] netlink: zone id is out of range [ 194.418578][ T7459] netlink: zone id is out of range [ 194.423877][ T3078] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.443692][ T7459] netlink: zone id is out of range [ 194.458936][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.463876][ T7459] netlink: zone id is out of range [ 194.468976][ T3078] usb 2-1: config 0 descriptor?? [ 194.487696][ T3078] hub 2-1:0.0: USB hub found [ 194.544681][ T7469] usb usb6: usbfs: process 7469 (syz.4.559) did not claim interface 0 before use [ 194.565400][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.578171][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.653372][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 194.688882][ T3078] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 194.836884][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 194.846246][ T5883] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 194.897023][ T25] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 194.909485][ T5885] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 194.921848][ T5885] em28xx 1-1:0.89: board has no eeprom [ 194.932600][ T25] usb 3-1: Product: syz [ 194.948466][ T25] usb 3-1: config 0 descriptor?? [ 194.956131][ T25] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 194.964734][ T25] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 195.022210][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 195.035827][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.047486][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.057590][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.062128][ T5885] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 195.070644][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.112321][ T5885] em28xx 1-1:0.89: analog set to bulk mode. [ 195.118322][ T974] em28xx 1-1:0.89: Registering V4L2 extension [ 195.128834][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.136984][ T5885] usb 1-1: USB disconnect, device number 41 [ 195.137695][ T5885] em28xx 1-1:0.89: Disconnecting em28xx [ 195.210421][ T5883] usb 4-1: config 0 descriptor?? [ 195.245361][ T974] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 195.261583][ T974] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 195.292166][ T974] em28xx 1-1:0.89: No AC97 audio processor [ 195.299428][ T3078] usbhid 2-1:0.0: can't add hid device: -71 [ 195.306959][ T974] usb 1-1: Decoder not found [ 195.322981][ T974] em28xx 1-1:0.89: failed to create media graph [ 195.336166][ T974] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 195.350936][ T3078] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.362862][ T974] em28xx 1-1:0.89: Registering snapshot button... [ 195.393215][ T3078] usb 2-1: USB disconnect, device number 49 [ 195.428757][ T974] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input24 [ 195.462830][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.493001][ T974] em28xx 1-1:0.89: Remote control support is not available for this card. [ 195.511734][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.557741][ T5885] em28xx 1-1:0.89: Closing input extension [ 195.605767][ T5885] em28xx 1-1:0.89: Deregistering snapshot button [ 195.703292][ T5885] em28xx 1-1:0.89: Freeing device [ 195.805450][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.812925][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.820246][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.832999][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.850151][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.882163][ T5883] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 195.930144][ T7479] FAULT_INJECTION: forcing a failure. [ 195.930144][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.954421][ T5883] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input25 [ 195.996302][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.1.563 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 195.996329][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.996339][ T7479] Call Trace: [ 195.996346][ T7479] [ 195.996353][ T7479] dump_stack_lvl+0x241/0x360 [ 195.996396][ T7479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.996414][ T7479] ? __pfx__printk+0x10/0x10 [ 195.996433][ T7479] ? __pfx_lock_release+0x10/0x10 [ 195.996463][ T7479] should_fail_ex+0x40a/0x550 [ 195.996490][ T7479] _copy_from_user+0x2d/0xb0 [ 195.996512][ T7479] move_addr_to_kernel+0x82/0x150 [ 195.996534][ T7479] get_compat_msghdr+0x425/0x730 [ 195.996558][ T7479] ? __pfx_get_compat_msghdr+0x10/0x10 [ 195.996591][ T7479] __sys_sendmmsg+0x42b/0x720 [ 195.996619][ T7479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.996643][ T7479] ? __pfx_lock_acquire+0x10/0x10 [ 195.996666][ T7479] ? get_pid_task+0x23/0x1f0 [ 195.996688][ T7479] ? __pfx_lock_release+0x10/0x10 [ 195.996708][ T7479] ? kstrtouint_from_user+0x128/0x190 [ 195.996742][ T7479] ? __pfx_lock_release+0x10/0x10 [ 195.996773][ T7479] ? __mutex_unlock_slowpath+0x227/0x800 [ 195.996798][ T7479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.996817][ T7479] ? __fget_files+0x2a/0x410 [ 195.996843][ T7479] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 195.996866][ T7479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.996894][ T7479] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 195.996914][ T7479] __do_fast_syscall_32+0xb4/0x110 [ 195.996935][ T7479] ? exc_page_fault+0x590/0x8b0 [ 195.996958][ T7479] do_fast_syscall_32+0x34/0x80 [ 195.996978][ T7479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.997001][ T7479] RIP: 0023:0xf744d579 [ 195.997021][ T7479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.997033][ T7479] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 195.997059][ T7479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006a00 [ 195.997068][ T7479] RDX: 0000000000000001 RSI: 0000000000008010 RDI: 0000000000000000 [ 195.997076][ T7479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.997084][ T7479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.997091][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.997113][ T7479] [ 196.541039][ T5883] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 196.947092][ T5883] usb 3-1: USB disconnect, device number 42 [ 196.971784][ T5883] ftdi_sio 3-1:0.0: device disconnected [ 197.005236][ T3078] usb 4-1: USB disconnect, device number 45 [ 197.782398][ T3078] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 197.955189][ T3078] usb 1-1: config 0 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.969000][ T25] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 197.972141][ T5885] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 197.998099][ T3078] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.019696][ T3078] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 198.039592][ T3078] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 198.057728][ T3078] usb 1-1: Product: syz [ 198.072465][ T3078] usb 1-1: config 0 descriptor?? [ 198.143364][ T5887] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 198.147012][ T25] usb 2-1: config 0 has an invalid interface number: 46 but max is 8 [ 198.162282][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 198.176359][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.187985][ T5885] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 198.198280][ T25] usb 2-1: config 0 has no interface number 0 [ 198.201965][ T5885] usb 3-1: config 0 has no interface number 0 [ 198.212200][ T25] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 198.227845][ T5885] usb 3-1: config 0 interface 89 has no altsetting 0 [ 198.239254][ T25] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.252508][ T5885] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 198.270190][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.272766][ T25] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 198.292043][ T5887] usb 4-1: device descriptor read/64, error -71 [ 198.301045][ T5885] usb 3-1: Product: syz [ 198.309314][ T5885] usb 3-1: Manufacturer: syz [ 198.324383][ T5885] usb 3-1: SerialNumber: syz [ 198.335574][ T5885] usb 3-1: config 0 descriptor?? [ 198.342145][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.355647][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.364945][ T25] usb 2-1: Product: syz [ 198.369162][ T25] usb 2-1: Manufacturer: syz [ 198.377579][ T5885] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 198.390550][ T25] usb 2-1: SerialNumber: syz [ 198.398296][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.409436][ T25] usb 2-1: config 0 descriptor?? [ 198.428210][ T5885] em28xx 3-1:0.89: Video interface 89 found: bulk [ 198.436319][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.438160][ T7503] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 198.454121][ T25] ums-karma 2-1:0.46: USB Mass Storage device detected [ 198.474370][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.514517][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.514798][ T25] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 198.534841][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.543327][ T5887] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 198.581516][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.611224][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.629474][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.649681][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.674728][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.697120][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.716323][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.723963][ T5887] usb 4-1: device descriptor read/64, error -71 [ 198.745274][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.768261][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.790832][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.815144][ T974] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 198.855570][ T974] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.874952][ T5887] usb usb4-port1: attempt power cycle [ 198.966971][ T5885] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 199.018600][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 199.059728][ T3078] usbhid 1-1:0.0: can't add hid device: -71 [ 199.078727][ T3078] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 199.079136][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.102445][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.129331][ T3078] usb 1-1: USB disconnect, device number 42 [ 199.233226][ T5887] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 199.236771][ T25] usb 2-1: USB disconnect, device number 50 [ 199.272940][ T5887] usb 4-1: device descriptor read/8, error -71 [ 199.532221][ T5887] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 199.562846][ T5887] usb 4-1: device descriptor read/8, error -71 [ 199.592096][ T5885] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 199.603588][ T5885] em28xx 3-1:0.89: board has no eeprom [ 199.704046][ T5887] usb usb4-port1: unable to enumerate USB device [ 199.865135][ T5885] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 199.872491][ T5885] em28xx 3-1:0.89: analog set to bulk mode. [ 199.878759][ T5887] em28xx 3-1:0.89: Registering V4L2 extension [ 199.903770][ T5885] usb 3-1: USB disconnect, device number 43 [ 199.941262][ T5885] em28xx 3-1:0.89: Disconnecting em28xx [ 199.961351][ T7516] net_ratelimit: 19 callbacks suppressed [ 199.961399][ T7516] netlink: zone id is out of range [ 200.055169][ T7516] netlink: zone id is out of range [ 200.067034][ T5887] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 200.082058][ T5887] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 200.089321][ T5887] em28xx 3-1:0.89: No AC97 audio processor [ 200.092156][ T7516] netlink: zone id is out of range [ 200.100712][ T5887] usb 3-1: Decoder not found [ 200.106995][ T5887] em28xx 3-1:0.89: failed to create media graph [ 200.130619][ T7516] netlink: zone id is out of range [ 200.136172][ T7516] netlink: zone id is out of range [ 200.141723][ T7516] netlink: zone id is out of range [ 200.147918][ T7516] netlink: zone id is out of range [ 200.150667][ T5887] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 200.165403][ T7516] netlink: zone id is out of range [ 200.171293][ T7516] netlink: zone id is out of range [ 200.176925][ T7516] netlink: zone id is out of range [ 200.216827][ T5887] em28xx 3-1:0.89: Registering snapshot button... [ 200.234129][ T5887] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input26 [ 200.253527][ T5887] em28xx 3-1:0.89: Remote control support is not available for this card. [ 200.262376][ T5885] em28xx 3-1:0.89: Closing input extension [ 200.268239][ T5885] em28xx 3-1:0.89: Deregistering snapshot button [ 200.296020][ T5886] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 200.335761][ T5885] em28xx 3-1:0.89: Freeing device [ 200.479387][ T5886] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 200.509011][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 200.531384][ T5886] usb 1-1: Product: syz [ 200.542332][ T5886] usb 1-1: config 0 descriptor?? [ 200.557722][ T5886] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 200.568242][ T5886] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 201.070635][ T7541] FAULT_INJECTION: forcing a failure. [ 201.070635][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.089355][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.2.588 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 201.089380][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.089390][ T7541] Call Trace: [ 201.089396][ T7541] [ 201.089403][ T7541] dump_stack_lvl+0x241/0x360 [ 201.089433][ T7541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.089450][ T7541] ? __pfx__printk+0x10/0x10 [ 201.089466][ T7541] ? rcu_is_watching+0x15/0xb0 [ 201.089482][ T7541] ? __pfx_lock_release+0x10/0x10 [ 201.089503][ T7541] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 201.089529][ T7541] should_fail_ex+0x40a/0x550 [ 201.089553][ T7541] _copy_from_iter+0x1df/0x1c40 [ 201.089587][ T7541] ? __pfx__copy_from_iter+0x10/0x10 [ 201.089605][ T7541] ? tun_get_user+0x875/0x48a0 [ 201.089627][ T7541] ? set_page_refcounted+0xa1/0x1e0 [ 201.089649][ T7541] ? alloc_pages_noprof+0x136/0x190 [ 201.089668][ T7541] ? page_copy_sane+0x46/0x260 [ 201.089686][ T7541] copy_page_from_iter+0x7a/0x100 [ 201.089706][ T7541] tun_get_user+0x2035/0x48a0 [ 201.089724][ T7541] ? tun_get_user+0x875/0x48a0 [ 201.089755][ T7541] ? __pfx_tun_get_user+0x10/0x10 [ 201.089786][ T7541] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 201.089814][ T7541] ? tun_get+0x1e/0x2f0 [ 201.089829][ T7541] ? __pfx_lock_release+0x10/0x10 [ 201.089860][ T7541] ? tun_get+0x1e/0x2f0 [ 201.089875][ T7541] ? tun_get+0x27d/0x2f0 [ 201.089891][ T7541] tun_chr_write_iter+0x10d/0x1f0 [ 201.089910][ T7541] vfs_write+0xacf/0xd10 [ 201.089929][ T7541] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 201.089948][ T7541] ? __pfx_vfs_write+0x10/0x10 [ 201.089967][ T7541] ? __fget_files+0x2a/0x410 [ 201.089990][ T7541] ? __fget_files+0x2a/0x410 [ 201.090018][ T7541] ksys_write+0x18f/0x2b0 [ 201.090036][ T7541] ? __pfx_ksys_write+0x10/0x10 [ 201.090054][ T7541] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 201.090077][ T7541] ? lockdep_hardirqs_on+0x99/0x150 [ 201.090099][ T7541] __do_fast_syscall_32+0xb4/0x110 [ 201.090122][ T7541] ? exc_page_fault+0x590/0x8b0 [ 201.090145][ T7541] do_fast_syscall_32+0x34/0x80 [ 201.090166][ T7541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.090189][ T7541] RIP: 0023:0xf7f06579 [ 201.090202][ T7541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.090215][ T7541] RSP: 002b:00000000f5026520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 201.090232][ T7541] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000340 [ 201.090242][ T7541] RDX: 000000000000006e RSI: 00000000f738cff4 RDI: 0000000000000000 [ 201.090251][ T7541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.090260][ T7541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.090269][ T7541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.090289][ T7541] [ 201.531702][ T7548] pimreg0: tun_chr_ioctl cmd 1074025677 [ 201.538374][ T7548] pimreg0: linktype set to 65534 [ 201.809591][ T46] hid (null): unknown global tag 0xe [ 201.856746][ T46] hid-generic 0004:0009:0200.0020: collection stack underflow [ 201.880427][ T46] hid-generic 0004:0009:0200.0020: item 0 1 0 12 parsing failed [ 201.908508][ T46] hid-generic 0004:0009:0200.0020: probe with driver hid-generic failed with error -22 [ 202.102261][ T3078] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 202.191242][ T7560] program syz.1.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.260356][ T3078] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.279948][ T3078] usb 3-1: not running at top speed; connect to a high speed hub [ 202.310126][ T3078] usb 3-1: config 129 has an invalid interface number: 135 but max is 1 [ 202.335021][ T3078] usb 3-1: config 129 has no interface number 1 [ 202.343898][ T5886] usb 1-1: USB disconnect, device number 43 [ 202.350688][ T5886] ftdi_sio 1-1:0.0: device disconnected [ 202.360402][ T3078] usb 3-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.403572][ T3078] usb 3-1: config 129 interface 135 has no altsetting 0 [ 202.416834][ T3078] usb 3-1: config 129 interface 0 has no altsetting 0 [ 202.427166][ T3078] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 202.436729][ T3078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.458743][ T3078] usb 3-1: Product: syz [ 202.463188][ T3078] usb 3-1: Manufacturer: syz [ 202.467793][ T3078] usb 3-1: SerialNumber: syz [ 202.691672][ T3078] au0828: au0828: Device initialization failed. [ 202.698066][ T3078] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 202.708772][ T3078] usb 3-1: USB disconnect, device number 44 [ 202.792160][ T46] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 202.942059][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 202.948934][ T46] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 202.957916][ T46] usb 5-1: config 0 has no interface number 0 [ 202.964955][ T46] usb 5-1: config 0 interface 184 has no altsetting 0 [ 202.975112][ T46] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 202.984816][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.993240][ T46] usb 5-1: Product: syz [ 202.997611][ T46] usb 5-1: Manufacturer: syz [ 203.002545][ T46] usb 5-1: SerialNumber: syz [ 203.010843][ T46] usb 5-1: config 0 descriptor?? [ 203.022189][ T46] smsc75xx v1.0.0 [ 203.342218][ T3078] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 203.526051][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 203.528526][ T3078] usb 1-1: config 0 has an invalid interface number: 181 but max is 1 [ 203.528559][ T3078] usb 1-1: config 0 has no interface number 1 [ 203.530868][ T3078] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 203.530896][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.530914][ T3078] usb 1-1: Product: syz [ 203.530927][ T3078] usb 1-1: Manufacturer: syz [ 203.530967][ T3078] usb 1-1: SerialNumber: syz [ 203.537610][ T3078] usb 1-1: config 0 descriptor?? [ 203.549175][ T3078] usb 1-1: selecting invalid altsetting 1 [ 203.550088][ T3078] snd-usb-audio 1-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 203.557401][ T3078] usb 1-1: selecting invalid altsetting 1 [ 203.588291][ T3078] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 203.630618][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.767953][ T974] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 203.780541][ T7571] loop6: detected capacity change from 0 to 524287999 [ 203.782012][ C0] blk_print_req_error: 58 callbacks suppressed [ 203.782027][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.782055][ C0] buffer_io_error: 58 callbacks suppressed [ 203.782064][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.782093][ T5883] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 203.783270][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.783304][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.784503][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.784530][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.784717][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.784742][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.784915][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.784940][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.785132][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.785157][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.785347][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.785375][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.785545][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.785570][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.785628][ T7571] ldm_validate_partition_table(): Disk read failed. [ 203.785753][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.785778][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.785949][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.785973][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.786359][ T7571] Dev loop6: unable to read RDB block 0 [ 203.787238][ T7571] loop6: unable to read partition table [ 203.787405][ T7571] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 203.807860][ T5886] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 203.835869][ T7571] ldm_validate_partition_table(): Disk read failed. [ 203.836737][ T7571] Dev loop6: unable to read RDB block 0 [ 203.837784][ T7571] loop6: unable to read partition table [ 203.837979][ T7571] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 203.922451][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 204.033294][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.048904][ T974] usb 4-1: config 0 has an invalid interface number: 181 but max is 1 [ 204.057104][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.070453][ T974] usb 4-1: config 0 has no interface number 1 [ 204.078170][ T5883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.102262][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.107508][ T25] usb 1-1: USB disconnect, device number 44 [ 204.111650][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.139994][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.148040][ T5886] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.175407][ T5883] usb 2-1: SerialNumber: syz [ 204.208115][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.216360][ T5886] usb 3-1: SerialNumber: syz [ 204.227744][ T974] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 204.236957][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.245043][ T974] usb 4-1: Product: syz [ 204.249232][ T974] usb 4-1: Manufacturer: syz [ 204.256456][ T974] usb 4-1: SerialNumber: syz [ 204.264515][ T974] usb 4-1: config 0 descriptor?? [ 204.273418][ T974] usb 4-1: selecting invalid altsetting 1 [ 204.280343][ T974] snd-usb-audio 4-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 204.292819][ T974] usb 4-1: selecting invalid altsetting 1 [ 204.314652][ T974] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 204.353925][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.398646][ T5883] usb 2-1: 0:2 : does not exist [ 204.405129][ T5883] usb 2-1: unit 5: unexpected type 0x0b [ 204.430766][ T5883] usb 2-1: USB disconnect, device number 51 [ 204.482467][ T5886] usb 3-1: 0:2 : does not exist [ 204.487437][ T5886] usb 3-1: unit 5: unexpected type 0x0b [ 204.517967][ T5886] usb 3-1: USB disconnect, device number 45 [ 204.593954][ T7586] loop6: detected capacity change from 0 to 524287999 [ 204.605672][ T7586] ldm_validate_partition_table(): Disk read failed. [ 204.620752][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.685701][ T7586] Dev loop6: unable to read RDB block 0 [ 204.699616][ T7586] loop6: unable to read partition table [ 204.719102][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.756664][ T7586] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 204.807711][ T7590] ldm_validate_partition_table(): Disk read failed. [ 204.828932][ T7590] Dev loop6: unable to read RDB block 0 [ 204.838403][ T7595] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 204.842622][ T7590] loop6: unable to read partition table [ 204.857053][ T7590] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 204.864562][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 204.945930][ T5883] usb 4-1: USB disconnect, device number 50 [ 205.185202][ T5883] hid (null): unknown global tag 0xe [ 205.224228][ T5883] hid-generic 0004:0009:0200.0021: collection stack underflow [ 205.238287][ T5883] hid-generic 0004:0009:0200.0021: item 0 1 0 12 parsing failed [ 205.247208][ T5883] hid-generic 0004:0009:0200.0021: probe with driver hid-generic failed with error -22 [ 205.395014][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 205.502119][ T25] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 205.567802][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 205.584591][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 205.594643][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 205.605254][ T46] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 205.616528][ T7619] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 205.640326][ T46] usb 5-1: USB disconnect, device number 42 [ 205.673999][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.687239][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 205.696522][ T5883] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 205.716125][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 205.735501][ T25] usb 2-1: config 129 has an invalid interface number: 135 but max is 1 [ 205.744310][ T25] usb 2-1: config 129 has no interface number 1 [ 205.751294][ T25] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.764631][ T25] usb 2-1: config 129 interface 135 has no altsetting 0 [ 205.771711][ T25] usb 2-1: config 129 interface 0 has no altsetting 0 [ 205.780760][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 205.791693][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.802057][ T25] usb 2-1: Product: syz [ 205.806348][ T25] usb 2-1: Manufacturer: syz [ 205.815465][ T25] usb 2-1: SerialNumber: syz [ 205.882042][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 205.890345][ T5883] usb 3-1: config 0 has an invalid interface number: 181 but max is 1 [ 205.901880][ T5883] usb 3-1: config 0 has no interface number 1 [ 205.916159][ T5883] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 205.926664][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.934898][ T5883] usb 3-1: Product: syz [ 205.947268][ T5883] usb 3-1: Manufacturer: syz [ 205.954297][ T5883] usb 3-1: SerialNumber: syz [ 205.962881][ T5883] usb 3-1: config 0 descriptor?? [ 205.978458][ T5883] usb 3-1: selecting invalid altsetting 1 [ 205.986352][ T5883] snd-usb-audio 3-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 206.001362][ T7619] team0 (unregistering): Port device team_slave_0 removed [ 206.012916][ T5883] usb 3-1: selecting invalid altsetting 1 [ 206.030548][ T7619] team0 (unregistering): Port device team_slave_1 removed [ 206.043785][ T5883] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 206.085673][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.174740][ T46] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 206.203497][ T7617] loop6: detected capacity change from 0 to 524287999 [ 206.221438][ T7617] ldm_validate_partition_table(): Disk read failed. [ 206.231825][ T7617] Dev loop6: unable to read RDB block 0 [ 206.317116][ T7617] loop6: unable to read partition table [ 206.323291][ T7617] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 206.337584][ T7628] ldm_validate_partition_table(): Disk read failed. [ 206.346259][ T7628] Dev loop6: unable to read RDB block 0 [ 206.355370][ T7628] loop6: unable to read partition table [ 206.361163][ T7628] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 206.378578][ T5883] usb 3-1: USB disconnect, device number 46 [ 206.388227][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.416875][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.429310][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.445603][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.455041][ T46] usb 5-1: SerialNumber: syz [ 206.571023][ T25] au0828: au0828: Device initialization failed. [ 206.581378][ T25] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 206.596372][ T25] usb 2-1: USB disconnect, device number 52 [ 206.673487][ T46] usb 5-1: 0:2 : does not exist [ 206.678881][ T46] usb 5-1: unit 5: unexpected type 0x0b [ 206.690506][ T46] usb 5-1: USB disconnect, device number 43 [ 206.877835][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.972113][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 207.194335][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.208380][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.218861][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.235291][ T25] usb 2-1: config 0 descriptor?? [ 207.322276][ T974] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 207.383230][ T7659] sctp: [Deprecated]: syz.2.631 (pid 7659) Use of int in maxseg socket option. [ 207.383230][ T7659] Use struct sctp_assoc_value instead [ 207.422737][ T7660] pimreg0: tun_chr_ioctl cmd 1074025677 [ 207.428494][ T7660] pimreg0: linktype set to 65534 [ 207.433868][ T46] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 207.451107][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 207.459785][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.477861][ T25] usb 2-1: USB disconnect, device number 53 [ 207.484380][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.509996][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.537741][ T974] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 207.548410][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.561487][ T974] usb 4-1: config 0 descriptor?? [ 207.615298][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 207.624826][ T46] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 207.634791][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.642284][ T7663] pimreg0: tun_chr_ioctl cmd 1074025677 [ 207.643673][ T46] usb 1-1: Product: syz [ 207.657627][ T7663] pimreg0: linktype set to 65534 [ 207.657639][ T46] usb 1-1: Manufacturer: syz [ 207.657656][ T46] usb 1-1: SerialNumber: syz [ 207.676035][ T46] usb 1-1: config 0 descriptor?? [ 207.690454][ T46] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 207.982169][ T25] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 207.999607][ T974] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 208.006888][ T974] pyra 0003:1E7D:2CF6.0022: item fetching failed at offset 5/7 [ 208.016246][ T974] pyra 0003:1E7D:2CF6.0022: parse failed [ 208.022831][ T974] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -22 [ 208.157396][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.174749][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.194954][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.215991][ T25] usb 2-1: config 0 descriptor?? [ 208.223567][ T25] hub 2-1:0.0: USB hub found [ 208.250425][ T974] usb 4-1: USB disconnect, device number 51 [ 208.425616][ T25] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 208.812087][ T974] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 208.840275][ T7677] net_ratelimit: 10 callbacks suppressed [ 208.840298][ T7677] openvswitch: netlink: IP tunnel dst address not specified [ 208.932197][ T5888] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 208.962067][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 208.969335][ T974] usb 3-1: config 0 has an invalid interface number: 181 but max is 1 [ 208.978817][ T974] usb 3-1: config 0 has no interface number 1 [ 209.001853][ T974] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 209.016407][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.024823][ T974] usb 3-1: Product: syz [ 209.029020][ T974] usb 3-1: Manufacturer: syz [ 209.038659][ T974] usb 3-1: SerialNumber: syz [ 209.039973][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 209.057555][ T974] usb 3-1: config 0 descriptor?? [ 209.061384][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 209.084767][ T974] usb 3-1: selecting invalid altsetting 1 [ 209.103254][ T25] usb 2-1: USB disconnect, device number 54 [ 209.105491][ T974] snd-usb-audio 3-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 209.111965][ T5888] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 209.130772][ T974] usb 3-1: selecting invalid altsetting 1 [ 209.161732][ T5888] usb 5-1: config 160 has no interface number 0 [ 209.168327][ T5888] usb 5-1: config 160 interface 200 has no altsetting 0 [ 209.179587][ T5888] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 209.179748][ T974] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 209.188938][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.188964][ T5888] usb 5-1: Product: syz [ 209.188978][ T5888] usb 5-1: Manufacturer: syz [ 209.188993][ T5888] usb 5-1: SerialNumber: syz [ 209.248217][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.306468][ T7673] loop6: detected capacity change from 0 to 524287999 [ 209.314055][ C1] blk_print_req_error: 92 callbacks suppressed [ 209.314072][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.329505][ C1] buffer_io_error: 92 callbacks suppressed [ 209.329514][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.343379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.352586][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.372134][ T5886] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 209.403382][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.412682][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.424447][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.433690][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.443179][ T7675] netlink: 56 bytes leftover after parsing attributes in process `syz.4.637'. [ 209.452194][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.637'. [ 209.461665][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.465177][ T7675] netlink: 56 bytes leftover after parsing attributes in process `syz.4.637'. [ 209.470873][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.472068][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.491042][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.637'. [ 209.496721][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.498460][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.522911][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.531061][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.540351][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.541279][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.555852][ T7673] ldm_validate_partition_table(): Disk read failed. [ 209.563222][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 209.576862][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.588898][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.598136][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.608214][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.612377][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.617423][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.626153][ T46] gspca_stk1135: reg_w 0x352 err -110 [ 209.639159][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.640079][ T7673] Dev loop6: unable to read RDB block 0 [ 209.663387][ T5886] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 209.663918][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.674947][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.699103][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.706316][ T7673] loop6: unable to read partition table [ 209.712319][ T5888] usb 5-1: MIDIStreaming interface descriptor not found [ 209.719450][ T46] gspca_stk1135: Sensor write failed [ 209.729528][ T7673] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 209.731501][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731516][ T46] gspca_stk1135: Sensor write failed [ 209.731541][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731587][ T46] gspca_stk1135: Sensor read failed [ 209.731611][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731628][ T46] gspca_stk1135: Sensor read failed [ 209.731637][ T46] gspca_stk1135: Detected sensor type unknown (0x0) [ 209.731665][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731675][ T46] gspca_stk1135: Sensor read failed [ 209.731701][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731711][ T46] gspca_stk1135: Sensor read failed [ 209.731737][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731747][ T46] gspca_stk1135: Sensor write failed [ 209.731772][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 209.731782][ T46] gspca_stk1135: Sensor write failed [ 209.731831][ T46] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 209.743851][ T5886] usb 4-1: config 0 descriptor?? [ 209.749159][ T7683] ldm_validate_partition_table(): Disk read failed. [ 209.750784][ T7683] Dev loop6: unable to read RDB block 0 [ 209.760885][ T7683] loop6: unable to read partition table [ 209.761079][ T7683] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 209.780470][ T5888] usb 5-1: USB disconnect, device number 44 [ 209.802099][ T5887] usb 3-1: USB disconnect, device number 47 [ 209.952520][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.020559][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.072169][ T974] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 210.115870][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.179412][ T5888] usb 1-1: USB disconnect, device number 45 [ 210.223048][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 210.240233][ T974] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 210.258489][ T974] usb 2-1: config 0 has no interface number 0 [ 210.267286][ T7692] process 'syz.0.642' launched './file0' with NULL argv: empty string added [ 210.280165][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.290085][ T974] usb 2-1: config 0 interface 89 has no altsetting 0 [ 210.297662][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.308604][ T974] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 210.322173][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.329722][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.338254][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.347339][ T974] usb 2-1: Product: syz [ 210.351545][ T974] usb 2-1: Manufacturer: syz [ 210.371279][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.379056][ T974] usb 2-1: SerialNumber: syz [ 210.384909][ T5886] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 210.399393][ T974] usb 2-1: config 0 descriptor?? [ 210.415634][ T974] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 210.438845][ T974] em28xx 2-1:0.89: Video interface 89 found: bulk [ 210.462527][ T5886] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf3 found [ 210.485876][ T5886] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf4 found [ 210.521089][ T5886] usb 4-1: USB disconnect, device number 52 [ 210.623473][ T7705] FAULT_INJECTION: forcing a failure. [ 210.623473][ T7705] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 210.641693][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.4.646 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 210.641717][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.641727][ T7705] Call Trace: [ 210.641734][ T7705] [ 210.641742][ T7705] dump_stack_lvl+0x241/0x360 [ 210.641761][ T7705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.641771][ T7705] ? __pfx__printk+0x10/0x10 [ 210.641781][ T7705] ? validate_chain+0x11e/0x5920 [ 210.641796][ T7705] should_fail_ex+0x40a/0x550 [ 210.641818][ T7705] prepare_alloc_pages+0x1da/0x5b0 [ 210.641844][ T7705] __alloc_frozen_pages_noprof+0x16f/0x710 [ 210.641866][ T7705] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.641904][ T7705] alloc_pages_mpol+0x311/0x660 [ 210.641928][ T7705] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 210.641955][ T7705] vma_alloc_folio_noprof+0x12b/0x260 [ 210.641978][ T7705] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 210.641999][ T7705] ? do_raw_spin_unlock+0x13c/0x8b0 [ 210.642022][ T7705] folio_prealloc+0x2e/0x170 [ 210.642040][ T7705] do_wp_page+0x1253/0x49b0 [ 210.642074][ T7705] ? __pfx_do_wp_page+0x10/0x10 [ 210.642100][ T7705] ? __pfx_lock_acquire+0x10/0x10 [ 210.642120][ T7705] ? rcu_is_watching+0x15/0xb0 [ 210.642140][ T7705] ? do_raw_spin_lock+0x14f/0x370 [ 210.642158][ T7705] ? __pfx____pte_offset_map+0x10/0x10 [ 210.642194][ T7705] __handle_mm_fault+0x24d5/0x70f0 [ 210.642214][ T7705] ? mark_lock+0x9a/0x360 [ 210.642255][ T7705] ? __pfx___handle_mm_fault+0x10/0x10 [ 210.642288][ T7705] ? mt_find+0x2a9/0x920 [ 210.642310][ T7705] ? __pfx_lock_release+0x10/0x10 [ 210.642344][ T7705] ? mt_find+0x2a9/0x920 [ 210.642366][ T7705] ? mt_find+0x6c8/0x920 [ 210.642388][ T7705] ? mt_find+0x2a9/0x920 [ 210.642413][ T7705] ? __pfx_mt_find+0x10/0x10 [ 210.642453][ T7705] ? find_vma+0xf9/0x170 [ 210.642475][ T7705] ? __pfx_find_vma+0x10/0x10 [ 210.642496][ T7705] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.642523][ T7705] handle_mm_fault+0x3e5/0x8d0 [ 210.642555][ T7705] exc_page_fault+0x2b9/0x8b0 [ 210.642591][ T7705] asm_exc_page_fault+0x26/0x30 [ 210.642610][ T7705] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 210.642629][ T7705] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 210.642643][ T7705] RSP: 0018:ffffc90003c9f7d8 EFLAGS: 00050206 [ 210.642658][ T7705] RAX: ffffffff84f2d501 RBX: 0000000000001000 RCX: 0000000000000500 [ 210.642671][ T7705] RDX: 0000000000000000 RSI: ffff888028e21b00 RDI: 0000000080001000 [ 210.642681][ T7705] RBP: ffffc90003c9f958 R08: ffff888028e21fff R09: 1ffff110051c43ff [ 210.642693][ T7705] R10: dffffc0000000000 R11: ffffed10051c4400 R12: ffffc90003c9fe38 [ 210.642705][ T7705] R13: 1ffff92000793fc7 R14: ffff888028e21000 R15: 0000000000001000 [ 210.642724][ T7705] ? _copy_to_iter+0x151/0x1c40 [ 210.642750][ T7705] _copy_to_iter+0x260/0x1c40 [ 210.642782][ T7705] ? __pfx__copy_to_iter+0x10/0x10 [ 210.642811][ T7705] ? splice_from_pipe_next+0x606/0x660 [ 210.642830][ T7705] ? page_copy_sane+0x46/0x260 [ 210.642850][ T7705] copy_page_to_iter+0xb1/0x160 [ 210.642871][ T7705] pipe_to_user+0xa9/0x140 [ 210.642893][ T7705] __splice_from_pipe+0x346/0x8b0 [ 210.642925][ T7705] ? __pfx_pipe_to_user+0x10/0x10 [ 210.642951][ T7705] __se_sys_vmsplice+0x405/0x14a0 [ 210.642994][ T7705] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 210.643023][ T7705] ? sb_end_write+0xe9/0x1c0 [ 210.643045][ T7705] ? vfs_write+0x7fa/0xd10 [ 210.643064][ T7705] ? __mutex_unlock_slowpath+0x227/0x800 [ 210.643096][ T7705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.643116][ T7705] ? __fget_files+0x2a/0x410 [ 210.643149][ T7705] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.643183][ T7705] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 210.643205][ T7705] ? lockdep_hardirqs_on+0x99/0x150 [ 210.643229][ T7705] __do_fast_syscall_32+0xb4/0x110 [ 210.643251][ T7705] ? exc_page_fault+0x590/0x8b0 [ 210.643275][ T7705] do_fast_syscall_32+0x34/0x80 [ 210.643297][ T7705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.643320][ T7705] RIP: 0023:0xf739d579 [ 210.643334][ T7705] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.643347][ T7705] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 210.643364][ T7705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 210.643375][ T7705] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.643386][ T7705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.643395][ T7705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.643405][ T7705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.643431][ T7705] [ 211.162966][ T974] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 211.252221][ T5888] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 211.402083][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 211.408642][ T5888] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.412232][ T5887] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 211.419607][ T5888] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.439600][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.448751][ T5888] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.457184][ T5888] usb 3-1: Product: syz [ 211.461353][ T5888] usb 3-1: Manufacturer: syz [ 211.470948][ T5888] hub 3-1:4.0: USB hub found [ 211.572181][ T5886] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 211.612090][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 211.620181][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.647632][ T7716] pimreg0: tun_chr_ioctl cmd 1074025677 [ 211.653480][ T5887] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 211.662770][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.672173][ T7716] pimreg0: linktype set to 65534 [ 211.680758][ T5887] usb 5-1: config 0 descriptor?? [ 211.684053][ T5888] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 211.691365][ T5887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 211.713460][ T5888] usb 3-1: USB disconnect, device number 48 [ 211.724031][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.735438][ T5886] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.745390][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.758582][ T5886] usb 1-1: config 0 descriptor?? [ 211.971383][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 211.979130][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.993247][ T974] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 212.004076][ T5886] usb 1-1: USB disconnect, device number 46 [ 212.012080][ T974] em28xx 2-1:0.89: board has no eeprom [ 212.072166][ T974] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 212.079920][ T974] em28xx 2-1:0.89: analog set to bulk mode. [ 212.088352][ T5885] em28xx 2-1:0.89: Registering V4L2 extension [ 212.101027][ T974] usb 2-1: USB disconnect, device number 55 [ 212.116242][ T974] em28xx 2-1:0.89: Disconnecting em28xx [ 212.141285][ T5885] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 212.150794][ T5885] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 212.159291][ T5885] em28xx 2-1:0.89: No AC97 audio processor [ 212.167710][ T5885] usb 2-1: Decoder not found [ 212.173302][ T5885] em28xx 2-1:0.89: failed to create media graph [ 212.179882][ T5885] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 212.189686][ T5885] em28xx 2-1:0.89: Registering snapshot button... [ 212.207020][ T5885] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input27 [ 212.223277][ T5885] em28xx 2-1:0.89: Remote control support is not available for this card. [ 212.233049][ T974] em28xx 2-1:0.89: Closing input extension [ 212.239102][ T974] em28xx 2-1:0.89: Deregistering snapshot button [ 212.254710][ T974] em28xx 2-1:0.89: Freeing device [ 212.442163][ T5888] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 212.502193][ T5887] gspca_vc032x: reg_w err -71 [ 212.522228][ T5887] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 212.537456][ T5887] usb 5-1: USB disconnect, device number 45 [ 212.592076][ T5886] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 212.603393][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.614786][ T5888] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.637815][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'. [ 212.639318][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.681822][ T5888] usb 1-1: config 0 descriptor?? [ 212.704630][ T5888] hub 1-1:0.0: USB hub found [ 212.715800][ T7726] FAULT_INJECTION: forcing a failure. [ 212.715800][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 212.728833][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.3.656 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 212.728855][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.728866][ T7726] Call Trace: [ 212.728872][ T7726] [ 212.728879][ T7726] dump_stack_lvl+0x241/0x360 [ 212.728906][ T7726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.728923][ T7726] ? __pfx__printk+0x10/0x10 [ 212.728940][ T7726] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 212.728956][ T7726] ? __pfx___might_resched+0x10/0x10 [ 212.728971][ T7726] should_fail_ex+0x40a/0x550 [ 212.728987][ T7726] should_failslab+0xac/0x100 [ 212.729004][ T7726] kmem_cache_alloc_node_noprof+0x77/0x380 [ 212.729025][ T7726] ? __alloc_skb+0x1c3/0x440 [ 212.729052][ T7726] __alloc_skb+0x1c3/0x440 [ 212.729079][ T7726] ? __pfx___alloc_skb+0x10/0x10 [ 212.729100][ T7726] ? netlink_autobind+0xd6/0x2f0 [ 212.729111][ T7726] ? netlink_autobind+0x2b0/0x2f0 [ 212.729123][ T7726] netlink_sendmsg+0x634/0xcb0 [ 212.729139][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.729150][ T7726] ? __import_iovec+0x582/0x830 [ 212.729168][ T7726] ? aa_sock_msg_perm+0x91/0x160 [ 212.729197][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.729213][ T7726] __sock_sendmsg+0x221/0x270 [ 212.729236][ T7726] ____sys_sendmsg+0x53a/0x860 [ 212.729255][ T7726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.729271][ T7726] __sys_sendmsg+0x269/0x350 [ 212.729282][ T7726] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.729321][ T7726] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 212.729344][ T7726] ? lockdep_hardirqs_on+0x99/0x150 [ 212.729366][ T7726] __do_fast_syscall_32+0xb4/0x110 [ 212.729396][ T7726] ? exc_page_fault+0x590/0x8b0 [ 212.729412][ T7726] do_fast_syscall_32+0x34/0x80 [ 212.729424][ T7726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.729440][ T7726] RIP: 0023:0xf7f57579 [ 212.729449][ T7726] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.729459][ T7726] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 212.729478][ T7726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 212.729490][ T7726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.729499][ T7726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.729508][ T7726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.729518][ T7726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.729543][ T7726] [ 212.982377][ T5888] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 213.013104][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 213.020305][ T5886] usb 3-1: config 0 has an invalid interface number: 181 but max is 1 [ 213.035486][ T5886] usb 3-1: config 0 has no interface number 1 [ 213.044542][ T5886] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 213.054005][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.063480][ T5886] usb 3-1: Product: syz [ 213.067891][ T5886] usb 3-1: Manufacturer: syz [ 213.074081][ T5886] usb 3-1: SerialNumber: syz [ 213.081356][ T5886] usb 3-1: config 0 descriptor?? [ 213.090581][ T5886] usb 3-1: selecting invalid altsetting 1 [ 213.100353][ T5886] snd-usb-audio 3-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 213.121327][ T5886] usb 3-1: selecting invalid altsetting 1 [ 213.127215][ T974] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 213.178349][ T5886] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 213.218275][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.282065][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 213.289426][ T974] usb 2-1: config 0 has an invalid interface number: 181 but max is 1 [ 213.298703][ T974] usb 2-1: config 0 has no interface number 1 [ 213.307872][ T974] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 213.318927][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.329327][ T974] usb 2-1: Product: syz [ 213.333900][ T974] usb 2-1: Manufacturer: syz [ 213.338521][ T974] usb 2-1: SerialNumber: syz [ 213.345917][ T974] usb 2-1: config 0 descriptor?? [ 213.355956][ T974] usb 2-1: selecting invalid altsetting 1 [ 213.363002][ T974] snd-usb-audio 2-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 213.390332][ T974] usb 2-1: selecting invalid altsetting 1 [ 213.393658][ T7720] loop6: detected capacity change from 0 to 524287999 [ 213.412182][ T7720] ldm_validate_partition_table(): Disk read failed. [ 213.429635][ T7720] Dev loop6: unable to read RDB block 0 [ 213.431046][ T974] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 213.479412][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.505041][ T7720] loop6: unable to read partition table [ 213.524161][ T7720] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 213.535547][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.659'. [ 213.551839][ T7733] ldm_validate_partition_table(): Disk read failed. [ 213.586945][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 213.614310][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.644216][ T7733] Dev loop6: unable to read RDB block 0 [ 213.668875][ T7733] loop6: unable to read partition table [ 213.678845][ T5888] usb 1-1: USB disconnect, device number 47 [ 213.694843][ T7733] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 213.711115][ T3078] usb 2-1: USB disconnect, device number 56 [ 213.737337][ T974] usb 3-1: USB disconnect, device number 49 [ 214.742115][ T3078] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 214.822633][ T974] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 214.912118][ T3078] usb 5-1: Using ep0 maxpacket: 16 [ 214.919620][ T3078] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.930598][ T3078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.937421][ T3078] usb 5-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 214.947186][ T3078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.958210][ T3078] usb 5-1: config 0 descriptor?? [ 214.983827][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 214.994836][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.005305][ T974] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.022147][ T974] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 215.039899][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.061762][ T974] usb 4-1: config 0 descriptor?? [ 215.388422][ T3078] logitech-djreceiver 0003:046D:C53F.0024: unknown main item tag 0x4 [ 215.409685][ T974] usb 4-1: USB disconnect, device number 53 [ 215.472104][ T29] audit: type=1326 audit(1741325452.179:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.583307][ T29] audit: type=1326 audit(1741325452.179:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.624451][ T5887] usb 5-1: USB disconnect, device number 46 [ 215.674963][ T29] audit: type=1326 audit(1741325452.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.737128][ T29] audit: type=1326 audit(1741325452.209:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.818753][ T29] audit: type=1326 audit(1741325452.219:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.862167][ T3078] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 215.890032][ T29] audit: type=1326 audit(1741325452.219:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 215.918050][ T7775] FAULT_INJECTION: forcing a failure. [ 215.918050][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 215.937895][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.1.675 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 215.937922][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.937933][ T7775] Call Trace: [ 215.937940][ T7775] [ 215.937955][ T7775] dump_stack_lvl+0x241/0x360 [ 215.937981][ T7775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.938000][ T7775] ? __pfx__printk+0x10/0x10 [ 215.938019][ T7775] ? fs_reclaim_acquire+0x93/0x130 [ 215.938038][ T7775] ? __pfx___might_resched+0x10/0x10 [ 215.938065][ T7775] should_fail_ex+0x40a/0x550 [ 215.938093][ T7775] should_failslab+0xac/0x100 [ 215.938116][ T7775] __kmalloc_noprof+0xdd/0x4c0 [ 215.938137][ T7775] ? tomoyo_encode+0x26f/0x540 [ 215.938159][ T7775] tomoyo_encode+0x26f/0x540 [ 215.938181][ T7775] tomoyo_realpath_from_path+0x59e/0x5e0 [ 215.938209][ T7775] tomoyo_path_number_perm+0x239/0x770 [ 215.938236][ T7775] ? tomoyo_path_number_perm+0x209/0x770 [ 215.938260][ T7775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.938297][ T7775] ? __pfx_lock_acquire+0x10/0x10 [ 215.938339][ T7775] ? __fget_files+0x2a/0x410 [ 215.938365][ T7775] ? __fget_files+0x2a/0x410 [ 215.938393][ T7775] security_file_ioctl_compat+0xc6/0x2a0 [ 215.938417][ T7775] __se_compat_sys_ioctl+0xd6/0xc10 [ 215.938442][ T7775] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 215.938461][ T7775] ? __fget_files+0x2a/0x410 [ 215.938489][ T7775] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 215.938514][ T7775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.938544][ T7775] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 215.938567][ T7775] ? lockdep_hardirqs_on+0x99/0x150 [ 215.938591][ T7775] __do_fast_syscall_32+0xb4/0x110 [ 215.938614][ T7775] ? exc_page_fault+0x590/0x8b0 [ 215.938639][ T7775] do_fast_syscall_32+0x34/0x80 [ 215.938660][ T7775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.938685][ T7775] RIP: 0023:0xf744d579 [ 215.938700][ T7775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 215.938714][ T7775] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 215.938733][ T7775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5615 [ 215.938745][ T7775] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.938755][ T7775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.938766][ T7775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.938776][ T7775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.938801][ T7775] [ 215.939161][ T7775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.012193][ T29] audit: type=1326 audit(1741325452.219:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 216.237676][ T29] audit: type=1326 audit(1741325452.219:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 216.259623][ T29] audit: type=1326 audit(1741325452.219:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 216.284238][ T29] audit: type=1326 audit(1741325452.219:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 216.284361][ T3078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.317403][ T5888] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 216.373321][ T3078] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.384550][ T3078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.422107][ T5887] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 216.459040][ T3078] usb 1-1: config 0 descriptor?? [ 216.511296][ T7784] pimreg0: tun_chr_ioctl cmd 1074025677 [ 216.517212][ T7784] pimreg0: linktype set to 65534 [ 216.542090][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 216.549507][ T5888] usb 4-1: config 0 has an invalid interface number: 181 but max is 1 [ 216.559671][ T5888] usb 4-1: config 0 has no interface number 1 [ 216.578682][ T5888] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 216.584111][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 216.589221][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.606737][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.619762][ T5887] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.622009][ T5888] usb 4-1: Product: syz [ 216.635762][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.646588][ T5887] usb 2-1: Product: syz [ 216.650025][ T5888] usb 4-1: Manufacturer: syz [ 216.651506][ T5887] usb 2-1: Manufacturer: syz [ 216.659169][ T5888] usb 4-1: SerialNumber: syz [ 216.664901][ T5887] usb 2-1: SerialNumber: syz [ 216.677119][ T3078] usbhid 1-1:0.0: can't add hid device: -71 [ 216.678619][ T5887] usb 2-1: config 0 descriptor?? [ 216.686928][ T3078] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 216.700991][ T5887] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 216.704660][ T5888] usb 4-1: config 0 descriptor?? [ 216.732984][ T3078] usb 1-1: USB disconnect, device number 48 [ 216.750915][ T5888] usb 4-1: selecting invalid altsetting 1 [ 216.897882][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.907241][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.916171][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.925257][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.938758][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.947720][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.956694][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.966100][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.977299][ T7773] loop6: detected capacity change from 0 to 524287999 [ 216.984619][ C0] blk_print_req_error: 58 callbacks suppressed [ 216.984636][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.985496][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.990920][ C0] buffer_io_error: 58 callbacks suppressed [ 216.990933][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.003341][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.030769][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.040171][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.048270][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.057457][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.089411][ T5888] snd-usb-audio 4-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 217.103008][ T5888] usb 4-1: selecting invalid altsetting 1 [ 217.112628][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.121811][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.130800][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.140031][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.148182][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.157427][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.161835][ T5887] usb 2-1: USB disconnect, device number 57 [ 217.172049][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.181235][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.189504][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.198735][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.208366][ T7773] ldm_validate_partition_table(): Disk read failed. [ 217.216653][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.225870][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.235258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.243154][ T5888] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 217.244593][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.263744][ T7773] Dev loop6: unable to read RDB block 0 [ 217.273769][ T7773] loop6: unable to read partition table [ 217.281719][ T7773] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 217.306535][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 217.323083][ T3078] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 217.362953][ T7788] ldm_validate_partition_table(): Disk read failed. [ 217.383923][ T7788] Dev loop6: unable to read RDB block 0 [ 217.390873][ T7788] loop6: unable to read partition table [ 217.397053][ T7788] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 217.419350][ T5207] ldm_validate_partition_table(): Disk read failed. [ 217.437365][ T5207] Dev loop6: unable to read RDB block 0 [ 217.458038][ T5207] loop6: unable to read partition table [ 217.481859][ T5888] usb 4-1: USB disconnect, device number 54 [ 217.493887][ T3078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.528211][ T3078] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.538024][ T3078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.560718][ T3078] usb 1-1: config 0 descriptor?? [ 217.579769][ T3078] hub 1-1:0.0: USB hub found [ 217.786400][ T3078] hub 1-1:0.0: 1 port detected [ 218.182078][ T5887] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 218.302063][ T5888] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 218.332117][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 218.343935][ T5887] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.358514][ T5887] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.371040][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 218.385198][ T5887] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 218.395186][ T5887] usb 2-1: Product: syz [ 218.400025][ T5887] usb 2-1: Manufacturer: syz [ 218.403307][ T3078] usb 1-1: USB disconnect, device number 49 [ 218.439774][ T5887] hub 2-1:4.0: USB hub found [ 218.485766][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.500281][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.512633][ T5888] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 218.521844][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.533307][ T5888] usb 4-1: config 0 descriptor?? [ 218.641312][ T5887] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 218.685020][ T5887] usb 2-1: USB disconnect, device number 58 [ 218.944198][ T3078] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 218.953608][ T5888] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 218.963724][ T5888] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 219.122210][ T3078] usb 5-1: Using ep0 maxpacket: 16 [ 219.129360][ T3078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.140552][ T3078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.151247][ T3078] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 219.160420][ T3078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.170468][ T5888] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 219.181824][ T3078] usb 5-1: config 0 descriptor?? [ 219.398980][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.411430][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.652634][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.661161][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.687974][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.696731][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.704340][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.711763][ T3078] hid-picolcd 0003:04D8:F002.0026: unknown main item tag 0x0 [ 219.771690][ T5888] cp2112 0003:10C4:EA90.0025: error reading lock byte: -71 [ 219.783405][ T3078] hid-picolcd 0003:04D8:F002.0026: No report with id 0xf3 found [ 219.797703][ T5888] usb 4-1: USB disconnect, device number 55 [ 219.803896][ T3078] hid-picolcd 0003:04D8:F002.0026: No report with id 0xf4 found [ 219.867549][ T3078] usb 5-1: USB disconnect, device number 47 [ 219.941758][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 220.690811][ T5843] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 220.792133][ T5887] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 220.944794][ T5887] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 220.958665][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.969488][ T5887] usb 5-1: config 0 has no interface number 0 [ 220.977594][ T5887] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 220.988167][ T5887] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.005284][ T5887] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 221.015820][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.024362][ T5887] usb 5-1: Product: syz [ 221.028809][ T5887] usb 5-1: Manufacturer: syz [ 221.034128][ T5887] usb 5-1: SerialNumber: syz [ 221.041824][ T5887] usb 5-1: config 0 descriptor?? [ 221.352087][ T5888] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 221.502555][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 221.515726][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.527090][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.538082][ T5888] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 221.552261][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.568642][ T5888] usb 3-1: config 0 descriptor?? [ 221.614917][ T7888] pimreg0: tun_chr_ioctl cmd 1074025677 [ 221.620889][ T7888] pimreg0: linktype set to 65534 [ 221.629343][ T5887] usb 5-1: USB disconnect, device number 48 [ 221.791319][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.809444][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.037938][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.046307][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.054282][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.062201][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.069671][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.077495][ T5888] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 222.142879][ T5888] hid-picolcd 0003:04D8:F002.0027: No report with id 0xf3 found [ 222.151059][ T5888] hid-picolcd 0003:04D8:F002.0027: No report with id 0xf4 found [ 222.206489][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 222.257437][ T5887] usb 3-1: USB disconnect, device number 50 [ 222.332058][ T3078] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 222.531394][ T3078] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 222.541553][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.562179][ T3078] usb 1-1: Product: syz [ 222.566424][ T3078] usb 1-1: Manufacturer: syz [ 222.571408][ T3078] usb 1-1: SerialNumber: syz [ 222.594407][ T3078] usb 1-1: config 0 descriptor?? [ 222.603831][ T3078] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 222.613224][ T5886] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 222.772170][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 222.779968][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.802167][ T5886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.826684][ T5886] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.839211][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.847980][ T5886] usb 5-1: Product: syz [ 222.852544][ T5886] usb 5-1: Manufacturer: syz [ 222.857171][ T5886] usb 5-1: SerialNumber: syz [ 222.874157][ T3078] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 222.881577][ T3078] sq905c 1-1:0.0: Get version command failed [ 222.888409][ T5888] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 222.898160][ T3078] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 222.909882][ T3078] usb 1-1: USB disconnect, device number 50 [ 223.043912][ T5888] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 223.052915][ T5888] usb 4-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 223.063257][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.067952][ T7910] xt_hashlimit: max too large, truncated to 1048576 [ 223.072181][ T5888] usb 4-1: config 1 has no interface number 0 [ 223.072236][ T5888] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 223.072264][ T5888] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 223.074278][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.086980][ T7910] xt_hashlimit: overflow, rate too high: 0 [ 223.096697][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.132320][ T5888] usb 4-1: Product: syz [ 223.135850][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 223.136486][ T5888] usb 4-1: Manufacturer: syz [ 223.136504][ T5888] usb 4-1: SerialNumber: syz [ 223.160185][ T5888] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 223.170669][ T5888] cdc_ncm 4-1:1.1: bind() failure [ 223.304126][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.314640][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.325233][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.334631][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.342922][ T9] usb 3-1: SerialNumber: syz [ 223.360460][ T5886] usb 5-1: cannot find UAC_HEADER [ 223.388683][ T5886] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 223.404632][ T5886] usb 5-1: USB disconnect, device number 49 [ 223.417321][ T6070] udevd[6070]: setting owner of /dev/bus/usb/005/049 to uid=0, gid=0 failed: No such file or directory [ 223.440964][ T5887] usb 4-1: USB disconnect, device number 56 [ 223.561663][ T9] usb 3-1: 0:2 : does not exist [ 223.571778][ T9] usb 3-1: unit 5: unexpected type 0x0b [ 223.578843][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.598125][ T9] usb 3-1: USB disconnect, device number 51 [ 223.783808][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.813343][ T5888] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 223.992537][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 224.003284][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.014290][ T5843] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 224.022573][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.035883][ T5888] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 224.050035][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.068835][ T5888] usb 1-1: config 0 descriptor?? [ 224.306301][ T7940] pimreg0: tun_chr_ioctl cmd 1074025677 [ 224.312825][ T7940] pimreg0: linktype set to 65534 [ 224.493607][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.501288][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.510405][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.518542][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.530364][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.538328][ T5888] hid-picolcd 0003:04D8:F002.0028: unknown main item tag 0x0 [ 224.602076][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 224.602118][ T5888] hid-picolcd 0003:04D8:F002.0028: No report with id 0xf3 found [ 224.619508][ T5888] hid-picolcd 0003:04D8:F002.0028: No report with id 0xf4 found [ 224.705695][ T5887] usb 1-1: USB disconnect, device number 51 [ 224.756224][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 224.766443][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.779081][ T9] usb 4-1: config 0 has no interface number 0 [ 224.787248][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 224.797485][ T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.814455][ T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 224.826951][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.836571][ T9] usb 4-1: Product: syz [ 224.840783][ T9] usb 4-1: Manufacturer: syz [ 224.849708][ T9] usb 4-1: SerialNumber: syz [ 224.856519][ T9] usb 4-1: config 0 descriptor?? [ 225.385600][ T3078] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 225.454256][ T5888] usb 4-1: USB disconnect, device number 57 [ 225.468034][ T46] hid (null): unknown global tag 0xe [ 225.479257][ T46] hid-generic 0004:0009:0200.0029: collection stack underflow [ 225.490278][ T46] hid-generic 0004:0009:0200.0029: item 0 1 0 12 parsing failed [ 225.499464][ T46] hid-generic 0004:0009:0200.0029: probe with driver hid-generic failed with error -22 [ 225.566987][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.577962][ T3078] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.587241][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.598241][ T3078] usb 2-1: config 0 descriptor?? [ 225.672225][ T974] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 225.722194][ T25] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 225.811737][ T3078] usbhid 2-1:0.0: can't add hid device: -71 [ 225.817928][ T3078] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 225.827054][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.828587][ T3078] usb 2-1: USB disconnect, device number 59 [ 225.853383][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 225.870578][ T974] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 225.880322][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.892937][ T974] usb 3-1: config 0 descriptor?? [ 225.893882][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.900438][ T7959] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 225.907701][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 225.924308][ T25] usb 5-1: config 129 has an invalid interface number: 135 but max is 1 [ 225.932898][ T25] usb 5-1: config 129 has no interface number 1 [ 225.939197][ T25] usb 5-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 225.953510][ T25] usb 5-1: config 129 interface 135 has no altsetting 0 [ 225.960500][ T25] usb 5-1: config 129 interface 0 has no altsetting 0 [ 225.979776][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 226.002047][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.021029][ T25] usb 5-1: Product: syz [ 226.031161][ T25] usb 5-1: Manufacturer: syz [ 226.041292][ T25] usb 5-1: SerialNumber: syz [ 226.342126][ T3078] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 226.510296][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.522868][ T3078] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 226.532280][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.538882][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 226.542480][ T3078] usb 2-1: config 0 descriptor?? [ 226.554010][ T3078] hub 2-1:0.0: USB hub found [ 226.560994][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.580043][ T974] usb 3-1: USB disconnect, device number 52 [ 226.756958][ T3078] hub 2-1:0.0: 1 port detected [ 226.797701][ T25] au0828: au0828: Device initialization failed. [ 226.812797][ T25] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 226.830785][ T25] usb 5-1: USB disconnect, device number 50 [ 227.027883][ T7972] netlink: zone id is out of range [ 227.040258][ T7972] netlink: zone id is out of range [ 227.056265][ T7972] netlink: zone id is out of range [ 227.061623][ T7972] netlink: zone id is out of range [ 227.067325][ T7972] netlink: zone id is out of range [ 227.072836][ T7972] netlink: zone id is out of range [ 227.102138][ T7972] netlink: zone id is out of range [ 227.108665][ T7972] netlink: zone id is out of range [ 227.114426][ T7972] netlink: zone id is out of range [ 227.120012][ T7972] netlink: zone id is out of range [ 227.404349][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 227.444645][ T3078] usb 2-1: USB disconnect, device number 60 [ 227.625598][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 227.646149][ T25] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 227.670289][ T25] usb 5-1: Product: syz [ 227.678131][ T25] usb 5-1: config 0 descriptor?? [ 227.699410][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 227.726447][ T25] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 228.402451][ T5888] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 228.473430][ T25] usb 5-1: USB disconnect, device number 51 [ 228.499259][ T25] ftdi_sio 5-1:0.0: device disconnected [ 228.583809][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 228.591474][ T5888] usb 1-1: config 0 has an invalid interface number: 181 but max is 1 [ 228.600129][ T5888] usb 1-1: config 0 has no interface number 1 [ 228.608348][ T5888] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 228.612087][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 228.617591][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.633557][ T5888] usb 1-1: Product: syz [ 228.637742][ T5888] usb 1-1: Manufacturer: syz [ 228.643161][ T5888] usb 1-1: SerialNumber: syz [ 228.649413][ T5888] usb 1-1: config 0 descriptor?? [ 228.656959][ T5888] usb 1-1: selecting invalid altsetting 1 [ 228.663606][ T5888] snd-usb-audio 1-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 228.675831][ T5888] usb 1-1: selecting invalid altsetting 1 [ 228.682197][ T974] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 228.696622][ T5888] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 228.729033][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.772728][ T5883] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 228.784358][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.799069][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.809688][ T9] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 228.822789][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.832492][ T9] usb 2-1: config 0 descriptor?? [ 228.843670][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.853810][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.865023][ T974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.874408][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.883703][ T974] usb 4-1: SerialNumber: syz [ 228.885619][ T7988] loop6: detected capacity change from 0 to 524287999 [ 228.901571][ C1] blk_print_req_error: 41 callbacks suppressed [ 228.901587][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.917078][ C1] buffer_io_error: 41 callbacks suppressed [ 228.917094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.933740][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.943000][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.963463][ T5883] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 228.973455][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 228.982699][ T5883] usb 3-1: Product: syz [ 228.987005][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.996198][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.005674][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.010070][ T5883] usb 3-1: config 0 descriptor?? [ 229.014962][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.032935][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.042173][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.051700][ T5883] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 229.061250][ T5883] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 229.062522][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.076765][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.085001][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.094219][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.103201][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.111241][ T974] usb 4-1: 0:2 : does not exist [ 229.112378][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.125214][ T7988] ldm_validate_partition_table(): Disk read failed. [ 229.136014][ T974] usb 4-1: unit 5: unexpected type 0x0b [ 229.137938][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.150808][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.159039][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.168280][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.177058][ T7988] Dev loop6: unable to read RDB block 0 [ 229.199069][ T7988] loop6: unable to read partition table [ 229.206882][ T7988] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 229.238326][ T7995] ldm_validate_partition_table(): Disk read failed. [ 229.239863][ T974] usb 4-1: USB disconnect, device number 58 [ 229.246487][ T7995] Dev loop6: unable to read RDB block 0 [ 229.268746][ T9] hid-led 0003:1D34:0004.002A: unknown main item tag 0x0 [ 229.282987][ T5883] usb 3-1: USB disconnect, device number 53 [ 229.296506][ T7995] loop6: unable to read partition table [ 229.310245][ T5883] ftdi_sio 3-1:0.0: device disconnected [ 229.317627][ T7995] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 229.345059][ T7998] program syz.4.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.368357][ T3078] usb 1-1: USB disconnect, device number 52 [ 229.504477][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.101923][ T8016] [ 230.104299][ T8016] ====================================================== [ 230.111326][ T8016] WARNING: possible circular locking dependency detected [ 230.118349][ T8016] 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 Not tainted [ 230.125453][ T8016] ------------------------------------------------------ [ 230.132460][ T8016] syz.3.765/8016 is trying to acquire lock: [ 230.138334][ T8016] ffff8880621cf698 (sk_lock-AF_INET){+.+.}-{0:0}, at: gtp_encap_enable_socket+0x2ce/0x5c0 [ 230.148253][ T8016] [ 230.148253][ T8016] but task is already holding lock: [ 230.155607][ T8016] ffffffff8fed5a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30 [ 230.164221][ T8016] [ 230.164221][ T8016] which lock already depends on the new lock. [ 230.164221][ T8016] [ 230.174611][ T8016] [ 230.174611][ T8016] the existing dependency chain (in reverse order) is: [ 230.183614][ T8016] [ 230.183614][ T8016] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 230.190816][ T8016] lock_acquire+0x1ed/0x550 [ 230.195841][ T8016] __mutex_lock+0x19c/0x1010 [ 230.200947][ T8016] start_sync_thread+0xdc/0x2d30 [ 230.206396][ T8016] do_ip_vs_set_ctl+0x495/0xe40 [ 230.211766][ T8016] nf_setsockopt+0x295/0x2c0 [ 230.216874][ T8016] smc_setsockopt+0x275/0xd10 [ 230.222060][ T8016] do_sock_setsockopt+0x3af/0x720 [ 230.227598][ T8016] __ia32_sys_setsockopt+0x1f2/0x280 [ 230.233839][ T8016] __do_fast_syscall_32+0xb4/0x110 [ 230.239468][ T8016] do_fast_syscall_32+0x34/0x80 [ 230.244838][ T8016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.251696][ T8016] [ 230.251696][ T8016] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 230.260288][ T8016] lock_acquire+0x1ed/0x550 [ 230.265314][ T8016] __mutex_lock+0x19c/0x1010 [ 230.270418][ T8016] smc_switch_to_fallback+0x35/0xd90 [ 230.276299][ T8016] smc_sendmsg+0x11f/0x530 [ 230.281225][ T8016] __sock_sendmsg+0x221/0x270 [ 230.286436][ T8016] __sys_sendto+0x363/0x4c0 [ 230.291464][ T8016] __ia32_sys_sendto+0xdd/0x100 [ 230.296837][ T8016] __do_fast_syscall_32+0xb4/0x110 [ 230.302462][ T8016] do_fast_syscall_32+0x34/0x80 [ 230.307833][ T8016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.314678][ T8016] [ 230.314678][ T8016] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 230.322321][ T8016] validate_chain+0x18ef/0x5920 [ 230.327683][ T8016] __lock_acquire+0x1397/0x2100 [ 230.333137][ T8016] lock_acquire+0x1ed/0x550 [ 230.338157][ T8016] lock_sock_nested+0x48/0x100 [ 230.343431][ T8016] gtp_encap_enable_socket+0x2ce/0x5c0 [ 230.349398][ T8016] gtp_newlink+0x5a7/0xf20 [ 230.354430][ T8016] rtnl_newlink_create+0x2ee/0xa40 [ 230.360055][ T8016] rtnl_newlink+0x17cc/0x1d30 [ 230.365242][ T8016] rtnetlink_rcv_msg+0x791/0xcf0 [ 230.370691][ T8016] netlink_rcv_skb+0x206/0x480 [ 230.375966][ T8016] netlink_unicast+0x7f6/0x990 [ 230.381247][ T8016] netlink_sendmsg+0x8de/0xcb0 [ 230.386518][ T8016] __sock_sendmsg+0x221/0x270 [ 230.391714][ T8016] ____sys_sendmsg+0x53a/0x860 [ 230.396991][ T8016] __sys_sendmsg+0x269/0x350 [ 230.402095][ T8016] __do_fast_syscall_32+0xb4/0x110 [ 230.407723][ T8016] do_fast_syscall_32+0x34/0x80 [ 230.413096][ T8016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.419938][ T8016] [ 230.419938][ T8016] other info that might help us debug this: [ 230.419938][ T8016] [ 230.430155][ T8016] Chain exists of: [ 230.430155][ T8016] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 230.430155][ T8016] [ 230.443708][ T8016] Possible unsafe locking scenario: [ 230.443708][ T8016] [ 230.451142][ T8016] CPU0 CPU1 [ 230.456494][ T8016] ---- ---- [ 230.461843][ T8016] lock(rtnl_mutex); [ 230.465827][ T8016] lock(&smc->clcsock_release_lock); [ 230.473802][ T8016] lock(rtnl_mutex); [ 230.480313][ T8016] lock(sk_lock-AF_INET); [ 230.484721][ T8016] [ 230.484721][ T8016] *** DEADLOCK *** [ 230.484721][ T8016] [ 230.492853][ T8016] 2 locks held by syz.3.765/8016: [ 230.497949][ T8016] #0: ffffffff903d3ab0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 230.507444][ T8016] #1: ffffffff8fed5a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30 [ 230.516496][ T8016] [ 230.516496][ T8016] stack backtrace: [ 230.522371][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.3.765 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 230.522388][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.522397][ T8016] Call Trace: [ 230.522403][ T8016] [ 230.522409][ T8016] dump_stack_lvl+0x241/0x360 [ 230.522428][ T8016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.522443][ T8016] ? __pfx__printk+0x10/0x10 [ 230.522465][ T8016] print_circular_bug+0x13a/0x1b0 [ 230.522483][ T8016] check_noncircular+0x36a/0x4a0 [ 230.522500][ T8016] ? __pfx_check_noncircular+0x10/0x10 [ 230.522515][ T8016] ? lockdep_lock+0x123/0x2b0 [ 230.522535][ T8016] ? __lock_acquire+0x1397/0x2100 [ 230.522556][ T8016] validate_chain+0x18ef/0x5920 [ 230.522577][ T8016] ? __pfx_validate_chain+0x10/0x10 [ 230.522592][ T8016] ? __pfx_lock_release+0x10/0x10 [ 230.522611][ T8016] ? unwind_next_frame+0x18e6/0x22d0 [ 230.522634][ T8016] ? preempt_count_add+0x93/0x190 [ 230.522651][ T8016] ? look_up_lock_class+0x77/0x170 [ 230.522670][ T8016] ? register_lock_class+0x102/0x980 [ 230.522689][ T8016] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.522709][ T8016] ? __pfx_register_lock_class+0x10/0x10 [ 230.522730][ T8016] ? mark_lock+0x9a/0x360 [ 230.522743][ T8016] __lock_acquire+0x1397/0x2100 [ 230.522767][ T8016] lock_acquire+0x1ed/0x550 [ 230.522786][ T8016] ? gtp_encap_enable_socket+0x2ce/0x5c0 [ 230.522804][ T8016] ? __pfx_lock_acquire+0x10/0x10 [ 230.522822][ T8016] ? rtnl_newlink+0x17cc/0x1d30 [ 230.522838][ T8016] ? netlink_rcv_skb+0x206/0x480 [ 230.522852][ T8016] ? netlink_sendmsg+0x8de/0xcb0 [ 230.522867][ T8016] ? ____sys_sendmsg+0x53a/0x860 [ 230.522879][ T8016] ? __do_fast_syscall_32+0xb4/0x110 [ 230.522899][ T8016] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.522922][ T8016] ? __fget_files+0x2a/0x410 [ 230.522941][ T8016] ? __fget_files+0x395/0x410 [ 230.522959][ T8016] ? __fget_files+0x2a/0x410 [ 230.522977][ T8016] lock_sock_nested+0x48/0x100 [ 230.522994][ T8016] ? gtp_encap_enable_socket+0x2ce/0x5c0 [ 230.523009][ T8016] gtp_encap_enable_socket+0x2ce/0x5c0 [ 230.523024][ T8016] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 230.523041][ T8016] ? rcu_is_watching+0x15/0xb0 [ 230.523055][ T8016] ? trace_kmalloc+0x1f/0xd0 [ 230.523072][ T8016] ? __kmalloc_noprof+0x2a5/0x4c0 [ 230.523089][ T8016] ? gtp_newlink+0x22d/0xf20 [ 230.523103][ T8016] gtp_newlink+0x5a7/0xf20 [ 230.523116][ T8016] ? __pfx_gtp_newlink+0x10/0x10 [ 230.523129][ T8016] rtnl_newlink_create+0x2ee/0xa40 [ 230.523150][ T8016] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 230.523170][ T8016] ? ns_capable+0x8a/0xf0 [ 230.523187][ T8016] rtnl_newlink+0x17cc/0x1d30 [ 230.523207][ T8016] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.523222][ T8016] ? __netlink_deliver_tap+0x561/0x7f0 [ 230.523236][ T8016] ? __pfx_validate_chain+0x10/0x10 [ 230.523251][ T8016] ? __sock_sendmsg+0x221/0x270 [ 230.523266][ T8016] ? ____sys_sendmsg+0x53a/0x860 [ 230.523278][ T8016] ? __sys_sendmsg+0x269/0x350 [ 230.523289][ T8016] ? __do_fast_syscall_32+0xb4/0x110 [ 230.523307][ T8016] ? do_fast_syscall_32+0x34/0x80 [ 230.523326][ T8016] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.523352][ T8016] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.523372][ T8016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.523394][ T8016] ? mark_lock+0x9a/0x360 [ 230.523407][ T8016] ? __lock_acquire+0x1397/0x2100 [ 230.523436][ T8016] ? __pfx_lock_release+0x10/0x10 [ 230.523463][ T8016] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.523479][ T8016] rtnetlink_rcv_msg+0x791/0xcf0 [ 230.523494][ T8016] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 230.523511][ T8016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.523528][ T8016] ? ref_tracker_free+0x643/0x7e0 [ 230.523551][ T8016] netlink_rcv_skb+0x206/0x480 [ 230.523565][ T8016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.523581][ T8016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.523602][ T8016] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.523616][ T8016] netlink_unicast+0x7f6/0x990 [ 230.523639][ T8016] ? __pfx_netlink_unicast+0x10/0x10 [ 230.523659][ T8016] ? __virt_addr_valid+0x45f/0x530 [ 230.523672][ T8016] ? __phys_addr_symbol+0x2f/0x70 [ 230.523684][ T8016] ? __check_object_size+0x47a/0x730 [ 230.523703][ T8016] netlink_sendmsg+0x8de/0xcb0 [ 230.523722][ T8016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.523738][ T8016] ? __import_iovec+0x582/0x830 [ 230.523754][ T8016] ? aa_sock_msg_perm+0x91/0x160 [ 230.523776][ T8016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.523790][ T8016] __sock_sendmsg+0x221/0x270 [ 230.523807][ T8016] ____sys_sendmsg+0x53a/0x860 [ 230.523822][ T8016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.523839][ T8016] __sys_sendmsg+0x269/0x350 [ 230.523853][ T8016] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.523879][ T8016] ? __secure_computing+0x125/0x370 [ 230.523896][ T8016] __do_fast_syscall_32+0xb4/0x110 [ 230.523915][ T8016] ? exc_page_fault+0x590/0x8b0 [ 230.523933][ T8016] do_fast_syscall_32+0x34/0x80 [ 230.523952][ T8016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.523973][ T8016] RIP: 0023:0xf7f57579 [ 230.523985][ T8016] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 230.523998][ T8016] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.524012][ T8016] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080 [ 230.524023][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.524032][ T8016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.524040][ T8016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.524049][ T8016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.524062][ T8016] [ 231.135138][ T8016] gtp0: entered promiscuous mode [ 231.143413][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 231.143431][ T29] audit: type=1326 audit(1741325467.829:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.3.765" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 231.175478][ T8016] gtp0: entered allmulticast mode [ 231.322551][ T9] hid-led 0003:1D34:0004.002A: probe with driver hid-led failed with error -71 [ 231.369010][ T9] usb 2-1: USB disconnect, device number 61 [ 231.492050][ T5887] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 231.656212][ T5887] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 231.666084][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 231.675204][ T5887] usb 3-1: Product: syz [ 231.680454][ T5887] usb 3-1: config 0 descriptor?? [ 231.687167][ T5887] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 231.695852][ T5887] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 231.932963][ T5887] usb 3-1: USB disconnect, device number 54 [ 231.939277][ T5887] ftdi_sio 3-1:0.0: device disconnected