last executing test programs: 7.168227874s ago: executing program 2 (id=2414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.108589776s ago: executing program 2 (id=2447): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x80000000}) 3.77082634s ago: executing program 4 (id=2449): socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8", 0x3}], 0x1}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r6, &(0x7f0000000300)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) capset(&(0x7f0000000340)={0x20080522}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.72564543s ago: executing program 3 (id=2450): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) 3.691979806s ago: executing program 3 (id=2451): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) clock_getres(0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000001c0)=0x2c) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x80000001) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) unshare(0x20000) shutdown(r0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x6}) fcntl$getown(r5, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.594807289s ago: executing program 2 (id=2453): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005) shutdown(r0, 0x0) 3.372366431s ago: executing program 2 (id=2455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 3.083008375s ago: executing program 2 (id=2457): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.030831956s ago: executing program 1 (id=2459): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22840) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000780)="58000000140096897696598098e59a49e8aefc0b45ff0081000000003bba69aedeec6f7505ffcaf67866d0ba2352f72d22cd469218ff97691879116b2c19860df9faec43f6b72d405c4cfef00cbb4abb937d22d4dcd9734459cf62e1bf3efde8c5014568db3d8cbc70fc9e63e67a66ca9432f9c80d7fe529dd695704e3658abe0303f126f9a9b659e46cdaca6b036299a5c9d07002b72ca053fdffb28149da4e7e00", 0xa2}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 2.883741445s ago: executing program 1 (id=2460): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x33b}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2.824018139s ago: executing program 1 (id=2461): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, 0x0, 0x0) 2.672540228s ago: executing program 1 (id=2462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x7, 0x6], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.67188721s ago: executing program 4 (id=2463): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x80000000}) 2.559089098s ago: executing program 4 (id=2464): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/114, 0x72}, 0xe33f}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.526685388s ago: executing program 1 (id=2465): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r5, &(0x7f0000001e80)=""/96, 0x60) 2.458529905s ago: executing program 4 (id=2466): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000300)="d0c6", 0x2}]) 2.44778777s ago: executing program 1 (id=2467): syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0}}, 0xffffffffffffff10) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36", @ANYRESOCT=r0, @ANYRES32], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) keyctl$join(0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) 1.408466681s ago: executing program 4 (id=2478): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004fbd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="ab", 0x1, 0x11, 0x0, 0x0) 1.173126713s ago: executing program 0 (id=2479): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.096324297s ago: executing program 0 (id=2480): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121401, 0x0) write$proc_mixer(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 0000000000000000000'], 0x6f) close_range(r0, 0xffffffffffffffff, 0x0) 1.095876168s ago: executing program 0 (id=2481): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb3, &(0x7f0000000000), &(0x7f0000000280)=0x4) 1.060227816s ago: executing program 0 (id=2482): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x33b}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.021445112s ago: executing program 0 (id=2483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028e000000000000000004850000007b00000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 604.858849ms ago: executing program 3 (id=2484): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x0, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}}, 0x14}}, 0x20000040) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 604.029194ms ago: executing program 3 (id=2485): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x80000000}) 568.591881ms ago: executing program 3 (id=2486): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, 0x0, 0x0) 524.551092ms ago: executing program 4 (id=2487): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 500.570974ms ago: executing program 3 (id=2488): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000300)="d0c6", 0x2}]) 20.406107ms ago: executing program 0 (id=2489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2f, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x81, 0x10, 0x5, '\x00', 0x8000000000000003}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) kernel console output (not intermixed with test programs): s: Mfr=0, Product=0, SerialNumber=0 [ 583.602020][ T1210] usb 2-1: config 0 descriptor?? [ 583.662935][ T5848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 583.711388][ T5848] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.793834][ T5848] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.838208][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.884730][T10188] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1079'. [ 584.350061][ T5848] usb 3-1: GET_CAPABILITIES returned 0 [ 584.678965][ T1210] input: HID 0458:5014 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5014.0009/input/input60 [ 584.802463][ T1210] kye 0003:0458:5014.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 584.838921][ T5848] usbtmc 3-1:16.0: can't read capabilities [ 584.854498][ T5848] usb 3-1: USB disconnect, device number 15 [ 585.501927][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 586.140259][ T1210] usb 2-1: USB disconnect, device number 15 [ 589.982161][T10244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1090'. [ 591.514787][ T118] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 591.885026][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 593.440593][ T118] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.451169][ T118] usb 4-1: config 0 has no interfaces? [ 593.651673][ T118] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 593.660958][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.671693][ T118] usb 4-1: config 0 descriptor?? [ 594.591823][ T5848] usb 4-1: USB disconnect, device number 17 [ 595.453246][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 595.654879][T10281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 595.794379][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 595.913936][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 596.108172][T10294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1102'. [ 597.999111][ T9] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 598.007608][ T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 598.018336][ T9] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 598.027611][ T9] usb 2-1: config 128 has no interface number 0 [ 598.033891][ T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 598.207978][ T9] usb 2-1: config 128 interface 127 has no altsetting 0 [ 598.265303][ T9] usb 2-1: string descriptor 0 read error: -71 [ 598.271607][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 598.280782][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.292263][ T9] usb 2-1: can't set config #128, error -71 [ 598.300388][ T9] usb 2-1: USB disconnect, device number 16 [ 601.871414][T10340] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1115'. [ 601.944370][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 602.204357][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 602.216320][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.230864][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 603.194642][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 603.203753][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 603.378160][ T9] usb 5-1: Manufacturer: syz [ 603.411862][ T9] usb 5-1: config 0 descriptor?? [ 603.421197][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 603.648245][ T1210] usb 5-1: USB disconnect, device number 23 [ 605.084374][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 606.414364][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 606.421825][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.272418][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 607.280429][ T9] usb 4-1: can't read configurations, error -71 [ 607.294404][ T1210] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 607.444475][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 607.465348][ T1210] usb 2-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 608.185574][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 608.304751][ T1210] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 608.314187][ T1210] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 608.323309][ T1210] usb 2-1: Manufacturer: syz [ 608.329993][ T1210] usb 2-1: config 0 descriptor?? [ 608.339843][T10369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.355400][ T1210] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 608.424123][T10388] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1127'. [ 608.477988][ T25] usb 2-1: USB disconnect, device number 17 [ 612.109546][T10411] bond0: entered promiscuous mode [ 612.114726][T10411] bond_slave_0: entered promiscuous mode [ 612.120533][T10411] bond_slave_1: entered promiscuous mode [ 612.126400][T10411] batadv0: entered promiscuous mode [ 612.672660][T10414] siw: device registration error -23 [ 612.991797][T10420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.194513][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 613.345182][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 613.364152][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.126832][ T9] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 614.135350][ T9] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 614.145703][ T9] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 614.159390][ T9] usb 4-1: config 128 has no interface number 0 [ 614.165808][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 614.177354][ T9] usb 4-1: config 128 interface 127 has no altsetting 0 [ 614.191267][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 614.221567][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.264442][ T9] usb 4-1: Product: syz [ 614.281068][ T9] usb 4-1: Manufacturer: syz [ 614.295475][ T9] usb 4-1: SerialNumber: syz [ 614.371719][T10417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.461253][ T29] audit: type=1326 audit(1732976382.679:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 615.976241][T10451] erofs (device erofs): cannot find valid erofs superblock [ 615.989557][ T29] audit: type=1326 audit(1732976382.679:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 616.260107][ T29] audit: type=1326 audit(1732976382.679:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 616.281818][ T29] audit: type=1326 audit(1732976382.679:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 616.303176][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.309407][ T29] audit: type=1326 audit(1732976382.679:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 616.330973][ T29] audit: type=1326 audit(1732976382.689:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x7ffc0000 [ 616.352411][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.441230][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.472045][ T9] usb 4-1: USB disconnect, device number 20 [ 617.557049][ T6308] udevd[6308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.651703][T10476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.794553][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 620.127814][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.139720][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.156489][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.165983][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.173987][ T9] usb 4-1: Product: syz [ 620.183927][ T9] usb 4-1: Manufacturer: syz [ 620.206439][T10485] bond_slave_0: entered promiscuous mode [ 620.212403][T10485] bond_slave_1: entered promiscuous mode [ 620.218164][T10485] batadv0: entered promiscuous mode [ 620.232386][ T9] usb 4-1: SerialNumber: syz [ 620.312573][T10485] bond_slave_0: left promiscuous mode [ 620.318100][T10485] bond_slave_1: left promiscuous mode [ 620.323752][T10485] batadv0: left promiscuous mode [ 620.451507][ T9] usb 4-1: 0:2 : does not exist [ 620.463133][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 620.600952][ T9] usb 4-1: USB disconnect, device number 21 [ 621.124966][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.901447][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 622.934541][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 622.954191][T10515] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 623.104472][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 623.185436][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 623.315581][ T5886] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 623.497028][ T5886] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 623.559935][ T5886] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 623.602927][ T5886] usb 3-1: config 128 has no interface number 0 [ 623.857819][ T5886] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 623.892290][T10522] erofs (device erofs): cannot find valid erofs superblock [ 624.083907][ T5886] usb 3-1: config 128 interface 127 has no altsetting 0 [ 624.146946][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 624.199783][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.247678][ T5886] usb 3-1: Product: syz [ 624.266710][ T5886] usb 3-1: Manufacturer: syz [ 624.454002][ T5886] usb 3-1: SerialNumber: syz [ 624.471964][T10505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.610630][T10532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.708844][ T29] audit: type=1326 audit(1732976391.949:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 624.737930][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.745879][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.779511][ T29] audit: type=1326 audit(1732976391.999:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 625.457560][ T29] audit: type=1326 audit(1732976391.999:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 625.504310][ T29] audit: type=1326 audit(1732976391.999:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 625.572468][ T29] audit: type=1326 audit(1732976391.999:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 625.660183][ T29] audit: type=1326 audit(1732976391.999:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 625.720150][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.757780][ T29] audit: type=1326 audit(1732976391.999:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10504 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 626.085034][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 626.514441][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 626.544589][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 626.609408][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 626.920809][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 626.931526][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.944920][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.953981][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.004674][ T5886] usb 3-1: USB disconnect, device number 16 [ 628.039452][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 628.045281][ T9] usbtmc 4-1:16.0: can't read capabilities [ 628.067392][T10563] 9pnet_fd: Insufficient options for proto=fd [ 629.251124][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.321928][ T9] usb 4-1: USB disconnect, device number 22 [ 629.410129][T10573] erofs (device erofs): cannot find valid erofs superblock [ 629.524191][ T6301] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 629.684423][ T6301] usb 5-1: Using ep0 maxpacket: 16 [ 629.747360][ T6301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.971447][ T6301] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 632.875010][ T6301] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 632.884134][ T6301] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 632.944586][ T6301] usb 5-1: config 0 descriptor?? [ 632.983845][ T6301] usb 5-1: can't set config #0, error -71 [ 633.013357][ T6301] usb 5-1: USB disconnect, device number 24 [ 635.208749][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 635.574444][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 635.624866][T10622] siw: device registration error -23 [ 635.831697][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 635.885523][ T9] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 636.154316][ T9] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 636.201565][ T9] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 636.232406][ T9] usb 3-1: config 128 has no interface number 0 [ 636.271349][ T9] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 636.363449][ T9] usb 3-1: config 128 interface 127 has no altsetting 0 [ 636.448489][ T9] usb 3-1: string descriptor 0 read error: -71 [ 637.428889][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 637.438275][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.449698][ T9] usb 3-1: can't set config #128, error -71 [ 637.766984][T10623] erofs (device erofs): cannot find valid erofs superblock [ 638.339386][ T9] usb 3-1: USB disconnect, device number 17 [ 638.801461][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 638.993894][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.018623][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.086417][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.147507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.231627][ T9] usb 3-1: Product: syz [ 639.241728][ T9] usb 3-1: Manufacturer: syz [ 639.251854][ T9] usb 3-1: SerialNumber: syz [ 641.929308][ T9] usb 3-1: 0:2 : does not exist [ 641.978984][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 642.082573][ T9] usb 3-1: USB disconnect, device number 18 [ 642.434594][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 642.624516][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 642.663326][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 643.321204][ T9] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 643.329683][ T9] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 643.340712][ T9] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 643.546863][T10682] erofs (device erofs): cannot find valid erofs superblock [ 644.047781][ T9] usb 3-1: config 128 has no interface number 0 [ 644.054108][ T9] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 644.065830][ T9] usb 3-1: config 128 interface 127 has no altsetting 0 [ 644.084101][T10687] erofs (device erofs): cannot find valid erofs superblock [ 644.898541][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 644.908166][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.917359][ T9] usb 3-1: Product: syz [ 644.921553][ T9] usb 3-1: Manufacturer: syz [ 644.926540][ T9] usb 3-1: SerialNumber: syz [ 644.978537][ T9] usb 3-1: can't set config #128, error -71 [ 644.987061][ T9] usb 3-1: USB disconnect, device number 19 [ 645.322465][T10700] erofs (device erofs): cannot find valid erofs superblock [ 646.383441][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.550788][T10709] bond0: entered promiscuous mode [ 646.556066][T10709] bond_slave_0: entered promiscuous mode [ 646.563059][T10709] bond_slave_1: entered promiscuous mode [ 646.570471][T10709] batadv0: entered promiscuous mode [ 649.064478][T10715] bridge0: port 3(erspan0) entered blocking state [ 649.071044][T10715] bridge0: port 3(erspan0) entered disabled state [ 649.077737][T10715] erspan0: entered allmulticast mode [ 649.084036][T10715] erspan0: entered promiscuous mode [ 649.089736][T10715] bridge0: port 3(erspan0) entered blocking state [ 649.096266][T10715] bridge0: port 3(erspan0) entered forwarding state [ 650.951582][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 652.074517][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 652.469544][T10746] erofs (device erofs): cannot find valid erofs superblock [ 653.036009][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.047317][ T9] usb 4-1: config 0 has no interfaces? [ 653.055000][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 653.064071][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.086553][ T9] usb 4-1: config 0 descriptor?? [ 653.184804][ T5848] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 653.334427][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 653.379682][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 653.473138][ T5848] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 653.642157][ T5848] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 653.837316][ T5848] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 653.890961][ T5848] usb 3-1: config 128 has no interface number 0 [ 653.929447][ T5848] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 653.991301][ T5848] usb 3-1: config 128 interface 127 has no altsetting 0 [ 654.036723][ T5848] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 654.088408][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.134447][ T5848] usb 3-1: Product: syz [ 654.138666][ T5848] usb 3-1: Manufacturer: syz [ 654.193081][ T5848] usb 3-1: SerialNumber: syz [ 654.240567][T10744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 654.795774][ T29] audit: type=1326 audit(1732976422.019:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.817558][ T29] audit: type=1326 audit(1732976422.029:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.839273][ T29] audit: type=1326 audit(1732976422.029:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.861250][ T29] audit: type=1326 audit(1732976422.029:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.883404][ T29] audit: type=1326 audit(1732976422.099:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.905082][ T29] audit: type=1326 audit(1732976422.099:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.926733][ T29] audit: type=1326 audit(1732976422.099:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10743 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa1580849 code=0x7ffc0000 [ 654.969220][ T5848] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.027727][ T5848] usb 3-1: USB disconnect, device number 20 [ 656.280370][T10770] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1227'. [ 656.294010][ T6308] udevd[6308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.387621][ T9] usb 4-1: USB disconnect, device number 23 [ 658.237370][T10783] siw: device registration error -23 [ 662.368991][T10810] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1241'. [ 662.436343][T10815] netlink: 'syz.0.1240': attribute type 10 has an invalid length. [ 662.509503][T10818] siw: device registration error -23 [ 662.892990][T10820] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 664.490503][T10843] 9pnet_fd: Insufficient options for proto=fd [ 664.548287][T10833] netlink: 'syz.0.1245': attribute type 10 has an invalid length. [ 667.747446][T10866] bridge0: port 4(erspan0) entered blocking state [ 667.754420][T10866] bridge0: port 4(erspan0) entered disabled state [ 667.764620][T10866] erspan0: entered allmulticast mode [ 667.793817][T10866] erspan0: entered promiscuous mode [ 667.807560][T10866] bridge0: port 4(erspan0) entered blocking state [ 667.814057][T10866] bridge0: port 4(erspan0) entered forwarding state [ 670.245373][T10881] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1254'. [ 672.502010][T10897] netlink: 'syz.4.1260': attribute type 10 has an invalid length. [ 674.106422][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 674.802702][T10928] erofs (device erofs): cannot find valid erofs superblock [ 674.960532][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 675.002464][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.025997][ T9] usb 3-1: config 0 descriptor?? [ 676.054763][ T9] usb 3-1: Cannot read MAC address [ 676.060042][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 676.080743][ T9] usb 3-1: USB disconnect, device number 21 [ 676.263631][T10946] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1268'. [ 677.194999][T10954] siw: device registration error -23 [ 677.394502][ T5848] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 677.615095][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 677.760508][ T5848] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 677.772823][ T5848] usb 2-1: config 0 has no interface number 0 [ 678.090495][T10961] siw: device registration error -23 [ 678.351532][ T5848] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 678.380992][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.427115][ T5848] usb 2-1: Product: syz [ 678.487128][ T5848] usb 2-1: Manufacturer: syz [ 678.535505][ T5848] usb 2-1: SerialNumber: syz [ 678.791106][ T5848] usb 2-1: config 0 descriptor?? [ 678.811516][ T5848] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 679.224470][T10968] erofs (device erofs): cannot find valid erofs superblock [ 679.891956][ T5848] usb 2-1: qt2_attach - failed to power on unit: -71 [ 679.898965][ T5848] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 679.917825][ T5848] usb 2-1: USB disconnect, device number 18 [ 682.058989][T10985] omfs: Invalid superblock (0) [ 683.330864][T10995] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 683.358360][T10995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.798338][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 684.085633][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.096754][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.108839][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 684.118408][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.898910][ T25] usb 3-1: config 0 descriptor?? [ 685.350329][T11023] erofs (device erofs): cannot find valid erofs superblock [ 685.804448][ T5848] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 686.157450][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.168130][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.180547][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 686.229456][ T25] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 686.238440][ T25] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 686.246073][ T25] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 686.266687][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.278216][ T25] usb 3-1: USB disconnect, device number 22 [ 686.296882][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.312436][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.325506][ T5848] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.352035][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.779404][ T5848] usb 4-1: config 0 descriptor?? [ 688.171333][T11049] No source specified [ 689.051476][ T5848] usbhid 4-1:0.0: can't add hid device: -71 [ 689.070100][ T5848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 689.391632][ T5848] usb 4-1: USB disconnect, device number 24 [ 689.804439][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 689.964530][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 689.971164][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.984987][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 689.994059][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.029336][ T9] usb 5-1: config 0 descriptor?? [ 690.070485][T11065] erofs (device erofs): cannot find valid erofs superblock [ 690.457895][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 690.465336][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 690.518060][ T9] usb 5-1: USB disconnect, device number 25 [ 690.584405][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 690.786133][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 690.793072][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 690.858726][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.919267][ T25] usb 4-1: config 0 descriptor?? [ 691.936252][ T25] (null): keene_cmd_main failed (-110) [ 692.068797][T11088] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 692.750543][ T25] video4linux radio48: keene_cmd_set failed (-71) [ 692.984409][ T25] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 693.016459][ T25] usb 4-1: USB disconnect, device number 25 [ 693.164430][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 694.295666][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 694.427692][T11100] omfs: Invalid superblock (0) [ 694.437122][ T9] usb 2-1: device descriptor read/all, error -71 [ 694.741188][T11114] siw: device registration error -23 [ 695.925928][T11124] erofs (device erofs): cannot find valid erofs superblock [ 696.681962][T11123] erofs (device erofs): cannot find valid erofs superblock [ 696.861940][T11120] ecryptfs: Unknown parameter 'l' [ 696.952987][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 700.666577][T11175] siw: device registration error -23 [ 704.502507][T11211] 9pnet_fd: Insufficient options for proto=fd [ 707.107992][T11220] No source specified [ 707.875629][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 709.313090][ T6301] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 710.562455][ T6301] usb 2-1: device not accepting address 21, error -71 [ 711.446327][ T6301] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 711.963201][ T6301] usb 2-1: Using ep0 maxpacket: 32 [ 712.009345][ T6301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.102674][ T6301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.273696][T11274] erofs (device erofs): cannot find valid erofs superblock [ 712.474561][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 712.505102][T11273] 9pnet_fd: Insufficient options for proto=fd [ 712.540372][ T6301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.549674][ T6301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.557750][ T6301] usb 2-1: Product: syz [ 712.561926][ T6301] usb 2-1: Manufacturer: syz [ 712.566901][ T6301] usb 2-1: SerialNumber: syz [ 712.646488][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 712.658286][ T25] usb 1-1: config 0 has no interface number 0 [ 712.665035][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.681968][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.693366][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 712.709371][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.720297][ T25] usb 1-1: config 0 descriptor?? [ 712.858703][ T6301] usb 2-1: 0:2 : does not exist [ 712.872531][ T6301] usb 2-1: USB disconnect, device number 22 [ 713.159590][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.656300][ T25] uclogic 0003:256C:006D.000B: No inputs registered, leaving [ 713.666649][ T25] uclogic 0003:256C:006D.000B: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 713.824320][ T6301] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 713.956471][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 715.084287][ T6301] usb 3-1: Using ep0 maxpacket: 8 [ 715.428421][ T25] usb 1-1: USB disconnect, device number 23 [ 715.595686][ T6301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.614340][ T6301] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 715.623449][ T6301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.705707][ T6301] usb 3-1: config 0 descriptor?? [ 716.200849][T11306] erofs (device erofs): cannot find valid erofs superblock [ 716.757223][ T6301] usbhid 3-1:0.0: can't add hid device: -71 [ 716.766645][ T6301] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 716.781642][ T6301] usb 3-1: USB disconnect, device number 23 [ 718.064353][ T25] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 718.868283][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 719.720967][ T25] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 719.729954][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.743293][ T25] usb 4-1: config 0 has no interface number 0 [ 720.383896][ T25] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 720.395033][ T25] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 720.405981][ T25] usb 4-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 721.062529][T11340] netlink: 'syz.3.1380': attribute type 10 has an invalid length. [ 721.187189][ T25] usb 4-1: string descriptor 0 read error: -71 [ 721.193480][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 721.203420][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.326565][ T25] usb 4-1: config 0 descriptor?? [ 721.471598][ T25] usb 4-1: can't set config #0, error -71 [ 721.759681][ T25] usb 4-1: USB disconnect, device number 26 [ 722.817237][T11359] netlink: 'syz.3.1383': attribute type 8 has an invalid length. [ 723.509404][T11356] erofs (device erofs): cannot find valid erofs superblock [ 724.291209][ T6301] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 725.606566][ T6301] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.617934][ T6301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.620710][ T5819] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 725.668450][ T6301] usb 2-1: config 0 has no interface number 0 [ 725.714426][ T6301] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.740139][ T6301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.965360][ T6301] usb 2-1: config 0 descriptor?? [ 726.757038][ T6301] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 726.814361][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1393'. [ 727.243871][ T6301] usb 2-1: USB disconnect, device number 23 [ 728.704137][ T118] IPVS: starting estimator thread 0... [ 728.939475][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 728.983043][T11398] IPVS: using max 22 ests per chain, 52800 per kthread [ 730.008817][ T5819] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 730.017649][ T5819] Bluetooth: hci2: Injecting HCI hardware error event [ 730.026755][ T5819] Bluetooth: hci2: hardware error 0x00 [ 732.666920][ T9667] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 732.917293][ T5819] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 733.616479][T11429] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 734.699605][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 736.526410][ T5886] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 736.704428][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 736.771269][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.782284][ T5819] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 736.791004][ T5819] Bluetooth: hci3: Injecting HCI hardware error event [ 736.805064][ T5819] Bluetooth: hci3: hardware error 0x00 [ 736.870258][T11457] erofs (device erofs): cannot find valid erofs superblock [ 736.914860][ T5886] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 737.273074][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.283409][ T5886] usb 5-1: config 0 descriptor?? [ 737.359949][ T5886] usb 5-1: can't set config #0, error -71 [ 737.382437][ T5886] usb 5-1: USB disconnect, device number 26 [ 739.274603][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 740.486155][T11482] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 744.803049][T11518] erofs (device erofs): cannot find valid erofs superblock [ 744.834398][ T5886] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 744.985687][ T5886] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 744.993936][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.004705][ T118] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 745.013560][ T5886] usb 2-1: config 0 has no interface number 0 [ 745.019917][ T5886] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 745.031177][ T5886] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 745.047781][ T5886] usb 2-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 745.118709][T11528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.470472][ T5886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 745.487345][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.504113][ T5886] usb 2-1: Product: syz [ 745.510824][ T5886] usb 2-1: Manufacturer: syz [ 745.515977][ T5886] usb 2-1: SerialNumber: syz [ 745.527138][ T5886] usb 2-1: config 0 descriptor?? [ 745.535768][T11517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.543160][T11517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.594802][ T118] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.605061][ T118] usb 1-1: config 0 has no interfaces? [ 745.610611][ T118] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 745.619782][ T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.631054][ T118] usb 1-1: config 0 descriptor?? [ 745.857126][ T5886] ath6kl: Failed to submit usb control message: -71 [ 745.872839][ T5886] ath6kl: unable to send the bmi data to the device: -71 [ 745.880328][ T5886] ath6kl: Unable to send get target info: -71 [ 745.888172][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 745.895917][ T5886] ath6kl_usb 2-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 745.908745][ T5886] usb 2-1: USB disconnect, device number 24 [ 747.596324][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.613012][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.650109][T11550] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 748.560145][ T25] usb 1-1: USB disconnect, device number 24 [ 750.052826][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 751.935228][T11596] erofs (device erofs): cannot find valid erofs superblock [ 752.387843][T11598] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 752.909778][T11602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.763759][T11615] syz0: rxe_newlink: already configured on veth0_vlan [ 756.679194][T11638] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 759.112874][T11652] erofs (device erofs): cannot find valid erofs superblock [ 759.884585][ T1210] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 760.044453][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 760.099622][ T1210] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 760.108506][ T1210] usb 2-1: config 0 has no interface number 0 [ 760.122925][ T1210] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 760.132498][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.140831][ T1210] usb 2-1: Product: syz [ 760.174498][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 760.434563][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 760.470915][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.805482][ T1210] usb 2-1: Manufacturer: syz [ 760.810143][ T1210] usb 2-1: SerialNumber: syz [ 760.840671][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 760.849941][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.861170][ T25] usb 5-1: config 0 descriptor?? [ 760.862307][ T1210] usb 2-1: config 0 descriptor?? [ 760.975487][ T1210] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 761.683999][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 761.710104][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 761.850937][ T25] usb 5-1: USB disconnect, device number 27 [ 762.220104][ T6301] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 762.232326][ T1210] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 762.259316][ T1210] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 763.544240][ T6301] usb 3-1: Using ep0 maxpacket: 32 [ 763.575729][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 763.582672][ T25] usb 2-1: USB disconnect, device number 25 [ 763.593374][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 763.597168][ T6301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 763.881654][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 763.893605][ T25] quatech2 2-1:0.51: device disconnected [ 764.055067][ T6301] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 764.063472][ T6301] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 764.178877][ T6301] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 764.463364][ T6301] usb 3-1: config 128 has no interface number 0 [ 764.666540][ T6301] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 765.064356][ T6301] usb 3-1: config 128 interface 127 has no altsetting 0 [ 765.071912][ T6301] usb 3-1: string descriptor 0 read error: -71 [ 765.204405][ T6301] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 765.223723][ T6301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.132984][ T6301] usb 3-1: can't set config #128, error -71 [ 766.152207][ T6301] usb 3-1: USB disconnect, device number 25 [ 766.298088][ T118] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 766.418554][T11710] erofs (device erofs): cannot find valid erofs superblock [ 766.476149][ T118] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 766.489901][ T118] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 766.712978][ T118] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 766.722806][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.767007][ T118] usb 5-1: config 0 descriptor?? [ 766.862680][T11714] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 766.870725][T11714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.186284][ T118] usb 5-1: string descriptor 0 read error: -71 [ 767.193550][ T118] usb-storage 5-1:0.0: USB Mass Storage device detected [ 767.221562][ T118] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 767.314326][ T118] usb 5-1: USB disconnect, device number 28 [ 768.593084][T11729] omfs: Invalid superblock (0) [ 770.054403][T11741] siw: device registration error -23 [ 770.816973][ T118] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 771.414603][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 771.427203][ T118] usb 2-1: unable to get BOS descriptor or descriptor too short [ 771.448275][ T118] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 771.530374][ T118] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 771.577040][ T118] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 771.609968][ T118] usb 2-1: config 128 has no interface number 0 [ 771.634297][ T118] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 771.653619][ T118] usb 2-1: config 128 interface 127 has no altsetting 0 [ 771.708783][ T118] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 771.718141][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.726331][ T118] usb 2-1: Product: syz [ 771.730516][ T118] usb 2-1: Manufacturer: syz [ 771.735175][ T118] usb 2-1: SerialNumber: syz [ 771.743278][T11734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 771.944696][ T6301] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 771.955338][ T29] audit: type=1326 audit(1732976539.199:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 771.997498][ T29] audit: type=1326 audit(1732976539.199:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.032831][ T118] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.048361][ T29] audit: type=1326 audit(1732976539.199:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.080331][ T29] audit: type=1326 audit(1732976539.199:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.122096][ T6301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.143531][ T6301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.154386][ T5886] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 772.170384][ T29] audit: type=1326 audit(1732976539.219:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.192854][ T6301] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 772.206683][ T118] usb 2-1: USB disconnect, device number 26 [ 772.212300][ T6301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.243211][ T6301] usb 1-1: config 0 descriptor?? [ 772.251891][ T29] audit: type=1326 audit(1732976539.219:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.326944][ T29] audit: type=1326 audit(1732976539.229:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7ffc0000 [ 772.404444][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 772.411056][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.434303][ T5886] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 772.451517][ T5886] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.474618][ T5886] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.490664][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.504240][ T5886] usb 3-1: config 1 interface 1 has no altsetting 0 [ 772.541215][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.550573][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.564381][ T5886] usb 3-1: Product: syz [ 772.570667][ T5886] usb 3-1: Manufacturer: syz [ 772.580784][ T5886] usb 3-1: SerialNumber: syz [ 772.727383][ T6301] usbhid 1-1:0.0: can't add hid device: -32 [ 772.757596][ T6301] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 772.787345][ T6301] usb 1-1: USB disconnect, device number 25 [ 773.031667][ T5886] usb 3-1: USB disconnect, device number 26 [ 773.215803][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.897504][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 773.944286][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 773.960585][T11775] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 773.968366][T11775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.236963][T11766] erofs (device erofs): cannot find valid erofs superblock [ 776.239798][T11789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.046354][T11801] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 777.288524][T11799] erofs (device erofs): cannot find valid erofs superblock [ 779.504792][T11818] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 780.362043][T11822] 9pnet_fd: Insufficient options for proto=fd [ 782.653957][T11849] netlink: 'syz.1.1516': attribute type 10 has an invalid length. [ 783.059770][T11851] erofs (device erofs): cannot find valid erofs superblock [ 784.035936][T11863] syz0: rxe_newlink: already configured on veth0_vlan [ 784.315392][T11873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1521'. [ 785.285693][T11885] 9pnet_fd: Insufficient options for proto=fd [ 787.409957][T11891] syz0: rxe_newlink: already configured on veth0_vlan [ 789.201182][T11908] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 789.264558][T11906] netlink: 'syz.3.1529': attribute type 8 has an invalid length. [ 791.976764][T11914] erofs (device erofs): cannot find valid erofs superblock [ 796.394296][ T5886] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 797.408748][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.419948][ T5886] usb 2-1: config 0 has no interfaces? [ 797.630739][ T5886] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 797.639957][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.650470][ T5886] usb 2-1: config 0 descriptor?? [ 797.730650][T11960] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 799.224684][T11969] erofs (device erofs): cannot find valid erofs superblock [ 799.233892][ T118] usb 2-1: USB disconnect, device number 27 [ 800.336186][T11979] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 801.497315][T11987] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 801.505053][T11987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.691160][T12001] 9pnet_fd: Insufficient options for proto=fd [ 803.706301][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 805.846130][T12015] netlink: 'syz.4.1558': attribute type 10 has an invalid length. [ 806.395036][T12020] omfs: Invalid superblock (0) [ 807.837108][T12031] erofs (device erofs): cannot find valid erofs superblock [ 809.115912][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.122358][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.803392][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 809.964336][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 809.971605][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 809.985395][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 810.014447][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 810.034300][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 810.057450][ T9] usb 5-1: config 128 has no interface number 0 [ 810.074090][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 810.126817][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 810.179795][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 810.207579][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.952527][ T9] usb 5-1: Product: syz [ 810.957002][ T9] usb 5-1: Manufacturer: syz [ 810.961619][ T9] usb 5-1: SerialNumber: syz [ 810.980719][T12036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.405940][ T29] audit: type=1326 audit(1732976578.639:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 811.884011][ T29] audit: type=1326 audit(1732976578.709:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 811.954426][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.040601][ T29] audit: type=1326 audit(1732976578.709:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 812.144222][ T29] audit: type=1326 audit(1732976578.709:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 812.144589][ T9] usb 5-1: USB disconnect, device number 29 [ 812.165795][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.284367][ T29] audit: type=1326 audit(1732976578.709:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 812.377357][ T29] audit: type=1326 audit(1732976578.729:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 812.398756][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.437923][ T29] audit: type=1326 audit(1732976578.729:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 813.056319][ T29] audit: type=1326 audit(1732976578.729:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12035 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 813.439679][ T6308] udevd[6308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.587504][T12069] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 817.805253][T12094] erofs (device erofs): cannot find valid erofs superblock [ 817.812636][ T118] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 818.091205][T12091] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 819.300144][ T118] usb 3-1: device not accepting address 27, error -71 [ 821.145145][T12123] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 822.170277][ T1210] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 822.692169][T12135] 9pnet_fd: Insufficient options for proto=fd [ 824.074332][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 824.234506][ T1210] usb 4-1: device descriptor read/all, error -71 [ 824.439614][T12154] erofs (device erofs): cannot find valid erofs superblock [ 824.864651][ T1210] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 825.034407][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 825.061873][ T1210] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 825.080471][ T1210] usb 4-1: config 0 has no interface number 0 [ 825.120197][ T1210] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 825.135678][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.884339][ T1210] usb 4-1: Product: syz [ 825.888561][ T1210] usb 4-1: Manufacturer: syz [ 825.893174][ T1210] usb 4-1: SerialNumber: syz [ 825.900212][ T1210] usb 4-1: config 0 descriptor?? [ 825.909924][ T1210] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 826.698689][ T1210] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 826.721617][ T1210] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 827.508108][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 828.052033][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 828.052452][ T5886] usb 4-1: USB disconnect, device number 28 [ 828.239915][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 828.253788][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 828.266012][ T5886] quatech2 4-1:0.51: device disconnected [ 828.356426][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 828.367192][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.012186][ T25] usb 5-1: Product: syz [ 829.016701][ T25] usb 5-1: Manufacturer: syz [ 829.463969][ T25] usb 5-1: SerialNumber: syz [ 829.534556][ T25] usb 5-1: config 0 descriptor?? [ 830.100507][ T25] usb-storage 5-1:0.0: USB Mass Storage device detected [ 832.163332][ T5848] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 833.271371][ T25] usb 5-1: USB disconnect, device number 30 [ 833.280520][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 833.407326][T12203] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 834.041637][T12213] erofs (device erofs): cannot find valid erofs superblock [ 834.535412][ T5848] usb 3-1: device descriptor read/all, error -71 [ 837.064635][T12238] syz.4.1611: attempt to access beyond end of device [ 837.064635][T12238] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 837.409890][ T1210] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 837.706819][ T1210] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 837.715934][ T1210] usb 2-1: config 0 has no interface number 0 [ 837.722351][ T1210] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.744446][ T1210] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.761753][ T1210] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 837.828924][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.870342][ T1210] usb 2-1: config 0 descriptor?? [ 839.434610][ T1210] uclogic 0003:256C:006D.000C: No inputs registered, leaving [ 839.456695][ T1210] uclogic 0003:256C:006D.000C: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 839.705586][ T1210] usb 2-1: USB disconnect, device number 28 [ 841.864898][ T29] audit: type=1326 audit(1732976609.089:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.891131][ T29] audit: type=1326 audit(1732976609.089:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.892730][T12272] erofs (device erofs): cannot find valid erofs superblock [ 841.913116][ T29] audit: type=1326 audit(1732976609.089:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.942376][ T29] audit: type=1326 audit(1732976609.089:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.964058][ T29] audit: type=1326 audit(1732976609.089:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.986840][ T29] audit: type=1326 audit(1732976609.109:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x7ffc0000 [ 841.995638][T12275] netlink: 'syz.2.1622': attribute type 10 has an invalid length. [ 845.443283][T12299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 845.909639][T12296] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 846.204325][ T6301] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 846.302526][T12319] input: syz1 as /devices/virtual/input/input80 [ 846.370757][ T6301] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 846.380894][ T6301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.407809][ T6301] usb 1-1: config 0 descriptor?? [ 846.415891][ T6301] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 846.819931][ T6301] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 846.827264][ T8] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 846.948088][T12334] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1644'. [ 846.976364][T12334] netlink: zone id is out of range [ 846.981533][T12334] netlink: zone id is out of range [ 846.987367][ T8] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 847.007675][ T8] usb 3-1: config 0 has no interface number 0 [ 847.021828][ T8] usb 3-1: config 0 interface 113 has no altsetting 0 [ 847.037018][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 847.046980][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.061399][ T8] usb 3-1: Product: syz [ 847.067281][ T8] usb 3-1: Manufacturer: syz [ 847.072049][ T8] usb 3-1: SerialNumber: syz [ 847.123665][ T8] usb 3-1: config 0 descriptor?? [ 847.338599][ C0] usb 3-1: NFC: Urb failure (status -71) [ 847.346329][ C0] usb 3-1: NFC: Urb failure (status -71) [ 847.354714][ T8] usb 3-1: NFC: Unable to get FW version [ 847.381719][ T8] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 847.419674][ T8] usb 3-1: USB disconnect, device number 31 [ 847.445152][ T6301] gspca_cpia1: usb_control_msg 05, error -71 [ 847.455047][ T6301] cpia1 1-1:0.0: unexpected systemstate: 00 [ 847.478631][ T6301] usb 1-1: USB disconnect, device number 26 [ 847.614466][ T5848] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 847.710356][T12360] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1656'. [ 847.719884][T12360] netlink: zone id is out of range [ 847.725534][T12360] netlink: zone id is out of range [ 847.776197][ T5848] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 847.794325][ T5848] usb 2-1: config 0 has no interface number 0 [ 847.800472][ T5848] usb 2-1: config 0 interface 113 has no altsetting 0 [ 847.810158][ T5848] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 847.820889][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.829275][ T5848] usb 2-1: Product: syz [ 847.833544][ T5848] usb 2-1: Manufacturer: syz [ 847.838923][ T5848] usb 2-1: SerialNumber: syz [ 847.847520][ T5848] usb 2-1: config 0 descriptor?? [ 847.869115][T12364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 847.884370][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 847.893589][T12364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 847.903422][T12364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 848.057832][ C1] usb 2-1: NFC: Urb failure (status -71) [ 848.064867][ C1] usb 2-1: NFC: Urb failure (status -71) [ 848.079494][ T5848] usb 2-1: NFC: Unable to get FW version [ 848.102713][ T5848] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 848.115820][ T5848] usb 2-1: USB disconnect, device number 29 [ 848.169560][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 848.490834][T12394] mmap: syz.2.1668 (12394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 848.744414][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 848.911033][ T6301] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 848.998607][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 849.033945][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.064249][ T8] usb 5-1: config 0 has no interfaces? [ 849.069772][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 849.146974][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.163069][ T6301] usb 1-1: Using ep0 maxpacket: 32 [ 849.170676][ T8] usb 5-1: config 0 descriptor?? [ 849.203140][ T6301] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 849.211530][ T6301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.259376][ T6301] usb 1-1: config 0 has no interface number 0 [ 849.267630][ T6301] usb 1-1: config 0 interface 113 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.600636][ T6301] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 849.610218][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.618337][ T6301] usb 1-1: Product: syz [ 849.622621][ T6301] usb 1-1: Manufacturer: syz [ 849.627281][ T6301] usb 1-1: SerialNumber: syz [ 849.652372][ T6301] usb 1-1: config 0 descriptor?? [ 849.846960][ T6301] net1080 1-1:0.113: probe with driver net1080 failed with error -22 [ 850.212075][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 850.242309][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 850.270731][ T6301] usb 1-1: USB disconnect, device number 27 [ 851.292106][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.363781][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.399186][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.493934][ T9335] usb 5-1: USB disconnect, device number 31 [ 851.708299][ T29] audit: type=1326 audit(1732976618.949:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.4.1688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa056380849 code=0x0 [ 852.035645][ T5819] Bluetooth: Unexpected continuation frame (len 12) [ 852.103674][ T29] audit: type=1326 audit(1732976619.339:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12432 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x7fc00000 [ 852.414396][ T6301] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 852.584285][ T6301] usb 3-1: Using ep0 maxpacket: 32 [ 852.592143][ T6301] usb 3-1: config 1 has an invalid interface number: 207 but max is 0 [ 852.618649][ T6301] usb 3-1: config 1 has no interface number 0 [ 852.639106][ T6301] usb 3-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=dc.5d [ 852.658576][ T6301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.679723][ T6301] usb 3-1: Product: syz [ 852.694335][ T6301] usb 3-1: Manufacturer: syz [ 852.698979][ T6301] usb 3-1: SerialNumber: syz [ 852.912751][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1699'. [ 852.954078][ T6301] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 853.064807][ T6301] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 853.110077][ T6301] dib0700: firmware download failed at 7 with -22 [ 853.148445][ T6301] usb 3-1: USB disconnect, device number 32 [ 853.181018][T12484] sctp: [Deprecated]: syz.0.1699 (pid 12484) Use of int in max_burst socket option deprecated. [ 853.181018][T12484] Use struct sctp_assoc_value instead [ 854.120124][T12495] loop7: detected capacity change from 0 to 1036 [ 854.244386][ T5819] Bluetooth: Unexpected continuation frame (len 12) [ 855.284758][ T9335] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 855.424300][ T5848] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 855.464264][ T9335] usb 3-1: Using ep0 maxpacket: 8 [ 855.490574][ T9335] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 855.529720][ T9335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.571086][ T9335] usb 3-1: Product: syz [ 855.599961][ T9335] usb 3-1: Manufacturer: syz [ 855.616417][ T9335] usb 3-1: SerialNumber: syz [ 855.624340][ T5848] usb 1-1: config 0 has no interfaces? [ 855.652324][ T9335] usb 3-1: config 0 descriptor?? [ 855.665524][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 855.676485][ T9335] ipw 3-1:0.0: IPWireless converter converter detected [ 855.683433][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.754306][ T5848] usb 1-1: Product: syz [ 855.758525][ T5848] usb 1-1: Manufacturer: syz [ 855.763144][ T5848] usb 1-1: SerialNumber: syz [ 855.841735][ T5848] usb 1-1: config 0 descriptor?? [ 855.957553][ T1210] usb 3-1: USB disconnect, device number 33 [ 855.992772][ T1210] ipw 3-1:0.0: device disconnected [ 857.216470][ T5819] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 857.891108][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 857.961842][T12576] erspan0: left allmulticast mode [ 857.993473][T12576] erspan0: left promiscuous mode [ 858.003965][T12576] bridge0: port 3(erspan0) entered disabled state [ 858.034821][T12576] bridge_slave_1: left allmulticast mode [ 858.055817][T12576] bridge_slave_1: left promiscuous mode [ 858.092045][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.135912][T12576] bridge_slave_0: left allmulticast mode [ 858.156300][T12576] bridge_slave_0: left promiscuous mode [ 858.184302][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.772167][ T6301] usb 1-1: USB disconnect, device number 28 [ 859.014973][T12598] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 859.736700][ T9335] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 860.078238][ T9335] usb 5-1: Using ep0 maxpacket: 16 [ 860.160780][ T9335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.222303][T12650] bridge0: port 4(erspan0) entered disabled state [ 860.230902][ T9335] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 860.304906][ T9335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.368314][ T9335] usb 5-1: config 0 descriptor?? [ 860.437093][T12650] bridge0: port 3(syz_tun) entered disabled state [ 860.483032][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.490372][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.585149][T12650] bond0: left promiscuous mode [ 860.590109][T12650] bond_slave_0: left promiscuous mode [ 860.595922][T12650] bond_slave_1: left promiscuous mode [ 860.601610][T12650] batadv0: left promiscuous mode [ 860.845939][ T9335] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000D/input/input81 [ 860.876292][ T9335] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000D/input/input82 [ 861.059256][ T9335] kye 0003:0458:5019.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 861.124976][ T9335] usb 5-1: USB disconnect, device number 32 [ 861.346115][T12650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.362091][T12650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.375107][T12675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 861.547480][T12650] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.557592][T12650] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.586594][T12650] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.600922][T12650] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.534468][ T118] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 862.709191][ T118] usb 3-1: Using ep0 maxpacket: 16 [ 862.741718][ T118] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 862.764667][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 862.779626][ T118] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 862.806652][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.832374][ T118] usb 3-1: Product: syz [ 862.844295][ T118] usb 3-1: Manufacturer: syz [ 862.854754][ T118] usb 3-1: SerialNumber: syz [ 862.880260][ T118] usb 3-1: config 0 descriptor?? [ 862.897763][ T118] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 862.909866][ T118] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 862.935188][ T1210] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 863.087164][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 863.102879][ T1210] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 863.124220][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.132458][ T1210] usb 2-1: Product: syz [ 863.140059][ T1210] usb 2-1: Manufacturer: syz [ 863.153187][ T1210] usb 2-1: SerialNumber: syz [ 863.165298][ T1210] usb 2-1: config 0 descriptor?? [ 863.384304][ T1210] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 863.397920][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 863.546299][ T118] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 863.552818][ T118] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 863.799975][ T118] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 863.808488][ T118] em28xx 3-1:0.0: No AC97 audio processor [ 863.836198][ T118] usb 3-1: USB disconnect, device number 34 [ 863.842880][ T118] em28xx 3-1:0.0: Disconnecting em28xx [ 863.851371][ T118] em28xx 3-1:0.0: Freeing device [ 863.880922][ T29] audit: type=1326 audit(1732976631.119:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9d80849 code=0x7ffc0000 [ 863.930013][ T29] audit: type=1326 audit(1732976631.149:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9d80849 code=0x7ffc0000 [ 863.953705][ T29] audit: type=1326 audit(1732976631.149:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fdeb9d80849 code=0x7ffc0000 [ 863.976637][ T29] audit: type=1326 audit(1732976631.149:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9d80849 code=0x7ffc0000 [ 863.999618][ T29] audit: type=1326 audit(1732976631.149:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9d80849 code=0x7ffc0000 [ 864.384333][ T6301] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 864.544528][ T6301] usb 1-1: Using ep0 maxpacket: 32 [ 864.551908][ T6301] usb 1-1: config 1 has an invalid interface number: 207 but max is 0 [ 864.556282][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 864.560734][ T6301] usb 1-1: config 1 has no interface number 0 [ 864.585262][ T6301] usb 1-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=dc.5d [ 864.594853][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.610638][ T6301] usb 1-1: Product: syz [ 864.615710][ T6301] usb 1-1: Manufacturer: syz [ 864.620502][ T6301] usb 1-1: SerialNumber: syz [ 864.704286][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 864.855657][ T8] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 864.865027][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.876085][ T8] usb 4-1: config 0 descriptor?? [ 864.886673][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 865.058203][ T6301] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 865.077694][ T6301] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 865.088832][ T6301] dib0700: firmware download failed at 7 with -22 [ 865.118522][ T6301] usb 1-1: USB disconnect, device number 29 [ 865.296807][ T8] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 865.415384][ T1210] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 865.445380][ T1210] usb 2-1: USB disconnect, device number 30 [ 865.708821][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 865.753556][ T8] gspca_cpia1: usb_control_msg 05, error -71 [ 865.762159][ T8] cpia1 4-1:0.0: unexpected systemstate: 00 [ 865.784252][ T8] usb 4-1: USB disconnect, device number 29 [ 865.843334][ T5819] Bluetooth: hci4: unexpected event for opcode 0x080d [ 866.118615][ T5819] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 866.297398][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 866.342347][T12822] netlink: 'syz.3.1837': attribute type 11 has an invalid length. [ 866.674241][ T118] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 866.894821][ T118] usb 3-1: Using ep0 maxpacket: 32 [ 866.906916][ T118] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 866.921668][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.001859][ T118] usb 3-1: config 0 descriptor?? [ 867.821502][ T118] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 867.844110][ T118] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 867.874754][ T118] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 867.948144][T12848] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 867.969545][T12848] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 867.989650][T12848] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 868.064368][ T5886] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 868.114259][ T1210] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 868.216464][ T5886] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 868.231461][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 868.240752][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.252031][T12856] erspan0: left allmulticast mode [ 868.258140][ T5886] usb 1-1: config 0 descriptor?? [ 868.264074][T12856] erspan0: left promiscuous mode [ 868.271760][T12856] bridge0: port 3(erspan0) entered disabled state [ 868.278379][ T1210] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.35 [ 868.292187][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 868.302291][ T1210] usb 4-1: Product: syz [ 868.304010][T12856] bridge_slave_1: left allmulticast mode [ 868.313724][T12856] bridge_slave_1: left promiscuous mode [ 868.330803][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.348410][ T1210] usb 4-1: Manufacturer: syz [ 868.355894][T12856] bridge_slave_0: left allmulticast mode [ 868.362431][ T1210] usb 4-1: SerialNumber: syz [ 868.368244][T12856] bridge_slave_0: left promiscuous mode [ 868.386182][T12856] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.392335][ T1210] usb 4-1: config 0 descriptor?? [ 868.407620][ T1210] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 868.420210][T12858] netlink: 'syz.4.1849': attribute type 11 has an invalid length. [ 868.506861][ T5886] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 868.519927][ T5886] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 868.550755][ T5886] usb 1-1: USB disconnect, device number 30 [ 868.917074][ T1210] sonixb 4-1:0.0: Error reading register 00: -110 [ 868.961524][ T1210] usb 4-1: USB disconnect, device number 30 [ 869.094360][ T5886] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 869.254489][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 869.262249][ T5886] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 869.272044][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.286298][ T5886] usb 2-1: config 0 descriptor?? [ 869.566878][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 869.574305][ T1210] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 869.756007][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 869.781134][ T1210] usb 1-1: config 1 has an invalid interface number: 207 but max is 0 [ 869.797203][ T1210] usb 1-1: config 1 has no interface number 0 [ 869.808341][ T1210] usb 1-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=dc.5d [ 869.822996][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.833763][ T1210] usb 1-1: Product: syz [ 869.841774][ T1210] usb 1-1: Manufacturer: syz [ 869.864531][ T1210] usb 1-1: SerialNumber: syz [ 869.914597][ T5819] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 869.924230][ T5819] Bluetooth: hci4: Injecting HCI hardware error event [ 869.933058][ T5819] Bluetooth: hci4: hardware error 0x00 [ 870.132949][ T9335] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 870.362334][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 870.369765][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 870.382619][ T9335] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 870.388309][ T1210] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 870.395507][ T9335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.414699][ T1210] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 870.421016][ T9335] usb 5-1: Product: syz [ 870.428662][ T1210] dib0700: firmware download failed at 7 with -22 [ 870.431122][ T9335] usb 5-1: Manufacturer: syz [ 870.443111][ T9335] usb 5-1: SerialNumber: syz [ 870.454021][ T9335] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 870.459783][ T1210] usb 1-1: USB disconnect, device number 31 [ 870.477014][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.483550][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.542239][ T5848] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 871.183796][ T8] usb 5-1: USB disconnect, device number 33 [ 871.404328][ T1210] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 871.574761][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 871.606577][ T1210] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 871.629815][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.657195][ T1210] usb 4-1: config 0 descriptor?? [ 871.836881][ T5848] usb 5-1: Service connection timeout for: 256 [ 871.843099][ T5848] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 871.865827][ T5848] ath9k_htc: Failed to initialize the device [ 871.873545][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 871.976112][ T1210] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 871.995905][ T5819] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 872.234362][ T9335] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 872.414476][ T9335] usb 1-1: Using ep0 maxpacket: 8 [ 872.425050][ T9335] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 872.475702][ T9335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.513064][ T9335] usb 1-1: config 0 descriptor?? [ 873.815297][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 873.842333][T13002] erspan0: left allmulticast mode [ 873.857585][T13002] erspan0: left promiscuous mode [ 873.866314][T13002] bridge0: port 4(erspan0) entered disabled state [ 873.909487][T13002] syz_tun: left allmulticast mode [ 873.930829][T13002] syz_tun: left promiscuous mode [ 873.942168][T13002] bridge0: port 3(syz_tun) entered disabled state [ 873.983739][T13002] bridge_slave_1: left allmulticast mode [ 874.007030][T13002] bridge_slave_1: left promiscuous mode [ 874.023140][T13002] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.057485][T13002] bridge_slave_0: left allmulticast mode [ 874.063551][T13002] bridge_slave_0: left promiscuous mode [ 874.088178][T13002] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.198306][ T9335] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 875.213147][ T9335] asix 1-1:0.0: probe with driver asix failed with error -71 [ 875.234884][ T9335] usb 1-1: USB disconnect, device number 32 [ 875.374333][ T5857] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 875.539303][ T5857] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 875.548871][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.559252][ T5857] usb 5-1: config 0 descriptor?? [ 875.566504][ T5857] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 876.103080][ T5857] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 876.304373][T13061] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 876.332958][T13061] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 876.420495][ T5857] gspca_cpia1: usb_control_msg 02, error -71 [ 876.427071][ T5857] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 876.437430][ T5857] usb 5-1: USB disconnect, device number 34 [ 877.532445][T13059] syz.0.1914 (13059): drop_caches: 3 [ 877.735002][ T5848] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 877.894830][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 877.906093][ T5848] usb 5-1: config 1 has an invalid interface number: 207 but max is 0 [ 877.924182][ T5848] usb 5-1: config 1 has no interface number 0 [ 877.945651][ T5848] usb 5-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=dc.5d [ 877.954826][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.964934][ T5848] usb 5-1: Product: syz [ 877.969140][ T5848] usb 5-1: Manufacturer: syz [ 877.974099][ T5848] usb 5-1: SerialNumber: syz [ 878.416490][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 878.423969][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 878.439449][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 878.449366][ T5848] dvb-usb: found a 'Hauppauge Nova-TD-500 (84xxx)' in cold state, will try to load a firmware [ 878.469840][ T5848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 878.488510][ T5848] dib0700: firmware download failed at 7 with -22 [ 878.509288][ T5848] usb 5-1: USB disconnect, device number 35 [ 878.712591][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'. [ 878.847063][T13104] sctp: [Deprecated]: syz.1.1930 (pid 13104) Use of int in max_burst socket option deprecated. [ 878.847063][T13104] Use struct sctp_assoc_value instead [ 878.924239][ T9335] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 879.074441][ T9335] usb 1-1: Using ep0 maxpacket: 8 [ 879.089152][ T9335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.110877][ T9335] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 879.132558][ T9335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.158439][ T9335] usb 1-1: config 0 descriptor?? [ 879.383446][ T9335] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 879.589729][ T5848] usb 1-1: USB disconnect, device number 33 [ 881.917715][T13157] netlink: 'syz.4.1953': attribute type 3 has an invalid length. [ 882.334514][ T5848] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 882.494224][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 882.500906][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.524330][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.534251][ T5848] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 882.543323][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.566036][ T5848] usb 5-1: config 0 descriptor?? [ 882.986527][ T5848] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 883.187928][ T5848] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 883.389055][ T5848] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 883.790507][ T5848] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 883.798380][ T5848] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 883.844792][ T5848] usb 5-1: USB disconnect, device number 36 [ 885.064361][ T5848] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 885.214274][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 885.223947][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 885.242084][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 885.256659][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26288, setting to 1024 [ 885.288111][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.314281][ T5848] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 885.325137][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.336778][ T5848] usb 1-1: config 0 descriptor?? [ 885.343347][T13223] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 885.352269][ T5848] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 885.370332][ T5848] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 885.565688][ T5848] usb 1-1: USB disconnect, device number 34 [ 885.582062][ T5848] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 885.607477][ T5848] kobil_sct 1-1:0.0: device disconnected [ 886.094308][ T5857] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 886.266199][ T5857] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 886.289828][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.329815][ T5857] usb 5-1: config 0 descriptor?? [ 886.350719][ T5857] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 886.748997][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 886.761450][ T5857] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 887.169882][ T5857] gspca_cpia1: usb_control_msg 02, error -71 [ 887.179810][ T5857] gspca_cpia1: usb_control_msg 05, error -71 [ 887.203301][ T5857] cpia1 5-1:0.0: unexpected systemstate: 01 [ 887.204684][T13281] binder: 13280:13281 ioctl 3b81 0 returned -22 [ 887.212213][ T5857] usb 5-1: USB disconnect, device number 37 [ 887.354498][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 887.515822][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 887.542379][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.559435][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.571828][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 887.586409][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 887.597702][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.616284][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 887.637180][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 887.660533][ T9] usb 1-1: Manufacturer: syz [ 887.675225][ T9] usb 1-1: config 0 descriptor?? [ 887.946777][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2017'. [ 888.004212][ T9] rc_core: IR keymap rc-hauppauge not found [ 888.020797][ T9] Registered IR keymap rc-empty [ 888.028548][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.067822][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.132391][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 888.179890][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input83 [ 888.274459][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.289893][T13321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 888.317833][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.375405][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.395514][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.420911][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.464259][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.494323][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.521923][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.569903][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.604334][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 888.634435][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 888.643519][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 888.664309][ T9] usb 1-1: USB disconnect, device number 35 [ 888.860167][ T5819] Bluetooth: hci1: unexpected event for opcode 0x000d [ 889.400827][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 890.109297][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 890.205721][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 890.270762][T13392] syz_tun: left allmulticast mode [ 890.308094][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2054'. [ 890.316855][T13392] syz_tun: left promiscuous mode [ 890.322192][T13392] bridge0: port 4(syz_tun) entered disabled state [ 890.366711][T13392] vlan2: left allmulticast mode [ 890.371976][T13392] bridge0: port 3(vlan2) entered disabled state [ 890.385427][T13392] bridge_slave_1: left allmulticast mode [ 890.395967][T13392] bridge_slave_1: left promiscuous mode [ 890.401852][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.422001][T13392] bridge_slave_0: left allmulticast mode [ 890.432054][T13392] bridge_slave_0: left promiscuous mode [ 890.444505][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.864355][ T5848] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 891.024275][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 891.040728][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 891.053050][ T5848] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 891.068880][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.079425][ T5848] usb 5-1: Product: syz [ 891.083672][ T5848] usb 5-1: Manufacturer: syz [ 891.093658][ T5848] usb 5-1: SerialNumber: syz [ 891.102820][ T5848] usb 5-1: config 0 descriptor?? [ 891.325178][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2067'. [ 891.326688][ T5848] usb 5-1: Limiting number of CPorts to U8_MAX [ 891.350798][ T5848] usb 5-1: Not enough endpoints found in device, aborting! [ 891.472744][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 891.578215][ T5848] usb 5-1: USB disconnect, device number 38 [ 892.875009][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 892.883827][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 892.893645][ T5819] Bluetooth: hci1: hardware error 0x00 [ 893.292762][ T9667] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 894.954235][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 895.334855][T13569] dccp_close: ABORT with 340 bytes unread [ 897.123167][T13636] gretap1: entered allmulticast mode [ 897.304289][ T5857] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 897.323204][T13641] vlan3: entered promiscuous mode [ 897.475992][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.494347][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.505150][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 897.516338][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 897.533409][ T5857] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 897.542616][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.554234][ T5857] usb 1-1: Product: syz [ 897.558436][ T5857] usb 1-1: Manufacturer: syz [ 897.563059][ T5857] usb 1-1: SerialNumber: syz [ 897.583211][ T5857] usb 1-1: config 0 descriptor?? [ 897.596310][ T5857] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 897.607151][ T5857] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 897.635047][ T5857] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 897.811565][ T5857] usb 1-1: USB disconnect, device number 36 [ 897.818425][ T5857] garmin_gps 1-1:0.0: device disconnected [ 898.091072][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'. [ 898.144402][ T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 898.294403][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 898.301847][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 898.310664][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.321485][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.340442][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 898.353397][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.375953][ T25] usb 5-1: Product: syz [ 898.380294][ T25] usb 5-1: Manufacturer: syz [ 898.385408][ T25] usb 5-1: SerialNumber: syz [ 898.806205][ T25] usb 5-1: 0:2 : does not exist [ 898.819813][ T25] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 898.857253][ T25] usb 5-1: USB disconnect, device number 39 [ 899.096728][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.474265][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 899.628869][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 899.641192][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.656665][ T25] usb 1-1: Product: syz [ 899.665988][ T25] usb 1-1: Manufacturer: syz [ 899.671626][ T25] usb 1-1: SerialNumber: syz [ 899.687524][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 899.736713][T12918] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 900.058649][ T29] audit: type=1326 audit(1732976667.299:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13696 comm="syz.1.2175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe802980849 code=0x0 [ 900.169449][ T5857] usb 1-1: USB disconnect, device number 37 [ 900.319354][T13708] vivid-004: ================= START STATUS ================= [ 900.328530][T13708] vivid-004: Radio HW Seek Mode: Bounded [ 900.336438][T13708] vivid-004: Radio Programmable HW Seek: false [ 900.342924][T13708] vivid-004: RDS Rx I/O Mode: Block I/O [ 900.348884][T13708] vivid-004: Generate RBDS Instead of RDS: false [ 900.355560][T13708] vivid-004: RDS Reception: true [ 900.360643][T13708] vivid-004: RDS Program Type: 0 inactive [ 900.366727][T13708] vivid-004: RDS PS Name: inactive [ 900.372090][T13708] vivid-004: RDS Radio Text: inactive [ 900.379379][T13708] vivid-004: RDS Traffic Announcement: false inactive [ 900.387649][T13708] vivid-004: RDS Traffic Program: false inactive [ 900.406300][T13708] vivid-004: RDS Music: false inactive [ 900.411846][T13708] vivid-004: ================== END STATUS ================== [ 901.034414][T12918] usb 1-1: Service connection timeout for: 256 [ 901.182578][T12918] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 901.249759][T12918] ath9k_htc: Failed to initialize the device [ 901.264641][ T5857] usb 1-1: ath9k_htc: USB layer deinitialized [ 901.422245][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 901.458370][T13748] vlan2: entered promiscuous mode [ 901.477002][T13748] veth0: entered promiscuous mode [ 901.492438][T13748] vlan2: entered allmulticast mode [ 901.501179][T13748] veth0: entered allmulticast mode [ 901.522091][T13748] veth0: left allmulticast mode [ 901.527700][T13748] veth0: left promiscuous mode [ 901.766678][ T29] audit: type=1326 audit(1732976669.009:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.0.2198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9d80849 code=0x0 [ 902.741386][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 903.314577][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 903.465633][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.476889][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 903.486081][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.507011][ T25] usb 1-1: config 0 descriptor?? [ 903.517797][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 903.719331][ T25] pwc: send_video_command error -71 [ 903.730638][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 903.738410][ T25] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 903.755435][ T25] usb 1-1: USB disconnect, device number 38 [ 903.851729][ T29] audit: type=1326 audit(1732976671.089:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13811 comm="syz.3.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x0 [ 904.164245][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 904.316629][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.328930][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 904.348541][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.396107][ T25] usb 1-1: config 0 descriptor?? [ 904.423502][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 904.710877][T13831] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.805316][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 904.823769][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 904.839285][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 904.859644][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 904.868963][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 904.883006][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 904.905148][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 904.920911][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 904.932219][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 904.941708][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 904.951169][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 904.969211][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 904.977473][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 905.205885][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 905.214589][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 905.222102][ T25] pwc: Registered as video103. [ 905.237972][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input85 [ 905.255729][ T25] usb 1-1: USB disconnect, device number 39 [ 905.854993][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 906.131242][T13871] vivid-003: ================= START STATUS ================= [ 906.139727][T13871] vivid-003: Radio HW Seek Mode: Bounded [ 906.145644][ T29] audit: type=1326 audit(1732976673.359:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13863 comm="syz.3.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d80849 code=0x0 [ 906.183659][T13871] vivid-003: Radio Programmable HW Seek: false [ 906.190041][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 906.195554][T13871] vivid-003: RDS Rx I/O Mode: Block I/O [ 906.204991][T13871] vivid-003: Generate RBDS Instead of RDS: false [ 906.205897][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 906.221688][T13871] [ 906.224040][T13871] vivid-003: RDS Reception: true [ 906.229107][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.238538][ T8] usb 5-1: Product: syz [ 906.242702][ T8] usb 5-1: Manufacturer: syz [ 906.247816][T13871] vivid-003: RDS Program Type: 0 inactive [ 906.253584][T13871] vivid-003: RDS PS Name: inactive [ 906.259523][ T8] usb 5-1: SerialNumber: syz [ 906.267353][T13871] vivid-003: RDS Radio Text: inactive [ 906.272898][T13871] vivid-003: RDS Traffic Announcement: false inactive [ 906.282016][ T8] usb 5-1: config 0 descriptor?? [ 906.289013][T13871] vivid-003: RDS Traffic Program: false inactive [ 906.299411][T13871] vivid-003: RDS Music: false inactive [ 906.305043][T13871] vivid-003: ================== END STATUS ================== [ 906.436370][T13885] Context (ID=0x1) not attached to queue pair (handle=0x4d4:0xe0000000) [ 906.497748][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 907.279281][T13910] vivid-000: ================= START STATUS ================= [ 907.288483][T13910] vivid-000: Radio HW Seek Mode: Bounded [ 907.294312][T13910] vivid-000: Radio Programmable HW Seek: false [ 907.300772][T13910] vivid-000: RDS Rx I/O Mode: Block I/O [ 907.306726][T13910] vivid-000: Generate RBDS Instead of RDS: false [ 907.316315][T13910] vivid-000: RDS Reception: true [ 907.321456][T13910] vivid-000: RDS Program Type: 0 inactive [ 907.329196][T13910] vivid-000: RDS PS Name: inactive [ 907.337355][T13910] vivid-000: RDS Radio Text: inactive [ 907.343012][T13910] vivid-000: RDS Traffic Announcement: false inactive [ 907.351072][T13910] vivid-000: RDS Traffic Program: false inactive [ 907.357797][T13910] vivid-000: RDS Music: false inactive [ 907.369449][T13910] vivid-000: ================== END STATUS ================== [ 907.788953][T13924] ALSA: mixer_oss: invalid index 2000000 [ 908.346251][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 908.359499][ T8] usb 5-1: USB disconnect, device number 40 [ 908.455262][T13936] vivid-001: ================= START STATUS ================= [ 908.463108][T13936] vivid-001: Radio HW Seek Mode: Bounded [ 908.471805][T13936] vivid-001: Radio Programmable HW Seek: false [ 908.481813][T13936] vivid-001: RDS Rx I/O Mode: Block I/O [ 908.487611][T13936] vivid-001: Generate RBDS Instead of RDS: false [ 908.497851][T13936] vivid-001: RDS Reception: true [ 908.502813][T13936] vivid-001: RDS Program Type: 0 inactive [ 908.509479][T13936] vivid-001: RDS PS Name: inactive [ 908.518686][T13936] vivid-001: RDS Radio Text: inactive [ 908.524398][T13936] vivid-001: RDS Traffic Announcement: false inactive [ 908.531201][T13936] vivid-001: RDS Traffic Program: false inactive [ 908.540864][T13936] vivid-001: RDS Music: false inactive [ 908.547014][T13936] vivid-001: ================== END STATUS ================== [ 909.074705][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 909.167573][T13954] ALSA: mixer_oss: invalid index 2000000 [ 909.614640][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'. [ 909.628409][T13966] vivid-000: ================= START STATUS ================= [ 909.637745][T13966] vivid-000: Radio HW Seek Mode: Bounded [ 909.643448][T13966] vivid-000: Radio Programmable HW Seek: false [ 909.652338][T13966] vivid-000: RDS Rx I/O Mode: Block I/O [ 909.658320][T13966] vivid-000: Generate RBDS Instead of RDS: false [ 909.669769][T13966] vivid-000: RDS Reception: true [ 909.675787][T13966] vivid-000: RDS Program Type: 0 inactive [ 909.682021][T13966] vivid-000: RDS PS Name: inactive [ 909.692045][T13966] vivid-000: RDS Radio Text: inactive [ 909.699751][T13966] vivid-000: RDS Traffic Announcement: false inactive [ 909.711609][T13966] vivid-000: RDS Traffic Program: false inactive [ 909.718637][T13966] vivid-000: RDS Music: false inactive [ 909.724429][T13966] vivid-000: ================== END STATUS ================== [ 909.872286][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2279'. [ 909.946418][T13979] ALSA: mixer_oss: invalid index 2000000 [ 910.015926][T13985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2283'. [ 910.104344][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 910.179540][T13993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2286'. [ 910.195484][T13993] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 910.215238][T13995] vivid-004: ================= START STATUS ================= [ 910.223133][T13995] vivid-004: Radio HW Seek Mode: Bounded [ 910.236544][T13995] vivid-004: Radio Programmable HW Seek: false [ 910.242890][T13995] vivid-004: RDS Rx I/O Mode: Block I/O [ 910.253495][T13995] vivid-004: Generate RBDS Instead of RDS: false [ 910.261033][T13995] vivid-004: RDS Reception: true [ 910.269327][T13995] vivid-004: RDS Program Type: 0 inactive [ 910.276368][T13995] vivid-004: RDS PS Name: inactive [ 910.278929][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 910.282135][T13995] vivid-004: RDS Radio Text: inactive [ 910.302770][T13995] vivid-004: RDS Traffic Announcement: false inactive [ 910.319189][T13995] vivid-004: RDS Traffic Program: false inactive [ 910.327184][T13995] vivid-004: RDS Music: false inactive [ 910.333199][T13995] vivid-004: ================== END STATUS ================== [ 910.656818][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 910.758926][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 910.843253][T14030] vivid-000: ================= START STATUS ================= [ 910.859398][T14030] vivid-000: Radio HW Seek Mode: Bounded [ 910.868127][T14030] vivid-000: Radio Programmable HW Seek: false [ 910.888685][T14030] vivid-000: RDS Rx I/O Mode: Block I/O [ 910.899320][T14030] vivid-000: Generate RBDS Instead of RDS: false [ 910.908780][T14030] vivid-000: RDS Reception: true [ 910.914056][T14030] vivid-000: RDS Program Type: 0 inactive [ 910.920419][T14030] vivid-000: RDS PS Name: inactive [ 910.926611][T14030] vivid-000: RDS Radio Text: inactive [ 910.944765][T14030] vivid-000: RDS Traffic Announcement: false inactive [ 910.960204][T14030] vivid-000: RDS Traffic Program: false inactive [ 910.967792][T14030] vivid-000: RDS Music: false inactive [ 910.973327][T14030] vivid-000: ================== END STATUS ================== [ 911.133312][T14043] vlan2: entered promiscuous mode [ 911.144328][T14043] ip6gretap0: entered promiscuous mode [ 911.164525][T14043] ip6gretap0: left promiscuous mode [ 911.306945][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 911.689302][T14069] vivid-001: ================= START STATUS ================= [ 911.697418][T14069] vivid-001: Radio HW Seek Mode: Bounded [ 911.703120][T14069] vivid-001: Radio Programmable HW Seek: false [ 911.710274][T14069] vivid-001: RDS Rx I/O Mode: Block I/O [ 911.716032][T14069] vivid-001: Generate RBDS Instead of RDS: false [ 911.722598][T14069] vivid-001: RDS Reception: true [ 911.727680][T14069] vivid-001: RDS Program Type: 0 inactive [ 911.733537][T14069] vivid-001: RDS PS Name: inactive [ 911.738890][T14069] vivid-001: RDS Radio Text: inactive [ 911.745173][T14069] vivid-001: RDS Traffic Announcement: false inactive [ 911.751986][T14069] vivid-001: RDS Traffic Program: false inactive [ 911.758706][T14069] vivid-001: RDS Music: false inactive [ 911.774308][T14069] vivid-001: ================== END STATUS ================== [ 911.827506][T14072] capability: warning: `syz.3.2317' uses 32-bit capabilities (legacy support in use) [ 912.902060][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2327'. [ 913.011077][T14113] sctp: [Deprecated]: syz.2.2327 (pid 14113) Use of int in max_burst socket option deprecated. [ 913.011077][T14113] Use struct sctp_assoc_value instead [ 913.104035][T14116] ALSA: mixer_oss: invalid OSS volume '' [ 913.654619][T12918] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 913.737479][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 913.757332][T14142] vlan3: entered promiscuous mode [ 913.762549][T14142] veth0: entered promiscuous mode [ 913.768030][T14142] vlan3: entered allmulticast mode [ 913.773323][T14142] veth0: entered allmulticast mode [ 913.816544][T12918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.829444][T12918] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 913.846591][T12918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.869818][T12918] usb 1-1: config 0 descriptor?? [ 913.902936][T12918] pwc: Askey VC010 type 2 USB webcam detected. [ 914.229923][T14151] ALSA: mixer_oss: invalid OSS volume '' [ 914.313527][T12918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 914.320848][T12918] pwc: recv_control_msg error -32 req 02 val 2700 [ 914.351707][T12918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 914.374403][T12918] pwc: recv_control_msg error -32 req 04 val 1000 [ 914.394363][T12918] pwc: recv_control_msg error -32 req 04 val 1300 [ 914.401642][T12918] pwc: recv_control_msg error -32 req 04 val 1400 [ 914.414636][T12918] pwc: recv_control_msg error -32 req 02 val 2000 [ 914.434272][T12918] pwc: recv_control_msg error -32 req 02 val 2100 [ 914.695014][T12918] pwc: recv_control_msg error -71 req 02 val 2500 [ 914.701738][T12918] pwc: recv_control_msg error -71 req 02 val 2400 [ 914.708843][T12918] pwc: recv_control_msg error -71 req 02 val 2600 [ 914.764460][T12918] pwc: recv_control_msg error -71 req 02 val 2900 [ 914.789938][T12918] pwc: recv_control_msg error -71 req 02 val 2800 [ 914.812240][T12918] pwc: recv_control_msg error -71 req 04 val 1100 [ 914.824742][T12918] pwc: recv_control_msg error -71 req 04 val 1200 [ 914.842819][T12918] pwc: Registered as video103. [ 914.862003][T12918] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 914.928994][T12918] usb 1-1: USB disconnect, device number 40 [ 915.269997][T14181] vlan3: entered promiscuous mode [ 915.300001][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 915.353357][T14185] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 916.134342][T12918] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 917.025795][T12918] usb 1-1: Using ep0 maxpacket: 8 [ 917.051202][T12918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 917.066837][T12918] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 917.095627][T12918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.113956][T12918] usb 1-1: Product: syz [ 917.122919][T12918] usb 1-1: Manufacturer: syz [ 917.132129][T12918] usb 1-1: SerialNumber: syz [ 917.146613][T12918] usb 1-1: config 0 descriptor?? [ 917.155956][T12918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 917.192796][T14222] vivid-004: ================= START STATUS ================= [ 917.200942][T14222] vivid-004: Radio HW Seek Mode: Bounded [ 917.208066][T14222] vivid-004: Radio Programmable HW Seek: false [ 917.216027][T14222] vivid-004: RDS Rx I/O Mode: Block I/O [ 917.221666][T14222] vivid-004: Generate RBDS Instead of RDS: false [ 917.229547][T14222] vivid-004: RDS Reception: true [ 917.242597][T14222] vivid-004: RDS Program Type: 0 inactive [ 917.248587][T14222] vivid-004: RDS PS Name: inactive [ 917.254947][T14222] vivid-004: RDS Radio Text: inactive [ 917.260466][T14222] vivid-004: RDS Traffic Announcement: false inactive [ 917.267725][T14222] vivid-004: RDS Traffic Program: false inactive [ 917.274366][T14222] vivid-004: RDS Music: false inactive [ 917.280214][T14222] vivid-004: ================== END STATUS ================== [ 917.521306][T14237] ALSA: mixer_oss: invalid OSS volume '' [ 917.937672][T14250] input: syz1 as /devices/virtual/input/input87 [ 918.032933][T14252] vivid-003: ================= START STATUS ================= [ 918.041038][T14252] vivid-003: Radio HW Seek Mode: Bounded [ 918.047184][T14252] vivid-003: Radio Programmable HW Seek: false [ 918.053566][T14252] vivid-003: RDS Rx I/O Mode: Block I/O [ 918.059890][T14252] vivid-003: Generate RBDS Instead of RDS: false [ 918.066725][T14252] vivid-003: RDS Reception: true [ 918.071707][T14252] vivid-003: RDS Program Type: 0 inactive [ 918.078183][T14252] vivid-003: RDS PS Name: inactive [ 918.084772][T14252] vivid-003: RDS Radio Text: inactive [ 918.090746][T14252] vivid-003: RDS Traffic Announcement: false inactive [ 918.098315][T14252] vivid-003: RDS Traffic Program: false inactive [ 918.105215][T14252] vivid-003: RDS Music: false inactive [ 918.110870][T14252] vivid-003: ================== END STATUS ================== [ 918.278287][T14260] vlan4: entered promiscuous mode [ 918.339597][T14262] ALSA: mixer_oss: invalid OSS volume '' [ 918.787694][T12918] gspca_zc3xx: reg_w_i err -71 [ 919.302780][T14301] 9pnet_fd: Insufficient options for proto=fd [ 919.394756][T12918] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 919.409821][T12918] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 919.444364][T12918] usb 1-1: USB disconnect, device number 41 [ 920.467582][T14349] delete_channel: no stack [ 920.475852][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 920.994304][T12918] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 921.144329][T12918] usb 1-1: Using ep0 maxpacket: 16 [ 921.165827][T12918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.186297][T12918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.204460][T12918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.218325][T12918] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 921.228014][T12918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.239600][T12918] usb 1-1: config 0 descriptor?? [ 921.308811][T14368] vlan4: entered promiscuous mode [ 921.313875][T14368] team0: entered promiscuous mode [ 921.323372][T14368] team_slave_0: entered promiscuous mode [ 921.329784][T14368] team_slave_1: entered promiscuous mode [ 921.337224][T14368] team0: Device vlan4 is already an upper device of the team interface [ 921.347021][T14368] team0: left promiscuous mode [ 921.351912][T14368] team_slave_0: left promiscuous mode [ 921.362456][T14368] team_slave_1: left promiscuous mode [ 921.670380][T12918] usbhid 1-1:0.0: can't add hid device: -71 [ 921.677630][T12918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 921.696943][T12918] usb 1-1: USB disconnect, device number 42 [ 923.654299][T14434] program syz.1.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.984960][T14442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.109455][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 924.939823][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2473'. [ 925.218861][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 925.228177][T14482] erspan0: left allmulticast mode [ 925.233361][T14482] erspan0: left promiscuous mode [ 925.238889][T14482] bridge0: port 4(erspan0) entered disabled state [ 925.247361][T14482] syz_tun: left allmulticast mode [ 925.252481][T14482] syz_tun: left promiscuous mode [ 925.258154][T14482] bridge0: port 3(syz_tun) entered disabled state [ 925.266599][T14482] bridge_slave_1: left allmulticast mode [ 925.272248][T14482] bridge_slave_1: left promiscuous mode [ 925.279536][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.290182][T14482] bridge_slave_0: left allmulticast mode [ 925.296133][T14482] bridge_slave_0: left promiscuous mode [ 925.301835][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.671506][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 926.709915][T14517] [ 926.712267][T14517] ====================================================== [ 926.719274][T14517] WARNING: possible circular locking dependency detected [ 926.726288][T14517] 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 Not tainted [ 926.733033][T14517] ------------------------------------------------------ [ 926.740046][T14517] syz.0.2489/14517 is trying to acquire lock: [ 926.746113][T14517] ffff888071e894d0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe7/0xc50 [ 926.757506][T14517] [ 926.757506][T14517] but task is already holding lock: [ 926.764855][T14517] ffff888071e88258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x234/0x540 [ 926.773813][T14517] [ 926.773813][T14517] which lock already depends on the new lock. [ 926.773813][T14517] [ 926.784218][T14517] [ 926.784218][T14517] the existing dependency chain (in reverse order) is: [ 926.793247][T14517] [ 926.793247][T14517] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 926.800975][T14517] lock_acquire+0x1ed/0x550 [ 926.806014][T14517] lock_sock_nested+0x48/0x100 [ 926.811316][T14517] smc_listen_out+0x113/0x3e0 [ 926.816528][T14517] process_scheduled_works+0xa66/0x1840 [ 926.822602][T14517] worker_thread+0x870/0xd30 [ 926.827708][T14517] kthread+0x2f0/0x390 [ 926.832295][T14517] ret_from_fork+0x4b/0x80 [ 926.837227][T14517] ret_from_fork_asm+0x1a/0x30 [ 926.842503][T14517] [ 926.842503][T14517] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 926.852664][T14517] validate_chain+0x18ef/0x5920 [ 926.858029][T14517] __lock_acquire+0x1397/0x2100 [ 926.863388][T14517] lock_acquire+0x1ed/0x550 [ 926.868404][T14517] __flush_work+0x74e/0xc50 [ 926.873417][T14517] __cancel_work_sync+0xbc/0x110 [ 926.878865][T14517] smc_clcsock_release+0x62/0xf0 [ 926.884326][T14517] __smc_release+0x683/0x800 [ 926.889444][T14517] smc_close_non_accepted+0xd8/0x1f0 [ 926.895240][T14517] smc_close_active+0xadb/0xe90 [ 926.900606][T14517] __smc_release+0xa0/0x800 [ 926.905618][T14517] smc_release+0x2dc/0x540 [ 926.910552][T14517] sock_close+0xbc/0x240 [ 926.915320][T14517] __fput+0x23c/0xa50 [ 926.919822][T14517] task_work_run+0x24f/0x310 [ 926.924930][T14517] syscall_exit_to_user_mode+0x13f/0x340 [ 926.931078][T14517] do_syscall_64+0x100/0x230 [ 926.936181][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.942597][T14517] [ 926.942597][T14517] other info that might help us debug this: [ 926.942597][T14517] [ 926.952837][T14517] Possible unsafe locking scenario: [ 926.952837][T14517] [ 926.960287][T14517] CPU0 CPU1 [ 926.965635][T14517] ---- ---- [ 926.970985][T14517] lock(sk_lock-AF_SMC/1); [ 926.975485][T14517] lock((work_completion)(&new_smc->smc_listen_work)); [ 926.985011][T14517] lock(sk_lock-AF_SMC/1); [ 926.992368][T14517] lock((work_completion)(&new_smc->smc_listen_work)); [ 926.999289][T14517] [ 926.999289][T14517] *** DEADLOCK *** [ 926.999289][T14517] [ 927.007441][T14517] 3 locks held by syz.0.2489/14517: [ 927.012623][T14517] #0: ffff888057ed0808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 927.022716][T14517] #1: ffff888071e88258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x234/0x540 [ 927.032105][T14517] #2: ffffffff8e93c5a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xe7/0xc50 [ 927.041242][T14517] [ 927.041242][T14517] stack backtrace: [ 927.047129][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.0.2489 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 927.057520][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 927.067570][T14517] Call Trace: [ 927.070831][T14517] [ 927.073746][T14517] dump_stack_lvl+0x241/0x360 [ 927.078416][T14517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.083600][T14517] ? __pfx__printk+0x10/0x10 [ 927.088527][T14517] print_circular_bug+0x13a/0x1b0 [ 927.093535][T14517] check_noncircular+0x36a/0x4a0 [ 927.098453][T14517] ? __pfx_check_noncircular+0x10/0x10 [ 927.103894][T14517] ? lockdep_lock+0x123/0x2b0 [ 927.108559][T14517] validate_chain+0x18ef/0x5920 [ 927.113397][T14517] ? __pfx_validate_chain+0x10/0x10 [ 927.118586][T14517] ? look_up_lock_class+0x77/0x170 [ 927.123694][T14517] ? register_lock_class+0x102/0x980 [ 927.128966][T14517] ? __pfx_register_lock_class+0x10/0x10 [ 927.134578][T14517] ? do_raw_spin_lock+0x14f/0x370 [ 927.139587][T14517] ? __pfx_lock_release+0x10/0x10 [ 927.144616][T14517] ? mark_lock+0x9a/0x360 [ 927.148930][T14517] __lock_acquire+0x1397/0x2100 [ 927.153765][T14517] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 927.159647][T14517] lock_acquire+0x1ed/0x550 [ 927.164154][T14517] ? __flush_work+0xe7/0xc50 [ 927.168738][T14517] ? __pfx_lock_acquire+0x10/0x10 [ 927.173743][T14517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 927.179705][T14517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 927.186013][T14517] ? _raw_spin_unlock_irq+0x23/0x50 [ 927.191196][T14517] ? __flush_work+0xe7/0xc50 [ 927.195766][T14517] __flush_work+0x74e/0xc50 [ 927.200250][T14517] ? __flush_work+0xe7/0xc50 [ 927.204906][T14517] ? __flush_work+0xe7/0xc50 [ 927.209486][T14517] ? __pfx___flush_work+0x10/0x10 [ 927.214501][T14517] ? __pfx_wq_barrier_func+0x10/0x10 [ 927.219810][T14517] ? __pfx___cancel_work+0x10/0x10 [ 927.224918][T14517] ? lockdep_hardirqs_on+0x99/0x150 [ 927.230114][T14517] ? __local_bh_enable_ip+0x168/0x200 [ 927.235480][T14517] ? __smc_release+0x67b/0x800 [ 927.240245][T14517] __cancel_work_sync+0xbc/0x110 [ 927.245180][T14517] smc_clcsock_release+0x62/0xf0 [ 927.250118][T14517] __smc_release+0x683/0x800 [ 927.254704][T14517] smc_close_non_accepted+0xd8/0x1f0 [ 927.259980][T14517] smc_close_active+0xadb/0xe90 [ 927.264822][T14517] ? __pfx_sock_def_readable+0x10/0x10 [ 927.270272][T14517] __smc_release+0xa0/0x800 [ 927.274769][T14517] smc_release+0x2dc/0x540 [ 927.279178][T14517] sock_close+0xbc/0x240 [ 927.283421][T14517] ? __pfx_sock_close+0x10/0x10 [ 927.288269][T14517] __fput+0x23c/0xa50 [ 927.292241][T14517] task_work_run+0x24f/0x310 [ 927.296819][T14517] ? _raw_spin_unlock+0x28/0x50 [ 927.301659][T14517] ? __pfx_task_work_run+0x10/0x10 [ 927.306760][T14517] ? syscall_exit_to_user_mode+0xa3/0x340 [ 927.312482][T14517] syscall_exit_to_user_mode+0x13f/0x340 [ 927.318125][T14517] do_syscall_64+0x100/0x230 [ 927.322698][T14517] ? clear_bhb_loop+0x35/0x90 [ 927.327365][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.333246][T14517] RIP: 0033:0x7fdeb9d80849 [ 927.337655][T14517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.357248][T14517] RSP: 002b:00007fdebaab2058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 927.365648][T14517] RAX: 0000000000000000 RBX: 00007fdeb9f45fa0 RCX: 00007fdeb9d80849 [ 927.373600][T14517] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 927.381553][T14517] RBP: 00007fdeb9df3986 R08: 0000000000000000 R09: 0000000000000000 [ 927.389507][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.397460][T14517] R13: 0000000000000000 R14: 00007fdeb9f45fa0 R15: 00007ffeee6e3ce8 [ 927.405436][T14517] [ 930.459052][ T5191] udevd[5191]: worker [5960] /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0 is taking a long time [ 930.470347][ T5191] udevd[5191]: worker [5919] /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0 is taking a long time [ 931.925282][ T1210] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 931.926276][ T118] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 931.940590][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.956069][ T5886] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 931.961964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.979505][ T5886] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 931.985579][ T1210] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 932.002021][ T118] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 932.007732][ T1210] usb 4-1: USB disconnect, device number 31 [ 932.015979][ T5886] usb 2-1: USB disconnect, device number 31 [ 932.032669][ T118] usb 3-1: USB disconnect, device number 35