last executing test programs: 11m2.507627377s ago: executing program 2 (id=1636): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x840000000002, 0x3, 0xff) close(0x3) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x8) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000440)) (async) socket(0x840000000002, 0x3, 0xff) (async) close(0x3) (async) io_setup(0x3ff, &(0x7f0000000500)) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x8) (async) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) (async) io_destroy(r2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 11m0.461286859s ago: executing program 2 (id=1643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="19a5370c0eb1b047521e03140590cad54eaea5208e4c48b71665c61ef6ecab3d2370ad0a242bd006f26a6fb25cbe18a28f9fade68d123560f05a989e1c8e5527b3a98edb5e30fca72966bce905217a9cf56302f8ee9aef86489d35783ad8d387cde6307a4ec4aea5c2bc46435a8658fde1a44d835b", 0x75}, {&(0x7f00000004c0)="7c308815fa5be3ac58b61725f788ee84206a4e6fac27a8aa3e712977be6319272a5906d7e3847b82a50cf6d1c9f997592f239006412b06e65f72953a6be351e33d846c59c51de3c70aab77d66e8573519a280f4d30cbdcc8ccf3aa70cd814b15e47be7d55cf8687e4a5f28e003c74d38cf9e5c843bfca163ff34", 0x7a}, {&(0x7f0000000540)="44d59133a26c957d0542558af45245355bf61a53b8e37790f2a8a45532fbcbb7cfe446c8367d3a1e6da5f6560c4a2884ef3051895211d46157ee626b5121a921217bc2e14352109e0defe8aa338edf50fde23ae13a3ec6723c46f8cc22dca173c36612eb140b85240aabf81a34298933", 0x70}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x90}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)="7df58bb28e628c", 0x7}, {&(0x7f0000000700)="05ec27a49d5958e20150e66a18ec8fbe3f106440f8398adbdf6d1a2f4312ab2c3aa9d712b4f77a33f441fd48a6652f51a3de346381bb2372440f7371213e6417e3a680e1c06e1e065ec8e695e4bc0ad5a558562b4ef223a091d40ebd097bbb1167718296f13619d2f41cdc625f3af074d1dbf31dac1859e67473b63c8ee6b5530efcf8ecdfa4637864609703fdac6e6d86244bcab5d24fb4b3d29d5570ddab249758c178e33af5dd1cc0b45f53fe108f4e942c481437944cca5c68fd466e53cfb915357391824d9fee71548268aff701affcb1f7aa5c5b36c83b42dfc3af0ea88e6fc55d4d68d52736dc046aa701512f1d93038b9e154063d698", 0xfa}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20000014}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)="5ac1f48e1b0f09ba0c37875d8761395fda753784fdbc55d68eb4c9e22e564e1e6f5fed6db5b246fee556583b890d5c8e551eb0be2c525ce95dfd92555648153129bb6b463cbbbc214dbd3ba2802b43c6f1626f", 0x53}], 0x1, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x108, 0x4000890}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c00)="e4ab3c6a27cea51d758360ca5998a1594633065a05bf8b0d6a74e3b5b600a456043a5817a3a85438d8ea22e8fb450b4c7cbaa7300f8da917f6da8eca8fde982c3f61a689d5413de6896f62dde4fac4742de69da3fd0ca3063c0425b7532d750927bcf286c6", 0x65}, {&(0x7f0000000c80)="86137366f116a5796c1687dce74acb0ca06fd34802427b0703098181a8c4618532fc656d83275fa42e84425e59bbf50bfbeb7ceaf0adc18a26e10e609c964574fdfa6b0e7f22f55c76839d28385422ec4581ef325d0aa815042d4822873c9cbb6832362219c0383b8088", 0x6a}, {&(0x7f0000000d00)="48c04e47bc82896890835becd4b7d576d3df72b2224e7300e8d337f942cf08b318c2046615a3142fb2d8659484b9020b2192c71c7ad778fbf9e347cfa4947968ea41ff8db9db0b58091d75d58783ef3118b321d301", 0x55}], 0x3, 0x0, 0x0, 0x4000000}}], 0x4, 0x4048040) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}]}, 0x2c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4000}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4000}}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) gettid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x4000, @fd_index=0x4, 0x3, 0x0, 0x0, 0xa, 0x0, {0x2}}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x200, 0x10800) socket$nl_xfrm(0x10, 0x3, 0x6) 10m57.93830565s ago: executing program 2 (id=1656): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r2, &(0x7f0000000200), 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x2, 0x4}}, 0x20) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r2, &(0x7f0000000200)="240000001a00c93d214f0000000000000004018020200000100b081e0100000069e54eab", 0x24) ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10m55.734074629s ago: executing program 2 (id=1662): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x7e, 0x5}) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000006400), 0x7, 0x28080) recvmmsg(r1, &(0x7f0000006180)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/137, 0x89}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000006440)=""/258, 0x102}, {&(0x7f0000000380)=""/174, 0xae}], 0x4, &(0x7f0000000680)=""/66, 0x42}, 0x4}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/38, 0x26}], 0x1, &(0x7f0000000840)=""/197, 0xc5}, 0xfffffffe}, {{&(0x7f0000000940)=@pppol2tpin6, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/26, 0x1a}, {&(0x7f0000000a00)=""/10, 0xa}, {&(0x7f0000000a40)=""/16, 0x10}], 0x3, &(0x7f0000000ac0)=""/219, 0xdb}, 0x8}, {{&(0x7f0000000bc0)=@tipc=@name, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f0000000d40)=""/61, 0x3d}], 0x2, &(0x7f0000000dc0)=""/172, 0xac}, 0x2fd}, {{&(0x7f0000001f40)=@nfc, 0x80, &(0x7f0000002540)=[{&(0x7f0000001fc0)=""/179, 0xb3}, {&(0x7f0000000e80)=""/47, 0x2f}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/249, 0xf9}, {&(0x7f0000002200)=""/155, 0x9b}, {&(0x7f0000002440)=""/235, 0xeb}, {&(0x7f00000022c0)=""/101, 0x65}], 0x7, &(0x7f00000025c0)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/6, 0x6}], 0x1, &(0x7f0000002700)=""/15, 0xf}, 0x6}, {{0x0, 0x0, &(0x7f0000003b80), 0x0, &(0x7f0000003c40)=""/66, 0x42}, 0x5}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000003cc0)=""/199, 0xc7}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/125, 0x7d}], 0x3, &(0x7f0000004e80)=""/28, 0x1c}, 0x5}, {{&(0x7f0000004ec0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000004f40)=""/37, 0x25}, {&(0x7f0000004f80)=""/44, 0x2c}, {&(0x7f0000004fc0)=""/172, 0xac}, {&(0x7f0000005080)=""/78, 0x4e}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x5}, 0x7fff}], 0x9, 0x100, &(0x7f00000063c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 10m54.867355011s ago: executing program 2 (id=1667): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x5, 0x8, 0x6, 0x1, 0x8, 0x5]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207baff8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x4c, r5, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x40067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0xc8, r5, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xee, 0x69}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0x81}]}, @NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="be905fafd436cda8843a7c42ab2b42ac63"}, {0x17, 0x0, @random="5b87359abd27c98808c36ac0af5b964f2d1bc0"}, {0x10, 0x0, @random="a7b7e824bfb87231002d18f5"}, {0x17, 0x0, @random="4462d411f27ca1d32222b30a4b3d59ebebd58f"}]}]}, 0xc8}}, 0x4000000) r7 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r7, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10m54.486360507s ago: executing program 2 (id=1672): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000000)={0x2, 0x10000, 0xfffffffffffffffb}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 10m53.978011222s ago: executing program 32 (id=1672): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000000)={0x2, 0x10000, 0xfffffffffffffffb}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 6.583510598s ago: executing program 5 (id=4021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd7000fcdbdf251600000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 5.973121379s ago: executing program 5 (id=4035): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 5.704434118s ago: executing program 5 (id=4036): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001440)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x6}}, 0x30) 4.420949249s ago: executing program 4 (id=4055): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.282400341s ago: executing program 4 (id=4057): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) bind$packet(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x8, 0x0) 4.203340153s ago: executing program 4 (id=4059): open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000", @ANYRES32], 0x1c}}, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000040)=0x80000001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x80012000, 0x0) 4.090510866s ago: executing program 5 (id=4060): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.397530151s ago: executing program 5 (id=4065): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x10080000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc000000000000000001965c8e47927b7c"], 0x28}, 0x40c0) 2.836495123s ago: executing program 5 (id=4074): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) fchdir(0xffffffffffffffff) setpriority(0x2, 0x0, 0x2) 2.559413491s ago: executing program 4 (id=4081): openat$kvm(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffffffffffff, 0xd71}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffb, 0x3fc}, 0x80, 0x3506, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2.46873883s ago: executing program 3 (id=4083): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x206040, 0x0) execveat(r0, &(0x7f0000000680)='\x00', 0x0, 0x0, 0x1000) 2.426103647s ago: executing program 0 (id=4084): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000280)="1323", 0x2) 2.37088908s ago: executing program 0 (id=4085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x4b, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0x3}}, 0x7, @random=0x3, 0x100, @void, @val, @void, @void, @val={0x6, 0x2, 0xad}, @val={0x5, 0x3, {0x2, 0x8e, 0x6}}, @val={0x25, 0x3, {0x0, 0x80, 0xe}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0xd, 0x3b, 0xd}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.290501219s ago: executing program 1 (id=4086): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400"/43], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.290029279s ago: executing program 0 (id=4087): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d00), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000840) 2.28683923s ago: executing program 3 (id=4088): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) 2.208066847s ago: executing program 1 (id=4089): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x8070bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xe, 0xffff}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c810) 2.13451518s ago: executing program 3 (id=4090): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r2, 0xc4fc9e906872338b, 0x70bd25, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4000000, 0xfffffffa}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) 2.128157662s ago: executing program 0 (id=4091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.055616988s ago: executing program 1 (id=4092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x181082, 0x7b) write$cgroup_subtree(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) 1.998483486s ago: executing program 3 (id=4093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="f00700000100000099"]) 1.998267293s ago: executing program 0 (id=4094): read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) 1.882180293s ago: executing program 3 (id=4095): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fanotify_init(0x0, 0x0) 1.847902353s ago: executing program 0 (id=4096): keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) listen(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 1.782529166s ago: executing program 1 (id=4097): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x1b}, @timestamp={0x44, 0x4, 0xbf, 0x0, 0x2}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.666647046s ago: executing program 1 (id=4098): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62442, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 1.461298409s ago: executing program 1 (id=4099): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x20000000002d5, 0x2, 0x6], [0x9d8, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0x2, 0x401, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x3, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0xd85, 0x8, 0x9, 0x6aa, 0x102, 0x3ff, 0x100, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x8, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x1000000007, 0x1, 0x8000000000000002, 0x2000000009, 0x8, 0x0, 0x0, 0x6, 0x7, 0x100000002, 0x4, 0x693, 0x7, 0x3, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x2068d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x1, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 346.477838ms ago: executing program 4 (id=4100): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x2, 0x4000, 0x8, r2, 0xf}) 64.385095ms ago: executing program 4 (id=4101): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d96d04ca1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d459dac00000000000000001b00e750a1c8000030a6b2bd991894e400", "90be8b1c5512406c7f00", [0x4, 0x8]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 0s ago: executing program 3 (id=4102): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) kernel console output (not intermixed with test programs): b 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1233.574393][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1233.744689][T18801] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1233.779582][T13107] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1233.808107][ C0] usb 5-1: ath9k_htc: invalid pkt_len (fd7e) [ 1233.983797][T21003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.000436][T21003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.009668][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.018804][ T5819] usb 6-1: USB disconnect, device number 32 [ 1234.032432][ T5819] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1234.035515][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.043927][ T5819] ir_usb 6-1:0.126: device disconnected [ 1234.149478][T13107] usb 2-1: Using ep0 maxpacket: 8 [ 1234.163909][T13107] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1234.194578][T13107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.228888][T13107] usb 2-1: Product: syz [ 1234.246178][T13107] usb 2-1: Manufacturer: syz [ 1234.260706][T13107] usb 2-1: SerialNumber: syz [ 1234.288920][T13107] usb 2-1: config 0 descriptor?? [ 1234.452085][T21026] netlink: 'syz.4.3571': attribute type 1 has an invalid length. [ 1234.517566][T13107] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1234.617019][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1234.631715][ T9] ath9k_htc: Failed to initialize the device [ 1234.733628][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 1234.926130][T13107] gspca_sunplus: reg_w_riv err -71 [ 1234.940975][T13107] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1234.976899][T13107] usb 2-1: USB disconnect, device number 44 [ 1235.163990][ T9713] usb 5-1: USB disconnect, device number 10 [ 1235.958289][T21045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1236.022615][T21040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1236.065428][T21043] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1236.125665][T21043] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1236.239329][T13107] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1236.339316][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1236.438568][T13107] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1236.478847][T13107] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1236.509430][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1236.518807][ T9] usb 5-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1236.551844][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1236.561522][T13107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1236.581922][ T9] usb 5-1: config 1 has no interface number 1 [ 1236.588175][T13107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1236.602265][ T9] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.617415][T13107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1236.635659][T13107] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1236.646010][T13107] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1236.654901][T13107] usb 2-1: Product: syz [ 1236.660456][T13107] usb 2-1: Manufacturer: syz [ 1236.665798][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1236.675019][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.695342][T13107] cdc_wdm 2-1:1.0: skipping garbage [ 1236.701491][T13107] cdc_wdm 2-1:1.0: skipping garbage [ 1236.706714][ T9] usb 5-1: Product: syz [ 1236.710995][ T9] usb 5-1: Manufacturer: syz [ 1236.716811][T13107] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1236.735634][ T9] usb 5-1: SerialNumber: syz [ 1236.743352][T13107] cdc_wdm 2-1:1.0: Unknown control protocol [ 1236.933612][T21042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.962400][T21042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.995266][ T981] usb 2-1: USB disconnect, device number 45 [ 1237.110835][T21058] netlink: 'syz.3.3578': attribute type 2 has an invalid length. [ 1237.129038][T21059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1237.179238][T21058] netlink: 'syz.3.3578': attribute type 7 has an invalid length. [ 1237.189712][T21059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1237.224776][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1237.607121][T21071] fuse: Unknown parameter 'nd' [ 1237.673457][T21074] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1237.713893][T21074] program syz.1.3584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1237.748506][T21074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.756354][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.822517][T21074] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1237.835730][T21074] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1237.858674][T21072] netlink: 'syz.3.3582': attribute type 3 has an invalid length. [ 1237.866985][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 1238.009258][T18801] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1238.039523][ T5898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1238.169278][T18801] usb 6-1: Using ep0 maxpacket: 32 [ 1238.176785][T18801] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1238.188691][T18801] usb 6-1: config 0 has no interface number 0 [ 1238.195040][T18801] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.206312][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1238.211721][T18801] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1238.222013][ T5898] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1238.230859][ T5898] usb 2-1: config 179 has no interface number 0 [ 1238.241539][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1238.259441][T18801] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1238.271583][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1238.283857][T18801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.292240][T18801] usb 6-1: Product: syz [ 1238.296847][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1238.308337][T18801] usb 6-1: Manufacturer: syz [ 1238.315055][T18801] usb 6-1: SerialNumber: syz [ 1238.330223][ T5898] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1238.343369][ T5898] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1238.357820][T18801] usb 6-1: config 0 descriptor?? [ 1238.364946][ T5898] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1238.381333][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.407351][T21078] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1238.656390][ T5898] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input106 [ 1238.879804][T18801] appletouch 6-1:0.85: Failed to request geyser raw mode [ 1238.887578][T18801] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1238.922009][T18801] usb 6-1: USB disconnect, device number 33 [ 1239.032401][ T9] usb 5-1: cannot find UAC_HEADER [ 1239.097134][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1239.120272][ T9] usb 5-1: USB disconnect, device number 11 [ 1239.156218][ T7367] udevd[7367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.308227][T21084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1239.314805][T21084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1239.337057][T21084] vhci_hcd vhci_hcd.0: Device attached [ 1239.402115][T21084] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 1239.422379][T21084] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 1239.447896][ T9] usb 2-1: USB disconnect, device number 46 [ 1239.447965][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1239.462275][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1239.569340][T18801] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1239.603910][T21094] binder: 21093:21094 unknown command 0 [ 1239.609821][T21094] binder: 21093:21094 ioctl c0306201 200000000080 returned -22 [ 1240.052066][ T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1240.179793][T21085] vhci_hcd: connection reset by peer [ 1240.191645][T14248] vhci_hcd: stop threads [ 1240.195946][T14248] vhci_hcd: release socket [ 1240.203903][T14248] vhci_hcd: disconnect device [ 1240.233138][ T9] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 1240.247385][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.281667][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1240.318902][ T9] usb 2-1: config 0 has no interface number 0 [ 1240.331414][ T9] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1240.363768][ T9] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1240.391056][ T9] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1240.429351][ T9] usb 2-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1240.453858][ T9] usb 2-1: config 0 interface 206 has no altsetting 0 [ 1240.472439][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1240.493997][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.512324][ T9] usb 2-1: Product: syz [ 1240.521758][ T9] usb 2-1: Manufacturer: syz [ 1240.526407][ T9] usb 2-1: SerialNumber: syz [ 1240.544128][ T9] usb 2-1: config 0 descriptor?? [ 1240.587521][T21096] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1240.837099][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1240.874088][T21123] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1240.920564][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1240.984966][ T9] usb 2-1: USB disconnect, device number 47 [ 1241.210076][ T7479] udevd[7479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.273824][ T5898] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1241.452148][T21125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.476552][T21125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.691038][T21128] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1242.369839][ T9713] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1242.510289][ T9713] usb 4-1: device descriptor read/64, error -71 [ 1242.569285][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1242.719969][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 1242.720591][T13107] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1242.728309][ T5925] usb 5-1: config 1 has an invalid interface number: 154 but max is 0 [ 1242.741648][ T5925] usb 5-1: config 1 has no interface number 0 [ 1242.747795][ T5925] usb 5-1: too many endpoints for config 1 interface 154 altsetting 236: 151, using maximum allowed: 30 [ 1242.759319][ T9713] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1242.767497][ T5925] usb 5-1: config 1 interface 154 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 1242.781630][ T5925] usb 5-1: config 1 interface 154 has no altsetting 0 [ 1242.791437][ T5925] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1242.800723][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.808793][ T5925] usb 5-1: Product: syz [ 1242.813125][ T5925] usb 5-1: Manufacturer: syz [ 1242.817764][ T5925] usb 5-1: SerialNumber: syz [ 1242.879236][T13107] usb 2-1: Using ep0 maxpacket: 16 [ 1242.887906][T13107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1242.897285][T13107] usb 2-1: config 2 has an invalid interface number: 9 but max is 0 [ 1242.905453][T13107] usb 2-1: config 2 has no interface number 0 [ 1242.911806][T13107] usb 2-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 1242.919344][ T9713] usb 4-1: device descriptor read/64, error -71 [ 1242.928219][T13107] usb 2-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1242.939960][T13107] usb 2-1: config 2 interface 9 has no altsetting 0 [ 1242.949597][T13107] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 1242.958805][T13107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.967070][T13107] usb 2-1: Product: syz [ 1242.972491][T13107] usb 2-1: Manufacturer: syz [ 1242.977170][T13107] usb 2-1: SerialNumber: syz [ 1242.985817][T21149] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1243.028632][ T5925] visor 5-1:1.154: Handspring Visor / Palm OS converter detected [ 1243.039772][ T9713] usb usb4-port1: attempt power cycle [ 1243.050365][ T5925] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1243.067178][ T5925] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1243.088685][ T5925] usb 5-1: USB disconnect, device number 12 [ 1243.105973][ T5925] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1243.125477][ T5925] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1243.140130][ T5925] visor 5-1:1.154: device disconnected [ 1243.212054][T13107] pn533_usb 2-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 1243.223758][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1243.233046][T13107] usb 2-1: USB disconnect, device number 48 [ 1243.243595][T21154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1243.409706][ T9713] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1243.440321][ T9713] usb 4-1: device descriptor read/8, error -71 [ 1243.689781][ T9713] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1243.755256][ T9713] usb 4-1: device descriptor read/8, error -71 [ 1243.949814][ T9713] usb usb4-port1: unable to enumerate USB device [ 1244.062388][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.068842][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.670668][T18801] vhci_hcd: vhci_device speed not set [ 1245.928224][T21182] delete_channel: no stack [ 1246.537579][T21205] netlink: 'syz.3.3612': attribute type 1 has an invalid length. [ 1246.951820][T13107] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1247.149319][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1247.301891][T13107] usb 6-1: Using ep0 maxpacket: 8 [ 1247.314461][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.328826][T13107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1247.338722][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1247.351811][T13107] usb 6-1: config 8 has an invalid interface number: 24 but max is 0 [ 1247.403328][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1247.414559][T13107] usb 6-1: config 8 has no interface number 0 [ 1247.430677][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.442232][T13107] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1247.505607][ T9] usb 2-1: Product: syz [ 1247.514000][ T9] usb 2-1: Manufacturer: syz [ 1247.526093][T13107] usb 6-1: config 8 interface 24 has no altsetting 0 [ 1247.537026][ T9] usb 2-1: SerialNumber: syz [ 1247.563276][T13107] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1247.767867][T13107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.911565][T13107] usb 6-1: Product: syz [ 1247.961441][T13107] usb 6-1: Manufacturer: syz [ 1247.999721][T13107] usb 6-1: SerialNumber: syz [ 1248.018889][ T9] usb 2-1: 0:2 : does not exist [ 1248.046845][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1248.112279][ T9] usb 2-1: USB disconnect, device number 49 [ 1248.121603][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 1248.237202][ T7367] udevd[7367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.359658][T21232] netlink: 'syz.0.3622': attribute type 3 has an invalid length. [ 1248.411023][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 1249.941805][T21242] delete_channel: no stack [ 1249.977732][T13107] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1250.031409][T13107] usb 6-1: USB disconnect, device number 35 [ 1250.535152][T21267] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1250.778044][T21271] fuse: Unknown parameter 'mask' [ 1251.109315][T12761] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1251.289575][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1251.313227][T12761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1251.323926][T12761] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1251.350842][T12761] usb 2-1: config 2 has an invalid interface number: 194 but max is 1 [ 1251.380159][T12761] usb 2-1: config 2 has no interface number 0 [ 1251.386658][T12761] usb 2-1: config 2 has no interface number 1 [ 1251.400882][T12761] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1251.412460][T12761] usb 2-1: config 2 interface 194 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1251.423428][T12761] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0x85 has an invalid bInterval 45, changing to 9 [ 1251.435147][T12761] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0x85 has invalid maxpacket 33649, setting to 1024 [ 1251.449855][T12761] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1251.461127][T12761] usb 2-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1251.489412][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1251.495969][T12761] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1251.511065][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1251.524056][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.534321][ T9] usb 4-1: Product: syz [ 1251.534441][T12761] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1251.555987][ T9] usb 4-1: Manufacturer: syz [ 1251.561694][T12761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.571931][ T9] usb 4-1: SerialNumber: syz [ 1251.581935][T12761] usb 2-1: Product: syz [ 1251.602854][T12761] usb 2-1: Manufacturer: syz [ 1251.613559][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1251.622427][T12761] usb 2-1: SerialNumber: syz [ 1251.629625][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 1251.710588][T21284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1251.967013][T21287] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1252.521784][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1252.528621][ T9] r8152-cfgselector 4-1: bad CDC descriptors [ 1252.538550][ T9] r8152-cfgselector 4-1: USB disconnect, device number 111 [ 1253.739407][ T981] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1253.754370][T21310] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3643'. [ 1253.909799][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 1253.917229][ T981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.933598][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.983708][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1254.049247][ T981] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1254.058965][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.072476][T12761] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.194/input/input108 [ 1254.126457][ C0] xpad 2-1:2.194: xpad_irq_in - usb_submit_urb failed with result -1 [ 1254.153017][T12761] usb 2-1: USB disconnect, device number 50 [ 1254.153081][ C0] xpad 2-1:2.194: xpad_irq_in - usb_submit_urb failed with result -19 [ 1254.198349][ T981] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1254.215348][ T981] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1254.232362][ T981] usb 6-1: Manufacturer: syz [ 1254.261352][ T981] usb 6-1: config 0 descriptor?? [ 1254.714007][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.789649][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.816669][T21311] delete_channel: no stack [ 1254.821297][ T981] rc_core: IR keymap rc-hauppauge not found [ 1254.839351][ T981] Registered IR keymap rc-empty [ 1254.868398][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1254.919810][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1254.960136][ T981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1255.009469][ T981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input109 [ 1255.094182][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.129560][T13107] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1255.143995][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.179350][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.226955][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.285785][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.296180][T13107] usb 2-1: device descriptor read/64, error -71 [ 1255.356929][T21326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.390498][T21326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.423245][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.469414][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.509691][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.569429][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.610414][ T981] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1255.643490][T13107] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1255.677704][ T981] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1255.691903][ T981] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1255.829310][T13107] usb 2-1: device descriptor read/64, error -71 [ 1255.939526][T13107] usb usb2-port1: attempt power cycle [ 1256.279380][T13107] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1256.314822][T13107] usb 2-1: device descriptor read/8, error -71 [ 1256.560782][T13107] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1256.610137][T13107] usb 2-1: device descriptor read/8, error -71 [ 1256.720224][T13107] usb usb2-port1: unable to enumerate USB device [ 1257.623730][ T5925] usb 6-1: USB disconnect, device number 36 [ 1258.469356][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1258.619250][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1258.629366][T21373] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1258.629366][T21373] The task syz.5.3660 (21373) triggered the difference, watch for misbehavior. [ 1258.631112][ T9] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 1258.660080][ T9] usb 2-1: config 253 has no interface number 0 [ 1258.666628][ T9] usb 2-1: config 253 interface 184 has no altsetting 0 [ 1258.691803][ T9] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1258.701021][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.709101][ T9] usb 2-1: Product: syz [ 1258.715501][ T9] usb 2-1: Manufacturer: syz [ 1258.720562][ T9] usb 2-1: SerialNumber: syz [ 1258.734566][ T9] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 1258.929412][ T981] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1258.945570][ T9] usb 2-1: USB disconnect, device number 55 [ 1259.091497][ T981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1259.107156][ T981] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 1259.124417][ T981] usb 6-1: config 0 has no interface number 0 [ 1259.137265][ T981] usb 6-1: config 0 interface 238 has no altsetting 0 [ 1259.157431][ T981] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 1259.177102][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.189333][ T981] usb 6-1: Product: syz [ 1259.193816][ T981] usb 6-1: Manufacturer: syz [ 1259.198600][ T981] usb 6-1: SerialNumber: syz [ 1259.206473][ T981] usb 6-1: config 0 descriptor?? [ 1259.344178][T21366] delete_channel: no stack [ 1259.999299][ T5925] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1260.169300][ T5925] usb 2-1: device descriptor read/64, error -71 [ 1260.419245][ T5925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1260.469368][ T5898] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1260.570336][ T5925] usb 2-1: device descriptor read/64, error -71 [ 1260.619347][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1260.685059][ T5925] usb usb2-port1: attempt power cycle [ 1260.871763][ T5898] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1261.019340][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1261.039286][ T5925] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1261.059972][ T5925] usb 2-1: device descriptor read/8, error -71 [ 1261.130377][ T5898] usb usb4-port1: attempt power cycle [ 1261.299312][ T5925] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1261.320533][ T5925] usb 2-1: device descriptor read/8, error -71 [ 1261.429834][ T5925] usb usb2-port1: unable to enumerate USB device [ 1261.469291][ T5898] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1261.489875][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1261.556182][ T981] gspca_main: spca501-2.14.0 probing 1776:501c [ 1261.591644][ T981] gspca_spca501: reg write: error -71 [ 1261.603117][ T981] spca501 6-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 1261.612206][ T981] spca501 6-1:0.238: probe with driver spca501 failed with error -22 [ 1261.627218][ T981] usb 6-1: USB disconnect, device number 37 [ 1261.779928][ T5898] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1261.830617][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1261.951696][ T5898] usb usb4-port1: unable to enumerate USB device [ 1262.092952][T21437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3676'. [ 1262.194451][T21439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1262.349565][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1262.549313][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1262.598507][ T9] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1262.659477][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.676559][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1262.695557][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.724711][ T9] usb 5-1: Product: syz [ 1262.734334][ T9] usb 5-1: Manufacturer: syz [ 1262.752484][ T9] usb 5-1: SerialNumber: syz [ 1262.779231][ T9] usb 5-1: config 0 descriptor?? [ 1263.175141][T21446] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0x0000000000000003GǮX lCypƿf>ꨞYȖCpptm5%2[6KVf' [ 1263.198469][T21446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3680'. [ 1263.429428][ T5925] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1263.625932][T21449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1263.652653][T21450] : entered promiscuous mode [ 1263.657519][T21450] bond_slave_1: entered promiscuous mode [ 1263.671105][T21450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1263.685920][ T5925] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1263.695931][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.710939][T21450] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1263.720001][ T5925] usb 2-1: Product: syz [ 1263.724506][ T5925] usb 2-1: Manufacturer: syz [ 1263.844559][ T5925] usb 2-1: SerialNumber: syz [ 1263.853975][T21451] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1263.871904][ T5925] usb 2-1: config 0 descriptor?? [ 1263.877102][ T9713] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1263.898554][ T5925] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1264.049233][ T9713] usb 4-1: Using ep0 maxpacket: 8 [ 1264.058876][ T9713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1264.073743][ T9713] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1264.085004][ T9713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.093571][ T9713] usb 4-1: Product: syz [ 1264.097898][ T9713] usb 4-1: Manufacturer: syz [ 1264.103020][ T9713] usb 4-1: SerialNumber: syz [ 1264.286230][T21458] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1264.335366][T21453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.346786][T21453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.363256][ T9713] usb 4-1: selecting invalid altsetting 1 [ 1264.375900][ T9713] catc 4-1:8.0: Can't set altsetting 1. [ 1264.382886][ T9713] catc 4-1:8.0: probe with driver catc failed with error -5 [ 1264.399788][ T9713] usb 4-1: USB disconnect, device number 116 [ 1264.738479][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.747529][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.756478][ T9713] usb 2-1: USB disconnect, device number 60 [ 1264.835294][T21469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.849950][T21469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.143356][T21473] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1265.266226][ T9713] usb 5-1: USB disconnect, device number 13 [ 1265.622851][T21490] loop6: detected capacity change from 0 to 7 [ 1265.635754][T21490] loop6: [POWERTEC] p1 p2 [ 1265.646070][T21490] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 1265.663842][T21490] loop6: p2 start 1680801792 is beyond EOD, truncated [ 1265.681865][T21492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1265.709703][T21491] random: crng reseeded on system resumption [ 1265.762971][ T7367] udevd[7367]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1266.709591][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'. [ 1266.732164][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3700'. [ 1266.919879][T21517] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1266.941431][T21517] bond5 (unregistering): Released all slaves [ 1267.105155][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1267.467602][ T30] audit: type=1326 audit(1760455674.684:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21521 comm="syz.4.3703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceaa98eec9 code=0x0 [ 1267.802951][T21534] fuse: Bad value for 'fd' [ 1267.808547][T21534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1268.397171][T21544] fuse: Invalid rootmode [ 1268.429117][T21546] @: renamed from vlan0 (while UP) [ 1268.829453][T13107] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1268.910789][T21537] delete_channel: no stack [ 1269.130269][T13107] usb 6-1: Using ep0 maxpacket: 32 [ 1269.144797][T13107] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1269.199459][T13107] usb 6-1: config 0 has no interface number 0 [ 1269.205746][T13107] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.217860][T13107] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1269.232356][T13107] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1269.250895][T13107] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1269.269368][T12761] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1269.277235][T13107] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1269.322092][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1269.339898][T13107] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.352142][T13107] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1269.366332][T13107] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1269.380322][T13107] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1269.411357][T13107] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1269.427965][T13107] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1269.437853][T13107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.448313][T13107] usb 6-1: Product: syz [ 1269.453635][T13107] usb 6-1: Manufacturer: syz [ 1269.458775][T13107] usb 6-1: SerialNumber: syz [ 1269.475022][T13107] usb 6-1: config 0 descriptor?? [ 1269.496177][T12761] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1269.520491][T12761] usb 4-1: config 1 has no interface number 0 [ 1269.527356][T21548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1269.536784][T12761] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1269.547276][T12761] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1269.556527][T12761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.566824][T12761] usb 4-1: Product: syz [ 1269.571511][T21559] mac80211_hwsim hwsim32 : renamed from wlan1 (while UP) [ 1269.573501][T12761] usb 4-1: Manufacturer: syz [ 1269.579772][T21548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1269.599714][T12761] usb 4-1: SerialNumber: syz [ 1269.631467][T13107] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1269.659839][T13107] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1269.696979][T13107] scsi host1: microtekX6 [ 1270.092833][T21548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.104343][T21548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.147521][T13107] usb 6-1: USB disconnect, device number 38 [ 1270.212675][T21575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3720'. [ 1270.462202][T12761] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1270.473835][T12761] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1270.492986][T12761] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 1270.509268][ T5819] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1270.559801][ T9] usb 2-1: device descriptor read/64, error -71 [ 1270.669444][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 1270.677056][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.687776][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1270.699332][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1270.710503][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1270.722773][T21553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.729276][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.736839][T21553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.754609][ T5819] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1270.768180][ T5819] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1270.778430][ T5819] usb 5-1: Manufacturer: syz [ 1270.787803][ T5819] usb 5-1: config 0 descriptor?? [ 1270.799567][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1270.802847][ T5898] usb 4-1: USB disconnect, device number 117 [ 1270.825411][ T5898] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1270.912530][ T5898] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1270.922840][ T5898] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1270.934250][ T5898] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1270.959331][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1270.973854][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1270.988976][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1270.999918][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1271.012302][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.035947][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1271.041741][T21591] FAULT_INJECTION: forcing a failure. [ 1271.041741][T21591] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.058620][T21591] CPU: 1 UID: 0 PID: 21591 Comm: syz.5.3722 Not tainted syzkaller #0 PREEMPT(full) [ 1271.058651][T21591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1271.058667][T21591] Call Trace: [ 1271.058676][T21591] [ 1271.058687][T21591] dump_stack_lvl+0x189/0x250 [ 1271.058717][T21591] ? __pfx____ratelimit+0x10/0x10 [ 1271.058753][T21591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1271.058776][T21591] ? __pfx__printk+0x10/0x10 [ 1271.058805][T21591] ? __pfx___might_resched+0x10/0x10 [ 1271.058836][T21591] ? fs_reclaim_acquire+0x7d/0x100 [ 1271.058868][T21591] should_fail_ex+0x414/0x560 [ 1271.058909][T21591] should_failslab+0xa8/0x100 [ 1271.058940][T21591] __kmalloc_noprof+0xcb/0x7f0 [ 1271.058963][T21591] ? tomoyo_encode+0x28b/0x550 [ 1271.058995][T21591] tomoyo_encode+0x28b/0x550 [ 1271.059027][T21591] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1271.059063][T21591] ? tomoyo_domain+0xd9/0x130 [ 1271.059096][T21591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1271.059135][T21591] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1271.059171][T21591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1271.059246][T21591] ? __fget_files+0x2a/0x420 [ 1271.059279][T21591] ? __fget_files+0x3a0/0x420 [ 1271.059305][T21591] ? __fget_files+0x2a/0x420 [ 1271.059337][T21591] security_file_ioctl+0xcb/0x2d0 [ 1271.059372][T21591] __se_sys_ioctl+0x47/0x170 [ 1271.059396][T21591] do_syscall_64+0xfa/0xfa0 [ 1271.059418][T21591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1271.059440][T21591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.059462][T21591] ? clear_bhb_loop+0x60/0xb0 [ 1271.059490][T21591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.059512][T21591] RIP: 0033:0x7f29b4d8eec9 [ 1271.059533][T21591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.059552][T21591] RSP: 002b:00007f29b5c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.059575][T21591] RAX: ffffffffffffffda RBX: 00007f29b4fe6090 RCX: 00007f29b4d8eec9 [ 1271.059591][T21591] RDX: 00002000000001c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 1271.059605][T21591] RBP: 00007f29b5c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.059620][T21591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.059632][T21591] R13: 00007f29b4fe6128 R14: 00007f29b4fe6090 R15: 00007f29b510fa28 [ 1271.059667][T21591] [ 1271.068435][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.074340][T21591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1271.139279][ T5819] rc_core: IR keymap rc-hauppauge not found [ 1271.359254][ T5819] Registered IR keymap rc-empty [ 1271.364809][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.398116][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.432889][ T5819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1271.451987][ T5819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input110 [ 1271.476189][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.529461][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.542694][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 1271.548300][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1271.562845][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.589446][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.609961][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.630664][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.659313][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.679523][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.704261][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.729407][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.749112][ T9713] usb 2-1: USB disconnect, device number 62 [ 1271.749331][ T5819] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1271.781855][ T5819] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1271.804210][ T5819] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1271.858722][ T5819] usb 5-1: USB disconnect, device number 14 [ 1272.043492][T21619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1272.123441][T21619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1272.299366][ T5819] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1272.409533][ T9713] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1272.451322][ T5819] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1272.468619][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.489114][ T5819] usb 5-1: config 0 descriptor?? [ 1272.578453][T21610] delete_channel: no stack [ 1273.100856][T21642] netlink: 'syz.0.3731': attribute type 10 has an invalid length. [ 1273.112399][T21642] macvlan1: entered allmulticast mode [ 1273.140285][T21642] veth1_vlan: entered allmulticast mode [ 1273.171667][T21642] team0: Port device macvlan1 added [ 1273.224108][ T5819] usbhid 5-1:0.0: can't add hid device: -71 [ 1273.243919][ T5819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1273.292561][ T5819] usb 5-1: USB disconnect, device number 15 [ 1273.542013][T21652] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 1274.191286][T21655] netlink: 'syz.4.3734': attribute type 39 has an invalid length. [ 1275.039334][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1275.236170][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1275.331884][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1275.360729][ T9] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 1275.369267][ T9] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1275.383840][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.412317][ T9] usb 4-1: config 7 has no interface number 0 [ 1275.419056][ T9] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 1275.459202][ T9] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 1275.470617][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1275.489356][ T5925] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1275.497188][ T9] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1275.540306][ T9] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1275.560748][ T9] usb 4-1: config 7 interface 128 has no altsetting 0 [ 1275.599826][ T9] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1275.609576][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.617596][ T9] usb 4-1: Product: syz [ 1275.629229][ T9] usb 4-1: Manufacturer: syz [ 1275.639873][ T9] usb 4-1: SerialNumber: syz [ 1275.662859][ T5925] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 1275.672582][ T5925] usb 5-1: config 0 has no interface number 0 [ 1275.681741][ T5925] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 1275.699395][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.707452][ T5925] usb 5-1: Product: syz [ 1275.712717][T21659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1275.744980][ T5925] usb 5-1: Manufacturer: syz [ 1275.759622][ T5925] usb 5-1: SerialNumber: syz [ 1275.786003][ T5925] usb 5-1: config 0 descriptor?? [ 1276.038377][ T5925] gspca_main: spca501-2.14.0 probing 040a:0002 [ 1276.077111][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.161005][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 1276.406070][ T9] usb 4-1: USB disconnect, device number 118 [ 1276.802932][T21690] delete_channel: no stack [ 1277.205974][T21701] bond3: entered allmulticast mode [ 1277.463907][T21712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1277.474172][T21712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1277.703789][ T5925] gspca_spca501: reg write: error -71 [ 1277.711657][ T5925] spca501 5-1:0.9: Reg write failed for 0x00,0x00,0x08 [ 1277.720062][ T5925] spca501 5-1:0.9: probe with driver spca501 failed with error -22 [ 1277.736746][ T5925] usb 5-1: USB disconnect, device number 16 [ 1277.749621][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1277.900373][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1277.913206][ T24] usb 2-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1277.924203][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1277.940418][ T24] usb 2-1: config 1 has no interface number 1 [ 1277.947159][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.977563][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.999392][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.009221][ T24] usb 2-1: Product: syz [ 1278.013464][ T24] usb 2-1: Manufacturer: syz [ 1278.018182][ T24] usb 2-1: SerialNumber: syz [ 1278.287376][T21732] netlink: 'syz.3.3755': attribute type 1 has an invalid length. [ 1278.549309][ T9713] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1278.631178][T21739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1278.739880][ T9713] usb 5-1: Using ep0 maxpacket: 32 [ 1278.750603][ T9713] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1278.759010][ T9713] usb 5-1: config 0 has no interface number 0 [ 1278.765741][ T9713] usb 5-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 1278.777664][ T9713] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1278.790430][ T9713] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1278.813336][ T9713] usb 5-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 1278.827042][ T9713] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1278.837579][ T9713] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1278.848699][ T9713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.857690][ T9713] usb 5-1: Product: syz [ 1278.862674][ T9713] usb 5-1: Manufacturer: syz [ 1278.867339][ T9713] usb 5-1: SerialNumber: syz [ 1278.883637][ T9713] usb 5-1: config 0 descriptor?? [ 1278.894723][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1278.908441][ T9713] f81534 5-1:0.12: unsupported endpoint max packet size [ 1279.049273][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1279.057037][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1279.067777][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.078283][ T9] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1279.093379][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.102944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.124873][ T9] usb 4-1: Product: syz [ 1279.135172][ T9] usb 4-1: Manufacturer: syz [ 1279.144047][ T9] usb 4-1: SerialNumber: syz [ 1279.289822][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1279.303922][T21734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1279.913550][ T5819] usb 5-1: USB disconnect, device number 17 [ 1280.214528][T21760] netlink: 'syz.5.3764': attribute type 1 has an invalid length. [ 1280.419253][ T5819] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1280.431780][ T24] usb 2-1: cannot find UAC_HEADER [ 1280.520443][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1280.540713][ T24] usb 2-1: USB disconnect, device number 64 [ 1280.546518][ T9] usb 4-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 1280.580723][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 1280.589332][ T7367] udevd[7367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.592862][ T5819] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1280.663586][ T9] usb 4-1: USB disconnect, device number 119 [ 1280.680579][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.688634][ T5819] usb 5-1: Product: syz [ 1280.715561][ T5819] usb 5-1: Manufacturer: syz [ 1280.739308][ T5819] usb 5-1: SerialNumber: syz [ 1280.763338][ T5819] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1280.786450][ T5819] r8152-cfgselector 5-1: config 0 descriptor?? [ 1281.030090][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1281.222771][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1281.249301][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1281.265802][ T9] usb 4-1: config 0 has no interface number 0 [ 1281.284394][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1281.298783][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.321900][ T9] usb 4-1: Product: syz [ 1281.331730][ T9] usb 4-1: Manufacturer: syz [ 1281.345498][ T9] usb 4-1: SerialNumber: syz [ 1281.360279][ T9] usb 4-1: config 0 descriptor?? [ 1281.974890][T21790] syzkaller1: entered promiscuous mode [ 1281.981991][T21790] syzkaller1: entered allmulticast mode [ 1282.678262][T21800] tipc: Started in network mode [ 1282.685784][T21800] tipc: Node identity 32394fd91968, cluster identity 4711 [ 1282.693826][T21800] tipc: Enabled bearer , priority 0 [ 1282.702004][T21800] syzkaller0: entered promiscuous mode [ 1282.708748][T21800] syzkaller0: entered allmulticast mode [ 1282.729707][T21800] tipc: Resetting bearer [ 1282.745474][T21799] tipc: Resetting bearer [ 1282.772637][T21799] tipc: Disabling bearer [ 1283.156992][ T9] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1283.210556][ T9] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 1283.244654][ T9] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 1283.257259][ T9] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1283.273183][ T9] usb 4-1: USB disconnect, device number 120 [ 1283.430267][T21808] sctp: [Deprecated]: syz.3.3774 (pid 21808) Use of int in maxseg socket option. [ 1283.430267][T21808] Use struct sctp_assoc_value instead [ 1283.646673][ T5819] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1283.667290][ T5819] r8152-cfgselector 5-1: bad CDC descriptors [ 1283.701722][ T5819] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 1283.730283][T21810] [U]  [ 1283.971556][ T5819] IPVS: starting estimator thread 0... [ 1284.071425][T21822] IPVS: using max 36 ests per chain, 86400 per kthread [ 1284.199545][ T5925] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1284.362266][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1284.373613][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1284.385663][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1284.397804][ T5925] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 1284.411359][ T9713] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1284.421102][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1284.430444][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1284.438452][ T5925] usb 2-1: SerialNumber: syz [ 1284.447449][T21821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.462340][T21821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.472257][ T5925] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1284.574885][ T9713] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1284.593725][ T9713] usb 5-1: config 0 has no interface number 0 [ 1284.601498][ T9713] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1284.613372][ T9713] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1284.625021][ T9713] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1284.637076][ T9713] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1284.648831][ T9713] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1284.660629][ T9713] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1284.675446][ T9713] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1284.687164][T21814] tipc: Enabled bearer , priority 0 [ 1284.694310][ T9713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.703391][T21814] syzkaller0: entered promiscuous mode [ 1284.710477][T21814] syzkaller0: entered allmulticast mode [ 1284.717051][ T9713] usb 5-1: config 0 descriptor?? [ 1284.731386][T21820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1284.744290][T21820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1284.771001][ T9713] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1284.790162][T21814] tipc: Resetting bearer [ 1284.814518][ T5925] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1284.855685][ T5925] usb 2-1: USB disconnect, device number 65 [ 1284.986768][T21813] tipc: Resetting bearer [ 1285.081849][T21813] tipc: Disabling bearer [ 1285.106356][T21835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1285.196279][T21837] netlink: 'syz.3.3784': attribute type 21 has an invalid length. [ 1285.205128][T21837] netlink: 'syz.3.3784': attribute type 1 has an invalid length. [ 1285.214361][T21837] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1285.593867][T21846] ip6tnl0: left promiscuous mode [ 1285.599406][T21846] ip6tnl0: left allmulticast mode [ 1285.639220][T21846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.646461][T21846] bridge0: port 2(bridge_slave_1) entered listening state [ 1285.653972][T21846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.661207][T21846] bridge0: port 1(bridge_slave_0) entered listening state [ 1285.677108][T21848] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1285.820746][T21853] usb usb1: check_ctrlrecip: process 21853 (syz.3.3788) requesting ep 01 but needs 81 [ 1285.888767][T21846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.902847][T21856] loop7: detected capacity change from 0 to 7 [ 1286.112447][T21846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1286.423388][T21859] fuse: Bad value for 'fd' [ 1286.488298][T21856] Dev loop7: unable to read RDB block 7 [ 1286.501612][T21856] loop7: unable to read partition table [ 1286.507776][T21856] loop7: partition table beyond EOD, truncated [ 1286.515210][T21856] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1286.712805][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1286.997781][ T5925] usb 5-1: USB disconnect, device number 19 [ 1287.023211][ T5925] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1287.527658][T21870] loop6: detected capacity change from 0 to 524279808 [ 1287.632284][T21875] netlink: 'syz.1.3793': attribute type 12 has an invalid length. [ 1287.670332][T21872] loop6: detected capacity change from 524279808 to 1 [ 1287.771142][ T7367] Dev loop6: unable to read RDB block 1 [ 1287.783780][ T7367] loop6: unable to read partition table [ 1287.794297][ T7367] loop6: partition table beyond EOD, truncated [ 1287.827698][T21872] Dev loop6: unable to read RDB block 1 [ 1287.833530][T21872] loop6: unable to read partition table [ 1287.839684][T21872] loop6: partition table beyond EOD, truncated [ 1287.846627][T21872] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 1287.924416][T21878] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3790'. [ 1288.213217][T21881] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1288.219772][T21881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1288.233010][T21881] vhci_hcd vhci_hcd.0: Device attached [ 1288.243849][T21884] vhci_hcd: cannot find the pending unlink 127 [ 1288.409301][ T9713] vhci_hcd: vhci_device speed not set [ 1288.469272][ T9713] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 1288.479640][ T5925] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1288.669427][T21896] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1288.677340][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 1288.693052][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1288.710997][ T5925] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1288.719995][ T5925] usb 5-1: config 0 has no interface number 0 [ 1288.726339][ T5925] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1288.737694][ T5925] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1288.756835][ T5925] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1288.767706][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1288.778861][ T5925] usb 5-1: Manufacturer: ဉ [ 1288.787012][ T5925] usb 5-1: config 0 descriptor?? [ 1288.851501][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1288.883497][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1288.893805][T21900] chnl_net:caif_netlink_parms(): no params data found [ 1288.999690][T21884] vhci_hcd: connection reset by peer [ 1289.010006][T14248] vhci_hcd: stop threads [ 1289.014349][T14248] vhci_hcd: release socket [ 1289.039523][T14248] vhci_hcd: disconnect device [ 1289.044793][ T5925] input: ဉ as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input111 [ 1289.059258][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1289.066901][ T9] usb 6-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1289.154788][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1289.190376][ T9] usb 6-1: config 1 has no interface number 1 [ 1289.200167][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.216840][ T5925] usb 5-1: USB disconnect, device number 20 [ 1289.216964][ C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 1289.240346][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.249550][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.259907][ T9] usb 6-1: Product: syz [ 1289.291030][ T9] usb 6-1: Manufacturer: syz [ 1289.300266][ T9] usb 6-1: SerialNumber: syz [ 1289.319516][T13107] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1289.394620][ T8002] udevd[8002]: Error opening device "/dev/input/event4": No such file or directory [ 1289.407032][ T8002] udevd[8002]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.417171][ T8002] udevd[8002]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.484116][T13107] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 1289.493314][T13107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.509173][T13107] usb 2-1: config 0 has no interfaces? [ 1289.523057][T13107] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1289.534153][T13107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.543553][T13107] usb 2-1: Product: syz [ 1289.547763][T13107] usb 2-1: Manufacturer: syz [ 1289.553539][T13107] usb 2-1: SerialNumber: syz [ 1289.564767][T13107] usb 2-1: config 0 descriptor?? [ 1289.794532][T21903] fuse: Bad value for 'fd' [ 1289.884726][T21905] input: syz0 as /devices/virtual/input/input112 [ 1290.118788][T21905] kvm: pic: non byte write [ 1290.269702][ T5819] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1290.410626][ T5819] usb 5-1: device descriptor read/64, error -71 [ 1290.679429][ T5819] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1290.716532][ T9] usb 6-1: cannot find UAC_HEADER [ 1290.719348][ T5925] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1290.766499][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1290.787956][ T9] usb 6-1: USB disconnect, device number 39 [ 1290.812510][ T7365] udevd[7365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.829320][ T5819] usb 5-1: device descriptor read/64, error -71 [ 1290.864233][T21916] program syz.5.3806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1290.880006][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1290.888837][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.902615][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.912935][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1290.924048][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.936639][ T5925] usb 4-1: config 0 descriptor?? [ 1290.946391][ T5925] hub 4-1:0.0: USB hub found [ 1290.949927][ T5819] usb usb5-port1: attempt power cycle [ 1291.146677][ T5925] hub 4-1:0.0: 1 port detected [ 1291.179232][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1291.299358][ T5819] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1291.322462][ T5819] usb 5-1: device descriptor read/8, error -71 [ 1291.331233][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1291.343795][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1291.353081][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.361862][T21914] fuse: Bad value for 'fd' [ 1291.363206][ T9] usb 6-1: Product: syz [ 1291.371139][ T9] usb 6-1: Manufacturer: syz [ 1291.375895][ T9] usb 6-1: SerialNumber: syz [ 1291.384748][ T9] usb 6-1: config 0 descriptor?? [ 1291.559647][ T5819] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1291.590047][ T5819] usb 5-1: device descriptor read/8, error -71 [ 1291.699803][ T5819] usb usb5-port1: unable to enumerate USB device [ 1291.716380][T13107] usb 2-1: USB disconnect, device number 66 [ 1291.826559][ T5898] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1291.831166][ T5819] usb 4-1: USB disconnect, device number 121 [ 1291.862150][ T981] usb 6-1: USB disconnect, device number 40 [ 1292.062396][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1292.329284][ T981] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1292.436560][T20174] bond0: (slave syz_tun): Releasing backup interface [ 1292.509427][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 1292.516555][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.542649][ T981] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1292.561736][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.573295][ T981] usb 6-1: config 0 descriptor?? [ 1292.633895][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.735869][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.986373][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.106109][ T981] uclogic 0003:28BD:0042.004B: interface is invalid, ignoring [ 1293.270463][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.283681][T12783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1293.296695][T12783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1293.310945][T12783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1293.322110][T12783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1293.330743][T12783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1293.422713][ T5898] usb 6-1: USB disconnect, device number 41 [ 1293.629350][ T9713] vhci_hcd: vhci_device speed not set [ 1293.636058][ T80] bridge_slave_0: left allmulticast mode [ 1293.649691][ T80] bridge_slave_0: left promiscuous mode [ 1293.651365][T21955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1293.655661][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.700616][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1293.748662][ T80] bond_slave_0: left promiscuous mode [ 1293.755942][ T80] bond_slave_1: left promiscuous mode [ 1293.969648][ T5925] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1294.086101][ T80] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1294.125666][ T80] batman_adv: batadv0: Removing interface: macvlan3 [ 1294.153788][ T80] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1294.355143][ T80] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1294.896492][ T80] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 1294.909777][ T80] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 1294.931648][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.944278][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.955328][ T80] bond0 (unregistering): Released all slaves [ 1294.975262][ T80] bond1 (unregistering): Released all slaves [ 1295.163579][ T80] bond2 (unregistering): Released all slaves [ 1295.180999][ T80] bond3 (unregistering): Released all slaves [ 1295.403936][T19438] Bluetooth: hci4: command tx timeout [ 1295.441531][ T80] bond4 (unregistering): Released all slaves [ 1295.753178][T21948] chnl_net:caif_netlink_parms(): no params data found [ 1295.859356][ T9713] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1296.122545][ T9713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1296.154356][ T9713] usb 5-1: config 176 has an invalid interface number: 218 but max is 0 [ 1296.168738][T21983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1296.184091][ T9713] usb 5-1: config 176 has no interface number 0 [ 1296.208284][ T9713] usb 5-1: config 176 interface 218 has no altsetting 0 [ 1296.237365][ T9713] usb 5-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 1296.267710][ T9713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.285772][ T9713] usb 5-1: Product: syz [ 1296.290702][ T9713] usb 5-1: Manufacturer: syz [ 1296.295568][ T9713] usb 5-1: SerialNumber: syz [ 1296.408681][ T80] hsr_slave_0: left promiscuous mode [ 1296.432425][ T80] hsr_slave_1: left promiscuous mode [ 1296.444803][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.452897][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.520240][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.559288][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.604363][ T80] veth1_macvtap: left promiscuous mode [ 1296.610084][ T80] veth0_macvtap: left promiscuous mode [ 1296.615917][ T80] veth1_vlan: left promiscuous mode [ 1296.626817][ T80] veth0_vlan: left promiscuous mode [ 1297.052205][ T80] team0 (unregistering): Port device vlan2 removed [ 1297.481856][T19438] Bluetooth: hci4: command tx timeout [ 1297.694644][T22014] futex_wake_op: syz.1.3826 tries to shift op by 32; fix this program [ 1297.790531][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1297.964542][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1298.608116][ T80] team0 (unregistering): Port device bridge_slave_1 removed [ 1299.229278][ T5925] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1299.379934][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 1299.387487][ T5925] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1299.401971][ T5925] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.412314][ T5925] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1299.421866][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.466164][T21948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.473525][T21948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.487931][T21948] bridge_slave_0: entered allmulticast mode [ 1299.498052][T21948] bridge_slave_0: entered promiscuous mode [ 1299.559508][T19438] Bluetooth: hci4: command tx timeout [ 1299.628615][T21948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.670377][T21948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.679472][T21948] bridge_slave_1: entered allmulticast mode [ 1299.689417][T21948] bridge_slave_1: entered promiscuous mode [ 1299.751295][ T9713] ipheth 5-1:176.218: Unable to find alternate settings interface [ 1299.807197][ T9713] usb 5-1: USB disconnect, device number 25 [ 1301.182654][T21948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.308173][T21948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.488679][T22025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.565476][T22025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.647219][T19438] Bluetooth: hci4: command tx timeout [ 1301.755343][T22025] loop3: detected capacity change from 0 to 1 [ 1301.785845][T21948] team0: Port device team_slave_0 added [ 1301.834361][T21948] team0: Port device team_slave_1 added [ 1301.902556][T22025] Dev loop3: unable to read RDB block 1 [ 1301.932792][T22025] loop3: unable to read partition table [ 1301.938677][T22025] loop3: partition table beyond EOD, truncated [ 1302.033127][T22025] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1302.180067][ T80] IPVS: stop unused estimator thread 0... [ 1302.188573][ T5925] usb 2-1: string descriptor 0 read error: -71 [ 1302.268676][ T5925] hub 2-1:32.0: bad descriptor, ignoring hub [ 1302.303784][T21948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.327047][ T5925] hub 2-1:32.0: probe with driver hub failed with error -5 [ 1302.349200][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.535921][ T5925] usb 2-1: USB disconnect, device number 68 [ 1302.628630][T21948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.751662][T21948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.870164][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.053023][T21948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.662038][T21948] hsr_slave_0: entered promiscuous mode [ 1303.685590][T21948] hsr_slave_1: entered promiscuous mode [ 1304.647064][T22064] delete_channel: no stack [ 1304.707644][T22078] input: syz0 as /devices/virtual/input/input114 [ 1305.476554][T22095] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1305.491070][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.499309][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.674055][T19438] Bluetooth: hci3: unexpected event 0x14 length: 11 > 6 [ 1306.909516][T21948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1306.951641][T21948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1306.974224][T21948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1306.996447][T21948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1307.049337][ T981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1307.234163][T21948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.249470][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 1307.284227][ T981] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1307.299521][ T981] usb 5-1: config 0 has no interface number 0 [ 1307.309123][T21948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.321865][ T981] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1307.341806][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.362717][ T981] usb 5-1: Product: syz [ 1307.371963][ T981] usb 5-1: Manufacturer: syz [ 1307.387504][ T981] usb 5-1: SerialNumber: syz [ 1307.404092][ T981] usb 5-1: config 0 descriptor?? [ 1307.430293][ T981] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1307.448261][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 1307.465729][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1307.500163][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.507327][ T7146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.527315][ T981] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1307.546304][ T981] usb 5-1: media controller created [ 1307.561820][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.569003][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.630168][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1307.651384][T22119] dvb-usb: bulk message failed: -22 (7/0) [ 1307.716101][ T981] cxusb: set interface failed [ 1307.724103][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 1307.838599][ T981] DVB: Unable to find symbol lgdt330x_attach() [ 1307.851772][ T981] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1307.864743][T21948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1307.970417][ T981] rc_core: IR keymap rc-dvico-portable not found [ 1307.991511][ T981] Registered IR keymap rc-empty [ 1308.017361][ T981] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1308.056744][T21948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.099960][ T981] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input115 [ 1308.211820][ T981] dvb-usb: schedule remote query interval to 100 msecs. [ 1308.341136][ T981] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1308.366658][T22139] vlan0: entered promiscuous mode [ 1308.385092][T22139] vlan0: entered allmulticast mode [ 1308.396841][ T981] usb 5-1: USB disconnect, device number 26 [ 1308.431518][T22139] hsr_slave_1: entered allmulticast mode [ 1308.505021][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1308.633647][ T981] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1309.272220][T21948] veth0_vlan: entered promiscuous mode [ 1309.317945][T21948] veth1_vlan: entered promiscuous mode [ 1309.377442][T21948] veth0_macvtap: entered promiscuous mode [ 1309.388002][T21948] veth1_macvtap: entered promiscuous mode [ 1309.407867][T21948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.425250][T21948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.441234][T14250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.468635][T14250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.520732][T14250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.533608][T14250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.677752][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.713117][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.803670][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.821895][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.079252][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1310.368545][T22176] trusted_key: encrypted_key: insufficient parameters specified [ 1310.446200][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1310.753817][ T9] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1310.784218][ T9] usb 2-1: config 0 has no interface number 0 [ 1310.804482][ T9] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1310.909426][ T9] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1310.949178][ T9] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1311.534508][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1311.562319][ T9] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1311.589953][ T9] usb 2-1: Product: syz [ 1311.604717][ T9] usb 2-1: Manufacturer: syz [ 1311.637998][ T9] usb 2-1: SerialNumber: syz [ 1311.657572][ T9] usb 2-1: config 0 descriptor?? [ 1311.825818][T22153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1312.445465][ T9] usb 2-1: can't set config #0, error -71 [ 1312.494837][ T9] usb 2-1: USB disconnect, device number 69 [ 1313.629965][ T9713] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1313.810360][ T9713] usb 5-1: device descriptor read/64, error -71 [ 1314.060113][ T9713] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1314.359411][ T9713] usb 5-1: device descriptor read/64, error -71 [ 1314.573058][ T9713] usb usb5-port1: attempt power cycle [ 1314.969392][ T9713] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1315.080157][ T9713] usb 5-1: device descriptor read/8, error -71 [ 1315.349807][ T9713] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1315.406915][ T9713] usb 5-1: device descriptor read/8, error -71 [ 1315.534374][ T9713] usb usb5-port1: unable to enumerate USB device [ 1315.723276][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1315.732020][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1315.769216][ T5925] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1315.959654][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1315.993188][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.032113][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.059186][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1316.096264][ T5925] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1316.115723][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.142087][ T5925] usb 4-1: config 0 descriptor?? [ 1316.196044][ T5925] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input118 [ 1316.247820][ T5183] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.295943][ T5183] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.336954][ T7365] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.370584][ T5183] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.384797][T22251] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.419376][ T5183] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1316.473545][ T981] usb 4-1: USB disconnect, device number 122 [ 1316.487536][ T5183] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1317.069221][ T981] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1317.249079][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 1317.260413][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1317.289680][ T9713] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1317.299431][ T981] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.326513][ T981] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1317.352259][ T981] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1317.362681][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.370805][ T981] usb 2-1: Product: syz [ 1317.375565][ T981] usb 2-1: Manufacturer: syz [ 1317.380562][ T981] usb 2-1: SerialNumber: syz [ 1317.479620][ T9713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.499971][ T9713] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1317.524288][ T9713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.545647][ T9713] usb 5-1: config 0 descriptor?? [ 1317.601254][T22263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1317.623439][T22263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.652948][T22263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.772422][ T981] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input119 [ 1317.796634][ T5183] bcm5974 2-1:1.0: could not read from device [ 1317.862491][T22284] syzkaller1: entered promiscuous mode [ 1317.868047][T22284] syzkaller1: entered allmulticast mode [ 1317.986941][ T9713] keytouch 0003:0926:3333.004C: fixing up Keytouch IEC report descriptor [ 1318.011165][ T9713] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.004C/input/input120 [ 1318.150552][ T855] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1318.194147][ T5183] bcm5974 2-1:1.0: could not read from device [ 1318.409502][ T855] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1318.413969][ T981] usb 2-1: USB disconnect, device number 70 [ 1318.576391][ T855] usb 4-1: config 0 has no interface number 0 [ 1318.590391][ T855] usb 4-1: config 0 interface 66 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1318.609352][ T855] usb 4-1: config 0 interface 66 has no altsetting 0 [ 1318.616258][ T855] usb 4-1: New USB device found, idVendor=18ef, idProduct=e032, bcdDevice=68.89 [ 1318.660987][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.680408][ T855] usb 4-1: config 0 descriptor?? [ 1318.713216][T22284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1318.772495][ T855] cp210x 4-1:0.66: cp210x converter detected [ 1318.819894][T22297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1318.927378][ T9713] keytouch 0003:0926:3333.004C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1318.966286][ T9713] usb 5-1: USB disconnect, device number 31 [ 1319.067819][T22300] ip6gretap3: entered promiscuous mode [ 1319.192377][T22301] fido_id[22301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1319.207654][T22300] ip6gretap3: entered allmulticast mode [ 1319.964679][T22311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1321.044094][ T855] cp210x 4-1:0.66: failed to get vendor val 0x370b size 1: -71 [ 1321.088449][ T855] cp210x 4-1:0.66: querying part number failed [ 1321.108084][ T855] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1321.125944][ T855] usb 4-1: USB disconnect, device number 123 [ 1321.137339][ T855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1321.180361][ T855] cp210x 4-1:0.66: device disconnected [ 1321.739344][ T855] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1321.892788][ T855] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1322.072843][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.098351][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.109243][ T855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1322.124543][ T855] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1322.134528][ T855] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1322.142679][ T855] usb 4-1: Manufacturer: syz [ 1322.155835][ T855] usb 4-1: config 0 descriptor?? [ 1322.233730][T22335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1322.370638][T22338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3881'. [ 1322.606328][ T855] appleir 0003:05AC:8243.004D: unknown main item tag 0x0 [ 1322.649524][ T855] appleir 0003:05AC:8243.004D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1322.830450][T22329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.853501][T22329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.090940][T22350] bond5 (unregistering): Released all slaves [ 1323.255120][ T981] usb 4-1: USB disconnect, device number 124 [ 1323.815064][T22349] delete_channel: no stack [ 1325.309298][T12761] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1325.470802][T12761] usb 5-1: Using ep0 maxpacket: 32 [ 1325.479233][T12761] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1325.487924][T12761] usb 5-1: config 0 has no interface number 0 [ 1325.497094][T12761] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1325.506879][T12761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.516113][T12761] usb 5-1: Product: syz [ 1325.520678][T12761] usb 5-1: Manufacturer: syz [ 1325.525395][T12761] usb 5-1: SerialNumber: syz [ 1325.538280][T12761] usb 5-1: config 0 descriptor?? [ 1325.563108][T12761] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1325.591144][T12761] dvb-usb: bulk message failed: -22 (2/0) [ 1325.612030][T12761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1325.632230][T12761] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1325.653103][T12761] usb 5-1: media controller created [ 1325.688428][T12761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.747732][T12761] cxusb: set interface failed [ 1325.759019][T12761] dvb-usb: bulk message failed: -22 (1/0) [ 1325.799743][ T9713] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1325.928383][T12761] DVB: Unable to find symbol lgdt330x_attach() [ 1325.946736][T12761] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1325.958807][T22399] dvb-usb: bulk message failed: -22 (7/0) [ 1325.961444][ T9713] usb 2-1: Using ep0 maxpacket: 8 [ 1325.982201][ T9713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1325.994746][ T9713] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 1326.022587][ T9713] usb 2-1: config 7 has no interface number 0 [ 1326.472502][ T9713] usb 2-1: string descriptor 0 read error: -22 [ 1326.484232][ T9713] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1326.505136][ T9713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.569597][T12761] rc_core: IR keymap rc-dvico-portable not found [ 1326.633263][T22402] fuse: Bad value for 'fd' [ 1326.670460][T12761] Registered IR keymap rc-empty [ 1326.677702][T12761] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1326.692287][T12761] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input121 [ 1326.704817][T12761] dvb-usb: schedule remote query interval to 100 msecs. [ 1326.712101][T12761] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1326.747001][T12761] usb 5-1: USB disconnect, device number 32 [ 1326.845627][T12761] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1326.891947][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.901272][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.020333][ T981] usb 2-1: USB disconnect, device number 71 [ 1327.913241][T12761] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1328.169215][T12761] usb 6-1: Using ep0 maxpacket: 32 [ 1328.495332][T12761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.595146][T12761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.631081][T12761] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1328.669420][T12761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.764025][T12761] usb 6-1: config 0 descriptor?? [ 1329.219354][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1329.444694][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1329.449278][ T5925] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 1329.500275][ T9] usb 2-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 1329.529378][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.615875][ T5925] usb 5-1: config 7 has an invalid interface number: 112 but max is 1 [ 1329.629483][ T5925] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.642382][ T5925] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1329.652639][ T5925] usb 5-1: config 7 has no interface number 0 [ 1329.659023][ T5925] usb 5-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.685952][ T9] usb 2-1: Product: syz [ 1329.696139][ T9] usb 2-1: Manufacturer: syz [ 1329.704461][ T5925] usb 5-1: config 7 interface 112 has no altsetting 0 [ 1329.715307][T12761] savu 0003:1E7D:2D5A.004E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1329.740218][ T9] usb 2-1: SerialNumber: syz [ 1329.744381][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 1329.752653][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 1329.776640][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.834738][ T5925] uvcvideo 5-1:7.112: Found UVC 0.00 device (046d:089b) [ 1329.852945][ T5925] uvcvideo 5-1:7.112: No valid video chain found. [ 1329.901153][ T9] usb 2-1: config 0 descriptor?? [ 1330.046052][ T5925] usb 5-1: USB disconnect, device number 33 [ 1330.142548][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1330.180164][ T9] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1330.232998][ T9] usb 2-1: USB disconnect, device number 72 [ 1330.283692][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3900'. [ 1330.662672][T22451] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1330.860150][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1330.887479][T22455] tipc: Enabled bearer , priority 0 [ 1330.895863][ T30] audit: type=1326 audit(1760455738.124:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.0.3911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd479d8eec9 code=0x0 [ 1330.993108][T22457] tipc: Disabling bearer [ 1330.999997][ T9713] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 1331.050246][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1331.057587][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1331.083956][ T9] usb 5-1: config 0 has no interface number 0 [ 1331.095802][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1331.121856][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1331.142715][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1331.159207][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.167312][ T9] usb 5-1: Product: syz [ 1331.177541][ T9] usb 5-1: Manufacturer: syz [ 1331.182382][ T9] usb 5-1: SerialNumber: syz [ 1331.195414][ T9] usb 5-1: config 0 descriptor?? [ 1331.295708][T22464] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1331.493519][T22467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3913'. [ 1331.825634][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 1331.853464][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input122 [ 1332.065730][ T5898] usb 5-1: USB disconnect, device number 34 [ 1332.117198][ T5898] appletouch 5-1:0.85: input: appletouch disconnected [ 1333.430903][T22491] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1333.604776][ T30] audit: type=1326 audit(1760455740.824:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.653487][ T30] audit: type=1326 audit(1760455740.824:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.677085][ T30] audit: type=1326 audit(1760455740.824:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.703259][ T30] audit: type=1326 audit(1760455740.824:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.727354][ T30] audit: type=1326 audit(1760455740.824:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.761507][ T30] audit: type=1326 audit(1760455740.854:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.788935][ T30] audit: type=1326 audit(1760455740.854:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.815269][ T30] audit: type=1326 audit(1760455740.854:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.839528][ T30] audit: type=1326 audit(1760455740.854:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22492 comm="syz.1.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7564f8eec9 code=0x7ffc0000 [ 1333.899312][ T5819] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1334.063961][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.111070][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1334.137772][ T5819] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1334.165624][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1334.184102][ T5819] usb 2-1: SerialNumber: syz [ 1334.415837][ T5819] usb 2-1: 0:2 : does not exist [ 1334.436271][ T5819] usb 2-1: USB disconnect, device number 73 [ 1334.458883][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3926'. [ 1334.495812][ T7367] udevd[7367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.597575][T22517] netlink: 'syz.5.3927': attribute type 10 has an invalid length. [ 1334.629049][T22517] 8021q: adding VLAN 0 to HW filter on device ` [ 1334.638235][T22517] bond0: (slave `): Enslaving as an active interface with an up link [ 1334.791593][ T5925] usb 6-1: USB disconnect, device number 42 [ 1335.032660][T22529] netlink: 'syz.1.3932': attribute type 8 has an invalid length. [ 1335.183901][T22540] syzkaller1: entered promiscuous mode [ 1335.189590][T22540] syzkaller1: entered allmulticast mode [ 1335.299242][ T5898] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1335.467114][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1335.475578][ T5898] usb 5-1: not running at top speed; connect to a high speed hub [ 1335.515103][ T5898] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1335.537859][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1335.547340][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.561212][ T5898] usb 5-1: Product: syz [ 1335.565402][ T5898] usb 5-1: Manufacturer: syz [ 1335.571125][ T5898] usb 5-1: SerialNumber: syz [ 1335.769471][ T5925] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1335.818240][ T5898] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1335.828057][ T5898] usb 5-1: unit 2 not found! [ 1335.897805][ T5898] usb 5-1: USB disconnect, device number 35 [ 1335.927432][ T7367] udevd[7367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.955515][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 1335.973035][ T5925] usb 2-1: config 2 has an invalid interface number: 138 but max is 0 [ 1335.981632][ T5925] usb 2-1: config 2 has no interface number 0 [ 1335.995570][ T5925] usb 2-1: config 2 interface 138 has no altsetting 0 [ 1336.013851][ T5925] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 1336.044051][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.085849][ T5925] usb 2-1: Product: syz [ 1336.096591][ T5925] usb 2-1: Manufacturer: syz [ 1336.101468][ T5925] usb 2-1: SerialNumber: syz [ 1336.322792][ T5925] kvaser_usb 2-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 1336.341605][ T5925] usb 2-1: USB disconnect, device number 74 [ 1336.829307][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1336.858655][T22567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1336.988119][T22570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1337.029206][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1337.081023][ T9] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1337.113571][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1337.146204][ T9] usb 4-1: can't read configurations, error -61 [ 1337.319374][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1337.515597][T22582] fuse: Bad value for 'fd' [ 1337.521753][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1337.552833][ T9] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1337.589268][ T5925] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1337.657736][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1337.670008][ T9] usb 4-1: can't read configurations, error -61 [ 1337.684703][ T9] usb usb4-port1: attempt power cycle [ 1337.802090][ T5925] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1337.832153][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.848085][ T5925] usb 2-1: Product: syz [ 1337.864060][ T5925] usb 2-1: Manufacturer: syz [ 1337.875036][ T5925] usb 2-1: SerialNumber: syz [ 1337.910334][ T5925] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1337.937868][ T5898] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1338.030188][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1338.051671][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1338.057905][ T9] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1338.078688][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1338.095057][ T9] usb 4-1: can't read configurations, error -61 [ 1338.239337][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1338.272768][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1338.272795][ T30] audit: type=1326 audit(1760455745.494:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.313130][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1338.337351][ T9] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1338.377294][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1338.391601][ T9] usb 4-1: can't read configurations, error -61 [ 1338.398912][ T9] usb usb4-port1: unable to enumerate USB device [ 1338.501267][ T9] usb 2-1: USB disconnect, device number 75 [ 1338.509245][ T30] audit: type=1326 audit(1760455745.524:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.531754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.558658][ T30] audit: type=1326 audit(1760455745.524:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.581152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.625316][ T30] audit: type=1326 audit(1760455745.534:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.647781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.688028][ T30] audit: type=1326 audit(1760455745.534:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.735184][ T30] audit: type=1326 audit(1760455745.534:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.842733][ T30] audit: type=1326 audit(1760455745.534:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.865285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.928150][ T30] audit: type=1326 audit(1760455745.534:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.974822][ T30] audit: type=1326 audit(1760455745.534:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1338.997263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.121375][ T30] audit: type=1326 audit(1760455745.534:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd479d8eec9 code=0x7ffc0000 [ 1339.263379][ T5898] usb 2-1: Service connection timeout for: 256 [ 1339.285085][ T5898] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1339.459782][ T5898] ath9k_htc: Failed to initialize the device [ 1339.488582][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1339.757716][T22600] fuse: blksize only supported for fuseblk [ 1339.932359][T22603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3954'. [ 1340.509243][ T5898] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1340.752387][T22633] batadv_slave_0: entered promiscuous mode [ 1340.821089][ T5898] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 1340.839998][ T5898] usb 4-1: config 0 has no interface number 0 [ 1340.851201][ T5898] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1340.879599][ T5898] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1340.899177][ T5898] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1340.953993][ T5898] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1340.974508][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 1341.004878][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.009516][ T5819] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1341.082465][ T5898] usb 4-1: config 0 descriptor?? [ 1341.109222][ T855] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1341.149390][ T5819] usb 5-1: device descriptor read/64, error -71 [ 1341.289253][ T855] usb 2-1: Using ep0 maxpacket: 16 [ 1341.298695][T22615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.312909][ T855] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1341.326437][T22615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.337076][ T855] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 1341.348373][ T855] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.368858][ T855] usb 2-1: config 8 has no interface number 0 [ 1341.375257][ T855] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.389011][ T855] usb 2-1: config 8 interface 132 has no altsetting 0 [ 1341.408416][ T855] usb 2-1: string descriptor 0 read error: -22 [ 1341.409333][ T5819] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1341.415081][ T855] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 1341.432198][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.447385][ T855] usb-storage 2-1:8.132: USB Mass Storage device detected [ 1341.465156][ T5898] usb 4-1: string descriptor 0 read error: -71 [ 1341.483471][ T855] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 1341.499613][ T5898] usbtest 4-1:0.138: Linux gadget zero [ 1341.508617][ T5898] usbtest 4-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 1341.544094][ T5898] usb 4-1: USB disconnect, device number 3 [ 1341.666508][ T5819] usb 5-1: device descriptor read/64, error -71 [ 1341.789618][ T5819] usb usb5-port1: attempt power cycle [ 1341.918265][ T5898] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1342.100473][ T5898] usb 4-1: not running at top speed; connect to a high speed hub [ 1342.111892][ T5898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 511, setting to 64 [ 1342.141858][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1342.153011][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.179278][ T5898] usb 4-1: Product: 贞⏍㰥乞ꀏ䡾ߢҘ픿꙱屭ੰ繬큅ᄜ뷴ꂓ଍阙뗧팈ȇ뎶ŋ맠䇥꽠䐝褩줰㐼컚먰玶㒄뱳ቕ弜ᔋ閥턇ί掐嘩 [ 1342.199397][ T5819] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1342.220086][ T5819] usb 5-1: device descriptor read/8, error -71 [ 1342.271384][ T5898] usb 4-1: Manufacturer: 葤傤딵广骪青埙A嵐荙玍浨溻꥘⹯朰趾ࡼ䌭㠩䊚웙 [ 1342.325817][ T5898] usb 4-1: SerialNumber: 萮뭉箞忘༷㼮凶䌯 [ 1342.459297][ T5819] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1342.540858][ T5819] usb 5-1: device descriptor read/8, error -71 [ 1342.659506][ T5819] usb usb5-port1: unable to enumerate USB device [ 1343.136986][ T5898] cdc_ncm 4-1:1.0: bind() failure [ 1343.194336][ T5898] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1343.235439][ T5898] cdc_ncm 4-1:1.1: bind() failure [ 1343.297856][ T5898] usb 4-1: USB disconnect, device number 4 [ 1343.357606][ T855] usb 2-1: USB disconnect, device number 76 [ 1343.794336][T22632] batadv_slave_0: left promiscuous mode [ 1344.169241][T12761] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1344.299265][T12761] usb 2-1: device descriptor read/64, error -71 [ 1344.539325][T12761] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1344.679336][T12761] usb 2-1: device descriptor read/64, error -71 [ 1344.800195][T12761] usb usb2-port1: attempt power cycle [ 1344.912793][T22678] dummy0: entered promiscuous mode [ 1344.917980][T22678] dummy0: entered allmulticast mode [ 1345.159369][T12761] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1345.200402][T12761] usb 2-1: device descriptor read/8, error -71 [ 1345.419278][ T5898] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1345.459312][T12761] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1345.498456][T12761] usb 2-1: device descriptor read/8, error -71 [ 1345.613585][ T5898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.624366][ T5898] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1345.629645][T12761] usb usb2-port1: unable to enumerate USB device [ 1345.642524][ T5898] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1345.652977][ T5898] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.666968][ T5898] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1345.676621][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.689233][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.698851][ T5898] usb 5-1: Product: syz [ 1345.703311][ T5898] usb 5-1: Manufacturer: syz [ 1345.708099][ T5898] usb 5-1: SerialNumber: syz [ 1345.769696][ T855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1345.799315][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.806606][ C1] bridge0: topology change detected, propagating [ 1345.814595][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.821883][ C1] bridge0: topology change detected, propagating [ 1345.919227][ T855] usb 4-1: Using ep0 maxpacket: 16 [ 1345.927215][T22696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.941955][ T855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1345.954698][T22696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.963995][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1345.987349][ T855] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1345.997389][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.005764][ T855] usb 4-1: Product: syz [ 1346.011728][ T855] usb 4-1: Manufacturer: syz [ 1346.016730][ T5898] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1346.024848][ T855] usb 4-1: SerialNumber: syz [ 1346.029596][ T5898] usb 5-1: MIDIStreaming interface descriptor not found [ 1346.043706][ T855] usb 4-1: config 0 descriptor?? [ 1346.055043][ T855] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1346.076754][ T855] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1346.100446][ T5898] usb 5-1: USB disconnect, device number 40 [ 1346.185618][ T7415] udevd[7415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.660167][ T855] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1346.667073][ T855] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1346.969287][T12761] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1347.169959][T12761] usb 6-1: Using ep0 maxpacket: 16 [ 1347.181770][T12761] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1347.193785][T12761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1347.210989][T12761] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1347.220444][T12761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.228544][T12761] usb 6-1: Product: syz [ 1347.233589][T12761] usb 6-1: Manufacturer: syz [ 1347.238296][T12761] usb 6-1: SerialNumber: syz [ 1347.257794][T12761] usb 6-1: config 0 descriptor?? [ 1347.270884][T12761] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1347.284182][T12761] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1347.289398][ T855] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1347.713518][ T855] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1347.722652][ T855] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1347.744138][ T855] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1347.754245][ T855] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1347.763259][ T855] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1347.774027][ T855] usb 4-1: USB disconnect, device number 5 [ 1347.875240][T12761] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1347.883297][T12761] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1348.170364][T22742] kvm: user requested TSC rate below hardware speed [ 1348.731880][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1348.731900][ T30] audit: type=1800 audit(1760455755.954:1637): pid=22751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3994" name="file0" dev="tmpfs" ino=1304 res=0 errno=0 [ 1348.879263][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1349.029291][ T5819] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1349.039298][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1349.047169][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.058394][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.068546][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1349.077765][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.090360][ T9] usb 4-1: config 0 descriptor?? [ 1349.179200][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1349.186363][ T5819] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1349.194703][ T5819] usb 5-1: config 0 has no interface number 0 [ 1349.201289][ T5819] usb 5-1: config 0 interface 132 has no altsetting 0 [ 1349.211315][ T5819] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1349.220532][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.228591][ T5819] usb 5-1: Product: syz [ 1349.233225][ T5819] usb 5-1: Manufacturer: syz [ 1349.238209][ T5819] usb 5-1: SerialNumber: syz [ 1349.249569][ T5819] usb 5-1: config 0 descriptor?? [ 1349.273647][T12761] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1349.284190][T12761] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1349.291580][T12761] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1349.302830][T12761] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1349.324818][T12761] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1349.339633][T12761] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1349.368101][T12761] usb 6-1: USB disconnect, device number 43 [ 1349.512833][T22751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.522100][T22751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.598588][ T9] ft260 0003:0403:6030.004F: unknown main item tag 0x7 [ 1349.797388][ T9] ft260 0003:0403:6030.004F: chip code: 6424 8183 [ 1349.998512][ T9] ft260 0003:0403:6030.004F: failed to retrieve system status [ 1350.013078][ T9] ft260 0003:0403:6030.004F: probe with driver ft260 failed with error -32 [ 1350.028616][ T9] usb 4-1: USB disconnect, device number 6 [ 1351.452912][ T5819] cdc_subset 5-1:0.132: probe with driver cdc_subset failed with error -71 [ 1351.494216][ T5819] usb 5-1: USB disconnect, device number 41 [ 1352.253610][T22810] dvmrp0: entered allmulticast mode [ 1352.530051][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1352.631838][ T30] audit: type=1326 audit(1760455759.854:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.668904][ T30] audit: type=1326 audit(1760455759.854:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.708069][ T30] audit: type=1326 audit(1760455759.854:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.765215][ T30] audit: type=1326 audit(1760455759.854:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.771400][ T5925] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1352.817222][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.827703][ T30] audit: type=1326 audit(1760455759.884:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.838199][ T5925] usb 4-1: config 0 has no interface number 0 [ 1352.857871][ T30] audit: type=1326 audit(1760455759.884:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.890570][ T5925] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1352.907156][ T5925] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.923111][ T5925] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1352.949199][ T30] audit: type=1326 audit(1760455759.884:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1352.959185][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.981107][ T5925] usb 4-1: Product: syz [ 1352.985434][ T5925] usb 4-1: Manufacturer: syz [ 1352.990199][ T5925] usb 4-1: SerialNumber: syz [ 1353.001356][ T5925] usb 4-1: config 0 descriptor?? [ 1353.018000][ T30] audit: type=1326 audit(1760455759.924:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1353.050736][ T30] audit: type=1326 audit(1760455759.924:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.4.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceaa98eec9 code=0x7ffc0000 [ 1353.102037][T22836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1353.264787][T19438] Bluetooth: hci1: unexpected event for opcode 0x100c [ 1353.636278][ T5925] usb 4-1: USB disconnect, device number 7 [ 1354.425564][T22883] input: syz1 as /devices/virtual/input/input125 [ 1355.664989][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1355.779485][T22921] IPv6: Can't replace route, no match found [ 1356.306450][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1356.792774][T19438] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 1359.284644][T23009] loop9: detected capacity change from 0 to 7 [ 1359.348209][T23009] [ 1359.350587][T23009] ====================================================== [ 1359.357617][T23009] WARNING: possible circular locking dependency detected [ 1359.364659][T23009] syzkaller #0 Not tainted [ 1359.369107][T23009] ------------------------------------------------------ [ 1359.376140][T23009] syz.4.4101/23009 is trying to acquire lock: [ 1359.382236][T23009] ffff88801c288220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1359.392548][T23009] [ 1359.392548][T23009] but task is already holding lock: [ 1359.399929][T23009] ffff888142b88a78 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1359.409734][T23009] [ 1359.409734][T23009] which lock already depends on the new lock. [ 1359.409734][T23009] [ 1359.420150][T23009] [ 1359.420150][T23009] the existing dependency chain (in reverse order) is: [ 1359.429197][T23009] [ 1359.429197][T23009] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 1359.437955][T23009] lock_acquire+0x120/0x360 [ 1359.443012][T23009] blk_alloc_queue+0x538/0x620 [ 1359.448308][T23009] __blk_mq_alloc_disk+0x15c/0x340 [ 1359.453952][T23009] loop_add+0x411/0xad0 [ 1359.458646][T23009] loop_init+0xd9/0x170 [ 1359.463354][T23009] do_one_initcall+0x236/0x820 [ 1359.468651][T23009] do_initcall_level+0x104/0x190 [ 1359.474125][T23009] do_initcalls+0x59/0xa0 [ 1359.478983][T23009] kernel_init_freeable+0x334/0x4b0 [ 1359.484705][T23009] kernel_init+0x1d/0x1d0 [ 1359.489570][T23009] ret_from_fork+0x4bc/0x870 [ 1359.494691][T23009] ret_from_fork_asm+0x1a/0x30 [ 1359.499989][T23009] [ 1359.499989][T23009] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1359.507244][T23009] lock_acquire+0x120/0x360 [ 1359.512275][T23009] fs_reclaim_acquire+0x72/0x100 [ 1359.517744][T23009] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1359.523735][T23009] __kernfs_iattrs+0xd9/0x320 [ 1359.528943][T23009] kernfs_iop_setattr+0xea/0x3f0 [ 1359.534410][T23009] notify_change+0xc1a/0xf40 [ 1359.539638][T23009] do_truncate+0x1a4/0x220 [ 1359.544582][T23009] path_openat+0x306c/0x3830 [ 1359.549692][T23009] do_filp_open+0x1fa/0x410 [ 1359.554738][T23009] do_sys_openat2+0x121/0x1c0 [ 1359.559949][T23009] __x64_sys_openat+0x138/0x170 [ 1359.565327][T23009] do_syscall_64+0xfa/0xfa0 [ 1359.570350][T23009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.576771][T23009] [ 1359.576771][T23009] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1359.585291][T23009] validate_chain+0xb9b/0x2140 [ 1359.590600][T23009] __lock_acquire+0xab9/0xd20 [ 1359.595839][T23009] lock_acquire+0x120/0x360 [ 1359.600874][T23009] down_read+0x46/0x2e0 [ 1359.605557][T23009] kernfs_iop_getattr+0x9e/0x450 [ 1359.611041][T23009] vfs_getattr_nosec+0x2e1/0x430 [ 1359.616514][T23009] loop_assign_backing_file+0x222/0x400 [ 1359.622601][T23009] lo_ioctl+0x167f/0x1c50 [ 1359.627473][T23009] blkdev_ioctl+0x5af/0x6d0 [ 1359.632504][T23009] __se_sys_ioctl+0xfc/0x170 [ 1359.637622][T23009] do_syscall_64+0xfa/0xfa0 [ 1359.642655][T23009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.649078][T23009] [ 1359.649078][T23009] other info that might help us debug this: [ 1359.649078][T23009] [ 1359.659403][T23009] Chain exists of: [ 1359.659403][T23009] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 1359.659403][T23009] [ 1359.673857][T23009] Possible unsafe locking scenario: [ 1359.673857][T23009] [ 1359.681335][T23009] CPU0 CPU1 [ 1359.686707][T23009] ---- ---- [ 1359.692073][T23009] lock(&q->q_usage_counter(io)#26); [ 1359.697467][T23009] lock(fs_reclaim); [ 1359.703978][T23009] lock(&q->q_usage_counter(io)#26); [ 1359.711888][T23009] rlock(&root->kernfs_iattr_rwsem); [ 1359.717267][T23009] [ 1359.717267][T23009] *** DEADLOCK *** [ 1359.717267][T23009] [ 1359.725418][T23009] 3 locks held by syz.4.4101/23009: [ 1359.730616][T23009] #0: ffff888024ab0440 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 1359.739692][T23009] #1: ffff888142b88a78 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1359.749904][T23009] #2: ffff888142b88ab0 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1359.760379][T23009] [ 1359.760379][T23009] stack backtrace: [ 1359.766278][T23009] CPU: 1 UID: 0 PID: 23009 Comm: syz.4.4101 Not tainted syzkaller #0 PREEMPT(full) [ 1359.766316][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1359.766328][T23009] Call Trace: [ 1359.766350][T23009] [ 1359.766358][T23009] dump_stack_lvl+0x189/0x250 [ 1359.766380][T23009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1359.766398][T23009] ? __pfx__printk+0x10/0x10 [ 1359.766425][T23009] print_circular_bug+0x2ee/0x310 [ 1359.766453][T23009] check_noncircular+0x134/0x160 [ 1359.766482][T23009] validate_chain+0xb9b/0x2140 [ 1359.766508][T23009] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1359.766541][T23009] __lock_acquire+0xab9/0xd20 [ 1359.766564][T23009] ? kernfs_iop_getattr+0x9e/0x450 [ 1359.766590][T23009] lock_acquire+0x120/0x360 [ 1359.766610][T23009] ? kernfs_iop_getattr+0x9e/0x450 [ 1359.766639][T23009] down_read+0x46/0x2e0 [ 1359.766658][T23009] ? kernfs_iop_getattr+0x9e/0x450 [ 1359.766683][T23009] kernfs_iop_getattr+0x9e/0x450 [ 1359.766710][T23009] vfs_getattr_nosec+0x2e1/0x430 [ 1359.766734][T23009] loop_assign_backing_file+0x222/0x400 [ 1359.766762][T23009] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1359.766786][T23009] ? schedule+0x91/0x360 [ 1359.766817][T23009] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1359.766840][T23009] lo_ioctl+0x167f/0x1c50 [ 1359.766867][T23009] ? __pfx_lo_ioctl+0x10/0x10 [ 1359.766891][T23009] ? kasan_save_track+0x4f/0x80 [ 1359.766907][T23009] ? kasan_save_track+0x3e/0x80 [ 1359.766923][T23009] ? __kasan_save_free_info+0x46/0x50 [ 1359.766946][T23009] ? __kasan_slab_free+0x5c/0x80 [ 1359.766964][T23009] ? kfree+0x19a/0x6d0 [ 1359.766977][T23009] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 1359.767002][T23009] ? do_dentry_open+0x384/0x13f0 [ 1359.767023][T23009] ? vfs_open+0x3b/0x340 [ 1359.767043][T23009] ? path_openat+0x2ee5/0x3830 [ 1359.767061][T23009] ? __lock_acquire+0xab9/0xd20 [ 1359.767086][T23009] ? __lock_acquire+0xab9/0xd20 [ 1359.767107][T23009] ? __lock_acquire+0xab9/0xd20 [ 1359.767131][T23009] ? __lock_acquire+0xab9/0xd20 [ 1359.767155][T23009] ? __lock_acquire+0xab9/0xd20 [ 1359.767183][T23009] ? is_bpf_text_address+0x26/0x2b0 [ 1359.767208][T23009] ? is_bpf_text_address+0x292/0x2b0 [ 1359.767231][T23009] ? is_bpf_text_address+0x26/0x2b0 [ 1359.767254][T23009] ? kernel_text_address+0xa5/0xe0 [ 1359.767272][T23009] ? __kernel_text_address+0xd/0x40 [ 1359.767290][T23009] ? unwind_get_return_address+0x4d/0x90 [ 1359.767322][T23009] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1359.767340][T23009] ? arch_stack_walk+0xfc/0x150 [ 1359.767395][T23009] ? stack_trace_save+0x9c/0xe0 [ 1359.767416][T23009] ? __pfx_stack_trace_save+0x10/0x10 [ 1359.767434][T23009] ? stack_depot_save_flags+0x40/0x860 [ 1359.767454][T23009] ? kasan_save_track+0x4f/0x80 [ 1359.767472][T23009] ? kasan_save_track+0x3e/0x80 [ 1359.767489][T23009] ? __kasan_save_free_info+0x46/0x50 [ 1359.767515][T23009] ? __kasan_slab_free+0x5c/0x80 [ 1359.767534][T23009] ? kfree+0x19a/0x6d0 [ 1359.767548][T23009] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1359.767573][T23009] ? security_file_ioctl+0xcb/0x2d0 [ 1359.767597][T23009] ? __se_sys_ioctl+0x47/0x170 [ 1359.767611][T23009] ? do_syscall_64+0xfa/0xfa0 [ 1359.767628][T23009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.767654][T23009] ? __asan_memset+0x22/0x50 [ 1359.767670][T23009] ? blk_get_meta_cap+0x18c/0x750 [ 1359.767692][T23009] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1359.767712][T23009] ? lockdep_hardirqs_on+0x9c/0x150 [ 1359.767730][T23009] ? blkdev_common_ioctl+0xff7/0x2550 [ 1359.767753][T23009] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1359.767780][T23009] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1359.767802][T23009] ? do_vfs_ioctl+0xbe8/0x1430 [ 1359.767817][T23009] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1359.767845][T23009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1359.767873][T23009] ? __pfx_lo_ioctl+0x10/0x10 [ 1359.767897][T23009] blkdev_ioctl+0x5af/0x6d0 [ 1359.767919][T23009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1359.767939][T23009] ? __fget_files+0x3a0/0x420 [ 1359.767960][T23009] ? __fget_files+0x2a/0x420 [ 1359.767982][T23009] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1359.768008][T23009] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1359.768028][T23009] __se_sys_ioctl+0xfc/0x170 [ 1359.768044][T23009] do_syscall_64+0xfa/0xfa0 [ 1359.768060][T23009] ? lockdep_hardirqs_on+0x9c/0x150 [ 1359.768076][T23009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.768094][T23009] ? clear_bhb_loop+0x60/0xb0 [ 1359.768113][T23009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.768131][T23009] RIP: 0033:0x7fceaa98eec9 [ 1359.768148][T23009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.768166][T23009] RSP: 002b:00007fceab829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.768185][T23009] RAX: ffffffffffffffda RBX: 00007fceaabe5fa0 RCX: 00007fceaa98eec9 [ 1359.768199][T23009] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000004 [ 1359.768211][T23009] RBP: 00007fceaaa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1359.768222][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.768233][T23009] R13: 00007fceaabe6038 R14: 00007fceaabe5fa0 R15: 00007fceaad0fa28 [ 1359.768253][T23009] [ 1360.361148][ T7367] buffer_io_error: 485 callbacks suppressed [ 1360.361168][ T7367] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.377620][T19438] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1360.387895][T19438] Bluetooth: hci4: Injecting HCI hardware error event [ 1360.394875][T19438] Bluetooth: hci4: hardware error 0x00 [ 1360.410213][ T7367] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.607718][ T7367] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.616223][ T7367] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.624820][ T7367] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.645145][ T7367] Buffer I/O error on dev loop9, logical block 1, async page read [ 1360.645202][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1360.663201][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.674942][ T7367] Buffer I/O error on dev loop9, logical block 1, async page read [ 1360.675001][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1360.692984][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1360.701990][ T7367] Buffer I/O error on dev loop9, logical block 1, async page read [ 1360.704803][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1360.722212][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1360.733390][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1362.439356][T19438] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1366.922169][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.928501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22